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8.4.5.4 Pre-registration at HRPD and inter-RAT handover / From E-UTRA to HRPD Active / Data 901 

8.4.7 Inter-RAT handover E-UTRA to IxRTT 911 

8.4.7.1 Inter-RAT handover / SRVCC from E-UTRA to IxRTT(CS) / Speech 911 

8.4.7.3 Pre-registration at IxRTT and inter-RAT Handover / CS fallback from E-UTRA RRCJDLE to 
IxRTT 924 

8.4.7.4 Pre-registration at IxRTT and inter-RAT handover / CS fallback caused by addition of CS 

service / From E-UTRA (Data) to IxRTT 932 

8.5 RRC others 938 

8.5.1 Radio link failure 938 

8.5.1.1 Radio link failure /RRC connection re-establishment success 938 

8.5.1.2 Radio link failure /T301 expiry 941 

8.5.1.3 Radio link failure /T3 11 expiry 945 

8.5.1.4 Radio link failure /RRC connection re-establisment reject 946 

8.5.1.5 Radio link failure /Radio link recovery while T310 is running 948 

8.5.2.1 Redirection to E-UTRAN / From UTRAN upon reception of RRC CONNECTION REJECT 950 

8.5.4 UE capability transfer 953 

8.5.4.1 UE capability transfer / Success 953 

9 EPS mobility management 963 

9.1 EMM common procedures 963 

9.1.1 Void 963 

9.1.1.1 Void 963 

9.1.1.2 Void 963 

9.1.2 Authentication procedure 963 

9.1.2.1 Authentication accepted 963 

9.1.2.2 Void 966 

9. 1.2.3 Authentication not accepted by the network / GUTI used / Authentication reject and re- 
authentication 966 
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9.1.2.4 Authentication not accepted by the UE / MAC code failure 969 

9.1.2.5 Authentication not accepted by the UE / SQN failure 972 

9.1.2.6 Abnormal cases / Network failing the authentication check 975 

9.1.3 Security mode control procedure 978 

9.1.3.1 NAS security mode command accepted by the UE 978 

9.1.3.2 NAS security mode command not accepted by the UE 982 

9.1.4 Identification procedure 985 

9.1.4.1 Void 985 

9.1.4.2 Identification procedure /IMEI requested 985 

9.1.5 EMM information procedure 986 

9.1.5.1 EMM information procedure 986 

9.1.5.2 EMM information procedure not supported by the UE 988 

9.2 EMM specific procedures 989 

9.2.1 Attach procedure 989 

9.2.1.1 Attach procedure for EPS services 989 

9.2.1.1.1 Attach Procedure / Success / Valid GUTl 989 

9.2.1.1.1a Attach Procedure / Success / Last visited TAI, TAI list and equivalent PLMN list handling 997 

9.2.1.1.2 Attach Procedure / Success / With IMSl / GUTI reallocation 1004 

9.2.1.1.4 Attach Procedure / Success / Request for obtaining the IPv4 address of the home agent 1007 

9.2.1.1.5 Void 1012 

9.2.1.1.7 Attach Procedure / Success / List of equivalent PLMNs in the ATTACH ACCEPT message ...1012 

9.2.1.1.9 Attach / Rejected / IMSl invalid 1016 

9.2.1.1.10 Attach / Rejected / Illegal ME 1019 

9.2.1.1.11 Attach / Rejected /EPS services and non-EPS services not allowed 1020 

9.2.1.1.12 Attach / Rejected / EPS services not allowed 1024 

9.2.1.1.13 Attach / Rejected / PLMN not allowed 1028 

9.2.1.1.14 Attach / Rejected /Tracking area not allowed 1032 

9.2.1.1.15 Attach/ Rejected /Roaming not allowed in this tracking area 1037 

9.2.1.1.16 Attach / Rejected / EPS services not allowed in this PLMN 1043 

9.2.1.1.17 Attach/ Rejected /No suitable cells in tracking area 1046 

9.2.1.1.18 Attach / Rejected / Not authorized for this CSG 1051 

9.2.1.1.19 Attach / Abnormal case /Failure due to non integrity protection 1054 

9.2.1.1 .20 Attach / Abnormal case / Access barred because of access class barring or NAS signalling 
connection establishment rejected by the network 1059 

9.2.1.1.21 Attach/ Abnormal case / Success after several attempts due to no network response 1063 

9.2.1.1.22 Attach/ Abnormal case /Unsuccessful attach after 5 attempts 1066 

9.2.1.1.23 Attach / Abnormal case /Repeated rejects for network failures 1069 

9.2.1.1.24 Attach/ Abnormal case / Change of cell into a new tracking area 1073 

9.2.1.1.25 Attach / Abnormal case /Mobile originated detach required 1076 

9.2.1.1.26 Attach/ Abnormal case / Detach procedure collision 1077 

9.2.1.2 Combined attach procedure for EPS services and non-EPS services 1080 

9.2.1.2.1 Combined attach procedure / Success /EPS and non-EPS services 1080 

9.2.1.2.2 Combined attach procedure / Success /EPS services only/ IMSl unknown in HSS 1087 

9.2.1.2.3 Successful combined attach procedure / EPS service only / MSC temporarily not reachable .... 1094 

9.2.1.2.4 Successful combined attach procedure /EPS service only /CS domain not available 1102 

9.2.1.2.5 Combined attach / Rejected / IMSl invalid 1109 

9.2.1.2.6 Combined attach / Rejected / Illegal ME 1113 

9.2.1.2.7 Combined attach / Rejected /EPS services and non-EPS services not allowed 1118 

9.2.1.2.8 Combined attach / Rejected /EPS services not allowed 1123 

9.2.1.2.9 Combined attach / Rejected / PLMN not allowed 1 125 

9.2.1.2.10 Combined attach / Rejected /Tracking area not allowed 1129 

9.2.1.2.11 Combined attach / Rejected /Roaming not allowed in this tracking area 1132 

9.2.1.2.12 Combined attach / Rejected / EPS services not allowed in this PLMN 1139 

9.2.1.2.13 Combined attach / Rejected /No suitable cells in tracking area 1144 

9.2.1.2.14 Combined attach / Rejected / Not authorized for this CSG 1151 

9.2.1.2.15 Combined attach / Abnormal case /Handling of the EPS attach attempt counter 1154 

9.2.2 Detach procedure 1161 

9.2.2.1 UE initiated detach procedure 1161 

9.2.2.1.1 UE initiated detach / UE switched off 1161 

9.2.2.1.2 UE initiated detach / USIM removed from the UE 1 163 

9.2.2.1.3 UE initiated detach / EPS capability of the UE is disabled 1 165 
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9.2.2.1.6 UE initiated detach / Abnormal case / Local detach after 5 attempts due to no network 

response 1167 

9.2.2.1.7 UE initiated detach / Abnormal case / Detach procedure collision 1170 

9.2.2.1.8 UE initiated detach / Abnormal case / Detach and EMM common procedure collision 1 172 

9.2.2.1.9 UE initiated detach / Abnormal case /Change of cell into a new tracking area 1175 

9.2.2.2 Network initiated detach procedure 1178 

9.2.2.2.1 NW initiated detach / Re-attach required 1178 

9.2.2.2.2 NW initiated detach / IMSl detach 1180 

9.2.2.2.4 Void 1182 

9.2.2.2.6 Void 1182 

9.2.2.2.7 Void 1182 

9.2.2.2.8 Void 1182 

9.2.2.2.14 NW initiated detach / Abnormal case / EMM cause not included 1 182 

9.2.3 Tracking area updating procedure (SI mode only) 1185 

9.2.3.1 Normal and periodic tracking area updating 1185 

9.2.3.1.1 Normal tracking area update /Accepted 1185 

9.2.3.1.2 Normal tracking area update / Accepted/ "Active" flag set 1189 

9.2.3. 1 .4 Normal tracking area update / List of equivalent PLMNs in the TRACKING AREA 

UPDATE ACCEPT message 1192 

9.2.3.1.5 Periodic tracking area update /Accepted 1195 

9.2.3.1.6 Normal tracking area update / UE with ISR active moves to E-UTRAN 1200 

9.2.3.1.8 UE receives an indication that the RRC connection was released with cause "load balancing 

TAU required" 1207 

9.2.3.1.9a Normal tracking area update /NAS signalling connection recovery 1209 

9.2.3.1.10 Normal tracking area update / Rejected / IMSl invalid 1211 

9.2.3.1.11 Normal tracking area update / Rejected / Illegal ME 1214 

9.2.3.1.12 Normal tracking area update / Rejected / EPS service not allowed 1215 

9.2.3.1.13 Normal tracking area update / Rejected /UE identity cannot be derived by the network 1218 

9.2.3.1.14 Normal tracking area update / Rejected /UE implicitly detached 1220 

9.2.3.1.15 Normal tracking area update / Rejected / PLMN not allowed 1222 

9.2.3.1.16 Normal tracking area update / Rejected / Tracking area not allowed 1227 

9.2.3.1.17 Normal tracking area update / Rejected / Roaming not allowed in this tracking area 1231 

9.2.3.1.18 Normal tracking area update / Rejected / EPS services not allowed in this PLMN 1235 

9.2.3.1.19 Normal tracking area update /Rejected /No suitable cells in tracking Area 1240 

9.2.3.1.23 Normal tracking area update / Abnormal case / Success after several attempts due to no 
network response / TA belongs to TAl list and status is UPDATED / TA does not belong to 
TAlHst or status is not UPDATED 1241 

9.2.3.1.24 Void 1247 

9.2.3.1.25 Normal tracking area update / Abnormal case / Failure after 5 attempts due to no network 
response 1247 

9.2.3.1.26 Normal tracking area update / Abnormal case / TRACKING AREA UPDATE REJECT 1252 

9.2.3.1.27 Normal tracking area update / Abnormal case / Change of cell into a new tracking area 1256 

9.2.3.1.28 Normal tracking area update / Abnormal case / Tracking area updating and detach procedure 
collision 1258 

9.2.3.2 Combined tracking area updating 1259 

9.2.3.2.1 Combined tracking area update / Successful 1259 

9.2.3.2.1a Combined tracking area update / Successful / Check of last visited TAI and handling of TAl 

list, LAI and TMSl 1265 

9.2.3.2.2 Combined tracking area update / Successful for EPS services only / IMSl unknown in HSS .... 1274 

9.2.3.2.3 Combined tracking area update / Successful for EPS services only / MSC temporarily not 
reachable 1277 

9.2.3.2.4 Combined tracking area update / Successful for EPS services only / CS domain not available.. 1281 

9.2.3.2.6 Combined tracking area update / Rejected / Illegal ME 1283 

9.2.3.2.7 Combined tracking area update / Rejected / EPS services and non-EPS services not allowed ... 1285 

9.2.3.2.8 Combined tracking area update /Rejected /EPS services not allowed 1286 

9.2.3.2.9 Combined tracking area update / Rejected / UE identity cannot be derived by the network 1289 

9.2.3.2.10 Combined tracking area update /Rejected /UE implicitly detached 1293 

9.2.3.2.12 Combined tracking area update / Rejected / Tracking area not allowed 1295 

9.2.3.2.14 Combined tracking area update /Rejected /EPS services not allowed in the PLMN 1298 

9.2.3.2.15 Combined tracking area update /Rejected /No suitable cells in tracking area 1302 

9.2.3.2.16 Combined tracking area update /Rejected /Not authorized for this CSG 1304 
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9.2.3.2. 17 Combined tracking area update / Abnormal case / handling of the EPS tracking area updating 

attempt counter 1307 

9.2.3.3 lu mode to SI mode inter-system change in idle mode 1311 

9.2.3.3.1 First lu mode to SI mode inter-system change after attach 1311 

9.2.3.3.2 lu mode to S 1 mode intersystem change / ISR is active / Expiry of T33 12 in E-UTRAN or 
T3412 in UTRAN and further intersystem change 1322 

9.2.3.3.4 Attach in E-UTRAN / RAU to UTRAN / Go to UTRAN RRC idle / TAU in E-UTRAN 1329 

9.2.3.3.5 Periodic routing area update 1341 

9.2.3.3.5a Periodic Location Update 1347 

9.2.3.3.6 E-UTRAN RRC connection failure / Reselection of UTRAN cell / NAS signaHng to release 

old SI interface connection 1351 

9.2.3.4.1 TAU/RAU procedure for inter-system cell reselection between A/Gb and SI modes 1353 

9.3 EMM connection management procedures (SI mode only) 1365 

9.3.1 Service request procedure 1365 

9.3.1.1 Service request initiated by UE for user data 1365 

9.3.1.2 Void 1367 

9.3.1.3 Service request / Mobile originating CS fallback 1367 

9.3.1.4 Service request / Rejected / IMSl invalid 1370 

9.3.1.5 Service request / Rejected / Illegal ME 1376 

9.3.1.6 Service request / Rejected /EPS services not allowed 1378 

9.3.1.7 Service request/ Rejected/ UE identity cannot be derived by the network 1383 

9.3.1.7a Service request / Rejected / UE implicitly detached 1385 

9.3.1.15 Service request/ Abnormal case /Tracking area update procedure is triggered 1387 

9.3.1.16 Service request/ Abnormal case / Switch off 1391 

9.3.1.17 Service request/ Abnormal case /Procedure collision 1393 

9.3.1.18 Service Request / Rejected / Not authorized for this CSG 1395 

9.3.2 Paging procedure 1398 

9.3.2.1 Paging procedure 1398 

9.3.2.2 Paging for CS fallback / Idle mode 1399 

9.4 NAS Security 1402 

9.4.1 Integrity protection / Correct functionahty of EPS NAS integrity algorithm / SNOW3G 1402 

9.4.2 Integrity protection / Correct functionality of EPS NAS integrity algorithm / AES 1406 

9.4.3 Ciphering and deciphering / Correct functionality of EPS NAS encryption algorithm / SN0W3G 1406 

9.4.4 Ciphering and deciphering / Correct functionality of EPS NAS encryption algorithm / AES 1410 

10 EPS session management 1411 

10.1 Void 1411 

10.2 Dedicated EPS bearer context activation 1411 

10.2.1 Dedicated EPS bearer context activation/ Success 1411 

10.3 EPS bearer context modification 1413 

10.3.1 EPS bearer context modification / Success 1413 

10.4 EPS bearer context deactivation 1416 

10.4.1 EPS bearer context deactivation / Success 1416 

10.5 UE requested PDN connectivity 1428 

10.5.1 UE requested PDN connectivity accepted by the network 1428 

10.5.2 Void 1436 

10.5.3 UE requested PDN connectivity not accepted 1436 

10.6 UE requested PDN disconnect 1440 

10.6.1 UE requested PDN disconnect procedure accepted by the network 1440 

10.6.2 UE requested PDN disconnect procedure not accepted by the network 1442 

10.7 UE requested bearer resource allocation 1445 

10.7.1 UE requested bearer resource allocation accepted by the network / New EPS bearer context 1 445 

10.7.2 UE requested bearer resource allocation accepted by the network / Existing EPS bearer context 1447 

10.7.3 UE requested bearer resource allocation not accepted by the network 1449 

10.7.4 UE requested bearer resource allocation / Expiry of timer T3480 1452 

10.7.5 UE requested bearer resource allocation / BEARER RESOURCE ALLOCATION REJECT message 
including cause #43 "invalid EPS bearer identity" 1453 

10.8 UE requested bearer resource modification 1456 

10.8.1 UE requested bearer resource modification accepted by the network / New EPS bearer context 1456 

10.8.2 UE requested bearer resource modification accepted by the network / Existing EPS bearer context 1458 

10.8.3 UE requested bearer resource modification not accepted by the network 1460 

10.8.4 UE requested bearer resource modification / Cause #36 "regular deactivation" 1463 
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10.8.5 UE requested bearer resource modification / BEARER RESOURCE MODIFICATION REJECT 
message including cause #43 "invalid EPS bearer identity" 1466 

10.8.6 UE requested bearer resource modification / Collision of a UE requested bearer resource 
modification procedure and EPS bearer context deactivation procedure 1468 

10.8.7 UE requested bearer resource modification / Expiry of timer T3481 1470 

11 General tests 1474 

11.1 SMS over SGs 1474 

11.1.1 MT-SMS over SGs / Idle mode 1474 

11.1.2 MT-SMS over SGs / Active mode 1477 

11.1.3 MO-SMS over SGs / Idle mode 1480 

11.1.4 MO-SMS over SGs / Active mode 1485 

12 E-UTRA radio bearer tests 1489 

12.1 General 1489 

12.1.0 Definition of radio bearer combinations 1489 

12.1.1 Generic E-UTRA radio bearer test procedure /MIMO not configured 1489 

12.1.2 Generic E-UTRA radio bearer test procedure / MIMO configured 1490 

12.2 MIMO not configured 1492 

12.2.1 Data transfer of E-UTRA radio bearer combinations 1,3,6 and 9 1492 

12.2.2 Data transfer of E-UTRA radio bearer combinations 2,4,7 and 10 1492 

12.2.3 Data transfer of E-UTRA radio bearer combinations 5,8,11 and 12 1493 

12.2.4 Data transfer of E-UTRA radio bearer combination 13 1494 

12.3 MIMO configured 1495 

12.3.1 Data transfer of E-UTRA radio bearer combinations 1,3,6 and 9 / MIMO 1495 

12.3.2 Data transfer of E-UTRA radio bearer combinations 2,4,7 and 10 / MIMO 1496 

12.3.3 Data transfer of E-UTRA radio bearer combinations 5,8, 11 and 12 /MIMO 1497 

12.3.4 Data transfer of E-UTRA radio bearer combination 13 /MIMO 1498 

13 Multi layer Procedures 1499 

13.1 Call setup 1499 

13.1.1 Activation and deactivation of additional data radio bearer in E-UTRA 1499 

13.1.3 Call setup from E-UTRAN RRC_CONNECTED / CS fallback to UTRAN with Redirection / MT 

call 1503 

13.1.5 Call setup from E-UTRAN RRC_CONNECTED / CS fallback to UTRAN with handover / MO call.. 151 1 

13.1.7 Call setup from E-UTRA RRC_IDLE / CS fallback to GSM with redirection / MT call 1513 

13.1.8 Call setup from E-UTRA RRC_CONNECTED/ CS fallback to GSM with Redirection / MO call 1519 

13.2 RRC connection reconfiguration 1526 

13.2.1 RRC connection reconfiguration / E-UTRA to E-UTRA 1526 

13.3.1 Intra-system connection re-establishment 1530 

13.3.1.1 Intra-system connection re-establishment / Radio link recovery while T310 is running 1530 

13.3.1.2 Intra-system connection re-establishment / Re-establishment of a new connection when further 

data is to be transferred 1531 

13.4 Mobility 1533 

13.4.1 Intra-system mobility 1533 

13.4.1.2 Inter-frequency mobility / E-UTRA to E-UTRA packet 1533 

13.4.2 Inter-system mobility packet 1537 

13.4.2.1 Inter-system mobility / E-UTRA to UTRA packet 1537 

14 ETWS 1545 

14.1 ETWS reception in RRCJDLE state / Duplicate detection 1545 

14.2 ETWS reception in RRC_CONNECTED state / Duplicate detection 1553 

15 Mobility management based on DSMIPv6 (Dual-Stack Mobile IPv6) 1561 

15.1 Discovery of the home agent via DNS 1561 

15.2 Discovery of the Home Agent via DHCP 1563 

15.3 Discovery of the Home Agent via IKEv2 with ePDG 1565 

15.4 Security association establishment with Home Agent reallocation procedure 1575 

15.5 Security association establishment without home agent reallocation procedure 1587 

15.6 Registration of a new IPv6 CoA (Binding Update/ Acknowledgment procedure in IPv6 network) 1601 

15.7 Registration of a new IPv4 CoA (Binding Update/ Acknowledgment procedure in IPv4 network) 1606 

15.8 Re-registration of IPv6 CoA 1610 

15.9 Re-registration of IPv4 Co A 1613 

15.10 Return to home link 1616 
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15.11 Dual-Stack Mobile IPv6 detach in IPv6 network 1619 

15.12 Dual-Stack Mobile IPv6 detach in IPv4 network 1622 

Annex A (informative): Change history 1627 

History 1676 
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Foreword 



rd , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 

Introduction 

The present document is the first part of a multi-part conformance specification valid for 3GPP Release 8. 3GPP TS 
36.523-2 [18] contains a pro-forma for the Implementation Conformance Statement (ICS) and an applicability table, 
indicating the release from which each test case is applicable. 3GPP TS 36.523-3 [19] contains a detailed and 
executable description of the test cases written in a standard testing language, TTCN, as defined in ISO/IEC 9646. 

For at least a minimum set of services, the prose descriptions of test cases will have a matching detailed test case 
implemented in TTCN [19]. 

The present document may contain descriptions of tests for additional services, but these tests may not have matching 
TTCN test cases. 

The present document will not contain any tests on the USIM, or the interface between the UE and the USIM. These 
tests are documented elsewhere. 
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Scope 



rd, 



The present document specifies the protocol conformance testing for the 3 Generation E-UTRAN User Equipment 

(UE). 

This is the first part of a muhi-part test specification. The following information can be found in this part: 

the overall test structure; 

the test configurations; 

the conformance requirement and reference to the core specifications; 

the test purposes; and 

a brief description of the test procedure, the specific test requirements and short message exchange table. 
The following information relevant to testing could be found in accompanying specifications: 

the default setting of the test parameters [18]; 

the applicability of each test case [19]. 
A detailed description of the expected sequence of messages could be found in the 3"" part of this test specification. 
The Implementation Conformance Statement (ICS) pro-forma could be found in the 2"'' part of the present document. 
The present document is valid for UE implemented according to 3GPP Release 8. 
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channel coding". 

[30] 3GPP TS 36.213: "Evolved Universal Terrestrial Radio Access (E-UTRA); Physical layer 

procedures" 
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[31] 3GPP TS 36.101: "Evolved Universal Terrestrial Radio Access (E-UTRA); User Equipment (UE) 

radio transmission and reception" 

[32] 3GPP TS 24.008: "Mobile radio interface layer 3 specification; Core network protocols; Stage 3". 

[33] 3GPP2 A.S0008-C: "Interoperability Specification (lOS) for High Rate Packet Data (HRPD) 

Radio Access Network Interfaces with Session Control in the Access Network" 

[34] 3GPP TS 36.133: "Evolved Universal Terrestrial Radio Access (E-UTRA); Requirements for 

support of radio resource management" 

3 Definitions, symbols and abbreviations 

3.1 Definitions 

For the purposes of the present document, the terms and definitions given in TR 21.905 [1] and the following apply. A 
term defined in the present document takes precedence over the definition of the same term, if any, in TR 2 1 .905 [ 1 ] . 

example: text used to clarify abstract rules by applying them literally. 

Floor: Floor(x) is the largest integer smaller than or equal to x. 

Ceil: Ceil (x) is the smallest integer larger than or equal to x. 

3.2 Abbreviations 

For the purposes of the present document, the abbreviations given in TR 21.905 [1] and the following apply. An 
abbreviation defined in the present document takes precedence over the definition of the same abbreviation, if any, in 
TR 21.905 [1]. 

ENB Evolved Node B 

FDD Frequency Division Duplex 

FFS For Further Study 

ICS Implementation Conformance Statement 

ROHC RObust Header Compression 

4 Overview 

4.1 Test methodology 

4.1 .1 Testing of optional functions and procedures 

Any function or procedure which is optional, as indicated in the present document, may be subject to a conformance test 
if it is implemented in the UE. 

A declaration by the apparatus supplier (ICS) is used to determine whether an optional function/procedure has been 
implemented. 

4.1 .2 Test interfaces and facilities 

Detailed descriptions of the UE test interfaces and special facilities for testing will be provided in [6 or FFS]. 

4.2 Implicit testing 

For some 3GPP signalling and protocol features conformance is not verified explicitly in the present document. This 
does not imply that correct functioning of these features is not essential, but that these are implicitly tested to a 
sufficient degree in other tests. 
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4.3 Repetition of tests 



As a general rule, the test cases specified in the present document are highly reproducible and don't need to be repeated 
unless otherwise stated. However, the rate of correct UE behaviour such as cell re-selection, measurement and handover 
is specified statistically, e.g. "at least 90%" [34]. It is the case that for those tests expecting such UE behaviour (stated 
above) are not 100% reproducible, therefore if a UE does fail the test after its first trial and the tester suspects the reason 
is due to the statistical nature of the test, then the UE should be re-tested one or more times. 

5 Reference conditions 

The reference environments used by all signalling and protocol tests will be specified in TS 36.508 [18]. Where a test 
requires an environment that is different, this will be specified in the test itself. 



5.1 Generic setup procedures 



A set of basic generic procedures for radio resource signalling, and generic setup procedures for layer 3 N AS signalling 
will be described in TS 36.508 [18]. These procedures will be used in numerous test cases throughout the present 
document. 



6 Idle mode operations 

6.0 Introduction 



6.0.1 PLIVIN and TAG 

The PLMN numbers indicated in Table 6.0.1-1 are used in test cases to associate a cell with an MCC and MNC for that 
cell. If no PLMN is explicitly specified, the default value is PLMN 1 . 

Table 6.0.1-1 : Tracking Area Identity (TAI) in System Information Block Type 1 
broadcast on the BCCH (E-UTRAN) 



PLMN 


MCC1 


MCC2 


MCC3 


MNC1 


MNC2 


MNC3 


TAC 


1 








1 







Not present 


See 
Table 
6.0.1-2 


2 








2 


1 




Not present 


3 








3 


2 




Not present 


4 








4 


3 




Not present 


5 








5 


4 




Not present 


6 








6 


5 




Not present 


7 








7 


6 




Not present 


8 








8 


7 




Not present 


9 








9 





2 


Not present 


10 





1 





1 


2 


Not present 


11 





1 


1 


2 


2 


Not present 


12 





1 


2 


3 


2 


Not present 


13 








2 


8 


1 


Not present 


14 








2 


9 


1 


Not present 


15 








1 


1 


1 


Not present 


16 








1 


2 


1 


Not present 



NOTE: The Location Area Information (LAI) for UTRA and GSM could be re-used from TS 34. 123-1 clause 6. 

If no TAC for E-UTRAN cell is explicitly specified in the test case description, the TACs for E-UTRAN cells indicated 
in Table 6.0.1-2 are used in the test case. 
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Table 6.0.1-2: Tracking Area Code (TAC) for E-UTRAN cells 



cell ID 


TAC 


CelM 


1 


Cell 2 


2 


Cells 


3 


Cell 4 


4 


Cell 6 


6 


Cell 10 


10 


Cell 11 


11 


Cell 12 


12 


Cell 13 


13 


Cell 14 


14 



If no RAI for UTRAN cell is explicitly specified in the test case description, the RAI for UTRAN cells indicated in 
Table 4.4.4-2 in [18] are used in the test case. 

6.0.2 Other 

Editor's note: Other generic [FFS] information for idle mode testing to be added in this clause is as follows: 

Default values of the system information fields for different methods and lEs specific to idle mode; 

Requirements for FDD and TDD cells (check TS 36.331) in order for the UE to be able to identify a new 
detectable cell and camp on it (minimum channel power levels); 

Generic test behaviour in case of combined E-UTRA/UTRA/GSM/HRPD/lxRTT tests: indication of 
access technology; 

Test channel numbers used in test cases to associate a cell with a frequency for that cell. If no channel is 
explicitly specified, the default value is Test Channel 1 . The frequencies and RF signal levels for UTRA 
and GSM could be re-used from TS 34.123-1 clause 6. The frequencies and RF signal levels for E-UTRA 
test channels shall be based on TS 36.508 clauses 4.3.1.1, 4.3.1.2 and 4.3.4. 



6.1 

6.1.1 

6.1.1.1 

6.1.1.1.1 
(1) 



In a pure E-UTRAN environment 
PLMN selection 

PLMN selection of RPLMN, HPLMN/EHPLMN, UPLMN and OPLMN / 
Automatic mode 

Test Purpose (TP) 



with { UE in Automatic network selection mode and RPLMN, HPLMN, UPLMN and OPLMN E-UTRAN cells 
available and UE is fitted with a USIM indicating RPLMN should be selected } 
ensure that { 

when { UE is switched on or return to coverage } 

then { UE selects a cell of the RPLMN and UE attempts a location registration on the selected 
cell and when successfully registered indicates the selected PLMN to the user. } 



(2) 

with { UE camped on an E-UTRAN VPLMN cell and cells of a higher priority E-UTRAN PLMN available } 
ensure that { 

when { higher priority PLMN search timer T expires } 

then { UE selects and camps on a cell of the highest priority PLMN and UE attempts a location 
registration on the selected cell and when successfully registered indicates the selected PLMN to 
the user. | 
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(3) 

with { UE in Automatic network selection mode and HPLMN, UPLMN and OPLMN E-UTRAN cells available and 
UE is fitted with a USIM with Access Technology data files for each PLMN and there are no equivalent 
HPLMNs defined} 
ensure that { 

when { UE is switched on or return to coverage } 

then { UE selects a cell of the highest priority PLMN and UE attempts a location registration on 
the selected cell and when successfully registered indicates the selected PLMN to the user. } 
} 

6.1 .1 .1 .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 23.122 clauses 4.4.3.1, 
4.4.3.1.1 and 4.4.3.3. 

[TS 23.122, clause 4.4.3.1] 

At switch on, or following recovery from lack of coverage, the MS selects the registered PLMN or equivalent PLMN (if 
it is available) using all access technologies that the MS is capable of and if necessary (in the case of recovery from lack 
of coverage, see clause 4.5.2) attempts to perform a Location Registration. 



If successful registration is achieved, the MS indicates the selected PLMN. 

If there is no registered PLMN, or if registration is not possible due to the PLMN being unavailable or registration 
failure, the MS follows one of the following two procedures depending on its PLMN selection operating mode. At 
switch on, if the MS provides the optional feature of user preferred PLMN selection operating mode at switch on then 
this operating mode shall be used. 



NOTE 1 : If successful registration is achieved, then the current serving PLMN becomes the registered PLMN and 
the MS does not store the previous registered PLMN for later use. 

[TS 23.122, clause 4.4.3.1.1] 

The MS selects and attempts registration on other PLMN/access technology combinations, if available and allowable, in 
the following order: 

i) either the HPLMN (if the EHPLMN list is not present or is empty) or the highest priority EHPLMN that is 
available (if the EHPLMN list is present) ; 

ii) each PLMN/access technology combination in the "User Controlled PLMN Selector with Access Technology" 
data file in the SIM (in priority order); 

iii) each PLMN/access technology combination in the "Operator Controlled PLMN Selector with Access 
Technology" data file in the SIM (in priority order); 

iv) ... 

V) ... 

When following the above procedure the following requirements apply: 

a) ... 

b) ... 
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c) In ii and iii, the MS should limit its search for the PLMN to the access technology or access technologies 
associated with the PLMN in the appropriate PLMN Selector with Access Technology list (User Controlled or 
Operator Controlled selector list). An MS using a SIM without access technology information storage (i.e. the 
"User Controlled PLMN Selector with Access Technology" and the "Operator Controlled PLMN Selector with 
Access Technology" data files are not present) shall instead use the "PLMN Selector" data file, for each PLMN 
in the "PLMN Selector" data file, the MS shall search for all access technologies it is capable of and shall 
assume GSM access technology as the highest priority radio access technology. 

d) ... 

e) ... 

f) In i, the MS shall search for all access technologies it is capable of. No priority is defined for the preferred access 
technology and the priority is an implementation issue, but "HPLMN Selector with Access Technology" data file 
on the SIM may be used to optimise the procedure. 

g) ... 
h) ... 

NOTEl: ... 
NOTE 2: ... 

NOTE 3: High quality signal is defined in the appropriate AS specification. 

If successful registration is achieved, the MS indicates the selected PLMN. 

[TS 23. 122, clause 4.4.3.3] 

If the MS is in a VPLMN, the MS shall periodically attempt to obtain service on its HPLMN (if the EHPLMN list is not 
present or is empty) or one of its EHPLMNs (if the EHPLMN list is present) or a higher priority PLMN/access 
technology combinations listed in "user controlled PLMN selector" or "operator controlled PLMN selector" by scanning 
in accordance with the requirements that are applicable to i), ii) and iii) as defined in the Automatic Network Selection 
Mode in clause 4.4.3. LI. In the case that the mobile has a stored "Equivalent PLMNs" list the mobile shall only select a 
PLMN if it is of a higher priority than those of the same country as the current serving PLMN which are stored in the 
"Equivalent PLMNs" list. For this purpose, a value T minutes may be stored in the SIM, T is either in the range 6 
minutes to 8 hours in 6 minute steps or it indicates that no periodic attempts shall be made. If no value is stored in the 
SIM, a default value of 60 minutes is used. 

The attempts to access the HPLMN or an EHPLMN or higher priority PLMN shall be as specified below: 

a) The periodic attempts shall only be performed in automatic mode when the MS is roaming; 

b) After switch on a period of at least 2 minutes and at most T minutes shall elapse before the first attempt is made; 

c) The MS shall make the following attempts if the MS is on the VPLMN at time T after the last attempt; 

d) Periodic attempts shall only be performed by the MS while in idle mode; 

e) If the HPLMN (if the EHPLMN list is not present or is empty) or a EHPLMN (if the list is present) or a higher 
priority PLMN is not found, the MS shall remain on the VPLMN. 

f) In steps i), ii) and iii) of subclause 4.4.3. LI the MS shall limit its attempts to access higher priority 
PLMN/access technology combinations to PLMN/access technology combinations of the same country as the 
current serving VPLMN, as defined in Annex B. 

g) ... 

h) If the PLMN of the highest priority PLMN/access technology combination available is the current VPLMN, or 
one of the PLMNs in the "Equivalent PLMNs" list, the MS shall remain on the current PLMN/access technology 
combination. 
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6.1.1.1.3 
6.1.1.1.3.1 
System Simulator: 



Test description 
Pre-test conditions 



UE: 



Four inter-frequency multi-PLMN cells as specified in TS36.508 clause 4.4.1.2 are configured broadcasting 
default PLMNs as indicated in TS 36.508 Table 4.4.2-2 except that all MCC values are the same as for Cell 1. 

The PLMNs are identified in the test by the identifiers in Table 6.1.1.1.3.1-1. 

Table 6.1.1.1.3.1-1: PLMN identifiers 



Cell 


PLMN name 


1 


PLMN4 


12 


PLMN1 


13 


PLMN2 


14 


PLMNS 



The UE is in Automatic PLMN selection mode. 

The UE is registered to PLMNl before it is switched off 

The UE is equipped with a USIM containing default values (as per TS 36.508) except for those listed in Table 
6.1.1.1.3.1-2. 

Table 6.1.1.1.3.1-2: USIM configuration 



USIM field 


Priority 


Value 


Access Technology Identifier 


EFloci 




PLMN1 (See preamble) 




EFiMsi 




The HPLMN (MCC+MNC) of the 
IMS! is set to PLMN4. 




EFpLMNwAcT 


1 
2 
3 


Default 

PLMNS 

PLMN2 

Remaining mandatory entries use 

default values 


Default 
All specified 
E-UTRAN 


EFoPLMNwACT 


1 


PLMN1 

Remaining defined entries use 

default values 


All specified 


EFhPLMNwAcT 


1 


PLMN4 


E-UTRAN 


EFusT 




Services 20, 42, 43 and 74 are 
supported. Service 71 is not 
supported (there is no EHPLMN 
list). 




EFhpplmn 




1 (6 minutes) 





Preamble: 

- The UE is in state Switched OFF (State 1). 



6.1.1.1.3.2 



Test procedure sequence 



Table 6.1.1.1.3.2 - 1 shows the cell configurations used during the test. The configuration TO indicates the initial 
conditions. Subsequent configurations marked "Tl", "T2" etc are applied at the points indicated in the Main behaviour 
description in Table 6.1.1.1.3.2-2. Cell powers are chosen for a serving cell and a non-suitable "Off cell as defined in 
TS36.508 Table 6.2.2.1-1. 
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Table 6.1 .1 .1 .3.2-1 : Cell configuration changes over time 





Parameter 


Unit 


CelM 


Cell 12 


Cell 13 


Cell 14 


Remarks 


TO 


RS EPRE 


dBm/15kHz 


"Off" 


-85 


"Off" 


"Off" 


Power level "Off" is 
defined in TS36.508 
Table 6.2.2.1-1 


T1 


RS EPRE 


clBm/15kHz 


-85 


-85 


-85 


"Off" 


Power level "Off" is 
defined in TS36.508 
Table 6.2.2.1-1 


T2 


RS EPRE 


dBm/15kHz 


"Off" 


-85 


-85 


"Off" 


Power level "Off" is 
defined in TS36.508 
Table 6.2.2.1-1 


T3 


RS EPRE 


dBm/15kHz 


"Off" 


-85 


-85 


-85 


Power level "Off" is 
defined in TS36.508 
Table 6.2.2.1-1 
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Table 6.1.1.1.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS adjusts cell levels according to row T1 of 
table 6.1.1.1.3.2-1 


- 


- 


- 


- 


2 


Power on the UE. 


- 


- 


- 


- 


3 


Check: Does the UE send an 
RRCConnectionRequest or\ Cell 12? 


-> 


RRCConnectionRequest 


1 


P 


4- 
18 


Steps 3 to 17 of the registration procedure 
described in TS 36.508 subclause 4.5.2.3 are 
performed on Cell 12. 

NOTE: The UE performs registration and the 
RRC connection is released. 










19 


Check: Is PLMN1 indicated by the UE? 


- 


- 


1 


P 


20 


Check: Does the UE send an 
RRCConnectionRequest on Cell 1 after 120 
seconds, but before 360 seconds from power 
on? 


-> 


RRCConnectionRequest 


2 


P 


21- 
25 


Steps 2 to 6 of the generic test procedure in 
TS 36.508 subclause 6.4.2.7 are performed on 
Cell 1. 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 










26 


Check: Is PLIVIN4 indicated by the UE? 


- 


- 


2 


P 


27 


Check: Does the UE send an 
RRCConnectionRequest \N\\.h\n [720 
seconds]? 


-> 


RRCConnectionRequest 


2 


F 


28 


SS adjusts cell levels according to row T2 of 
table 6.1.1.1.3.2-1 


- 


- 


- 


- 


29 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 13? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






3 




30 


Check: Is PLIVIN2 indicated by the UE? 


- 


- 


3 


P 


31 


SS adjusts cell levels according to row T3 of 
table 6.1.1.1.3.2-1 


- 


- 


- 


- 


32 


Check: Does the UE send an 
RRCConnectionRequest on Cell 1 4 after 360 
seconds after step 28? 


~> 


RRCConnectionRequest 


2 


P 


33- 
37 


Steps 2 to 6 of the generic test procedure in 
TS 36.508 subclause 6.4.2.7 are performed. 
NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 










38 


Check: Is PLMN3 indicated by the UE? 


- 


- 


2 


P 


39 


Check: Does the UE send an 
RRCConnectionRequest w\\.h\n [720 
seconds]? 


— > 


RRCConnectionRequest 


2 


F 


Note 1 : Timers in Steps 20, 27, 32 and 39 are derived from the high priority PLIVIN search timer T defined by 

EFhpplmn 



6.1.1.1.3.3 
None 

6.1.1.4 

6.1.1.4.1 
(1) 



Specific message contents 



PLMN selection in shared network environment / Automatic mode 



Test Purpose (TP) 



with { the UE is in automatic network selection mode and there is a suitable cell with multiple PLMN 
identities among which the HPLMN but not the registered PLMN } 
ensure that { 

when { the UE is switched on } 
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then { the UE attaches to the HPLMN on the shared cell } 
} 

(2) 

with { the UE in automatic network selection mode and there is a suitable cell with multiple PLMN 
identities among which the registered PLMN } 
ensure that { 

when { the UE returns to coverage } 

then { the UE performs a location registration to the registered PLMN on the shared cell } 
} 

6.1 .1 .4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.304 clause 5.1.2.2, TS 
23.122 clauses 4.4.3 and 4.4.3.1.1, TS 24.301 clauses 5.5.1.1 and 5.5.3.1, and TS 36.331 clause 5.3.3.4. 

[TS 36.304 clause 5.1.2.2] 

The UE shall scan all RF channels in the E-UTRA bands according to its capabilities to find available PLMNs. On each 
carrier, the UE shall search for the strongest cell and read its system information, in order to find out which PLMN(s) 
the cell belongs to. If the UE can read one or several PLMN identities in the strongest cell, each found PLMN (see the 
PLMN reading in [3]) shall be reported to the NAS as a high quality PLMN (but without the RSRP value). 



Once the UE has selected a PLMN, the cell selection procedure shall be performed in order to select a suitable cell of 
that PLMN to camp on. 

[TS 23.122 clause 4.4.3] 

When the MS reselects to a cell in a shared network, the AS may indicate multiple PLMN identities to the NAS 
according to 3GPP TS 25.304 [32]. The MS shall choose one of these PLMNs. If the registered PLMN is available 
among these PLMNs, the MS shall not choose a different PLMN. 

[TS 23.122 clause 4.4.3.1.1] 

The MS selects and attempts registration on other PLMN/access technology combinations, if available and allowable, in 
the following order: 

i) either the HPLMN (if the EHPLMN list is not present or is empty) or the highest priority EHPLMN that is 
available (if the EHPLMN list is present) ; 

ii) each PLMN/access technology combination in the "User Controlled PLMN Selector with Access Technology" 
data file in the SIM (in priority order); 

iii) each PLMN/access technology combination in the "Operator Controlled PLMN Selector with Access 
Technology" data file in the SIM (in priority order); 

iv) other PLMN/access technology combinations with received high quality signal in random order; 

v) other PLMN/access technology combinations in order of decreasing signal quality. 

[TS 24.301 clause 5.5.1.1] 



In a shared network, the UE shall choose one of the PLMN identities as specified in 3GPP TS 23.122 [6]. The UE shall 
construct the TAI of the cell from this chosen PLMN identity and the TAC received as part of the broadcast system 
information. The chosen PLMN identity shall be indicated to the E-UTRAN (see 3GPP TS 36.331 [22]). 



[TS 24.301 clause 5.5.3.1] 
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In a shared network, the UE shall choose one of the PLMN identities as specified in 3GPP TS 23.122 [6]. The UE shall 
construct the TAI of the cell from this chosen PLMN identity and the TAC received on the broadcast system 
information. The chosen PLMN identity shall be indicated to the E-UTRAN (see 3GPP TS 36.331 [22]). 



[TS 36.331 clause 5.3.3.4] 
The UE shall: 



1> set the content of RRCConnectionSetupComplete message as follows: 

2> set the selectedPLMN-Identity to the PLMN selected by upper layers (see TS 23.122 [11], TS 24.301 [35]) 
from the PLMN(s) included in the plmn-IdentityList in SystemlnformationBlockTypel; 



2> submit the RRCConnectionSetupComplete message to lower layers for transmission, upon which the 
procedure ends; 



6.1.1.4.3 
6.1.1.4.3.1 
System Simulator: 



Test description 
Pre-test conditions 



Cells 12 and 13, as specified in TS36.508 clause 4.4.1.2 are configured according to Table 4.4.2-2 in [18] except 
for multiple broadcasted PLMN identities as shown in Table 6.1.1.4.3.1. Table 6.1.1.4.3.1-1: PLMN identifiers 
broadcasted by cells in shared network 



Cell 


PLMN names 


12 


PLMN15, PLMN1 


13 


PLMN15, PLMN1, PLMN16 



UE: 



The UE is in Automatic PLMN selection mode. 

The UE is equipped with a USIM containing default values (as per TS 36.508) except for those listed in Table 
6.1.1.4.3.1-2. 

Table 6.1.1.4.3.1-2: USIM configuration 



USIM field 


Priority 


Value 


Access Technology Identifier 


EFloci 




PLMN4(MCC1/MNC4) 




EFpLMNwAcT 




Empty 




EFiMsi 




The HPLMN (MCC+MNC) of the 
IMSIissettoPLMNI. 




EFusT 




Service 74 is supported. 




EFlrplmnsi 




00 





Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 



6.1.1.4.3.2 



Test procedure sequence 



Table 6.1.2.10.3.2-1 shows the cell configurations used during the test. The configuration TO indicates the initial 
conditions. Subsequent configuration marked "Tl"is applied at the points indicated in the Main behaviour description in 
Table 6.1.2.10.3.2-2. Cell powers are chosen for a serving cell and a non-suitable cell as defined in TS36.508 Table 
6.2.2.1-1. 
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Table 6.1.1.4.3.2-1 : Cell configuration changes over time 





Parameter 


Unit 


Cell 12 


Cell 13 


Remarks 


TO 


RS EPRE 


dBm/15kHz 


-85 


Off 


The power level values are assigned to such that 
camping on Cell 12 is guaranteed. Cell 13 is "off". 


T1 


RS EPRE 


dBm/15kHz 


Off 


-85 


Cell 12 becomes "off". UE shall select Cell 13. 



Table 6.1.1.4.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS adjusts cell levels according to row TO 
of table 6.1.1.4.3.2-1 


- 


- 


- 


- 


2 


Power on the UE. 


- 


- 


- 


- 


3 


Check: Does the UE transmits an 
RRCConnectionRequest on Cell 12? 


-> 


RRCConnectionRequest 


1 


P 


4 


The SS transmits an RRCConnectionSetup 


<- 


RRCConnectionSetup 


- 


- 


5 


Check; Does the UE transmit an 
RRCConnectionSetupComplete message 
indicating the HPLMN (second PLMN in the 
list)? 

Note: this message contains an ATTACH 
REOUEST and a PDN CONNECTIVITY 
REOUEST message according to default 
message contents. 


~> 


RRCConnectionSetupComplete 


1 


P 


6- 
18 


Steps 5 to 17 of the registration procedure 
described in TS 36.508 subclause 4.5.2.3 are 
performed on Cell 12. 

NOTE: The UE performs registration and the 
RRC connection is released. 










19 


Check: Is PLMN1 indicated by the UE? 


- 


- 


1 


P 


20 


The SS adjusts cell levels according to row T1 
of table 6.1.1.4.3.2-1 


- 


- 


- 


- 


21 


Check: Does the UE transmit an 
RRCConnectionRequest on Cell 13? 


-> 


RRCConnectionRequest 


2 


P 


22- 
26 


Steps 2 to 6 of the generic test procedure in 
TS 36.508 subclause 6.4.2.7 are performed. 
NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 










27 


Check: Is the same PLMN as indicated by UE 
in step 4 again indicated by the UE? 


- 


- 


2 


P 



6.1 .1 .4.3.3 Specific message contents 

Table 6.1 .1 .4.3.3-1 : RRCConnectionSetupComplete (step 5, Table 6.1 .1 .4.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-18 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionSetupComplete ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionSetupComplete-r8 SEQUENCE { 








selectedPLIVIN-ldentity 


2 


PLMN1 




1 








1 








} 








} 
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6.1 .2 Cell selection and reselection 
6.1 .2.2 Cell selection / Qrxlevmin 

6.1.2.2.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { a cell fulfils all requirements for a suitable cell except the cell selection criteria 
which are not fulfilled {S<0) } 

then { the UE does not consider the cell suitable and no camping on this cell can take place } 
} 

(2) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { a cell fulfils all requirements for a suitable cell including the cell selection criteria 
for a cell which are also fulfilled {S>0) } 

then { the UE considers the cell suitable and camps on it } 

} 

6.1.2.2.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS36.300, clause 10.1.1.1 and 
TS 36.304, clause 4.1, 5.1.2.2, 5.2.3.1, 5.2.3.2 and 5.2.8. 

[TS 36.300, clause 10.1.1.1] 

Cell selection: 

- The UE NAS identifies a selected PLMN and equivalent PLMNs; 

The UE searches the E-UTRA frequency bands and for each carrier frequency identifies the strongest cell. It 
reads cell system information broadcast to identify its PLMN(s): 

The UE may search each carrier in turn ("initial cell selection") or make use of stored information to shorten 
the search ("stored information cell selection"). 

The UE seeks to identify a suitable cell; if it is not able to identify a suitable cell it seeks to identify an 
acceptable cell. When a suitable cell is found or if only an acceptable cell is found it camps on that cell and 
commence the cell reselection procedure: 

A suitable cell is one for which the measured cell attributes satisfy the cell selection criteria; the cell PLMN 
is the selected PLMN, registered or an equivalent PLMN; the cell is not barred or reserved and the cell is not 
part of a tracking area which is in the list of "forbidden tracking areas for roaming"; 

An acceptable cell is one for which the measured cell attributes satisfy the cell selection criteria and the cell 
is not barred; 

[TS 36.304, clause 4.1] 

When a UE is switched on, a public land mobile network (PLMN) is selected by NAS. For the selected PLMN, 
associated RAT(s) may be set [5]. The NAS shall provide a list of equivalent PLMNs, if available, that the AS shall use 
for cell selection and cell reselection. 

With the cell selection, the UE searches for a suitable cell of the selected PLMN and chooses that cell to provide 
available services, further the UE shall tune to its control channel. This choosing is known as "camping on the cell". 

The UE will, if necessary, then register its presence, by means of a NAS registration procedure, in the tracking area of 
the chosen cell and as outcome of a successful Location Registration the selected PLMN becomes the registered PLMN 
[5]. 

[TS 36.304, clause 5. 1.2.2] 
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The UE shall scan all RF channels in the E-UTRA bands according to its capabilities to find available PLMNs. On each 
carrier, the UE shall search for the strongest cell and read its system information, in order to find out which PLMN(s) 
the cell belongs to. If the UE can read one or several PLMN identities in the strongest cell, each found PLMN (see the 
PLMN reading in [3]) shall be reported to the NAS as a high quahty PLMN (but without the RSRP value), provided 
that the following high quality criterion is fulfilled: 

1. For an E-UTRAN cell, the measured RSRP value shall be greater than or equal to -1 10 dBm. 

Found PLMNs that do not satisfy the high quality criterion, but for which the UE has been able to read the PLMN 
identities are reported to the NAS together with the RSRP value. The quality measure reported by the UE to NAS shall 
be the same for each PLMN found in one cell. 



Once the UE has selected a PLMN, the cell selection procedure shall be performed in order to select a suitable cell of 
that PLMN to camp on. 

[TS 36.304, clause 5.2.3.1] 

The UE shall use one of the following two cell selection procedures: 

a) Initial Cell Selection 

This procedure requires no prior knowledge of which RF channels are E-UTRA carriers. The UE shall scan all 
RF channels in the E-UTRA bands according to its capabilities to find a suitable cell. On each carrier frequency, 
the UE need only search for the strongest cell. Once a suitable cell is found this cell shall be selected. 

[TS 36.304, clause 5.2.3.2] 

The cell selection criterion S is fulfilled when: 



Srxlev > 



Where: 



Srxlev = Qrxlevmeas - (Qrxlevmin + Qrxlevminoffset) " PcOmpCnSation 



Where: 

the signalled value QrxlevminOffset is only applied when a cell is evaluated for cell selection as a result of a periodic 
search for a higher priority PLMN while camped normally in a VPLMN [5]. During this periodic search for higher 
priority PLMN the UE may check the S criteria of a cell using parameter values stored from a different cell of this 
higher priority PLMN. 



Srxlev 


Cell Selection RX level value (dB) 


Qrxlevmeas 


Measured cell RX level value (RSRP). 


Urxlevmin 


Minimum required RX level in the cell (dBm) 


Qrxlevminoffset 


Offset to the signalled Qrxievmin taken into account in the Srxlev evaluation as a 
result of a periodic search for a higher priority PLMN while camped normally in 
a VPLMN [5] 


Pcompensation 


max(PEMAx- PuMAx, 0) (dB) 


Pemax 


Maximum TX power level an UE may use when transmitting on the uplink in 
the cell (dBm) defined as Pemax in [TS 36.101] 


PUMAX 


Maximum RF output power of the UE (dBm) according to the UE power class 
as defined in [TS 36.101] 



[TS 36.304, clause 5.2.8] 

In this state, the UE shall attempt to find an acceptable cell of any PLMN to camp on, trying all RATs that are 
supported by the UE and searching first for a high quality cell, as defined in subclause 5.L2.2. 
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The UE, which is not camped on any cell, shall stay in this state until an acceptable cell is found. 
6.1.2.2.3 Test description 

6.1.2.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 
UE: 

- USIM contains a valid TAI 1 . . 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 

6.1 .2.2.3.2 Test procedure sequence 

Table 6.1.2.2.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while row 
marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are described in 
the texts in this clause. 

Table 6.1.2.2.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Celll 


Remarl< 


TO 


Cell-specific RS 
EPRE 


dBm/ 
15kH 

z 


-95 


The power level value is such to satisfy SrxlevCell 1 < but the UE is 
able to read the PLMN identity 


Qrxlevmin 


dBm 


-84 




Qrxlevminoffset 


dB 







Pcompensation 


dB 







T1 


Cell-specific RS 
EPRE 


dBm/ 
15kH 

z 


-75 


The power level is such that SrxlevCell 1 > 


Note: The downlink signal level uncertainty is specified in TS 36.508 section 4.3.4.1 



Table 6.1.2.2.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE Is switched on. 


- 


- 


- 


- 


2 


Check: Does the UE send an 
RRCConnectionRequest on Cell 1 within the 
next 60 s? 


-> 


RRCConnectionRequest 


1 


F 


3 


SS re-adjusts the cell-specific reference signal 
level of Cell 1 level according to row "Tl" in 
table 6.1.2.2.3.2-1. 










4 


Check: Does the UE send an 
RRCConnectionRequest on Cell 1? 


-> 


RRCConnectionRequest 


2 


P 


5- 
19 


Steps 3 to 17 of the registration procedure 
described in TS 36.508 subclause 4.5.2.3 are 
performed on Cell 1 . 

NOTE: The UE performs registration and the 
RRC connection is released. 
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6.1 .2.2.3.3 Specific message contents 

Table 6.1 .2.2.3.3-1 : SystemlnformationBlockTypel for cell 1 (preamble) 



Derivation Path: 36.508 clause 4.4.3.2 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellSelectionlnfo SEQUENCE { 








q-RxLevlVlin 


-42 (-84 dBm) 






1 








schedulinglnfoList ::= SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 1 in TS 
36.508 section 4.4.3.1.1 


Only SIB2 and 
SIB3 are 
transmitted 




} 









6.1.2.3 



6.1.2.3.1 



Cell selection / Intra E-UTRAN / Serving cell becomes non-suitable (S<0 or 
barred) 

Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { the serving cell becomes non-suitable {S<0)and there is a suitable neighbour cell {S>0) 
then { UE selects the suitable neighbourgh cell } 



(2) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { the serving cell becomes barred and there is a suitable neighbour cell} 
then { UE selects the suitable neighbourgh cell } 



6.1.2.3.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS36.300, clause 10.1.1.1 and 
TS 36.304, clause 4.1, 5.2.1, 5.2.3.2, 5.2.4.6 and 5.3.1. 

[TS 36.300, clause 10.1.1.1] 

Cell selection: 

- The UE NAS identifies a selected PLMN and equivalent PLMNs; 

The UE searches the E-UTRA frequency bands and for each carrier frequency identifies the strongest cell. It 
reads cell system information broadcast to identify its PLMN(s): 

The UE may search each carrier in turn ("initial cell selection") or make use of stored information to shorten 
the search ("stored information cell selection"). 

The UE seeks to identify a suitable cell; if it is not able to identify a suitable cell it seeks to identify an 
acceptable cell. When a suitable cell is found or if only an acceptable cell is found it camps on that cell and 
commence the cell reselection procedure: 

A suitable cell is one for which the measured cell attributes satisfy the cell selection criteria; the cell PLMN 
is the selected PLMN, registered or an equivalent PLMN; the cell is not barred or reserved and the cell is not 
part of a tracking area which is in the list of "forbidden tracking areas for roaming"; 

An acceptable cell is one for which the measured cell attributes satisfy the cell selection criteria and the cell 
is not barred; 

[TS 36.304, clause 4.1] 
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With the cell selection, the UE searches for a suitable cell of the selected PLMN and chooses that cell to provide 
available services, further the UE shall tune to its control channel. This choosing is known as "camping on the cell". 

The UE will, if necessary, then register its presence, by means of a NAS registration procedure, in the tracking area of 
the chosen cell and as outcome of a successful Location Registration the selected PLMN becomes the registered PLMN 
[5]. 

If the UE finds a more suitable cell, according to the cell reselection criteria, it reselects onto that cell and camps on it. 
If the new cell does not belong to at least one tracking area to which the UE is registered, location registration is 
performed. 

[TS 36.304, clause 5.2.1] 

When camped on a cell, the UE shall regularly search for a better cell according to the cell reselection criteria. If a 
better cell is found, that cell is selected. 

[TS 36.304, clause 5.2.3.2] 

The cell selection criterion S is fulfilled when: 



Srxlev > 



Where: 



Srxlev = Qrxievmeas - (Qrxlevmin - Qrxlevminoffset) - Pcompensation 



Where: 

the signalled value QrxlevminOffset is only applied when a cell is evaluated for cell selection as a result of a periodic 
search for a higher priority PLMN while camped normally in a VPLMN [5]. During this periodic search for higher 
priority PLMN the UE may check the S criteria of a cell using parameter values stored from a different cell of this 
higher priority PLMN. 



Srxlev 


Cell Selection RX level value (dB) 


Urxlevmeas 


Measured cell RX level value (RSRP). 


Qrxlevmin 


Minimum required RX level in the cell (dBm) 


Urxlevminoffset 


Offset to the signalled Qrxievmin taken into account in the Srxlev 
evaluation as a result of a periodic search for a higher priority PLMN 
while camped normally in a VPLMN [5] 


Pcompensation 


max(PEMAx-PuMAx, 0) (dB) 


Pemax 


Maximum TX power level an UE may use when transmitting on the 
uplink in the cell (dBm) defined as Pemax in [TS 36.101] 


PUMAX 


Maximum RF output power of the UE (dBm) according to the UE 
power class as defined in [TS 36.101] 



[TS 36.304, clause 5.2.4.6] 

In all cases, the UE shall reselect the new cell, only if the following conditions are met: 

the new cell is better ranked than the serving cell during a time interval TreselectionRAx; 

more than 1 second has elapsed since the UE camped on the current serving cell. 

[TS 36.304, clause 5.3.1] 

Cell status and cell reservations are indicated in the SystemlnformationBlockTypel [3] by means of two Information 
Elements: 

cellBarred (IE type: "barred" or "not barred") 

In case of multiple PLMNs indicated in SIB 1 sharing, this IE is common for all PLMNs 
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When cell status is indicated as "not barred" and "not reserved" for operator use, 

All UEs shall treat this cell as candidate during the cell selection and cell re-selection procedures. 

When cell status "barred" is indicated or to be treated as if the cell status is "barred", 

The UE is not permitted to select/re-select this cell, not even for emergency calls. 
The UE shall select another cell according to the following rule: 

- If the cell is a CSG cell: 

the UE may select another cell on the same frequency if the selection/reselection criteria are fulfilled. 

- else 

If the IE intraFreqReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to 
"allowed", the UE may select another cell on the same frequency if re-selection criteria are fulfilled. 

The UE shall exclude the barred cell as a candidate for cell selection/reselection for 300 seconds. 

If the IE intraFreqReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to "not 
allowed" the UE shall not re-select a cell on the same frequency as the barred cell. 

The UE shall exclude the barred cell and the cells on the same frequency as a candidate for cell 
selection/reselection for 300 seconds. 

6.1.2.3.3 Test description 

6.1.2.3.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2 

Cell 1 and Cell 2 are high quality cells on the same E-UTRA frequency and different tracking areas: 
Cell 1 serving cell, Srxlevceii i>0 

- Cell 2 Srxlevceii 2>0 

Treselection ceii i = Treselection ceii 2 > 1 second 
UE: 
None. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) according to [18]. 

6.1 .2.3.3.2 Test procedure sequence 

Table 6.1.2.3.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while rows 
marked "Tl" and "T2" are to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 
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Table 6.1.2.3.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 2 


Remark 


TO 


Cell-specific RS EPRE 


dBm/ 
15kH 

z 


-79 


-85 


Srxlevceii i > 0, Srxlevceii 2 > and Rceii 1 > Rceii 
2, such that camping on Cell 1 is guaranteed 


Orxlevmin 


dBm 


-110 


-110 




Orxlevminoffset 


dB 










Ohyst 


dB 










Treselection 


s 


7 


7 


Cell reselection timer values for EUTRA cells 


Srxlev* 


dB 


31 


25 


Cell 1 is the strongest cell 


T1 


Cell-specific RS EPRE 


dBm/ 
15kH 

z 


"Off" 


-85 


SrxlevceiM < (NOTE 1) 


Srxlev* 


dB 


- 


25 


Cell 2 becomes the strongest cell 


T2 


Cell-specific RS EPRE 


dBm/ 
15kH 

z 


-91 


-85 


Srxlevceii 2 > 0, Srxlevceii 1 > , Rceii 1 < Rceii 2 


Srxlev* 


dB 


19 


25 


Cell 1 becomes suitable 


cellBarred 


- 


notBarred 


barred 


Serving cell becomes barred 


NOTE 1 : Power level "Off" is defined in TS36.508 Table 6.2.2.1-1 . 



Table 6.1.2.3.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS re-adjusts the cell-specific reference signal 
level of Cell 1 according to row "T1" in table 
6.1.2.3.3.2-1. 










2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 2? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 




3 


SS changes serving cell signal level and SIB1 
IE ce//6arrec/ according to row "T2" in table 
6.1 .2.3.3.2-1 and transmits a Paging message 
including systemlnfoModification. The 
systemlnfoValueTag in the 
SystemlnformationBlockTypel is increased. 


<— 


Paging 






4 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 1? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






2 





6.1 .2.3.3.3 Specific message contents 

Table 6.1 .2.3.3.3-1 : Conditions for tables 6.1 .2.3.3.3-2, 6.1 .2.3.3.3-3 and 6.1 .2.3.3.3-4 



Condition 


Explanation 


Celll 


This condition applies to system information transmitted on Cell 1 . 


Cell 2 


This condition applies to system information transmitted on Cell 2. 
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Table 6.1.2.3.3.3-2: SystemlnformationBlockTypel for cells 1 and 2 (preamble and all steps, Table 

6.1.2.3.3.2-2) 



Derivation Path: 36.508 clause 4.4.3.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellSelectionlnfo SEQUENCE { 








q-RxLevlVlin 


-55(-110dBm) 






} 








schedulinglnforList ::= SEQUENCE (SIZE (1..maxSI- 
Message)) OF SEQUENCE {} 


Combination 1 in TS 
36.508 section 4.4.3.1.1 


Only SIB2 and 
SIB3 are 
transmitted 




systeminfoValuelag 


The value is increased in 
step 3 






} 









Table 6.1 .2.3.3.3-3: SystemlnformationBlockTypeS for cells 1 and 2 preamble and all steps, table 

6.1.2.3.3.2-2) 



Derivation Path: 36.508 clause 4.4.3.3, Table 4.4.3.3-2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypeS ::= SEQUENCE { 








cellReselectionlnfoCommon SEQUENCE { 








q-Hyst 


dBO 






} 








intraFreqCellReselectionlnfo SEQUENCE { 








q-RxLevlVlin 


-55(-110dBm) 






t-ReselectionEUTRA 


7 




Colli 




7 




Cell 2 


} 








} 








Table 6.1.2.3.3.3-4: SystemlnformationBlockTypel for cell 2 (step 3, Table 6.1.2.3.3.2-2) 


Derivation Path: 36.508 clause 4.4.3.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








cellBarred 


barred 




Cell 2 


IntraFreqReselection 


allowed 




Cell 2 


1 








} 









Table 6.1.2.3.3.3-5: Paging (step 3, Table 6.1.2.3.3.2-2) 



Derivation path: 36.508 Table 4.6.1-7 


Information Element 


Value/Remark 


Comment 


Condit 


Paging ::= SEQUENCE! 








pagingRecordList 


Not present 






systemlnfolVlodification 


True 






etws-PrimaryNotificationlndication 


Not present 






nonCriticalExtension SEQUENCE {} 


Not present 






1 









6.1.2.4 

6.1.2.4.1 
(1) 



Cell reselection 

Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE detects the cell ranked as the best cell 
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then { UE reselects the new cell 



6.1.2.4.2 



Conformance requirements 



References: The conformance requirements covered in tlie present TC are specified in: TS 36.304, clause 5.2.4.2 and 
5.2.4.6. 

[TS 36.304, clause 5.2.4.2] 

When evaluating for reselection purposes cell selection criterion or SnonServingCell,x, the UE shall use parameters 
provided by the serving cell. 

Following rules are used by the UE to limit needed measurements: 

If Sinti-asearch IS scut iu the scrviug ccll and Ssei-vingCeii > S intrasearch^ UE may choosc to uot perform intra-frequency 
measurements. 



If SservingCell <— Si, 

measurements. 



i or Sintiasearch is uot scut iu the scrving cell UE shall perform intra-frequency 



The UE shall apply the following rules for E-UTRAN inter-frequencies and inter-RAT frequencies which are 
indicated in system information and for which the UE has priority provided as defined in 5.2.4. 1 : 

For an E-UTRAN inter-frequency or inter-RAT frequency with a reselection priority higher than the 
reselection priority of the current E-UTRA frequency the UE shall perform measurements of higher priority 
E-UTRAN inter-frequency inter-RAT frequencies according to [10]. 

For an E-UTRAN inter-frequency with an equal or lower reselection priority than the reselection priority of 
the current E-UTRA frequency and for inter-RAT frequency with lower reselection priority than the 
reselection priority of the current E-UTRAN frequency: 

- If Snonintraseaich is scut iu the scrviug ccll and Sservmgceii > S nonmtiasearch UE may choose uot to perform 
measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority. 

- If SservmgCell <= S nonmtiasearch Or Snonmtrasearch IS UOt SCUt iu the SCrviug CCll the UE shall perform 

measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority 
according to [10]. 

Where SservingCeii is the Srxlev- value of the serving cell. 

[TS 36.304, clause 5.2.4.6] 

The cell-ranking criterion Rs for serving cell and Rn for neighbouring cells is defined by: 



Rs = Qmeas,s + Qhystg 
Rn=Qmeas,n- Qoffset 



where: 



Q^ 



Qoffset 



RSRP measurement quantity used in cell reselections. 



For intra-frequency: Equals to Qoffsets,n, if Qoffsets,n is valid, 
otherwise this equals to zero. 

For inter-frequency: Equals to Qoffsets.n plus Qoffsetfrequency, if 
Qoffsets.n is valid, otherwise this equals to Qoffsettrequency. 



The UE shall perform ranking of all cells that fulfill the cell selection criterion S, which is defined in 5.2.3.2, but may 
exclude all CSG cells that are known by the UE to be not allowed. 

The cells shall be ranked according to the R criteria specified above, deriving Qmeas.n and Qmeas.s and calculating the R 
values using averaged RSRP results. 
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If a cell is ranked as the best cell the UE shall perform cell re-selection to that cell. If this cell is found to be not- 
suitable, the UE shall behave according to subclause 5.2.4.4. 

In all cases, the UE shall reselect the new cell, only if the following conditions are met: 

the new cell is better ranked than the serving cell during a time interval TreselectionRAT 
more than 1 second has elapsed since the UE camped on the current serving cell. 

6.1.2.4.3 Test description 

6.1.2.4.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.1 .2.4.3.2 Test procedure sequence 

Table 6.1.2.4.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while columns 
marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are described in 
the texts in this clause. 

Table 6.1.2.4.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 2 


Remark 


TO 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-91 


The power level values are assigned to 
satisfy Rceii i > Rceii 2. 


T1 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-79 


The power level values are assigned to 
satisfy Rceii 1 < Rceii 2. 



Table 6.1.2.4.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes Cell 2 level according to the 
row "Tl" in table 6.1.2.4.3.2-1. 


- 


- 


- 


- 


2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 2? 






1 





6.1.2.4.3.3 

6.1.2.5 

6.1.2.5.1 

(1) 



with { UE in E-UTRA RRC_IDLE state 
ensure that { 



Specific message contents 

Table 6.1 .2.4.3.3-1: Void 
Cell reselection for interband operation 
Test Purpose (TP) 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 38 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

when { UE detects the cell re- selection criteria are met for the cell on the different frequency 
band } 

then { UE reselects the new cell } 
} 

6.1.2.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.304, clause 5.2.4.1, 
5.2.4.2 and 5.2.4.5. 

[TS 36.304, clause 5.2.4.1] 

Absolute priorities of different E-UTRAN frequencies or inter-RAT frequencies may be provided to the UE in the 
system information, in the RRCConnectionRelease message, or by inheriting from another RAT at inter-RAT cell 
(re)selection. In the case of system information, an E-UTRAN frequency or inter-RAT frequency may be listed without 
providing a priority (i.e. the field cellReselectionPriority is absent for that frequency). If priorities are provided in 
dedicated signalling, the UE shall ignore all the priorities provided in system information. If UE is in camped on any 
cell state, UE shall only apply the priorities provided by system information from current cell, and the UE preserves 
priorities provided by dedicated signalling unless specified otherwise. When the UE in camped normally state, has only 
dedicated priorities other than for the current frequency, the UE shall consider the current frequency to be the lowest 
priority frequency (i.e. lower than the eight network configured values). While the UE is camped on a suitable CSG 
cell, the UE shall always consider the current frequency to be the highest priority frequency (i.e. higher than the eight 
network configured values), irrespective of any other priority value allocated to this frequency. The UE shall delete 
priorities provided by dedicated signalling when: 

- the UE enters RRC_CONNECTED state; or 

the optional validity time of dedicated priorities (T320) expires; or 

a PLMN selection is performed on request by NAS [5]. 

NOTE: Equal priorities between RATs are not supported. 

The UE shall only perform cell reselection evaluation for E-UTRAN frequencies and inter-RAT frequencies that are 
given in system information and for which the UE has a priority provided. 

The UE shall not consider any black listed cells as candidate for cell reselection. 

The UE shall inherit the priorities provided by dedicated signalling and the remaining validity time (i.e., T320 in E- 
UTRA, T322 in UTRA and T3230 in GERAN), if configured, at inter-RAT cell (re)selection. 

NOTE: The network may assign dedicated cell reselection priorities for frequencies not configured by system 
information. 

[TS 36.304, clause 5.2.4.2] 

When evaluating for reselection purposes cell selection criterion or SnonServingCell,x, the UE shall use parameters 
provided by the serving cell. 

Following rules are used by the UE to limit needed measurements: 

If Sintrasearch is scut iu the scrviug ccll and SservingCeii > S intrasearch, UE may choosc to uot perform intra-frequency 
measurements. 

- If SservingCeii <= Sintrasearch. Or Sjntrasearch IS uot scut iu the scrviug ccll UE shall perform iutra-frequcncy 
measurements. 

The UE shall apply the following rules for E-UTRAN inter-frequencies and inter-RAT frequencies which are 
indicated in system information and for which the UE has priority provided as defined in 5.2.4.1: 

For an E-UTRAN inter-frequency or inter-RAT frequency with a reselection priority higher than the 
reselection priority of the current E-UTRA frequency the UE shall perform measurements of higher priority 
E-UTRAN inter-frequency or inter-RAT frequencies according to [10]. 
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For an E-UTRAN inter-frequency with an equal or lower reselection priority than the reselection priority of 
the current E-UTRA frequency and for inter-RAT frequency with lower reselection priority than the 
reselection priority of the current E-UTRAN frequency: 

- If Snonintraseaich IS scnt in the scrving cell and SservmgCeii > Snonintrasearch UE may choosc not to perform 
measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority. 

- If Sservingceii <= S nonmtiasearchOr S nonmtiasearch IS not Sent in the scrving ccll the UE shall perform 
measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority 
according to [10]. 

Where SseivingCeii is the Srxlev- value of the serving cell. 

[TS 36.304, clause 5.2.4.5] 

Criteria 1 : the SnonServingCeii.x of a cell on evaluated frequency is greater than Threshx, high during a time interval 
TreselectionRAx; 

Cell reselection to a cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

A cell of a higher priority E-UTRAN frequency or inter-RAT frequency fulfils criteria 1 ; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 

Cell reselection to a cell on an equal priority E-UTRAN frequency shall be based on ranking for Intra-frequency cell 
reselection as defined in sub-clause 5.2.4.6. 

Cell reselection to a cell on a lower priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

No cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency fulfills the 
criteria 1; and 

No cell on serving frequency or on an equal priority E-UTRAN frequency fulfills the criteria in 5.2.4.6; and 

- SservingCdi < ThrcshServing, low and the SnonServingCeii.x of a ccll of a lowcr priority E-UTRAN frequency or inter-RAT 
frequency is greater than Threshx, low during a time interval TreselectionRAx; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 

For GERAN, UTRAN, and E-UTRAN, SnonServmgCeii.x is the Srxlev-value of an evaluated cell. For UTRAN FDD, Squal 
is higher than 0, as defined in [8]. For cdma2000 RATs, SnonServingCeii.x is equal to FLOOR(-2 x 10 x loglO Ec/Io) in units 
of 0.5 dB, as defined in [18], with Ec/Io referring to the value measured from the evaluated cell. 

For cdma2000 RATs, Threshx, high and Threshx, low are equal to -1 times the values signalled for the corresponding 
parameters in the system information. 

In all the above criteria the value of TreselectionRAx is scaled when the UE is in the medium or high mobility state as 
defined in subclause 5.2.4.3.1. If more than one cell meets the above criteria, the UE shall reselect a cell ranked as the 
best cell among the cells meeting the criteria on the highest priority frequencies or the highest priority RAT if the 
highest priority RAT is E-UTRA according to criteria defined in 5.2.4.6. 

6.1.2.5.3 Test description 

6.1.2.5.3.1 Pre-test conditions 

System Simulator: 

- Celll,Cell3andCelllO. 
UE: 

None. 
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Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.1 .2.5.3.2 Test procedure sequence 

Table 6.1.2.5.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while columns 
marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are described in 
the texts in this clause. 

Table 6.1.2.5.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Cells 


Cell 10 


Remark 


TO 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-97 


-97 


The power level values are assigned to 
satisfy Srxlevceii i > 0, Srxlevceii 3 and 
Srxlevceiiio<Threshx,hiqh.. 


T1 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-73 


-73 


Cell 3 and Cell 10 become stronger than 

Threshx, high. 



Table 6.1.2.5.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes Cell 3 and Cell 10 level 
according to the row "Tl " in table 6.1 .2.5.3.2-1 . 


- 


- 


- 


- 


2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 10? 






1 





6.1.2.5.3.3 



Specific message contents 

Table 6.1 .2.5.3.3-0: Conditions for specific message contents 
in Tables 6.1.2.5.3.3-1 and 6.1.2.5.3.3-2 



Condition 


Explanation 


CelM 


This condition applies to system information transmitted on Cell 1 . 


Cell 3 


This condition applies to system information transmitted on Cell 3. 


Cell 10 


This condition applies to system information transmitted on Cell 10. 



Table 6.1 .2.5.3.3-1 : SystemlnformationBlockTypeS for Cell 1 , Cell 3 and Cell 10 (pre-test conditions) 



Derivation path: 36.508 table 4.4.3.3-2 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType3 ::= SEQUENCE { 








cellReselectionServingFreqInfo SEQUENCE { 








cellReselectionPriority 


1 




Celll 




3 
5 




Cell 3 
Cell 10 


} 








} 
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Table 6.1.2.5.3.3-2: SystemlnformationBlockTypeS ior Cell 1, Cell 3 and Cell 10 (pre-test conditions) 



Derivation path: 36.508 table 4.4.3.3-4 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypeS ::= SEQUENCE { 








interFreqCarrierFreqList SEQUENCE (SIZE 
(1 ..maxFreq)) OF SEQUENCE { 


2 entries 






dl-CamerFreq[1] 


Same downlink EARFCN 
as used for Cell 3 




Cell 1 




Same downlink EARFCN 
as used for Cell 1 




Cell 3, 
Cell 10 


threshX-High[1] 


10 


20dB 




cellReselectionPriority[1 ] 


3 




Cell 1 




1 




Cell 3, 
Cell 10 


dl-CamerFreq[2] 


Same downlink EARFCN 
as used for Cell 10 




Cell 1, 
Cell 3 




Same downlink EARFCN 
as used for Cell 3 




Cell 10 


threshX-High[2] 


10 


20dB 




cellReselectionPriority[2] 


5 




Celll, 
Cell 3 




3 




Cell 10 


} 








} 









6.1.2.6 

6.1.2.6.1 
(1) 



Cell reselection using Qhyst, Qoffset and Treseiection 
Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state, and the UE is not in high mobility state } 
ensure that { 

when { Qhyst is non-zero or its value changes in system information } 

then { UE reselects the highest ranked cell taking the actual Qhyst value into account) 



(2) 

with { UE in E-UTRA RRC_IDLE state, and the UE is not in high mobility state } 
ensure that { 

when { cell reselection criteria are fulfilled during a time interval Treseiection 
then { UE reselects the highest ranked cell } 



(3) 

with { UE in E-UTRA RRC_IDLE state, and the UE is not in high mobility state } 
ensure that { 

when { Qoffset is non-zero or its value changes in system information } 

then { UE reselects the highest ranked cell taking the actual Qoffset value into account 



6.1.2.6.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS36.300, clause 10.1.1.2 and 
TS 36.304, clauses 5.2.1 and 5.2.4.6 and TS 36.331 clause 6.3.1. 

[TS 36.300, clause 10.1.1.2] 

UE in RRC_IDLE performs cell reselection. The principles of the procedure are the following: 

The UE makes measurements of attributes of the serving and neighbour cells to enable the reselection process: 

There is no need to indicate neighbouring cell in the serving cell system information to enable the UE to 
search and measure a cell i.e. E-UTRAN relies on the UE to detect the neighbouring cells; 
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For the search and measurement of inter-frequency neighbouring cells, only the carrier frequencies need to be 
indicated; 

Measurements may be omitted if the serving cell attribute fulfils particular search or measurement criteria. 

Cell reselection identifies the cell that the UE should camp on. It is based on cell reselection criteria which 
involves measurements of the serving and neighbour cells: 

Intra-frequency reselection is based on ranking of cells; 



Cell reselection parameters are applicable for all UEs in a cell, ... 

[TS 36.304, clause 5.2.1] 

When camped on a cell, the UE shall regularly search for a better cell according to the cell reselection criteria. If a 
better cell is found, that cell is selected. 

[TS 36.304, clause 5.2.4.6] 

The cell-ranking criterion Rs for serving cell and Rn for neighbouring cells is defined by: 



where: 



Qrr 



Qoffset 



Rs — Qmeas,s "I" QHyst 
Rn = Qmeas,n " QoffSCt 



RSRP measurement quantity used in cell reselections. 



For intra-frequency: Equals to Qoffsets.n, if Qoffsets.n is valid, 
otherwise this equals to zero. 

For inter-frequency: Equals to Qoffsets.n plus Qoffsetfrequency, if 
Qoffsets.n is valid, otherwise this equals to Qoffsettrequencv- 



The UE shall perform ranking of all cells that fulfill the cell selection criterion S, which is defined in 5.2.3.2, but may 
exclude all CSG cells that are known by the UE to be not allowed. 

The cells shall be ranked according to the R criteria specified above, deriving Qmeas.n and Qmeas.s and calculating the R 
values using averaged RSRP results. 

If a cell is ranked as the best cell the UE shall perform cell re-selection to that cell. 



In all cases, the UE shall reselect the new cell, only if the following conditions are met: 

the new cell is better ranked than the serving cell during a time interval TreselectionRAx, 
more than 1 second has elapsed since the UE camped on the current serving cell. 

[TS 36.331, clause 6.3.1] 

The IE SystemInformationBlockType4 contains neighbouring cell related information relevant only for intra-frequency 
cell re-selection. The IE includes cells with specific re-selection parameters as well as blacklisted cells. 

6.1.2.6.3 Test description 

6.1.2.6.3.1 Pre-test conditions 

System Simulator: 

Cell 1 and Cell 2 are high quality cells on the same E-UTRA frequency and different tracking areas: 

Cell 1 serving cell, Srxlevceii i>0 
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Cell 2 intra-frequency cell Srxlevceii 2>0 

All cells broadcast system information. Serving cell does not continuously page UE. Normal response to 
RRCConnectionRequest so Attach can be done 

UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.1 .2.6.3.2 Test procedure sequence 

Table 6.1.2.6.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Rows marked "TO" denote the conditions after the preamble, while rows 
marked "Tl", "T2", "T3", "T4", "T5", "T6" and "T7" are to be applied subsequently. The exact instants on which these 
values shall be applied are described in the texts in this clause. 

Table 6.1.2.6.3.2-1 : Time instances of cell power level and parameter change 



Ti 


Parameter 


Unit 


CelM 


Cell 2 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-91 


The assigned values ensure Srxlevceii 
1 > 0, Srxlevceii 2 > and Rceii 1 > Rceii 2 
such that camping on Cell 1 is 
guaranteed 


Qhysts 


dB 


24 







Qoffsets.n 


dB 










TreselectionEUTRAN 


s 










Tl 


Cell-specific RS 
EPRE 


dBm/ 
15kH 

z 


-91 


-85 


Cell 2 becomes stronger than Cell 1 
but Cell 1 remains the highest ranked 
one due to Qhystscein 


T2 


Qhysts 


dB 








Qhystscein change causes Cell 2 to 
become highest ranked cell 


T3 


Cell-specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-91 


Cell 1 becomes the strongest and 
highest ranked one due to 

Qoffsets,nceii2 remains zero 


Qoffsets.n 


dB 


24 





T4 


Cell-specific RS 
EPRE 


dBm/ 
15kH 

z 


-91 


-85 


Cell 1 becomes weaker but it remains 
the highest ranked one due to 

Qoffsets.nCell 1 


T5 


Qoffsets.n 


dB 








Cell 2 becomes the highest ranked 
one due to Qoffsets.ncein change 


T6 


Cell-specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-91 


Cell 1 becomes the highest ranked 
one 


TreselectionEUTRAN 


s 


7 







T7 


Cell-specific RS 
EPRE 


dBm/ 
15kH 

z 


-91 


-85 


Cell 2 becomes the highest ranked 
cell 


Note: The total test tolerance used is the sum of downlink signal level uncertainty (TS 36.508 clause 6.2.2.1) and 
relative UE measurement accuracy of RSRP (TS 36.133 clause 9.1.2.2). 
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Table 6.1.2.6.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


SS re-adjusts the cell-specific reference signal 
levels according to row "11 " in table 
6.1.2.6.3.2-1. 










2 


Check: Does the UE send an 
RRCConnectionRequest on Cell 2 within the 
next [10s]? 


-> 


RRCConnectionRequest 


1 


F 


3 


SS resets QhystsCein according to row "12" in 
table 6.1 .2.6.3.2-1 and notifies UE of the 
system information change. The 
systemlnfoValueTag in the 
SystemlnformationBlockTypel is increased. 


<— 


Paging 






4 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 2? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 




5 


SS changes Qoffsets.nCein and re-adjusts 
cell-specific reference signal levels according 
to rows "T3" in table 6.1.2.6.3.2-1 and notifies 
UE of the system information change. The 
systemlnfoValueTag in the 
SystemlnformationBlockTypel is increased. 


<— 


Paging 






6 


Wait until there is any RRCConnectionRequest 
from the UE on Cell 1. 


~> 


RRCConnectionRequest 


- 


- 


7- 
11 


Steps 2 to 6 of the generic test procedure in 
TS 36.508 subclause 6.4.2.7 are performed on 
Colli. 










12 


SS re-adjusts cell-specific reference signal 
levels according to row "T4" in table 
6.1.2.6.3.2-1. 










13 


Check: Does the UE send an 
RRCConnectionRequest on Cell 2 within the 
next [10s]? 


-> 


RRCConnectionRequest 


3 


F 


14 


SS resets Qoffsets.ncein according to row "T5" 
in table 6.1 .2.6.3.2-1 and notifies UE of the 
system information change. The 
systemlnfoValueTag in the 
SystemlnformationBlockTypel is increased. 


<— 


Paging 






15 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 2? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






3 




16 


SS changes TreselectionEUTRANcein and re- 
adjusts cell-specific reference signal levels 
according to rows "T6" in table 6.1 .2.6.3.2-1 
and notifies UE of the system information 
change. The systemlnfoValueTag in the 
SystemlnformationBlockTypel is increased. 


<— 


Paging 






17 


Wait until there is any RRCConnectionRequest 
from the UE on Cell 1 


-> 


RRCConnectionRequest 


- 


- 


18- 
22 


Steps 2 to 6 of the generic test procedure in 
TS 36.508 subclause 6.4.2.7 are performed on 
CelM. 










23 


SS re-adjusts cell-specific reference signal 
levels according to rows "T7" in table 
6.1.2.6.3.2-1. 










24 


Check: Does the UE send an 
RRCConnectionRequest on Cell 2 within the 
next 6s? 


~> 


RRCConnectionRequest 


2 


F 


25 


Check: Does the UE send an 
RRCConnectionRequest on Cell 2 within the 


-> 


RRCConnectionRequest 


2 


P 
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next 12s? 










26- 
30 


Steps 2 to 6 of the generic test procedure in 
TS 36.508 subclause 6.4.2.7 are performed on 
Cell 2. 











NOTE: The wait time in step 14 is selected to cover time interval TreselectionEUTRAN ceii i- The time interval in 
step 15 is set to cover TevaluateFDD,intra (TS 36.133 clause 4.2.2.3) + 1280 ms for DRX cycle + 1280 
ms for system information block type scheduling. The timer tolerances are taken into account according 
to [18]. 

6.1.2.6.3.3 Specific message contents 

Table 6.1 .2.6.3.3-1 : Conditions for tables 6.1 .2.6.3.3-2 and 6.1 .2.6.3.3-3 



Condition 


Explanation 


Cell 1 


This condition applies to system information transmitted on Cell 1 . 


Cell 2 


This condition applies to system information transmitted on Cell 2. 



Table 6.1.2.6.3.3-2: SystemlnformationBlockTypel for cells 1 and 2 (preamble and all steps, Table 

6.1.2.6.3.2-2) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnformation ::= SEQUENCE (SIZE 
(1 ..maxSI-Message)) OF SEQUENCE {} 


Combination 2 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB4 are 
transmitted 


CelM 
Cell 2 


systemlnfoValueTag 


The value is increased in 
step 5, step 14 and step 
16 






} 









Table 6.1.2.6.3.3-3: SystemlnformationBlockTypeS ior cells 1 and 2 (preamble, table 6.1.2.6.3.2-2; 



Derivation Path: 36.508 table 4.4.3.3-2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType3 ::= SEQUENCE { 








cellReselectionlnfoCommon SEQUENCE { 








q-Hyst 


dB24 


Qhystscein 


Celll 




dBO 


Qhystsceii2 


Cell 2 


} 








} 









Table 6.1.2.6.3.3-4: SystemlnformationBlockTypeS ior cells 1 and 2 (step 3, table 6.1.2.6.3.2-2; 



Derivation Path: 36.508 table 4.4.3.3-2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType3 ::= SEQUENCE { 








cellReselectionlnfoCommon SEQUENCE { 








q-Hyst 


dBO 


QhystsCein 


Celll 




dBO 


Qhystsceii2 


Cell 2 


1 








} 
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Table 6.1.2.6.3.3-5: SystemlnformationBlockType3 ior cells 1 and 2 (step 16, table 6.1.2.6.3.2-2; 



Derivation Path: 36.508 table 4.4.3.3-2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type3 ::= SEQUENCE { 








cellReselectionlnfoCommon SEQUENCE { 








q-Hyst 


dBO 


Qhystscein 


CelH 




dBO 


Qhystsceii2 


Cell 2 


} 








intraFreqCellReselectionlnfo SEQUENCE { 








t-ReselectionEUTRA 


7 


seconds 


Cell 1 







seconds 


Cell 2 


} 








} 









Table 6.1.2.6.3.3-6: Systemlnformation BlockType4 \or cell 1 (step 5, table 6.1.2.6.3.2-2) 



Derivation Path: 36.508 table 4.4.3.3-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType4 ::= SEQUENCE { 








intraFreqNeighCellList SEQUENCE (SIZE 
(1 ..maxCelllntra)) OF SEQUENCE { 








physCellld[1] 


Physical cell identity of 
Cell 2 




Cell 1 


q-QffsetCell[1] 


dB24 


Qoffsets.nCell 1 


Cell 1 


} 








} 









Table 6.1.2.6.3.3-7: SystemlnformationBlockType4 ior cell 1 (step 14, table 6.1.2.6.3.2-2) 



Derivation Path: 36.508 table 4.4.3.3-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType4 ::= SEQUENCE { 








intraFreqNeighCellList SEQUENCE (SIZE 
(1 ..maxCelllntra)) OF SEQUENCE { 








physCellld[1] 


Physical cell identity of 
Cell 2 




CelM 


q-QffsetCell[1] 


dBO 


Qoffsets.nCell 1 


CelH 


1 








} 









6.1 .2.7 Cell reselection / Equivalent PLMN 

6.1.2.7.1 Test Purpose (IP) 

(1) 

with { UE camped normally on a cell and network has downloaded a list of equivalent PLMNs during the 
Location Registration procedure } 
ensure that { 

when { a suitable neighbour cell on an equivalent PLMN becomes better ranked than the suitable 
Serving cell } 

then { UE reselects to this equivalent PLMN cell. } 



(2) 

with { UE camped normally on a cell and network has downloaded a list of equivalent PLMNs during the 
Location Registration procedure } 
ensure that { 

when { the Serving cell becomes unsuitable due to S<0 and a suitable cell exists on an equivalent 
PLMN } 

then { UE reselects to this equivalent PLMN cell. } 
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(3) 

with { UE camped normally on a cell and network has downloaded a list of equivalent PLMNs during the 
Location Registration procedure } 
ensure that { 

when { the Serving cell becomes unsuitable due to cell barring and a suitable cell exists on an 
equivalent PLMN } 

then { UE reselects to this equivalent PLMN cell. } 
} 

(4) 

with { UE camped normally on a cell and network has downloaded a list of equivalent PLMNs during the 
Location Registration procedure } 
ensure that { 

when { the UE evaluates cells for reselection } 

then { UE ignores suitable cells for which the UE has no reselection priority provided. } 



6.1.2.7.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.304 clause 5.2.4.1, TS 
23.122 clause 4.4.3. 

[TS 36.304, clause 5.2.4.1] 

UE shall only perform reselection evaluation for E-UTRAN frequencies and inter-RAT frequencies that are given in 
system information and for which the UE has a priority provided. 

[TS 23. 122, clause 4.4.3] 

The Mobile Equipment stores a list of "equivalent PLMNs". This list is replaced or deleted at the end of each location 
update procedure, routing area update procedure and GPRS attach procedure. The stored list consists of a list of 
equivalent PLMNs as downloaded by the network plus the PLMN code of the registered PLMN that downloaded the 
list. All PLMNs in the stored list, in all access technologies supported by the PLMN, are regarded as equivalent to each 
other for PLMN selection, cell selection/re-selection and handover. 



6.1.2.7.3 
6.1.2.7.3.1 
System Simulator: 



Test description 
Pre-test conditions 



Three inter-frequency multi-PLMN cells as specified in TS36.508 clause 4.4.1.2 are configured broadcasting 
default NAS parameters as indicated in TS 36.508 Table 4.4.2-2. 

The PLMNs are identified in the test by the identifiers in Table 6.1.2.7.3.1-1. 

Table 6.1.2.7.3.1-1: PLMN identifiers 



Cell 


PLMN name 


1 


PLMN1 


12 


PLMN2 


13 


PLMNS 



UE: 



All cells are high quality. 
All cells are suitable cells. 

The UE is in Automatic PLMN selection mode. 

The UE is equipped with a USIM containing default values (as per TS 36.508) except for those listed in Table 
6.1.2.7.3.1-2. 
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Table 6.1.2.7.3.1-2: USIM configuration 



USIIUI field 


Priority 


Value 


Access Technology Identifier 


EFloci 




PLMNI (See pre-amble) 




EFusT 




Service 74 is supported. Service 
71 is not supported (there is no 
EHPLMN list). 





Preamble: 

The UE is registered on PLMNI (Cell 1) using the procedure described in TS 36.508 clause 4.5.2.3 except that 
the ATTACH ACCEPT message indicates PLMN3 in the Equivalent PLMN list as described in Table 
6.1.2.7.3.3-1. 

The UE is in state Registered, Idle Mode (State 2) on Cell 1 according to [18]. 

6.1 .2.7.3.2 Test procedure sequence 

Table 6.1.2.7.3.2-1 shows the cell configurations used during the test. The configuration TO indicates the initial 
conditions. Subsequent configurations marked "Tl" and "T2" are applied at the points indicated in the Main behaviour 
description in Table 6.1.2.7.3.2-2. " 

Table 6.1 .2.7.3.2-1 : Cell configuration changes over time 





Parameter 


Unit 


CelM 


Cell 12 


Cell 13 


Remarks 


TO 


RS EPRE 


dBm/15kHz 


-67 


-82 


-97 


All cells S>0 


Cell status 


N/A 


cellBarred= 
notBarred 


cellBarred= 
notBarred 


cellBarred= 
notBarred 


No cells are barred 


T1 


RS EPRE 


dBm/15kHz 


-115 


-82 


-97 


Cell 1 S < as described in TS 
36.508 clause 6.2.2.1 


Cell status 


N/A 


cellBarred= 
notBarred 


cellBarred= 
notBarred 


cellBarred= 
notBarred 


No cells are barred 


T2 


RS EPRE 


dBm/15kHz 


-67 


-82 


-97 


All cells S>0 


Cell status 


N/A 


cellBarred= 
notBarred 


cellBarred= 
barred 


cellBarred= 
notBarred 


The Serving cell, Cell 12, 
becomes barred 


Note 1 : The default values (including "not present") for all other parameters influencing cell reselection are suitable 
for this test. The values are defined in TS 36.508 clauses 4.4.3.2 and 4.4.3.3. 
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Table 6.1.2.7.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


lUlessage 


1 


Check: Does the UE send an 
RRCConnectionRequest within the next [1 00 
seconds]? 


— > 


RRCConnectionRequest 


1 


F 


2 


SS adjusts cell levels and cell status according to 
rowTI of table 6.1.2.7.3.2-1. 


- 


- 


- 


- 


3 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN Cell 
13? 

NOTE: The UE performs a TAU procedure with 
PLIVIN1 and PLMN2 listed as an Equivalent PLMN 
in the TRACKING AREA UPDATE ACCEPT 
message, and the RRC connection is released. 






2 




4 


Check: Is PLMN3 indicated by the UE? 


- 


- 


2 


P 


5 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN Cell 
12? 

NOTE: The UE performs a TAU procedure with 
PLIVIN1 and PLMN3 listed as an Equivalent PLMN 
in the TRACKING AREA UPDATE ACCEPT 
message, and the RRC connection is released. 






1 




6 


Check: Is PLMN2 indicated by the UE? 


- 


- 


1 


P 


7 


SS adjusts cell levels and cell status according to 
rowTO of table 6.1.2.7.3.2-1. 


- 


- 


- 


- 


8 


Check: Does the UE send an 
RRCConnectionRequest wWh'm the next [100 
seconds]? 


— > 


RRCConnectionRequest 


1,4 


F 


9 


SS adjusts cell levels and cell status according to 
rowT2 of table 6.1.2.7.3.2-1. 
Cell 12 becomes barred. 










10 


Notify UE of change of System Information. 


<— 


Paging 


- 


- 


11 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN Cell 
13? 

NOTE: The UE performs a TAU procedure with 
PLIVIN1 and PLMN2 listed as an Equivalent PLMN 
in the TRACKING AREA UPDATE ACCEPT 
message, and the RRC connection is released. 






3,4 




12 


Check: Is PLMN3 indicated by the UE? 


- 


- 


3,4 


P 


Note 1 : In Steps 1 and 8, a wait time long enough to ensure that the UE has detected, measured and evaluated the 

neighbour inter-frequency cells is provided, see 36.133 clause 4.2.2.4. 
Note 2: In Step 1 1 , the UE moves to Cell 13 because no reselection priority is defined for Cell 1 , see Table 

6.1.2.7.3.3-6. 



6.1.2.7.3.3 



Specific message contents 
Table 6.1.2.7.3.3-1: ATTACH ACCEPT for Cell 1 (preamble) 



Derivation path: 36.508 Table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


Equivalent PLMNs 


PLMN3 






Table 6.1.2.7.3.3-2: TRACKING AREA UPDATE ACCEPT for Cell 13 (steps 3 & 11 , Table 6.1.2.7.3.2-2) 


Derivation path: 36.508 Table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


Equivalent PLMNs 


PLMN1,2 
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Table 6.1.2.7.3.3-3: TRACKING AREA UPDATE ACCEPT for Cell 12 (step 5, Table 6.1.2.7.3.2-2) 



Derivation path: 36.508 Table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


Equivalent PLMNs 


PLMN1,3 







Table 6.1.2.7.3.3-4: SystemlnformationBlockTypel for Cell 12 (step 9, Table 6.1.2.7.3.2-2) 



Derivation path: 36.508 Table 4.4.3.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








cellBarred 


barred 






1 








} 









Table 6.1.2.7.3.3-5: Paging ior Cell 12 (step 10, Table 6.1.2.7.3.2-2) 



Derivation path: 36.508 Table 4.6.1-7 


Information Element 


Value/Remark 


Comment 


Condition 


Paging ::= SEQUENCE { 








pagingRecordList 


Not present 






systemlnfolVlodification 


true 






etws-lndication 


Not present 






nonCriticalExtension SEQUENCE {} 


Not present 






1 









Table 6.1.2.7.3.3-6: SystemlnformationBlockTypeS ior Cell 12 (preamble and all steps, Table 

6.1.2.7.3.2-2) 



Derivation path: 36.508 Table 4.4.3.3-4 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypeS ::= SEQUENCE { 








InterFreqCarrierFreqList SEQUENCE (SIZE 
(1 ..maxFreq)) OF SEQUENCE { 


2 entries 






dl-CarrierFreq[1] 


Same downlink EARFCN 
as used for Cell 1 






cellReselectionPriority[1 ] 


Not present 


UE does not have 
a priority for 
frequency of Cell 1 




dl-CarrierFreq[2] 


Same downlink EARFCN 
as used for Cell 13 






cellReselectionPriority[2] 


4 


Default priority 




1 








} 
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Table 6.1.2.7.3.3-7: SystemlnformationBlockTypeS ior Cell 13 (preamble and all steps, Table 

6.1.2.7.3.2-2) 



Derivation path: 36.508 Table 4.4.3.3-4 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlocl<Type5 ::= SEQUENCE { 








interFreqCarrierFreqList SEQUENCE (SIZE 
(1 ..maxFreq)) OF SEQUENCE { 


2 entries 






dl-CamerFreq[1] 


Same downlink EARFCN 
as used for Cell 1 






cellReselectionPriority[1 ] 


Not present 


UE does not have 
a priority for 
frequency of Cell 1 




dl-CarrierFreq[2] 


Same downlink EARFCN 
as used for Cell 12 






cellReselectionPriority[2] 


4 


Default priority 




} 








1 









Cell reselection using cell status and cell reservations / Access control class 
0to9 

Test Purpose (TP) 



6.1.2.8 

6.1.2.8.1 
(1) 

with { UE camped normally in state E-UTRA RRC_IDLE and UE fitted with a USIM with access class . 
ensure that { 

when { a higher ranked cell is found with cell status "barred" } 

then { UE does not attempt to reselect to the higher ranked cell } 



(2) 

with { UE camped normally in state E-UTRA RRC_IDLE and UE fitted with a USIM with access class 0..9} 
ensure that { 

when { a higher ranked cell is found "reserved" for Operator use } 
then { UE does not attempt to reselect to the higher ranked cell } 



6.1.2.8.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.304, clauses 5.2.4.4 and 
5.3.1. 

[TS 36.304, clause 5.2.4.4] 

For the highest ranked cell (including serving cell) according to cell reselection criteria specified in subclause 5.2.4.6, 
the UE shall check if the access is restricted according to the rules in subclause 5.3.1. 

If that cell and other cells have to be excluded from the candidate list, as stated in subclause 5.3.1, the UE shall not 
consider these as candidates for cell reselection. This limitation shall be removed when the highest ranked cell changes. 

[TS 36.304, clause 5.3.1] 

Cell status and cell reservations are indicated in the SystemlnformationBlockTypel [3] by means of two Information 
Elements: 

- cellBarred (IE type: "barred" or "not barred") 



cellReservedForOperatorUse (IE type: "reserved" or "not reserved") 



When cell status is indicated as "not barred" and "not reserved" for operator use. 
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All UEs shall treat this cell as candidate during the cell selection and cell re-selection procedures. 
When cell status is indicated as "not barred" and "reserved" for operator use for any PLMN, 

UEs assigned to an Access Class in the range of to 9, 12 to 14 and UEs with AC 11 or 15 not operating in 
theirHLPMN/EHPLMN shall behave as if the cell status is "barred" in case the cell is "reserved for operator 
use" for the PLMN the UE is currently registered with. 

NOTE 1: ... 

When cell status "barred" is indicated or to be treated as if the cell status is "barred", 

The UE is not permitted to select/re-select this cell, not even for emergency calls. 

The UE shall select another cell according to the following rule: 

- IfthecellisaCSGcell: 



else 

If the IE intmFrequencyReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockType 1 is set to 
"allowed", the UE may select another cell on the same frequency if re-selection criteria are fulfilled. 

The UE shall exclude the barred cell as a candidate for cell selection/reselection for 300 seconds. 

If the IE intraFreqReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to "not 
allowed" the UE shall not re-select a cell on the same frequency as the barred cell. 

The UE shall exclude the barred cell as a candidate for cell selection/reselection for 300 seconds. 

6.1.2.8.3 Test description 

6.1.2.8.3.1 Pre-test conditions 

System Simulator: 

Three inter-frequency cells as specified in TS36.508 clause 4.4.1.2 are configured broadcasting default NAS 
parameters as indicated in TS 36.508 Table 4.4.2-2, except that TAC values use the codes in Table 6.0.1-2. 

SIB 1 of Cell 3 and Cell 6 indicate cellBarred=barred. 

Each cell has only a single PLMN identity. 

All cells are high quality. 

The cell power levels are configured as shown in Table 6.1.2.8.3.1-1. 

Table 6.1.2.8.3.1-1: Cell power configuration 



Parameter 


Unit 


CelM 


Cell 3 


Cell 6 
(min UL) 


Remarks 


RS EPRE 


dBm/15kHz 


-97 


-82 


-67 


S>0 for all cells 


Note 1 : The default values (including "not present") for all other parameters influencing cell reselection are 
suitable for this test. The values are defined in TS36.508 clauses 4.4.3.2 and 4.4.3.3 



UE: 



The UE is in Automatic PLMN selection mode. 

The UE is equipped with a USIM containing default values (as per TS 36.508) except for those shown in Table 
6.1.2.8.3.1-2. 
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Table 6.1.2.8.3.1-2: USIM Configuration 



USIM field 


Value 


EFacc 


Type "A" as defined in TS34.108 clause 
8.3.2.15 



Preamble: 

The UE is in state Registered, Idle Mode (State 2) on Cell 1 according to [18]. 
6.1 .2.8.3.2 Test procedure sequence 

Table 6.1.2.8.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS adjusts SIB1 of Cell 3 to indicate 
cellBarred=notBarred 


- 


- 


- 


- 


2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 3? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 




3 


SS adjusts SIB1 of Cell 3 to indicate 
cellBarred=barred. (Cell 3 and Cell 6 are now 
both barred) 










4 


Notify UE of change of System Information 


<— 


Paging 






5 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 1? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 




6 


SS adjusts SIB1 of both Cell 3 and Cell 6: Cell 
3 indicates cellBarred=notBarred; Cell 6 
indicates cellBarred=notBarred and 
cellReservedForOperatorUse = reserved. 










7 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 3? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






2 




8 


SS adjusts SIB1 of both Cell 3 and Cell 6 to 
indicate cellReservedForOperatorUse = 
reserved. 










9 


Notify UE of change of System Information 


<- 


Paging 


- 


- 


10 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.7 

indicate that the UE is camped on E-UTRAN 

CelM? 

NOTE: The UE performs a TAU procedure and 

the RRC connection is released. 






2 
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6.1.2.8.3.3 



Specific message contents 



Table 6.1.2.8.3.3-1 : SystemlnformationBlockTypel for Cell 3 and Cell 6 (pre-test conditions and step 

4, Table 6.1 .2.8.3.2-1) 



Derivation Path: S6.508 clause 4.4.S.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= 
SEQUENCE! 








cellAccessRelatedlnfo SEQUENCE { 








pImn-ldentityList SEQUENCE (SIZE (1 ..6)) 
QF SEQUENCE! 


1 entry 






cellReservedForQperatorUse 


notReserved 




Cells 
Cell 6 


} 








cellBarred 


barred 




Cells 
Cell 6 


1 








} 









Table 6.1.2.8.3.3-2: SystemlnformationBlockTypel for Cell 3 and Cell 6 (step 1, Table 6.1.2.8.3.2-1) 



Derivation Path: S6.508 clause 4.4.S.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








pImn-ldentityList SEQUENCE (SIZE (1 ..6)) QF 
SEQUENCE! 


1 entry 






CellReservedForQperatorUse 


notReserved 




Cells 
Cell 6 


} 








cellBarred 


notBarred 




Cells 




barred 




Cell 6 


} 








} 









Table 6.1.2.8.3.3-3: Paging (steps 5 & 12, Table 6.1.2.8.3.2-1) 



Derivation Path: S6.508 Table 4.6.1-7 


Information Element 


Value/remark 


Comment 


Condition 


Paging ::= SEQUENCE! 








pagingRecordList 


Not present 






systemlnfolVlodification 


true 






etws-lndication 


Not present 






nonCriticalExtension SEQUENCE {} 


Not present 






\ 









Table 6.1.2.8.3.3-4: SystemlnformationBlockTypel for Cell 3 and Cell 6 (step 8, Table 6.1.2.8.3.2-1) 



Derivation Path: S6.508 clause 4.4.S.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








pImn-ldentityList SEQUENCE (SIZE (1 ..6)) QF 
SEQUENCE! 


1 entry 






CellReservedForQperatorUse 


notReserved 




Cells 




reserved 




Cell 6 


} 








cellBarred 


notBarred 




Cells 
Cell 6 


1 








} 
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Table 6.1.2.8.3.3-5: SystemlnformationBlockTypel for Cell 3 and Cell 6 (step 11, Table 6.1.2.8.3.2-1) 



Derivation Path: S6.508 clause 4.4.S.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








pImn-ldentityList SEQUENCE (SIZE (1 ..6)) QF 
SEQUENCE! 


1 entry 






cellReservedForQperatorUse 


reserved 




Cells 
Cell 6 


1 








cell Barred 


notBarred 




Cells 
Cell 6 


} 








} 









Cell reselection using cell status and cell reservations / Access control class 
1 1 to 1 5 

Test Purpose (TP) 



6.1.2.9 

6.1.2.9.1 
(1) 

with { UE campecJ normally in state E-UTRA RRC_IDLE and UE fittecJ with a USIM with access class 0..9 
and access classes 11.. 15 inclusive } 
ensure that { 

when { a higher ranked cell is found with cell status "barred" } 

then { UE does not attempt to reselect to the higher ranked cell } 



(2) 

with { UE camped normally in state E-UTRA RRC_IDLE and UE fitted with a USIM with access class 0..9 
and access classes 11.. 15 inclusive } 
ensure that { 

when { a higher ranked cell is found "reserved" for Operator use } 
then { UE re- selects to the higher ranked cell } 



6.1.2.9.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.304, clauses 5.2.4.4 and 
5.3.1. 

[TS 36.304, clause 5.2.4.4] 

For the highest ranked cell (including serving cell) according to cell reselection criteria specified in subclause 5.2.4.6, 
the UE shall check if the access is restricted according to the rules in subclause 5.3.1. 

If that cell and other cells have to be excluded from the candidate list, as stated in subclause 5.3.1, the UE shall not 
consider these as candidates for cell reselection. This limitation shall be removed when the highest ranked cell changes. 

[TS 36.304, clause 5.3.1] 

Cell status and cell reservations are indicated in the SystemlnformationBlockTypel [3] by means of two Information 
Elements: 

cellBarred (IE type: "barred" or "not barred") 

cellReservedForOperatorUse (IE type: "reserved" or "not reserved") 

When cell status is indicated as "not barred" and "not reserved" for operator use, 

- All UEs shall treat this cell as candidate during the cell selection and cell re-selection procedures. 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 56 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

When cell status is indicated as "not barred" and "reserved" for operator use for any PLMN, 

UEs assigned to Access Class 1 1 or 15 operating in their HPLMN/EHPLMN shall treat this cell as candidate 
during the cell selection and reselection procedures if the IE cellReservedForOperatorUse for that PLMN set to 
"reserved". 

UEs assigned to an Access Class in the range of to 9, 12 to 14 and UEs with AC 11 or 15 not operating in 
theirHLPMN/EHPLMN shall behave as if the cell status is "barred" in case the cell is "reserved for operator 
use" for the PLMN the UE is currently registered with. 

NOTE 1: ... 

When cell status "barred" is indicated or to be treated as if the cell status is "barred", 

The UE is not permitted to select/re-select this cell, not even for emergency calls. 

The UE shall select another cell according to the following rule: 

- IfthecellisaCSGcell: 



else 

If the IE intraFrequencyReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to 
"allowed", the UE may select another cell on the same frequency if selection/re-selection criteria are fulfilled. 

The UE shall exclude the barred cell as a candidate for cell selection/reselection for 300 seconds.- If the IE 
intraFreqReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to "not allowed" the 
UE shall not re-select a cell on the same frequency as the barred cell. 

The UE shall exclude the barred cell as a candidate for cell selection/reselection for 300 seconds. 

6.1.2.9.3 Test description 

6.1.2.9.3.1 Pre-test conditions 

System Simulator: 

Three inter-frequency cells as specified in TS36.508 clause 4.4.1.2 are configured broadcasting default NAS 
parameters as indicated in TS 36.508 Table 4.4.2-2, except that TAC values use the codes in Table 6.0.1-2. 

SIB 1 of Cell 3 and Cell 6 indicate cellBarred=barred 

Each cell has only a single PLMN identity. 

All cells are high quality. 

The cell power levels are configured as shown in Table 6.1.2.9.3.1-1. 

Table 6.1.2.9.3.1-1 : Cell power configuration 



Parameter 


Unit 


CelM 


Cell 3 


Cell 6 


Remarl(s 


RS EPRE 


dBm/15kHz 


-97 


-82 


-67 


S>0 for all cells 


Note 1 : The default values (including "not present") for all other parameters influencing cell reselection are 
suitable for this test. The values are defined in TS36.508 clauses 4.4.3.2 and 4.4.3.3 



UE: 



The UE is in Automatic PLMN selection mode. 

The UE is equipped with a USIM containing default values (as per TS 36.508) except for those shown in Table 
6.1.2.9.3.1-2. 
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Table 6.1.2.9.3.1-2: USIM Configuration 



USIIUI field 


Value 


EFacc 


Type "B" as defined in TSS4.108 clause 
8.S.2.15 



Preamble: 

The UE is in state Registered, Idle Mode (State 2) on Cell 1 according to [18]. 
6.1 .2.9.3.2 Test procedure sequence 

Table 6.1.2.9.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS adjusts SIB1 of Cell S to indicate 
cellBarred=notBarred 


- 


- 


- 


- 


2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell S? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 




S 


SS adjusts SIB1 of Cell S to indicate 
cellBarred=barred. (Cell S and Cell 6 are now 
both barred) 










4 


Notify UE of change of System Information 


<— 


Paging 


- 


- 


5 


Check: Does the test result of generic test 
procedure in TS S6.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 1? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 




6 


SS adjusts SIB1 of both Cell S and Cell 6: Cell 
S indicates cellBarred=notBarred; Cell 6 
indicates cellBarred=notBarred and 
cellReservedForOperatorUse = reserved 










7 


Check: Does the test result of generic test 
procedure in TS S6.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 6? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






2 





6.1.2.9.3.3 



Specific message contents 



Table 6.1.2.9.3.3-1 : SystemlnformationBlockTypel for Cell 3 and Cell 6 (pre-test conditions and step 

4, Table 6.1 .2.9.3.2-1) 



Derivation Path: S6.508 clause 4.4.S.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= 
SEOUENCE{ 








cellAccessRelatedlnfo SEQUENCE { 








pImn-ldentityList SEQUENCE (SIZE (1 ..6)) 
OF SEQUENCE { 


1 entry 






CellReservedForOperatorUse 


notReserved 




Cells 
Cell 6 


} 








cellBarred 


barred 




Cells 
Cell 6 


1 








} 
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Table 6.1.2.9.3.3-2: SystemlnformationBlockTypel for Cell 3 and Cell 6 (step 1, Table 6.1.2.9.3.2-1) 



Derivation Path: S6.508 clause 4.4.S.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








pImn-ldentityList SEQUENCE (SIZE (1 ..6)) QF 
SEQUENCE! 


1 entry 






cellReservedForQperatorUse 


notReserved 




Cells 
Cell 6 


1 








cell Barred 


notBarred 




Cells 




barred 




Cell 6 


} 








1 








Table 6.1.2.9.3.3-3: Paging (step 5, Table 6.1.2.9.3.2-1) 


Derivation Path: S6.508 Table 4.6.1-7 


Information Element 


Value/remark 


Comment 


Condition 


Paging ::= SEQUENCE { 








pagingRecordList 


Not present 






systemlnfoModification 


true 






etws-lndication 


Not present 






nonCriticalExtension SEQUENCE {} 


Not present 






1 









Table 6.1.2.9.3.3-4: SystemlnformationBlockTypel for Cell 3 and Cell 6 (step 6, Table 6.1.2.9.3.2-1) 



Derivation Path: S6.508 clause 4.4.S.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








pImn-ldentityList SEQUENCE (SIZE (1 ..6)) QF 
SEQUENCE! 


1 entry 






CellReservedForQperatorUse 


notReserved 




Cells 




reserved 




Cell 6 


} 








cellBarred 


notBarred 




Cells 
Cell 6 


1 








} 









6.1 .2.10 Cell reselection in shared network environment 

6.1.2.10.1 Test Purpose (TP) 

with { the UE is in E-UTRA RRC_Idle and registered on the HPLMN } 
ensure that { 

when { a cell of a different PLMN but shared with the HPLMN becomes highest ranked cell 
then { the UE reselects the cell shared with the HPLMN } 



6.1.2.10.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.304 clause 5.2.4.2 and TS 
23.122 clause 4.4.3. 

[TS 36.304, clause 5.2.4.6] 

The cell-ranking criterion R^ for serving cell and R^ for neighbouring cells is defined by: 
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where: 



Qrr 



Qoffset 



Rn = Qmeas,n " QoffSCt 



RSRP measurement quantity used in cell reselections. 



For intra-frequency: Equals to Qoffsets.n, if Qoffsets.n is valid, 
otherwise this equals to zero. 

For inter-frequency: Equals to Qoffsets.n plus Qoffsetfrequency, if 
Qoffsets.n is valid, otherwise this equals to Qoffsettrequency- 



The UE shall perform ranking of all cells that fulfil the cell selection criterion S, which is defined in 5.2.3.2, but may 
exclude all CSG cells that are known by the UE to be not allowed. 

The cells shall be ranked according to the R criteria specified above, deriving Qmeas.n and Qmeas.s and calculating the R 
values using averaged RSRP results. 

If a cell is ranked as the best cell the UE shall perform cell reselection to that cell. If this cell is found to be not-suitable, 
the UE shall behave according to subclause 5.2.4.4. 

In all cases, the UE shall reselect the new cell, only if the following conditions are met: 

the new cell is better ranked than the serving cell during a time interval TreselectionRAi; 

more than 1 second has elapsed since the UE camped on the current serving cell. 

[TS 23. 122, clause 4.4.3] 



When the MS reselects to a cell in a shared network, the AS may indicate multiple PLMN identities to the NAS 
according to 3GPP TS 25.304 [32]. The MS shall choose one of these PLMNs. If the registered PLMN is available 
among these PLMNs, the MS shall not choose a different PLMN. 



Test description 
Pre-test conditions 



6.1.2.10.3 
6.1.2.10.3.1 
System Simulator: 

- Cell 1 (HPLMN) 

- Cell 12 (primary PLMN: same MCC like HPLMN but different MNC, secondary PLMN: HPLMN) 
UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.1 .2.1 0.3.2 Test procedure sequence 

Table 6. 1 .2. 10.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while columns 
marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are described in 
the texts in this clause. 
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Table 6.1.2.10.3.2-2: Main behaviour 





Parameter 


Unit 


CelH 


Cell 12 


Remark 


TO 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


Off 




T1 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-73 


The power level values are assigned to satisfy Srxlevceii 12 
> Srxlevceii 1 



Table 6.1.2.10.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes Cell 1 and Cell 12 level 
according to the row "T1 " in table 6.1 .2.4.3.2-1 . 


- 


- 


- 


- 


2 


Check: Does the UE transmit an 
RRCConnectionRequest or\ Cell 12? 


-> 


RRCConnectionRequest 


1 


P 


3 


The SS transmits an RRCConnectionSetup 


<- 


RRCConnectionSetup 


- 


- 


4 


Check; Does the UE transmit an 

RRCConnectionSetupComplete message 

indicating the HPLMN (second PLMN in the 

list)? 

Note: this message contains an TRACKING 

AREA UPDATE REQUEST message 

according to default message contents. 


-> 


RRCConnectionSetupComplete 


1 


P 


5- 

7 


Steps 4 to 6 of the generic test procedure in 
TS 36.508 subclause 6.4.2.7 are performed. 
NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 











6.1 .2.1 0.3.3 Specific message contents 

Table 6.1.2.10.3.3-1: SystemlnformationBlocklypel (Cell 1, all steps, Table 6.1.2.10.3.2-2) 



Derivation path: 36.508 Table 4.4.3.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 
cellAccessRelatedlnfo SEQUENCE { 
pImn-ldentityList SEQUENCE (SIZE (1 ..6)) OF 
SEQUENCE! 
plmn-ldentity[1] 

} 
} 
} 


Set to the same Mobile 
Country Code and Mobile 
Network Code stored in 
EFIMSI on the test USIM 
card 
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Table 6.1.2.10.3.3-2: SystemlnformationBlockTypel (Cell 12, all steps, Table 6.1.2.10.3.2-2) 



Derivation path: 36.508 Table 4.4.3.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlocl<Type1 ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








pImn-ldentityList SEQUENCE (SIZE (1 ..6)) OF 








SEQUENCE! 








plmn-ldentity[1] 


Set to the same IVIobile 
Country Code stored in 
EFIMSIonthetestUSIM, 
MNC=02 






plmn-ldentity[2] 


Set to the same Mobile 


This is the same 






Country Code and IVIobile 


PLMN as Cell 1 






Network Code stored in 








EFIMSIonthetestUSIM 






} 
} 
} 


card 







Table 6.1.2.10.3.3-3: RRCConnectionSetupComplete (step 4, Table 6.1.2.10.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-18 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionSetupComplete ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICEj 








rrcConnectionSetupComplete-r8 SEQUENCE { 








selectedPLMN-ldentity 


2 


PLMN1 




} 








} 








} 








} 









6.1 .2.1 1 Inter-frequency cell reselection 



6.1.2.11.1 



(1) 



Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE detects both intra- frequency and equal priority inter- frequency neigbour cells and the 
inter- frequency cell is the highest ranked cell } 
then { UE reselects the inter- frequency cell } 



6.1.2.11.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.304, clause 5.2.4.5 and 
5.2.4.6. 

[TS 36.304, clause 5.2.4.5] 

Cell reselection to a cell on an equal priority E-UTRAN frequency shall be based on ranking for Intra-frequency cell 
reselection as defined in sub-clause 5.2.4.6. 

[TS 36.304, clause 5.2.4.6] 

The cell-ranking criterion Rj for serving cell and Rn for neighbouring cells is defined by: 
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where: 



Qrr 



Qoffset 



Rn = Qmeas,n " QoffSCt 



RSRP measurement quantity used in cell reselections. 



For intra-frequency: Equals to Qoffsets.n, if Qoffsets.n is valid, 
otherwise this equals to zero. 

For inter-frequency: Equals to Qoffsets.n plus Qoffsetfrequency, if 
Qoffsets.n is valid, otherwise this equals to Qoffsettrequency- 



The UE shall perform ranking of all cells that fulfil the cell selection criterion S, which is defined in 5.2.3.2, but may 
exclude all CSG cells that are known by the UE to be not allowed. 

The cells shall be ranked according to the R criteria specified above, deriving Qmeas.n and Qmeas.s and calculating the R 
values using averaged RSRP results. 

If a cell is ranked as the best cell the UE shall perform cell reselection to that cell. If this cell is found to be not-suitable, 
the UE shall behave according to subclause 5.2.4.4. 

In all cases, the UE shall reselect the new cell, only if the following conditions are met: 

the new cell is better ranked than the serving cell during a time interval TreselectionRAi; 
more than 1 second has elapsed since the UE camped on the current serving cell. 

6.1.2.11.3 Test description 

6.1.2.11.3.1 Pre-test conditions 
System Simulator: 

- 3 E-UTRA cells: 

- Cell 1 E-UTRA serving cell 

Cell 2 E-UTRA intra-frequency cell 
Cell 3 E-UTRA inter-frequency cell 

- Cell 1, Cell 2 and Cell 3 have different TACs, according to table 6.0.1-2 

The parameters settings and power levels for Cell 1, Cell 2 and Cell 3 are selected according to [18] so that 
camping on Cell 1 is guaranteed (inter-frequency priority is equal to serving priority). 

UE: 

None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.1 .2.1 1 .3.2 Test procedure sequence 

Table 6. 1 .2. 11 .3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while row 
marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are described in 
the texts in this clause. 
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Table 6.1.2.11.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 2 


Cell 3 


Remark 


TO 


Cell-specific 
RS EPRE 


dBm/15kHz 


-85 


-91 


-97 


The power level values are such that 
Srxlevceii i > 0, Rceii i > Rceii 2 and Rceii 3 so 
that camping on Cell 1 is guaranteed 


T1 


Cell-specific 
RS EPRE 


dBm/15kHz 


-85 


-91 


-73 


The power level values are set so that Rceii 2 

< Rcell 1 < Rcell 3- 



Table 6.1.2.11.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes the power level setting for 
Cell 3 according to the row "T1 " in table 
6.1.2.11.3.2-1. 










2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 3? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 





6.1 .2.1 1 .3.3 Specific message contents 

Table 6.1 .2.1 1 .3.3-1 : Conditions for specific message contents 
in Tables 6.1 .2.1 1 .3.3-2 and 6.1 .2.1 1 .3.3-3 



Condition 


Explanation 


Cell 1 


This condition applies to system information transmitted on Cell 1 . 


Cells 


This condition applies to system information transmitted on Cell 3. 



Table 6.1.2.11.3.3-2: SystemlnformationBlockTypel for Cell 1 and Cell 3 (preamble and all steps, 

Table 6.1.2.11.3.2-2) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnfoList ::= SEQUENCE (SIZE (L.maxSi- 
Message)) OF SEQUENCE {} 


Combination 3 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB5 are 
transmitted 


CelM 
Cell 3 


1 









Table 6.1.2.11.3.3-3: SystemlnformationBlockTypeS ior Cell 1 and Cell 3 (preamble and all steps, 

Table 6.1.2.11.3.2-2) 



Derivation path: 36.508 table 4.4.3.3-4 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType5 ::= SEQUENCE { 








InterFreqCarrierFreqList SEQUENCE (SIZE 
(1 ..maxFreq)) OF SEQUENCE { 


1 entry 






dl-CarrierFreq[1] 


EARFCN of Cell 3 




Cell 1 




EARFCN of Cell 1 




Cell 3 


} 








} 
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6.1.2.12 



6.1.2.12.1 



Cell reselection / Cell-specific reselection parameters provided by the 
network in a neighbouring cell list 

Test Purpose 



(1) 



with { the UE is in RRC_IDLE and Systeminf ormationBlockType4 contain a cell-specific Qoffset for a 
neighbour intra frequency cell } 
ensure that { 

when { the neighbour cell has lower power than the serving cell but it is higher ranked due to the 
cell-specific Qoffset } 

then { the UE reselects the neighbour cell with cell-specific Qoffset } 



(2) 

with { the UE is in RRC_IDLE and Systeminf ormationBlockType4 contain a black listed cell 
ensure that { 

when { a black listed cell becomes higher ranked than the serving cell } 
then { the UE remains camped on the serving cell } 



6.1.2.12.2 



Conformance Requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.304, clauses 5.2.4.1 and 
5.2.4.6. 

[TS 36.304 clause 5.2.4.1] 

The UE shall not consider any black listed cells as candidate for cell reselection. 

[TS 36.304 clause 5.2.4.6] 

The cell-ranking criterion Rj for serving cell and Rn for neighbouring cells is defined by: 



Ks — l^meas,s + v^Hyst 
Rn = Qmeas,n " QoffSCt 



where: 



Qrr 



Qoffset 



RSRP measurement quantity used in cell reselections. 



For intra-frequency: Equals to Qoffsets.n, if Qoffsets.n is valid, 
otherwise this equals to zero. 

For inter-frequency: Equals to Qoffsets.n plus Qoffsetfrequency, if 
Qoffsets.n is valid, otherwise this equals to Qoffsettrequency. 



The UE shall perform ranking of all cells that fulfil the cell selection criterion S, which is defined in 5.2.3.2, but may 
exclude all CSG cells that are known by the UE to be not allowed. 

The cells shall be ranked according to the R criteria specified above, deriving Qmeas.n and Qmeas.s and calculating the R 
values using averaged RSRP results. 

If a cell is ranked as the best cell the UE shall perform cell reselection to that cell. If this cell is found to be not-suitable, 
the UE shall behave according to subclause 5.2.4.4. 

In all cases, the UE shall reselect the new cell, only if the following conditions are met: 

the new cell is better ranked than the serving cell during a time interval TreselectionRAx; 

more than 1 second has elapsed since the UE camped on the current serving cell. 
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6.1.2.12.3 Test description 

6.1.2.12.3.1 Pre-test conditions 
System Simulator: 

cells 1, 2, and 4 on the same E-UTRA frequency and in different tracking areas 

only 2 cells are simultaneously active, Cell 4 can be implemented as minimum uplink cell 

cell 1 is transmitting SystemInformationBlockType4 according to specific message contents (Qoffset; 2 is -24dB) 

cell 2 is transmitting SystemInformationBlockType4 according to specific message contents (Qoffset2,i is 24dB, 
cell 4 is on black list) 

NOTE: Qoffset2 1 does not serve any test purpose, but symmetrical Qoffset values may be more realistic and also 
avoid the risk that the UE reselects cell 1 after step 2 is complete in case the SS takes some time before 
switching cell 1 off. 

UE: 

None. 
Preamble: 

the UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.1 .2.1 2.3.2 Test procedure sequence 

Table 6.1.2.12.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Rows marked "TO" denote the conditions after the preamble, while rows 
marked "Tl" and "T2" are to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 6.1.2.12.3.2-1 : Time instances of cell power level and parameter change 



Ti 


Parameter 


Unit 


CelM 


Cell 2 


Cell 4 


Remark 


TO 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


Off 


Off 


Only Cell 1 is on 


T1 


-85 


-91 


Off 


Cell 2 has lower power but is higher ranked 
due to cell-specific Qoffseti,2 


T2 


Off 


-91 


-85 


Cell 4 has higher power than Cell 2 but is 
black listed 



Table 6.1.2.12.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS re-adjusts the cell-specific reference 
signal levels according to row "T1" in table 
6.1.2.12.3.2-1. 










2 


Check: Does the test result of generic 
procedure 6.4.2.7 indicate that the UE camps 
on Cell 2? 






1 




3 


The SS re-adjusts the cell-specific reference 
signal levels according to row "T2" in table 
6.1.2.12.3.2-1. 










4 


Check: Does the UE initiate a random access 
procedure on Cell 4 within the next 120s? 


- 


- 


2 


F 
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6.1 .2.12.3.3 Specific message contents 

Table 6.1.2.12.3.3-1: SystemlnformationBlockType4]or cell 1 (all steps, Table 6.1.2.12.3.2-2) 



Derivation path: 36.508 table 4.4.3.3-3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlocl<Type4 ::= SEQUENCE { 








intraFreqNeighCellUst SEQUENCE { 


1 entry 






physCellld[1] 


PliysicalCelllDofCell2 






q-0ffsetCell[1] 


dB-24 






} 








} 









Table 6.1.2.12.3.3-2: SystemlnformationBlockType4 ior cell 2 (all steps, Table 6.1.2.12.3.2-2) 



Derivation path: 36.508 table 4.4.3.3-3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType4 ::= SEQUENCE { 








intraFreqNeighCellUst { 


1 entry 






physCellld[1] 


PhysicalCelllDof Cell 1 






q-0ffsetCell[1] 


dB24 






} 








intraFreqBlackCellLlst SEQUENCE { 


1 entry 






start[1] 


PhysicalCelllDof Cell 4 






range[1] 


Not present 






} 








} 









6.1.2.15 



6.1.2.15.1 



Inter-frequency cell reselectlon according to cell reselectlon priority provided 
bySIBs 

Test Purpose (IP) 



(1) 



with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the equal 
priority frequency } 

then { UE reselects the cell which belongs to the equal priority frequency } 



(2) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the higher 
priority frequency } 

then { UE reselects the cell which belongs to the higher priority frequency } 



(3) 



with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the lower 
priority frequency } 

then { UE reselects the cell which belongs to the lower priority frequency } 



6.1.2.15.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.304, clause 5.2.4.1, 
5.2.4.2, 5.2.4.5 and 5.2.4.6. 

[TS 36.304, clause 5.2.4.1] 
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Absolute priorities of different E-UTRAN frequencies or inter-RAT frequencies may be provided to the UE in the 
system information, in the RRCConnectionRelease message, or by inheriting from another RAT at inter-RAT cell 
(re)selection. In the case of system information, an E-UTRAN frequency or inter-RAT frequency may be listed without 
providing a priority (i.e. the field cellReselectionPriority is absent for that frequency). If priorities are provided in 
dedicated signalling, the UE shall ignore all the priorities provided in system information. If UE is in camped on any 
cell state, UE shall only apply the priorities provided by system information from current cell, and the UE preserves 
priorities provided by dedicated signalling unless specified otherwise. When the UE in camped normally state, has only 
dedicated priorities other than for the current frequency, the UE shall consider the current frequency to be the lowest 
priority frequency (i.e. lower than the eight network configured values). The UE shall delete priorities provided by 
dedicated signalling when: 

- the UE enters RRC_CONNECTED state; or 

the optional validity time of dedicated priorities (T320) expires; or 

a PLMN selection is performed on request by NAS [5]. 

NOTE: Equal priorities between RATs are not supported. 

The UE shall only perform cell reselection evaluation for E-UTRAN frequencies and inter-RAT frequencies that are 
given in system information and for which the UE has a priority provided. 

The UE shall not consider any black listed cells as candidate for cell reselection. 

The UE shall inherit the priorities provided by dedicated signalling and the remaining validity time (i.e., T320 in E- 
UTRA, T322 in UTRA and [T3230, FFS] in GERAN), if configured, at inter-RAT cell (re)selection. 

NOTE: The network may assign dedicated cell reselection priorities for frequencies not configured by system 
information. 

[TS 36.304, clause 5.2.4.2] 

When evaluating for reselection purposes cell selection criterion or SnonServingCell,x, the UE shall use parameters 
provided by the serving cell. 

Following rules are used by the UE to limit needed measurements: 

- If Sintrasearch IS scnt in the scrving cell and SseivingCdi > Sintrasearch. UE may choose to not perform intra-frequency 
measurements. 

- If SservingCeii <= S intrasearch. Or Sintrasearch IS Hot scnt in the scrving ccll UE shall perform intra-frcqucncy 
measurements. 

The UE shall apply the following rules for E-UTRAN inter-frequencies and inter-RAT frequencies which are 
indicated in system information and for which the UE has priority provided as defined in 5.2.4. 1 : 

For an E-UTRAN inter-frequency or inter-RAT frequency with a reselection priority higher than the 
reselection priority of the current E-UTRA frequency the UE shall perform measurements of higher priority 
E-UTRAN inter-frequency or inter-RAT frequencies according to [10]. 

For an E-UTRAN inter-frequency with an equal or lower reselection priority than the reselection priority of 
the current E-UTRA frequency and for inter-RAT frequency with lower reselection priority than the 
reselection priority of the current E-UTRAN frequency: 

- If Snonintrasearch IS Sent in the Serving cell and SservingCeii > Snonintrasearch UE may choosc not to perform 
measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority. 

- If SservingCeii <= Snonintrasearch Or Snonintrasearch IS nOt SCnt in the SCrving CCll the UE shall perform 

measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority 
according to [10]. 

Where SservingCeii is the Srxlev- value of the serving cell. 

[TS 36.304, clause 5.2.4.5] 
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Criteria 1: theS 
TreselectioriRAT^ 



nonServingi 



,ceii,x of a cell on evaluated frequency is greater than Thresh^, high during a time interval 



Cell reselection to a cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be perfc)rmed if: 

A cell of a higher priority E-UTRAN frequency or inter-RAT frequency fulfils criteria 1 ; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 

Cell reselection to a cell on a lower priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

No cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency fulfills the 
criteria 1; and 

No cell on serving frequency or on an equal priority E-UTRAN frequency fulfills the criteria in 5.2.4.6; and 

- SservingCeii < ThrcshServiiig, low and the SnonServingCeii.x of a ccll of a lowcr priority E-UTRAN frequency or inter-RAT 
frequency is greater than Threshx, low during a time interval TreselectionRAx; and 



or if: 



more than 1 second has elapsed since the UE camped on the current serving cell. 



there are no candidate cells for reselection on serving frequency according to 5.2.4.4 or 5.3.1. 



Cell reselection to a cell on an equal priority E-UTRAN frequency shall be based on ranking for Intra-frequency cell 
reselection as defined in sub-clause 5.2.4.6. 



For GERAN, UTRAN, and E-UTRAN, S 



ceii.x is the Srxlev-value of an evaluated cell. For UTRAN FDD, Squal 



nonServingi 

is higher than 0, as defined in [8]. For cdma2000 RATs, SnonServingCeii.x is equal to FLOOR(-2 x 10 x loglO Ec/Io) in units 
of 0.5 dB, as defined in [18], with Ec/Io referring to the value measured from the evaluated cell. 

In all the above criteria the value of TreselectionRAx is scaled when the UE is in the medium or high mobility state as 
defined in subclause 5.2.4.3.1. If more than one cell meets the above criteria, the UE shall reselect a cell ranked as the 
best cell among the cells meeting the criteria on the highest priority frequencies or the highest priority RATif the 
highest priority RAT is E-UTRA according to criteria defined in 5.2.4.6. 

[TS 36.304, clause 5.2.4.6] 

The cell-ranking criterion Rs for serving cell and Rn for neighbouring cells is defined by: 



Rs = Qmeas,s + Qhystg 

Rn=Qmeas,n- Qoffset 



where: 



Qrr 



RSRP measurement quantity used in cell reselections. 



Qoffset 



For intra-frequency: Equals to Qoffsets,n, if Qoffsets,n is valid, 
otherwise this equals to zero. 

For inter-frequency: Equals to Qoffsets.n plus Qoffsetfrequency, if 
Qoffsets.n is valid, otherwise this equals to Qoffsettrequency- 



The UE shall perform ranking of all cells that fulfil the cell selection criterion S, which is defined in 5.2.3.2, but may 
exclude all CSG cells that are known by the UE to be not allowed. 

The cells shall be ranked according to the R criteria specified above, deriving Qmeas.n and Qmeas.s and calculating the R 
values using averaged RSRP results. 

If a cell is ranked as the best cell the UE shall perform cell re-selection to that cell. If this cell is found to be not- 
suitable, the UE shall behave according to subclause 5.2.4.4. 
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In all cases, the UE shall reselect the new cell, only if the following conditions are met: 

the new cell is better ranked than the serving cell during a time interval TreselectionRAx; 
more than 1 second has elapsed since the UE camped on the current serving cell. 

6.1.2.15.3 Test description 

6.1.2.15.3.1 Pre-test conditions 
System Simulator: 

- Cell 1, Cell 3 and Cell 6 (different TACs, according to table 6.0. 1-2). 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.1 .2.1 5.3.2 Test procedure sequence 

Table 6.1.2.15.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while columns 
marked "Tl", "T2" and "T3" are to be applied subsequently. The exact instants on which these values shall be applied 
are described in the texts in this clause. 

Table 6.1.2.15.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cells 


Cell 6 


Remark 


TO 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


"Off" 


"Off" 


The power level values are assigned to 
satisfy Srxlevceii i > 0, Srxlevceii 3 <= and 
Srxlevceiie < Threshceii i,high. 
(N0TE1). 


T1 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-73 


"Off" 


The power level values are assigned to 

satisfy Rcell 1 < Rcell 3- 

(N0TE1). 


T2 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


"Off" 


-73 


-73 


The power level values are assigned to 
satisfy Srxlevceii 1 < and Srxlevceii e > 

Threshcell3,high. 

(N0TE1). 


T3 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


"Off" 


-73 


-95 


The power level values are assigned to 
satisfy Srxlevceii e < Threshsemng, low and 
Srxlevceiis > Threshceii e, low, SrxlevceiiK 0. 
(N0TE1). 


N0TE1: Power level "Off" is defined in TS36.508 Table 6.2.2.1-1. 
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Table 6.1.2.15.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes Cell 3 level according to the 
row "T1" in table 6.1.2.15.3.2-1. 


- 


- 


- 


- 


2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 3? 






1 




3 


The SS changes Cell 1 and Cell 6 level 
according to the row "T2" in table 6.1.2.15.3.2- 
1. 










4 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 6? 






2 




5 


The SS changes Cell 6 level according to the 
row "T3" in table 6.1 .2.1 5.3.2-1 . 


- 


- 


- 


- 


6 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 3? 






3 





6.1 .2.1 5.3.3 Specific message contents 

Table 6.1.2.15.3.3-1 : Conditions for specific message contents 
in Tables 6.1.2.15.3.3-2 and 6.1.2.15.3.3-3 



Condition 


Explanation 


Cell 1 


This condition applies to system information transmitted on Cell 1 . 


Cell 3 


This condition applies to system information transmitted on Cell 3. 


Cell 6 


This condition applies to system information transmitted on Cell 6. 



Table 6.1.2.15.3.3-2: SystemlnformationBlockTypel for Cell 1, Cell 3 and Cell 6 (preamble and all 

steps, Table 6.1.2.15.3.2-2) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








SchedulinglnfoList SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 3 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB5 are 
transmitted 


Cell 1 
Cell 3 
Cell 6 


} 









Table 6.1.2.15.3.3-3: SystemlnformationBlockTypeS ior Cell 6 (preamble and all steps, Table 

6.1.2.15.3.2-2) 



Derivation path: 36.508 table 4.4.3.3-2 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType3 ::= SEQUENCE { 








cellReselectionServingFreqInfo SEQUENCE { 








threshServingLow 


10 


20 dB 




cellReselectionPriority 


5 






1 








} 
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Table 6.1.2.15.3.3-4: SystemlnformationBlockTypeS ior Cell 1, Cell 3 and Cell 6 (preamble and all 

steps, Table 6.1.2.15.3.2-2) 



Derivation path: 36.508 table 4.4.S.3-4 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypeS ::= SEQUENCE { 








interFreqCarrierFreqList SEQUENCE (SIZE 
(1 ..maxFreq)) OF SEQUENCE { 


2 entries 






dl-CamerFreq[1] 


EARFCN of Cell 3 




Cell 1 




EARFCN of Cell 1 




Cell 3, 
Cell 6 


dl-CamerFreq[2] 


EARFCN of Cell 6 




Cell 1, 
Cells 




EARFCN of Cell 3 




Cell 6 


threshX-High[2] 


10 


20 dB 


Cein, 
Cells 


cellReselectionPriority[2] 


5 




CelM, 
Cells 


1 








} 









6.2 Multi-mode environment (E-UTRAN, UTRAN, GERAN, 
CDI\/IA2000) 

6.2.1 Inter-RAT PLMN selection 

6.2.1 .1 Inter-RAT PLMN Selection / Selection of correct RAT for OPLIVIN / Automatic 

mode 

6.2.1.1.1 Test Purpose (IP) 

(1) 

with { UE in Automatic network selection mode with no RPLMN cells available and OPLMN cells 
available on E-UTRAN and UTRAN } 
ensure that { 

when { UE is switched on} 

then { UE selects a the highest priority OPLMN and RAT combination and UE attempts to attach on 
the selected cell and when successfully registered indicates the PLMN to the user. } 
} 

(2) 

with { UE in Automatic network selection mode and OPLMN cells and non prioritised RAT cells 
available on GERAN and E-UTRAN } 
ensure that { 

when { UE returns to coverage} 

then { UE selects a the highest priority OPLMN and RAT combination and UE attempts to attach on 
the selected cell and when successfully registered indicates the PLMN to the user. } 
} 

(3) 

with { UE in Automatic network selection mode and both OPLMN cells and cells not on the OPLMN list 
are available on E-UTRAN and UTRAN } 
ensure that { 

when { UE returns to coverage } 

then { UE selects a the highest priority OPLMN and RAT combination and UE attempts to attach on 
the selected cell and when successfully registered indicates the PLMN to the user. } 



6.2.1.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 23.122 clauses 4.4.3.1 and 
4.4.3.1.1. 
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[TS 23.122, clause 4.4.3.1] 

If successful registration is achieved, the MS indicates the selected PLMN. 



NOTE 1 : If successful registration is achieved, then the current serving PLMN becomes the registered PLMN and 
the MS does not store the previous registered PLMN for later use. 

[TS 23.122, clause 4.4.3.1.1] 

The MS selects and attempts registration on other PLMN/access technology combinations, if available and allowable, in 
the following order: 

i) either the HPLMN (if the EHPLMN list is not present or is empty) or the highest priority EHPLMN that is 
available (if the EHPLMN list is present) ; 

ii) each PLMN/access technology combination in the "User Controlled PLMN Selector with Access Technology" 
data file in the SIM (in priority order); 

iii) each PLMN/access technology combination in the "Operator Controlled PLMN Selector with Access 
Technology" data file in the SIM (in priority order); 

iv) other PLMN/access technology combinations with received high quality signal in random order; 

v) other PLMN/access technology combinations in order of decreasing signal quality. 

6.2.1.1.3 Test description 

6.2.1.1.3.1 Pre-test conditions 

System Simulator 

- 4 cells are used: 2 cells belong to E-UTRAN, 1 cell belongs to GERAN and 1 cell belongs to UTRAN. The 
cells are configured as specified in TS 36.508 clause 4.4.1.4 and Table 4.4.2-2. 



UE 



The UE is in Automatic PLMN selection mode. 
The HPLMN is PLMN 1 
There is no RPLMN. 

Table 6.2.1.1.3.1-1: USIM configuration 



USIIUI field 


Priority 


Value 


Access 
technology 


Comment 


EFpLMNwAcT 




3GPPTS 31.102, 
Annex E 




The EF is empty. 


EFoPLMNwAoT 


1 


PLMN2 


E-UTRAN 






2 


PLMN13 


GERAN 






3 


PLMN2 


UTRAN 






4 


PLMN13 


E-UTRAN 





Preamble 



The UE is in state Switched OFF (State 1) 

Cell levels are set according to row TO of table 6.2.1.1.3.2-2. 



6.2.1.1.3.2 



Test procedure sequence 



Tables 6.2.1.1.3.2 - 1 and 2 show the cell configurations used during the test. The configuration TO indicates the initial 
conditions. Subsequent configurations marked "Tl", "T2" and "T3" are applied at the point indicated in the Main 
behaviour description in Table 6.2.1.1.3.2-3. Cell powers for the E-UTRAN cell are defined in TS 36.508 Table 6.2.2.1- 
1 and cell powers for the UTRAN and GERAN cells are defined in TS 36.508 Table 6.2.2.1-1. 
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A cell marked as "OFF" in table 6.2.1.1.3.2-2 is a cell that is not configured in the SS. 

Table 6.2.1.1.3.2-1: Cell PLMN identities 



Cell 


PLMN name 


1 


PLMN2 


5 


PLMN2 


13 


PLMN14 


24 


PLMN13 



Table 6.2.1.1.3.2-2: Time instances of cell power level and parameter changes 





Parameter 
name 


Unit 


CelM 


Cell 5 


Cell 13* 


Cell 24 


TO 


RS EPRE 


dBm/15kHz 


Serving cell 




OFF 






CPICH Ec 


dBm/3.84 MHz 




Serving cell 








P-CCPCH 


dBm/1 .28 MHz 




Serving cell 








RF Signal 
Level 


dBm 








Serving cell 


T1 


RS EPRE 


dBm/1 5kHz 


Serving cell 




OFF 






CPICH_Ec 


dBm/3.84 MHz 




Non-suitable 
"Off" 








P-CCPCH 


dBm/3.84 MHz 




Non-suitable 
"Off" 








RF Signal 
Level 


dBm 








Serving cell 


T2 


RS EPRE 


dBm/1 5kHz 


OFF 




OFF 






CPICH_Ec 


dBm/3.84 MHz 




Non-suitable 
"Off" 








P-CCPCH 


dBm/3.84 MHz 




Non-suitable 
"Off" 








RF Signal 
Level 


dBm 






Serving cell* 


Serving cell 


T3 


RS EPRE 


dBm/1 5kHz 


OFF 




Serving cell* 






CPICH Ec 


dBm/3.84 MHz 




Serving cell 








P-CCPCH 


dBm/3.84 MHz 




Serving cell 








RF Signal 
Level 


dBm 








OFF 
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Table 6.2.1.1.3.2-3: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


Checl<: Does the UE send 
RRCConnectionRequest on Cell 1? 


-> 


RRCConnectionRequest 


1 


P 


3- 
17 


The UE performs Steps 3-17 of the registration 
procedure described in TS 36.508 table 
4.5.2.3-1. 










18 


Check: Is PLMN2 indicated by the UE? 


- 


- 


1 


P 


19 


SS adjusts cell levels according to row T1 of 
table 6.2.1.1.3.2-2. 


- 


- 


- 


- 


20 


SS adjusts cell levels according to row T2 of 
table 6.2.1.1.3.2-2. 


- 


- 


- 


- 


21 


Check: Does the UE send a CHANNEL 
REQUEST on Cell 24? 


-> 


CHANNEL REQUEST 


2 


P 


22- 
31 


The UE performs Steps 2-1 1 of the routing 
area update procedure described in 36.508 
table 6.4.2.9-1. 










32 


Check: Is PLMN13 indicated by the UE? 


- 


- 


2 


P 


34 


SS adjusts cell levels according to row T3 of 
table 6.2.1.1.3.2-2. 


- 


- 


- 


- 


36 


Check: Does the UE send RRC 
CONNECTION REQUEST on Cell 5? 


-> 


RRC CONNECTION REQUEST 


3 


P 


37- 

47 


The UE performs Steps 2-12 of the routing 
area update procedure described in TS 36.508 
Table 6.4.2.8-1. 










48 


Check: Is PLMN2 indicated by the UE? 


- 


- 


3 


P 



6.2.1.1.3.3 

None 

6.2.1.2 

6.2.1.2.1 
(1) 



Specific message contents 



Inter-RAT PLMN Selection / Selection of correct RAT for UPLMN / Automatic 
mode 

Test Purpose (TP) 



with { UE in Automatic network selection mode and UPLMN and OPLMN cells available on E-UTRAN and 

utran} 

ensure that { 

when { UE is switched on} 

then { UE selects a the highest priority UPLMN and RAT combination and UE attempts to attach on 
the selected cell and when successfully registered indicates the PLMN to the user. } 



(2) 

with { UE in Automatic network selection mode and UPLMN and OPLMN cells available on E-UTRAN and 

utran} 

ensure that { 

when { UE returns to coverage } 

then { UE selects a the highest priority VPLMN and RAT combination and UE attempts to attach on 
the selected cell and when successfully registered indicates the PLMN to the user. } 



6.2.1.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 23.122 clauses 4.4.3.1 and 
4.4.3.1.1. 

[TS 23.122, clause 4.4.3.1] 

If successful registration is achieved, the MS indicates the selected PLMN. 
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NOTE 1 : If successful registration is achieved, then the current serving PLMN becomes the registered PLMN and 
the MS does not store the previous registered PLMN for later use. 

[TS 23.122, clause 4.4.3.1.1] 

The MS selects and attempts registration on other PLMN/access technology combinations, if available and allowable, in 
the following order: 

i) either the HPLMN (if the EHPLMN list is not present or is empty) or the highest priority EHPLMN that is 
available (if the EHPLMN list is present) ; 

ii) each PLMN/access technology combination in the "User Controlled PLMN Selector with Access Technology" 
data file in the SIM (in priority order); 

iii) each PLMN/access technology combination in the "Operator Controlled PLMN Selector with Access 
Technology" data file in the SIM (in priority order); 

iv) other PLMN/access technology combinations with received high quality signal in random order; 

v) other PLMN/access technology combinations in order of decreasing signal quality. 

6.2.1.2.3 Test description 

6.2.1.2.3.1 Pre-test conditions 

System Simulator 

3 cells are used: 2 cells belong to E-UTRAN and 1 cell belongs to UTRAN. The cells are configured as 
specified in TS 36.508 clause 4.4.1.4 and Table 4.4.2-2. 



UE 



The UE is in Automatic PLMN selection mode. 
The HPLMN is PLMN 1 
There is no RPLMN. 

Table 6.2.1 .2.3.1-1: USIM configuration 



USIIUI field 


Priority 


Value 


Access 
technology 


Comment 


EFpLMNwAcT 


1 


PLMN13 


E-UTRAN 






2 


PLMN14 


UTRAN 




EFoPLMNwAcT 


1 


PLMN2 


All 






2 


PLMN14 


UTRAN 






3 


PLMN13 


E-UTRAN 





Preamble 



The UE is in state Switched OFF (State 1) 

Cell levels are set according to row TO of table 6.2.1.2.3.2-2. 



6.2.1.2.3.2 



Test procedure sequence 



Tables 6.2.1.2.3.2 - 1 and 2 show the cell configurations used during the test. The configuration TO indicates the initial 
conditions. Subsequent configuration marked "Tl" is applied at the point indicated in the Main behaviour description in 
Table 6.2.1.2.3.2-3. Cell powers for the E-UTRAN cell are defined in TS36.508 Table 6.2.2.1-1 and cell powers for the 
UTRAN cells are defined in TS 36.508 Table 6.2.2.1-1. 
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Table 6.2.1.2.3.2-1: Cell PLMN identities 



Cell 


PLMN name 


1 


PLMN2 


5 


PLMN14 


12 


PLMN13 



Table 6.2.1.2.3.2-2: Time instances of cell power level and parameter changes 





Parameter 
name 


Unit 


Celir 


Cell 5 


Cell 12 


TO 


RS EPRE 


dBm/15kHz 


Serving cell 




Serving cell 




CPICH Ec 


dBm/3.84 MHz 




Serving cell 






P-CCPCH 


dBm/1.28MHz 




Serving cell 




11 


RS EPRE 


dBm/15kHz 


Serving cell 




Non-suitable 
"Off" 




CPICH Ec 


dBm/3.84 MHz 




Serving cell 






P-CCPCH 


dBm/3.84 MHz 




Serving cell 




*Only minimum uplinl< cell configuration required(See 6.3.3.2 in 36.508) 



Table 6.2.1.2.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


Check: Does the UE send 
RRCConnectionRequest or\ Cell 12? 


-> 


RRCConnectionRequest 


1 


P 


3- 
17 


The UE performs Steps 3-17 of the registration 
procedure described in TS 36.508 table 
4.5.2.3-1. 










18 


Check: Is PLMN13 indicated by the UE? 


- 


- 


1 


P 


19 


SS adjusts cell levels according to row T1 of 
table 6.2.1.2.3.2-2. 


- 


- 


- 


- 


20 


Check: Does the UE send a RRC 
CONNECTION REQUEST on Cell 5? 


-> 


RRC CONNECTION REOUEST 


2 


P 


21- 
31 


The UE performs Steps 2-12 of the routing 
area update procedure described in TS 36.508 
Table 6.4.2.8-1. 










32 


Check: Is PLMN14 indicated by the UE? 


- 


- 


2 


P 



6.2.1.2.3.3 


None 


6.2.1.3 


6.2.1.3.1 


(1) 



Specific message contents 



Inter-RAT PLMN Selection / Selection of correct PLMN and RAT in shared 
network environment / Automatic mode 



Test Purpose (TP) 



with 



UE in Automatic network selection mode and shared OPLMN cells available on E-UTRAN and UTRAN 



ensure that { 

when { UE is switched on} 

then { UE selects a the highest priority OPLMN and RAT combination and UE attempts to attach on 
the selected cell and PLMN and when successfully registered indicates the correct PLMN to the user. 



(2) 

with { UE in Automatic network selection mode and shared OPLMN cells available on E-UTRAN and UTRAN 

} 

ensure that { 
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then { UE selects a the highest priority OPLMN and RAT combination and UE attempts to attach on 
the selected cell and PLMN and when successfully registered indicates the correct PLMN to the user. 
} 

6.2.1.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 23.122 clauses 4.4.3, 4.4.3.1 
and 4.4.3.1.1. 

[TS 23.122, clause 4.4.3] 

When the MS reselects to a cell in a shared network, the AS may indicate multiple PLMN identities to the NAS 
according to 3GPP TS 25.304 [32]. The MS shall choose one of these PLMNs. If the registered PLMN is available 
among these PLMNs, the MS shall not choose a different PLMN. 

[TS 23.122, clause 4.4.3.1] 

At switch on, or following recovery from lack of coverage, the MS selects the registered PLMN or equivalent PLMN (if 
it is available) using all access technologies that the MS is capable of and if necessary (in the case of recovery from lack 
of coverage, see subclause 4.5.2) attempts to perform a Location Registration. 



If successful registration is achieved, the MS indicates the selected PLMN. 

[TS 23.122, clause 4.4.3.1.1] 

The MS selects and attempts registration on other PLMN/access technology combinations, if available and allowable, in 
the following order: 

i) either the HPLMN (if the EHPLMN list is not present or is empty) or the highest priority EHPLMN that is 
available (if the EHPLMN list is present) ; 

ii) each PLMN/access technology combination in the "User Controlled PLMN Selector with Access Technology" 
data file in the SIM (in priority order); 

iii) each PLMN/access technology combination in the "Operator Controlled PLMN Selector with Access 
Technology" data file in the SIM (in priority order); 

iv) other PLMN/access technology combinations with received high quality signal in random order; 

v) other PLMN/access technology combinations in order of decreasing signal quality. 

6.2.1.3.3 Test description 

6.2.1.3.3.1 Pre-test conditions 

System Simulator 

3 cells are used: 2 cells belong to E-UTRAN and 1 cell belongs to UTRAN. The cells are configured as 
specified in TS 36.508 clause 4.4.1.4 and Table 4.4.2-2. 



UE 



The UE is in Automatic PLMN selection mode. 
The HPLMN is PLMN 1. 
There is no RPLMN. 
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Table 6.2.1 .3.3.1-1: USIM configuration 



USIIUI field 


Priority 


Value 


Access 
technology 


Comment 


EFoPLMNwAcT 


1 


PLMN2 


E-UTRAN 






2 


PLMN2 


UTRAN 






3 


PLMN14 


UTRAN 






4 


PLMN13 


E-UTRAN 





Preamble 



The UE is in state Switched OFF (State 1) 

Cell levels are set according to row TO of table 6.2.1.3.3.2-2. 



6.2.1.3.3.2 



Test procedure sequence 



Tables 6.2.1.3.3.2 - 1 and 2 show the cell configurations used during the test. The configuration TO indicates the initial 
conditions. Subsequent configuration marked "Tl" is applied at the point indicated in the Main behaviour description in 
Table 6.2.1.3.3.2-3. Cell powers for the E-UTRAN cell are defined in TS 36.508 Table 6.2.2.1-1 and cell powers for the 
UTRAN cells are defined in TS 36.508 Table 6.2.2.1-1. 

Table 6.2.1.3.3.2-1: Cell PLMN identities 



Cell 


PLMN name 


1 


PLMN13,PLMN2 


5 


PLMN14, PLMN13 


12 


PLMN13, PLMN14 



Table 6.2.1.3.3.2-2: Time instances of cell power level and parameter changes 





Parameter 
name 


Unit 


CelM 


Cell 5 


Cell 12* 


TO 


RS EPRE 


dBm/15kHz 


Serving cell 




Serving cell 




CPICH Ec 


dBm/3.84 MHz 




Serving cell 






P-CCPCH 


dBm/1.28MHz 




Serving cell 




T1 


RS EPRE 


dBm/15kHz 


Non-suitable 
"Off" 




Serving cell 




CPICH Ec 


dBm/3.84 MHz 




Serving cell 






P-CCPCH 


dBm/1.28MHz 




Serving cell 




*Only minimum uplinl< cell configuration required(See 6.3.3.2 in 36.508) 



Table 6.2.1.3.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


Check: Does the UE send 
RRCConnectionRequest on Cell 1? 


-> 


RRCConnectionRequest 


1 


P 


3- 
17 


The UE performs Steps 3-17 of the registration 
procedure described in TS 36.508 table 
4.5.2.3-1. 










18 


Check: Is PLMN2 indicated by the UE? 


- 


- 


1 


P 


19 


SS adjusts cell levels according to row Tl of 
table 6.2.1.3.3.2-2. 


- 


- 


- 


- 


20 


Check: Does the UE send a RRC 
CONNECTION REQUEST on Cell 5? 


-> 


RRC CONNECTION REOUEST 


2 


P 


21- 
31 


The UE performs Steps 2-12 of the routing 
area update procedure described in TS 36.508 
Table 6.4.2.8-1. 










32 


Check: Is PLMN14 indicated by the UE? 


- 


- 


2 


P 
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6.2.1 .3.3.3 Specific message contents 

Table 6.1.2.10.3.3-1: SystemlnformationBlockTypel (Cell 1, all steps, Table 6.2.1.3.3.2-3) 



Derivation path: 36.508 Table 4.4.3.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlocl<Type1 ::= SEQUENCE { 
cellAccessRelatedlnfo SEQUENCE { 
pImn-ldentityList SEQUENCE (SIZE (1 ..6)) OF 
SEQUENCE! 
plmn-ldentity[1] 
plmn-ldentity[2] 
} 
} 
} 


PLMN13. 
PLMN2 







Table 6.1.2.10.3.3-2: Master Information Block (Cell 5, all steps, Table 6.2.1.3.3.2-3) 



Derivation path : 34. 1 08 Section 6. 1 .Oa 


Information Element 


Value/Remark 


Comment 


Condition 


- Supported PLMN types 








- PLMN type 


GSM-MAP 






- PLMN identity 


PLMN14 






- Multiple PLMN List 








- PLMN identity with Optional MCC[1] 


PLMN13 







Table 6.1.2.10.3.3-3: SystemlnformationBlockTypel (Cell 12, all steps. Table 6.2.1.3.3.2-3) 



Derivation path: 36.508 Table 4.4.3.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 
cellAccessRelatedlnfo SEQUENCE { 
pImn-ldentityList SEQUENCE (SIZE (1 ..6)) QF 
SEQUENCE! 
plmn-ldentity[1] 
plmn-ldentity[2] 
} 
} 
} 


PLMN13 
PLMN14 







Table 6.2.1.3.3-4: RRCConnectionSetupComplete (Step 5, Table 6.2.1.3.3.2-3) 



Derivation Path: 36.331 clause 6.2.2 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionSetupComplete ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE { 








rrcConnectionSetupComplete-r8 SEQUENCE { 








selectedPLMN-ldentity 


2 


PLMN2 





Table 6.2.1.3.3-5: INITIAL DITRECT TRANSFER (Step 23, Table 6.2.1.3.3.2-3) 



Derivation Path: 34.108 clause 9.1.1 


Information Element 


Value/remark 


Comment 


Condition 


PLMN identity 


PLMN14 
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6.2.1 .4 Inter-RAT PLMN Selection / Selection of correct RAT from the OPLMN list / 

Manual mode 

6.2.1 .4.1 Test Purpose (TP) 
(1) 

with { UE in Manual network selection mode and OPLMN cells available on E-UTRAN and GERAN} 
ensure that { 

when { the USER selects an OPLMN} 

then { UE selects a the highest priority RAT for the OPLMN and UE attempts to attach on the 
selected cell and when successfully registered indicates the PLMN to the user. } 
} 

(2) 

with { UE in Manual network selection mode and OPLMN cells available on E-UTRAN and GERAN} 
ensure that { 

when { the USER selects an OPLMN and RAT combination} 

then {UE attempts to attach on the selected OPLMN and RAT combination and when successfully 
registered indicates the PLMN to the user. } 
} 

6.2.1.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 23.122 clauses 4.4.3.1.2. 

[TS 23.122, clause 4.4.3.1.2] 

The MS indicates whether there are any PLMNs, which are available using all supported access technologies. This 
includes PLMNs in the "forbidden PLMNs" list and PLMNs which only offer services not supported by the MS. An MS 
which supports GSM COMPACT shall also indicate GSM COMPACT PLMNs (which use PBCCH). 

If displayed, PLMNs meeting the criteria above are presented in the following order: 

i)- either the HPLMN (if the EHPLMN list is not present or is empty) or, if one or more of the EHPLMNs are 
available then based on an optional data field on the SIM either only the highest priority available EHPLMN is 
to be presented to the user or all available EHPLMNs are presented to the user in priority order. If the data field 
is not present on the SIM, then only the highest priority available EHPLMN is presented; 

ii)- PLMN/access technology combinations contained in the " User Controlled PLMN Selector with Access 
Technology " data file in the SIM (in priority order); 

iii)- PLMN/access technology combinations contained in the "Operator Controlled PLMN Selector with Access 
Technology" data file in the SIM (in priority order); 

iv)- other PLMN/access technology combinations with received high quality signal in random order; 

v)- other PLMN/access technology combinations in order of decreasing signal quality. 



The user may select his desired PLMN and the MS then initiates registration on this PLMN using the access technology 
chosen by the user for that PLMN or using the highest priority available access technology for that PLMN, if the 
associated access technologies have a priority order. (This may take place at any time during the presentation of 
PLMNs). For such a registration, the MS shall ignore the contents of the "forbidden LAs for roaming", "forbidden TAs 
for roaming", "forbidden LAs for regional provision of service", "forbidden TAs for regional provision of service", 
"forbidden PLMNs for GPRS service" and "forbidden PLMNs" lists. 

NOTE 1 : It is an MS implementation option whether to indicate access technologies to the user. If the MS does 
display access technologies, then the access technology selected by the user is only used for initial 
registration on the selected PLMN. If the MS does not display access technologies, then the access 
technology chosen for a particular PLMN should be the highest priority available access technology for 
that PLMN, if the associated access technologies have a priority order, and is only used for initial 
registration. 
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6.2.1.4.3 
6.2.1.4.3.1 
System Simulator 



Test description 
Pre-test conditions 



3 cells are used: 2 cells belong to E-UTRAN and 1 cell belongs to GERAN. The cells are configured as 
specified in TS 36.508 clause 4.4.1.4 and Table 4.4.2-2. 



UE 



TheHPLMNisPLMNl. 



Table 6.2.1 .4.3.1-1: USIM configuration 



USIM field 


Priority 


Value 


Access 
technology 


Comment 


EFoPLMNwAcT 


1 


PLMN2 


E-UTRAN 






2 


PLMN2 


GERAN 






3 


PLMN2 


UTRAN 






4 


PLMN13 


E-UTRAN 





Preamble 

The UE is equipped with a USIM with default settings except for the ones specified in table 6.2.1.4.3.1-1 then 
the UE is attached to PLMNl and the UE is set to Manual PLMN selection mode before it is switched off 

Cell levels are set according to row TO of table 6.2.1.4.3.2-2. 

6.2.1 .4.3.2 Test procedure sequence 

Tables 6.2.1.4.3.2 - 1 and 2 show the cell configurations used during the test. The configuration TO indicates the initial 
conditions. Cell powers for the E-UTRAN cell are defined in TS36.508 Table 6.2.2.1-1 and cell powers for the 
GERAN cell are defined in TS 36.508 Table 6.2.2.1-1. 

Table 6.2.1.4.3.2-1: Cell PLMN identities 



Cell 


PLMN name 


1 


PLMN2 


12 


PLMN13 


24 


PLMN2 



Table 6.2.1.4.3.2-2: Time instances of cell power level and parameter changes 





Parameter 
name 


Unit 


CelM 


Cell 12* 


Cell 24 


TO 


RS EPRE 


dBm/15kHz 


Serving cell 


Serving cell 






RF Signal 
Level 


clBm 






Serving cell 


*Only minimum uplink cell configuration required(See 6.3.3.2 in 36.508) 



Table 6.2.1.4.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


IVIake the UE display the list of available 
PLMNs. 


- 


- 


- 


- 


3 


PLMN2 (E-UTRAN) is selected. 


- 


- 


- 


- 


4 


Check: Does the UE send an 
RRCConnectionRequest on cell 1? 


~> 


RRCConnectionRequest 


1,2 


P 


5- 
19 


The UE performs Steps 3-17 of the registration 
procedure described in TS 36.508 table 
4.5.2.3-1. 










20 


Check: Is PLMN2 indicated by the UE? 


- 


- 


1,2 


P 
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6.2.1 .4.3.3 Specific message contents 

None 

6.2.2 Inter-RAT cell selection 

6.2.2.1 Inter-RAT cell selection / From E-UTRA RRCJDLE to UTRAJdIe / Serving 
cell becomes non-suitable (SservingCeii<0 or , barred) 

6.2.2.1.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { the serving cell becomes non- suitable and there is a suitable UTRA neighbour cell } 
then { UE selects the suitable UTRA neighbour cell } 

(2) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { the serving cell becomes barred and there is a suitable UTRA neighbour cell} 
then { UE selects the suitable UTRA neighbour cell } 
} 

6.2.2.1.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.304, clause 4.1, 4.3,5.2.1, 

5.2.3.2 and 5.3.1. TS 25.304, clause 5.2.3.2. 

[TS 36.304, clause 4.1] 

With the cell selection, the UE searches for a suitable cell of the selected PLMN and chooses that cell to provide 
available services, further the UE shall tune to its control channel. This choosing is known as "camping on the cell". 

The UE shall, if necessary, then register its presence, by means of a NAS registration procedure, in the tracking area of 
the chosen cell and as outcome of a successful Location Registration the selected PLMN becomes the registered PLMN 
[5]. 

If the UE finds a more suitable cell, according to the cell reselection criteria, it reselects onto that cell and camps on it. 
If the new cell does not belong to at least one tracking area to which the UE is registered, location registration is 
performed. 

[TS 36.304, clause 4.3] 

suitable cell: 

A "suitable cell" is a cell on which the UE may camp on to obtain normal service. Such a cell shall fulfil all the 
following requirements. 

The cell is part of either: 

the selected PLMN, or: 

the registered PLMN, or: 

- a PLMN of the Equivalent PLMN list 

according to the latest information provided by NAS: 

The cell is not barred, see subclause 5.3.1; 

The cell is part of at least one TA that is not part of the list of "forbidden tracking areas for roaming" [4], which 
belongs to a PLMN that fulfils the first bullet above; 
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The cell selection criteria are fulfilled, see subclause 5.2.3.2; 

- For a CSG cell, the CSG ID is part of the allowed CSG list of the UE. 

If more than one PLMN identity is broadcast in the cell, the cell is considered to be part of all TAs with TAIs 
constructed from the PLMN identities and the TAC broadcast in the cell. 

barred cell: 

A cell is barred if it is so indicated in the system information [3]. 

[TS 36.304, clause 5.2.1] 

When camped on a cell, the UE shall regularly search for a better cell according to the cell reselection criteria. If a 
better cell is found, that cell is selected. 

[TS 36.304, clause 5.2.3.2] 

The cell selection criterion S is fulfilled when: 



Srxlev > 



Where: 



Srxlev = Qrxlev 



■ (Qrxlevmin + Qrxlevminoffset) " PcOmpCnSation 



Where: 

the signalled value QrxlevminOffset is only applied when a cell is evaluated for cell selection as a result of a periodic 
search for a higher priority PLMN while camped normally in a VPLMN [5]. During this periodic search for higher 
priority PLMN the UE may check the S criteria of a cell using parameter values stored from a different cell of this 
higher priority PLMN. 



Srxlev 


Cell Selection RX level value (dB) 


CJrxlevmeas 


Measured cell RX level value (RSRP). 


Urxlevmin 


Minimum required RX level in the cell (dBm) 


CJrxlevminoffset 


Offset to the signalled Qrxievmin taken into account in the Srxlev 
evaluation as a result of a periodic search for a higher priority PLMN 
while camped normally in a VPLMN [5] 


Pcompensation 


max(PEMAx- PuMAx, 0) (dB) 


Pemax 


Maximum TX power level an UE may use when transmitting on the 
uplink in the cell (dBm) defined as Pemax in [TS 36.101] 


PUMAX 


Maximum RF output power of the UE (dBm) according to the UE 
power class as defined in [TS 36.101] 



[TS 36.304, clause 5.3.1] 

Cell status and cell reservations are indicated in the SystemlnformationBlockTypel [3] by means of two Information 
Elements: 

cellBarred (IE type: "barred" or "not barred") 

In case of multiple PLMNs indicated in SIBl, this IE is common for all PLMNs 



When cell status is indicated as "not barred" and "not reserved" for operator use. 

All UEs shall treat this cell as candidate during the cell selection and cell re-selection procedures. 

When cell status "barred" is indicated or to be treated as if the cell status is "barred". 
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The UE is not permitted to select/re-select this cell, not even for emergency calls. 

The UE shall select another cell according to the following rule: 

- IfthecellisaCSGcell: 

the UE may select another cell on the same frequency if the selection/reselection criteria are fulfilled. 

else 

If the IE intraFreqReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to 
"allowed", the UE may select another cell on the same frequency if re-selection criteria are fulfilled. 

The UE shall exclude the barred cell as a candidate for cell selection/reselection for 300 seconds. 

If the IE intraFreqReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to "not 
allowed" the UE shall not re-select a cell on the same frequency as the barred cell. 

The UE shall exclude the barred cell as a candidate for cell selection/reselection for 300 seconds. 

The cell selection of another cell may also include a change of RAT. 

[TS 25.304, clause 5.2.3.2] 

The cell selection criterion S is fulfilled when: 



for FDD cells: 
for TDD cells: 



Srxlev>0 AND Squal > 
Srxlev > 



Where: 



Squal = Qquaimeas - Qqualmlii 

Srxlev = Qrxievmeas " Qrxlevmln - Pcompensation 



Squal 


Cell Selection quality value (dB) 
Applicable only for FDD cells. 


Srxlev 


Cell Selection RX level value (dB) 


Qquaimeas 


Measured cell quality value. The quality of the received signal expressed in CPICH E(,/Nq 

(dB) for FDD cells. CPICH Ec/NO shall be averaged as specified in [10]. Applicable only 
for FDD cells. 


Urxlevmeas 


Measured cell RX level value. This is received signal, CPICH RSCP for FDD cells (dBm) 
and P-CCPCH RSCP for TDD cells (dBm). 


Qqualmin 


Minimum required quality level in the cell (dB). Applicable only for FDD cells. 


Qrxlevmin 


Minimum required RX level in the cell (dBm) 


Pcompensation 


max(UE TXPWR MAX RACH - P MAX, 0) (dB) 


U E_TXP W R_MAX_R AC H 


Maximum TX power level an UE may use when accessing the cell on RACH (read in 
system information) (dBm) 


P MAX 


Maximum RF output power of the UE (dBm) 



6.2.2.1.3 
6.2.2.1.3.1 
System Simulator: 
- Cell 1 and Cell 5 



Test description 
Pre-test conditions 
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UE: 



None. 



Preamble: 

UE is in state Registered, Idle Mode (state 2) according to [18] in cell 1. 



6.2.2.1.3.2 



Test procedure sequence 



Tables 6.2.2.1.3.2-1 & 6.2.2.1.3.2-2 illustrates the downlink power levels and other changing parameters to be applied 
for the cells at various time instants of the test execution. Row marked "TO" denotes the initial conditions, while rows 
marked "Tl" or "T2" are to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 6.2.2.1.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Remarl< 


TO 


Cell-specific RS EPRE 


dBm 


-60 




Qrxlevmin 


dBm 


-110 




Qrxlevminoffset 


dB 





Default value 


Qhyst 


dB 





Default value 


Treselection 


s 


7 


Cell reselection timer values for EUTRA cells 


Srxlev* 


dB 


50 


Cell 1 is the strongest cell 


T1 


Cell-specific RS EPRE 


dBm 


-120 


Srxlevceii i < 


Srxlev* 


dB 


-10 


Cell 5 becomes the strongest cell 


T2 


Cell-specific RS EPRE 


dBm 


-60 


Srxlevceii i > Srxlevceii 5 > 


Srxlev* 


dB 


50 




cellBarred 


- 


Barred 


Serving cell becomes barred 


Note: Srxlev is calculated in the UE 



Table 6.2.2.1.3.2-2: Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cell 5 


Remark 


TO 


CPICH Ec 


dBm/3.84 MHz 


QFF 


Camping on Cell 1 is guaranteed 


P-CCPCH 


dBm/1.28MHz 


OFF 


Camping on Cell 1 is guaranteed ,for 
TDD 


Qrxlevmin 


dBm 


-79 


For FDD, default value 


Qrxlevmin 


dBm 


-81 


For TDD, default value 


Srxlev* 


dB 


N/A 




T1 


CPICH Ec 


dBm/3.84 MHz 


-70 


Srxlevceii 5 >0,for FDD 


P-CCPCH 


dBm/1.28MHz 


-72 


Srxlevceii 5 >0,for TDD 


Srxlev* 


dB 


9 


Cell 5 becomes the strongest cell or 
the suitable cell 


No te:Srxlev is calculated in the UE 
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Table 6.2.2.1.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


SS re-adjusts the cell-specific reference signal 
level of Cell 1 according to row "11" in table 
6.1 .2.3.3.2-1 & cell 5 power level is set 
according to row "11 " in table 6.1 .2.3.3.2-2. 










2 


Check: does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.8 

indicate that the UE is camped on UTRAN Cell 

5? 

NOTE: The UE performs a RAU procedure 

and the RRC connection is released. 






1 




3 


UE is switched off (performs DETACH at 
switch off) and SS re-adjusts the cell-specific 
reference signal level of Cell 1 according to 
row "TO" in table 6.1 .2.3.3.2-1 & cell 5 power 
level is set according to row "TO" in table 
6.1.2.3.3.2-2. 










4 


UE is switched on 


- 


- 


- 


- 


5 


UE performs registration in cell 1 


- 


- 


- 


- 


6 


SS changes cell 5 power level according to 
row "T1 " in table 6.1 .2.3.3.2-2 Schanges cell 1 
signal level and SIB1 IE ce/ZSarred according 
to row "T2" in table 6.1 .2.3.3.2-1 . 










6A 


SS transmits a Paging message including 
systemlnfoModification 


<— 


Paging 


- 


- 


7 


Check: does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.8 
indicate that the UE is camped on UTRAN Cell 
5? 






2 





Table 6.2.2.1.3.3-4: SystemlnformationBlockTypel for cells 1 (preamble and all steps, Table 

6.2.2.1.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellSelectionlnfo SEQUENCE { 








q-Rxlevmin 


-55(-110dBm) 






q-Rxlevminoffset 


Not present 






1 








schedulinglnformation ::= SEQUENCE (SIZE 
(1 ..maxSI-Message)) OF SEQUENCE {} 


Combination 4 in TS 
36.508 section 4.4.3.1.1 


OnlySIB2,SIB3 
and SIB6 are 
transmitted 




} 









6.2.2.2 



6.2.2.2.1 



Inter-RAT cell selection / From E-UTRA RRCJDLE to GSMJdIe/GPRS 
Packetjdie / Serving cell becomes non-suitable (SservingCeii<0 or barred) 

Test Purpose (TP) 



(1) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { the serving cell becomes non- suitable and there is a suitable GSM neighbour cell 
then { UE selects the suitable GSM neighbour cell } 



(2) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { the serving cell becomes barred and there is a suitable GSM neighbour cell} 
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then { UE selects the suitable GSM neighbour cell } 
} 

6.2.2.2.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.304, clause 4.1, 4.3,5.2.1, 
5.2.3.2, 5.3.1, 43.022, clause 3.6 and TS 45.008, clause 6.4. 

[TS 36.304, clause 4.1] 

With the cell selection, the UE searches for a suitable cell of the selected PLMN and chooses that cell to provide 
available services, further the UE shall tune to its control channel. This choosing is known as "camping on the cell". 

The UE shall, if necessary, then register its presence, by means of a NAS registration procedure, in the tracking area of 
the chosen cell and as outcome of a successful Location Registration the selected PLMN becomes the registered PLMN 
[5]. 

If the UE finds a more suitable cell, according to the cell reselection criteria, it reselects onto that cell and camps on it. 
If the new cell does not belong to at least one tracking area to which the UE is registered, location registration is 
performed. 

[TS 36.304, clause 4.3] 

suitable cell: 

A "suitable cell" is a cell on which the UE may camp on to obtain normal service. Such a cell shall fulfil all the 
following requirements. 

The cell is part of either: 

the selected PLMN, or: 

the registered PLMN, or: 

- a PLMN of the Equivalent PLMN list 

according to the latest information provided by NAS: 

The cell is not barred, see subclause 5.3.1; 

The cell is part of at least one TA that is not part of the list of "forbidden tracking areas for roaming" [4], which 
belongs to a PLMN that fulfils the first bullet above; 

The cell selection criteria are fulfilled, see subclause 5.2.3.2; 

- For a CSG cell, the CSG ID is part of the allowed CSG list of the UE. 

If more than one PLMN identity is broadcast in the cell, the cell is considered to be part of all TAs with TAIs 
constructed from the PLMN identities and the TAG broadcast in the cell. 

barred cell: 

A cell is barred if it is so indicated in the system information [3]. 

[TS 36.304, clause 5.2.1] 

When camped on a cell, the UE shall regularly search for a better cell according to the cell reselection criteria. If a 
better cell is found, that cell is selected. 

[TS 36.304, clause 5.2.3.2] 

The cell selection criterion S is fulfilled when: 



Srxlev > 



Where: 
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SrxleV = Qrxlev 



• (Qrxlevmin + Qrxlevminoffset) " PcOmpCnSation 



Where: 

the signalled value QrxlevminOffset is only applied when a cell is evaluated for cell selection as a result of a periodic 
search for a higher priority PLMN while camped normally in a VPLMN [5]. During this periodic search for higher 
priority PLMN the UE may check the S criteria of a cell using parameter values stored from a different cell of this 
higher priority PLMN. 



Srxlev 



Qr> 



Q, 



rxlevmin 



Q, 



rxlevminoffset 



Pcompensation 



UMAX 



Cell Selection RX level value (dB) 



Measured cell RX level value (RSRP). 



Minimum required RX level in the cell (dBm) 



Offset to the signalled Qrxievmin taken into account in the Srxlev 
evaluation as a result of a periodic search for a higher priority PLMN 
while camped normally in a VPLMN [5] 



max(PEMAx- PuMAx, 0) (dB) 

Maximum TX power level an UE may use when transmitting on the 
uplink in the cell (dBm) defined as PeMAxin [TS 36.101] 
Maximum RF oiitniit nower of the UE WBml accordinn 



Maximum RF output power of the UE (dBm) according to the UE 
power class as defined in [TS 36.101] 



[TS 36.304, clause 5.3.1] 

Cell status and cell reservations are indicated in the SystemlnformationBlockTypel [3] by means of two Information 
Elements: 

cellBarred (IE type: "barred" or "not barred") 

In case of multiple PLMNs indicated in SIBl, this IE is common for all PLMNs 



When cell status is indicated as "not barred" and "not reserved" for operator use, 

All UEs shall treat this cell as candidate during the cell selection and cell re-selection procedures. 

When cell status "barred" is indicated or to be treated as if the cell status is "barred". 

The UE is not permitted to select/re-select this cell, not even for emergency calls. 

The UE shall select another cell according to the following rule: 

- IfthecellisaCSGcell: 

the UE may select another cell on the same frequency if the selection/reselection criteria are fulfilled. 

else 

If the IE intraFreqReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to 
"allowed", the UE may select another cell on the same frequency if re-selection criteria are fulfilled. 

The UE shall exclude the barred cell as a candidate for cell selection/reselection for 300 seconds. 

If the IE intraFreqReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to "not 
allowed" the UE shall not re-select a cell on the same frequency as the barred cell. 

The UE shall exclude the barred cell as a candidate for cell selection/reselection for 300 seconds. 

The cell selection of another cell may also include a change of RAT. 

[TS 43.022, clause 3.6] 
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The MS uses a "path loss criterion" parameter CI to determine whether a cell is suitable to camp on. CI depends on 4 
parameters: 

i) The received signal level (suitably averaged); 

ii) The parameter RXLEV_ACCESS_MIN, which is broadcast as system information, and is related to the 
minimum signal that the operator wants the network to receive when being initially accessed by an MS; 

iii) The parameter MS_TXPWR_MAX_CCH, which is also broadcast as system information, and is the maximum 
power that an MS may use when initially accessing the network; 

iv) The maximum power of the MS. 

The formula for determining CI is given in 3GPP TS 45.008. 

Use of the parameter CI enables the MS to determine whether communication is possible with the network in the 
absence of interference. However because of the possibility of interference degrading the communications, an additional 
safeguard is used. This is to monitor the success rate of the MS in decoding signalling blocks of the paging subchannel. 
If there is a downlink signalling failure, i.e. the success rate drops too low, this indicates probable interference on the 
downlink, and the MS attempts to find another suitable cell. Downlink signalling failure monitoring is specified in 
3GPP TS 45.008. 

In order to optimize cell reselection, additional cell reselection parameters can be broadcast as system information of 
each cell. The cell reselection process employs a parameter C2 which depends on these parameters. 

The parameters used to calculate C2 are as follows: 

i) CELL_RESELECT_OFFSET (see subclause 3.5.2.2); 

ii) PENALTY_TIME; 

When the MS places the cell on the list of the strongest carriers as specified in 3GPP TS 45.008, it starts a timer 
which expires after the PENALTY_TIME. This timer will be reset when the cell is taken off the list. For the 
duration of this timer, C2 is given a negative offset. This will tend to prevent fast moving MSs from selecting the 
cell. 

iii) TEMPORARY_OFFSET; 

This is the amount of the negative offset described in (ii) above. An infinite value can be applied, but a number 
of finite values are also possible. 

The permitted values of these parameters and the way in which they are combined to calculate C2 are defined in 3GPP 
TS 45.008. 

Instead of the parameter C2, a GPRS MS applies the corresponding GPRS parameter if provided. 

[TS 45.008, clause 6.4] 

The path loss criterion parameter CI used for cell selection and reselection is defined by: 

Cl = (A-Max(B,0)) 

where 

A = RLA_C - RXLEV_ACCESS_MIN 

B = MS TXPWR MAX CCH - P 
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except for the class 3 DCS 1 800 MS where: 



B 

RXLEV_ ACCES S_MIN 

system. 

MS TXPWR MAX CCH 



= MS_TXPWR_MAX_CCH + POWER OFFSET - P 

= Minimum received signal level at the MS required for access to the 

= Maximum TX power level an MS may use when accessing the system 
until otherwise commanded. 



= The power offset to be used in conjunction with the MS TXPWR 
MAX CCH parameter by the class 3 DCS 1 800 MS. 
= Maximum RF output power of the MS. 



POWER OFFSET 

P 

All values are expressed in dBm. 
The path loss criterion (3GPP TS 43.022) is satisfied if CI > 0. 
6.2.2.2.3 Test description 

6.2.2.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 24 
UE: 
None. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) according to [18] in cell 1. 

6.2.2.2.3.2 Test procedure sequence 

Tables 6.2.2.2.3.2-1 & 6.2.2.2.3.2-2 illustrates the downlink power levels and other changing parameters to be applied 
for the cells at various time instants of the test execution. Row marked "TO" denotes the initial conditions, while rows 
marked "Tl" or "T2" are to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 6.2.2.2.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Remark 


TO 


Cell-specific RS EPRE 


dBm 


-60 




Qrxlevmin 


dBm 


-110 




Qrxlevminoffset 


dB 





Default value 


Qhyst 


dB 





Default value 


Treselection 


s 


7 


Cell reselection timer values for EUTRA cells 


Srxlev* 


dB 


50 


Cell 1 is the strongest cell 


Tl 


Cell-specific RS EPRE 


dBm 


-120 


Srxlevceii i < 


Srxlev* 


dB 


-10 


Cell 5 becomes the strongest cell 


T2 


Cell-specific RS EPRE 


dBm 


-60 


Srxlevceii i > Srxlevceii 24 > 


Srxlev* 


dB 


50 




cellBarred 


- 


Barred 


Serving cell becomes barred 


Note: Srxlev is calculated in the UE 



Table 6.2.2.2.3.2-2: Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cell 24 


Remark 


TO 


RF Signal Level 


dBm 


OFF 


Camping on Cell 1 is guaranteed 


RXLEV ACCESS MIN 


dBm 


-100 




CI* 


dB 


N/A 




T1 


RF Signal Level 


dBm 


-80 


Srxlevceii 24 > 


CI* 


dB 


20 


Cell 24 becomes the strongest cell 


Note: Srxlev is calculated in the UE 
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Table 6.2.2.2.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


SS re-adjusts the cell-specific reference signal 
level of Cell 1 according to row "11" in table 
6.1 .2.3.3.2-1 & cell 24] power level is set 
according to row "11 " in table 6.1 .2.3.3.2-2. 










2 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.9 

indicate that the UE is camped on GERAN Cell 

24? 

NOTE: The UE performs a TAU procedure and 

the RRC connection is released. 






1 




3 


UE is switched off (performs DETACH at 
switch off) and SS re-adjusts the cell-specific 
reference signal level of Cell 1 according to 
row "TO" in table 6.1 .2.3.3.2-1 & Cell 24 power 
level is set according to row "TO" in table 
6.1.2.3.3.2-2. 










4 


UE is switched on 


- 


- 


- 


- 


5 


UE performs registration on cell 1 


- 


- 


- 


- 


6 


SS changes serving cell signal level and S1B1 
IE ce//6afrec/ according to row "T2" in table 
6.1 .2.3.3.2-1 and transmits a Paging message 
including systemlnfoModification & Cell 24 
power level is set according to row "T1 " in 
table 6.1.2.3.3.2-2. 










7 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.9 
indicate that the UE is camped on GERAN Cell 
24? 






2 





Table 6.2.2.2.3.3-4: SystemlnformationBlockTypel for cells 1 (preamble and all steps, Table 

6.2.2.2.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEOUENCE { 








cellSelectionlnfo SEOUENCE { 








q-Rxlevmin 


-55(-110dBm) 






q-Rxlevminoffset 


Not present 






1 








schedulinglnformation ::= SEOUENCE (SIZE 
(1 ..maxSI-Message)) OF SEOUENCE {} 


Combination 1 in TS 
36.508 section 4.4.3.1.1 


Only SIB2 and 
SIB3 are 
transmitted 




} 









6.2.2.3 

6.2.2.3.1 

(1) 



Inter-RAT Cell selection / From E-UTRA RRCJDLE to HRPD Idle / Serving 
cell becomes non-suitable (Sservingceii<0) 

Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { the serving cell becomes non-suitable {Sservingce 
cell {S>0) } 

then { UE selects the suitable neighbour HRPD cell 



i<0)and there is a suitable neighbour HRPD 
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6.2.2.3.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS36.300, clause 10.1.1.1 and 
TS 36.304, clause 4.1, 5.2.1, and 5.2.3.2. 

[TS 36.300, clause 10.1.1.1] 

Cell selection: 

- The UE NAS identifies a selected PLMN and equivalent PLMNs; 

The UE searches the E-UTRA frequency bands and for each carrier frequency identifies the strongest cell. It 
reads cell system information broadcast to identify its PLMN(s): 

The UE may search each carrier in turn ("initial cell selection") or make use of stored information to shorten 
the search ("stored information cell selection"). 

The UE seeks to identify a suitable cell; if it is not able to identify a suitable cell it seeks to identify an 
acceptable cell. When a suitable cell is found or if only an acceptable cell is found it camps on that cell and 
commence the cell reselection procedure: 

A suitable cell is one for which the measured cell attributes satisfy the cell selection criteria; the cell PLMN 
is the selected PLMN, registered or an equivalent PLMN; the cell is not barred or reserved and the cell is not 
part of a tracking area which is in the list of "forbidden tracking areas for roaming"; 

An acceptable cell is one for which the measured cell attributes satisfy the cell selection criteria and the cell 
is not barred; 

[TS 36.304, clause 4.1] 

With the cell selection, the UE searches for a suitable cell of the selected PLMN and chooses that cell to provide 
available services, further the UE shall tune to its control channel. This choosing is known as "camping on the cell". 

The UE will, if necessary, then register its presence, by means of a NAS registration procedure, in the tracking area of 
the chosen cell and as outcome of a successful Location Registration the selected PLMN becomes the registered PLMN 
[5]. 

If the UE finds a more suitable cell, according to the cell reselection criteria, it reselects onto that cell and camps on it. 
If the new cell does not belong to at least one tracking area to which the UE is registered, location registration is 
performed. 

[TS 36.304, clause 5.2.1] 

When camped on a cell, the UE shall regularly search for a better cell according to the cell reselection criteria. If a 
better cell is found, that cell is selected. 

[TS 36.304, clause 5.2.3.2] 

The cell selection criterion S is fulfilled when: 



Srxlev > 



Where: 



Srxlev = Qrxievmeas - (Qrxlevmin - Qrxlevminoffset) - Pcompensation 



Where: 

the signalled value QrxlevminOffset is only applied when a cell is evaluated for cell selection as a result of a periodic 
search for a higher priority PLMN while camped normally in a VPLMN [5]. During this periodic search for higher 
priority PLMN the UE may check the S criteria of a cell using parameter values stored from a different cell of this 
higher priority PLMN. 
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Srxlev 


Cell Selection RX level value (dB) 


Urxlevmeas 


Measured cell RX level value (RSRP). 


Qrxlevmin 


Minimum required RX level in the cell (dBm) 


Qrxlevminoffset 


Offset to the signalled Qrxlevmin taken into account in the Srxlev 
evaluation as a result of a periodic search for a higher priority PLMN 
while camped normally in a VPLMN [5] 


Pcompensation 


[FFS] 



6.2.2.3.3 Test description 

6.2.2.3.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 is high quality cell on E-UTRA 

- Cell 15 is high quality cell on HRPD 
UE: 

None 
Preamble: 

UE is in state Registered, Idle Mode (state 2) according to [18]. 

6.2.2.3.3.2 Test procedure sequence 

Table 6.2.2.3.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while rows marked "Tl" 
and "T2" are to be applied subsequently. The exact instants on which these values shall be applied are described in the 
texts in this clause. 

Table 6.2.2.3.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Cell 15 


Remark 


TO 


Cell-specific RS EPRE 


dBm 


-60 


- 


Srxlevceii i >0 and Cell 15 is off such that 
camping on Cell 1 is guaranteed 


Srxlev* 


dB 


50 


Tl 


lor/loc 


dB 


- 


-20 


Cell 15 is on 


loc 


dBm/1. 

23 

MHz 


- 


-55 


CPICH Ec/lo(Note1) 


dB 


- 


-20 


T2 


Cell-specific RS EPRE 


dBm 


120 


- 


Srxlevceii i <0 and Cell 15 becomes the 
strongest cell 


Srxlev* 


dB 


-10 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other parameters set by the 
SS. 



Table 6.2.2.3.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS re-adjusts the cell-specific reference signal 
level of Cell 15 according to "11" in 6.2.2.3.3.2- 
1. 










2 


SS re-adjusts the cell-specific reference signal 
level of Cell 1 according to "12" in 6.2.2.3.3.2- 
1. 










3 


Check: Does the UE transmit an Access Probe 
on Cell 15? 


-> 


Access Probe 


1 


P 
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6.2.2.3.3.3 Specific message contents 

Table 6.2.2.3.3.3-1 SystemlnformationBlockTypel to Cell 1 (Preamble and all steps, table 6.2.2.3.3.2-1) 



Derivation path: 36.508 table clause 4.4.3.2 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellSelectionlnfo SEQUENCE { 








q-Rxlevmin 


-55(-110dBm) 






q-Rxlevminoffset 


Not present 






} 








schedulinglnformation ::= SEQUENCE (SIZE 
(1 ..maxSI-Message)) OF SEQUENCE {} 


Combination 6 in TS 
36.508 section 4.4.3.1.1 






} 









Table 6.2.2.3.3.3-2: SystemlnformationBlockTypeS to Cell 1 ^Preamble and all steps, table 6.2.2.3.3.2- 

1) 



Derivation path: 36.508 table 4.4.3.3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType8 ::= SEQUENCE { 








cdma2000-SystemTimelnfo SEQUENCE { 








cdma-EUTRA-Synchronisation 


TRUE 






cdma-SystemTime CHQICE { 








cdma-SynchronousSystemTime 


A valid value as per TS 
36.331 and calculated by 
theSS 






} 








} 








searchWindowSize 


5 






hrpd-Parameters SEQUENCE { 






HRPD 


hrpd-CellReselectionParameters SEQUENCE { 








hrpd-BandClassList SEQUENCE (SIZE 
(1 ..maxCDMA -BandClass)) OF SEQUENCE { 


The same number of 
entries as the configured 
HRPD carriers 






hrpd-BandClass 


Band Class of frequency 
under test 


[Set according to 
specific test case] 




hrpd-CellReselectionPriority 


5 


[3 is applicable 
when HRPD is 
lower priority than 
E-UTRA. 5 is 
applicable when 
HRPD is higher 
priority than E- 
UTRA] 




threshX-High 


FFS 


INTEGER (0..63) 




threshX-Low 


FFS 


INTEGER (0..63) 




} 








t-ReselectionCDMA-HRPD 


[71 


INTEGER (0..7) 




1 








} 








} 









6.2.2.4 Inter-RAT Cell selection / From E-UTRAN RRCJDLE to 1 xRTT idle / Serving 

cell becomes non-suitable (SServingCeIkO) 

6.2.2.4.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { the serving cell becomes non-suitable {SServingCell<0) and 
there is a suitable neighbour IxRTT cell {S>0) } 

then { UE selects the suitable neighbour IxRTT cell } 
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6.2.2.4.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in; TS36.300, clause 10.1.1.1 and 
TS 36.304, clause 4.1, 5.2.1, and 5.2.3.2. 

[TS 36.300, clause 10.1.1.1] 

Cell selection: 

- The UE NAS identifies a selected PLMN and equivalent PLMNs; 

The UE searches the E-UTRA frequency bands and for each carrier frequency identifies the strongest cell. It 
reads cell system information broadcast to identify its PLMN(s): 

The UE may search each carrier in turn ("initial cell selection") or make use of stored information to shorten 
the search ("stored information cell selection"). 

The UE seeks to identify a suitable cell; if it is not able to identify a suitable cell it seeks to identify an 
acceptable cell. When a suitable cell is found or if only an acceptable cell is found it camps on that cell and 
commence the cell reselection procedure: 

A suitable cell is one for which the measured cell attributes satisfy the cell selection criteria; the cell PLMN 
is the selected PLMN, registered or an equivalent PLMN; the cell is not barred or reserved and the cell is not 
part of a tracking area which is in the list of "forbidden tracking areas for roaming"; 

An acceptable cell is one for which the measured cell attributes satisfy the cell selection criteria and the cell 
is not barred; 

[TS 36.304, clause 4.1] 

With the cell selection, the UE searches for a suitable cell of the selected PLMN and chooses that cell to provide 
available services, further the UE shall tune to its control channel. This choosing is known as "camping on the cell". 

The UE will, if necessary, then register its presence, by means of a NAS registration procedure, in the tracking area of 
the chosen cell and as outcome of a successful Location Registration the selected PLMN becomes the registered PLMN. 

If the UE finds a more suitable cell, according to the cell reselection criteria, it reselects onto that cell and camps on it. 
If the new cell does not belong to at least one tracking area to which the UE is registered, location registration is 
performed. 

[TS 36.304, clause 5.2.1] 

When camped on a cell, the UE shall regularly search for a better cell according to the cell reselection criteria. If a 
better cell is found, that cell is selected. 

[TS 36.304, clause 5.2.3.2] 

The cell selection criterion S is fulfilled when: 



Srxlev > 



Where: 



Srxlev = Qrxievmeas - (Qrxlevmin - Qrxlevminoffset) - Pcompensation 



Where: 

the signalled value QrxlevminOffset is only applied when a cell is evaluated for cell selection as a result of a periodic 
search for a higher priority PLMN while camped normally in a VPLMN. During this periodic search for higher priority 
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PLMN the UE may check the S criteria of a cell using parameter values stored from a different cell of this higher 
priority PLMN. 



Srxlev 


Cell Selection RX level value (dB) 


CJrxlevmeas 


Measured cell RX level value (RSRP). 


Qrxlevmin 


Minimum required RX level in the cell (dBm) 


Qrxlevminoffset 


Offset to the signalled Qrxlevmin taken into account in the Srxlev 
evaluation as a result of a periodic search for a higher priority PLMN 
while camped normally in a VPLMN [5] 


Pcompensation 


[FFS] 



Test description 
Pre-test conditions 



6.2.2.4.3 
6.2.2.4.3.1 
System Simulator: 

- Cell 1 is high quahty cell on E-UTRA 
Cell 19 is high quality cell on IxRTT 

UE: 

None. 
Preamble: 

- UE is in state Registered, Idle Mode (state 2) according to [18]. 

6.2.2.4.3.2 Test procedure sequence 

Table 6.2.2.4.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while rows marked "Tl" 
and "T2" are to be applied subsequently. The exact instants on which these values shall be applied are described in the 
texts in this clause. 

Table 6.2.2.4.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Cell 19 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15KHz 


-75 


- 


The power levels are such that camping 
on Cell 1 is guaranteed. 


Tl 


lor/loc 


dB 


- 


-15 


Cell 19 is on 


Pilot Ec/ lor 






-7 


loc 


dBm 


- 


-75 


CPICH Ec/lo(Note1) 


dB 


- 


-22 


T2 


lor/loc 


dB 


- 





Increase pilot power of IxRTT cell such 

that SnonServingCell, Of Coll 1 9 > ThreShixRTT, 

high 


Pilot Ec/ lor 


dB 


- 


-7 


loc 


dBm/1.23 MHz 


- 


-75 


CPICH Ec/lo(Note1) 


dB 


- 


-10 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other parameters set by the 
SS. 



Table 6.2.2.4.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS re-adjusts the cell-specific reference signal 
level of Cell 1 according to row "T2" in Table 
6.2.2.3.3.2-1. 










2 


Check: Does the UE transmit an Access Probe 
on Cell 19? 


-> 


Access Probe 


1 


P 
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6.2.2.4.3.3 Specific message contents 

Table 6.2.2.4.3.3-1 SystemlnformationBlockTypel to Cell 1 (Preamble and all steps, table 6.2.2.4.3.2-1) 



Derivation path: 36.508 table clause 4.4.3.2 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellSelectionlnfo SEQUENCE { 








q-Rxlevmin 


-55(-110dBm) 






q-Rxlevminoffset 


Not present 






} 








schedulinglnformation ::= SEQUENCE (SIZE 
(1 ..maxSI-Message)) OF SEQUENCE {} 


Combination 6 in TS 
36.508 section 4.4.3.1.1 






} 
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Table 6.2.2.4.3.3-2: SystemlnformationBlockTypeS to Cell 1 CPreamble and all steps, table 6.2.2.3.3.2- 

1) 



Derivation path: 36.508 table 4.4.3.3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlocl<Type8 ::= SEQUENCE { 








cdma2000-SystemTimelnfo SEQUENCE { 








cdma-EUTRA-Synchronisation 


TRUE 






cdma-SystemTime CHQICE { 








cdma-SynchronousSystemTime 


A valid value as per TS 
36.331 and calculated by 
theSS 






1 








} 
















oneXRTT-Parameters SEQUENCE {} 


Not present 




HRPD 


oneXRTT-Parameters SEQUENCE { 






1XRTT 


oneXRTT-CSFB-Registrationlnfo SEQUENCE { 








oneXRTT-CSFB-RegistrationAllowed 


FFS 


BQQLEAN 




oneXRTT-RegistrationParameters SEQUENCE 


FFS 






{} 
















} 








oneXRTT-LongCodeState 


FFS 


BIT STRING 
(SIZE (42)) 
QPTIQNAL 




oneXRTT-CellReselectionParameters 








SEQUENCE! 








oneXRTT-BandClassList SEQUENCE (SIZE 








(1 ..maxCDMA -BandClass)) QF SEQUENCE { 


The same number of 
entries as the configured 
1xRTT carriers 






oneXRTT 


BandClass FFS 


ENUMERATED { 
bcO, bc1 , bc2, 
bc3, bc4, bc5, 
bcS, bc7, bc8, 
bc9, bdO, bc11, 
bc12, bc13, bc14, 
bc15, bc16, bc17, 
sparel 4, sparel 3, 
sparel 2, spare11, 
sparel 0, spareQ, 
spares, spare7, 
spares, spareS, 
spare4, spare3, 
spare2, sparel , 




oneXRTT-CellReselectionPriority 


FFS 


[3 is applicable 




threshX-High 


FFS 


INTEGER (0..63) 




threshX-Low 


FFS 


INTEGER (0..63) 




oneXRTT-NeighborCellList SEQUENCE (SIZE 
(1..16))QF SEQUENCE! 


The same number of 
entries as the configured 
1 xRTT neighbor cells 






bandClass 


FFS 


ENUMERATED { 
bcO, bc1 , bc2, 
bc3, bc4, bc5, 
bcS, bc7, bc8, 
bc9, bdO, bc11, 
bc12, bc13, bc14, 
bc15, bdS, bc17, 
sparel 4, sparel 3, 
sparel 2, spare11, 
sparel 0, spare9, 
spares, spare7, 
spares, spareS, 
spare4, spare3, 
spare2, sparel , 
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...I 




frequencyList SEQUENCE (SIZE (1.. 16)) OF 
SEQUENCE! 


FFS 


INTEGER 
(0..2047) 




frequency 


FFS 






cellldList SEQUENCE (SIZE (1.. 16)) OF 
{INTEGER (O.-maxPNOffset) } 


FFS 


INTEGER 
(CmaxPNOffset) 




} 








} 








t-ReselectionCDMA-OneXRTT 


FFS 


INTEGER (0..7), 




} 









6.2.2.5 
6.2.2.5.1 
(1) 



Cell selection / No USIM 
Test Purpose (TP) 



with { UE fitted with no SIM/USIM } 
ensure that { 

when { UE is switched on } 

then { UE camps on a non-LTE cell 



(2) 



with { UE fitted with no SIM/USIM and camped on a non-LTE cell } 
ensure that { 

when { UE is requested to make an emergency call } 

then { UE transmits an RRC CONNECTION REQUEST message } 



6.2.2.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.304, clause 4.1. 

[TS 36.304, clause 4.1] 

A UE which is not equipped with a valid USIM (i.e. no UICC or SIM only), or which shall consider the USIM as 
invalid for EPS services as defined in [15] and [16] (e.g. due to a LR reject #3, #6, #7, #8) shall disable all its E- 
UTRAN capabilities until switching off or the UICC containing the USIM is removed. 



Test description 
Pre-test conditions 



6.2.2.5.3 
6.2.2.5.3.1 
System Simulator: 

- Cell 1 and Cell 5. 
UE: 

The UE is not equipped with a USIM. 
Preamble: 

- The UE is in state Switched OFF (state 1) according to [18]. 
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6.2.2.5.3.2 



Test procedure sequence 

Table 6.2.2.5.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


Wait for 60s for the UE to complete cell 
selection. E-UTRA cell is more powerful than 
UTRA cell 










3 


IVIake the UE initiate an Emergency call. 


- 


- 


- 


- 


4 


Check: Does the UE transmit an RRC 
CONNECTION REOUEST message on Cell 
5? 


-> 


RRC CONNECTION REQUEST 


1,2 


P 


5 


The SS transmits an RRC CONNECTION 
SETUP message on Cell 5. 


<~ 


RRC CONNECTION SETUP 


- 


- 


6 


The UE transmits an RRC CONNECTION 
SETUP COMPLETE message on Cell 5. 


-> 


RRC CONNECTION SETUP 
COMPLETE 


- 


- 


7 


The UE transmits an INITIAL DIRECT 
TRANSFER message on Cell 5. 
This message includes a CM SERVICE 
REOUEST message. 


-> 


INITIAL DIRECT TRANSFER 






8 


The SS transmits a DOWNLINK DIRECT 
TRANSFER message on Cell 5. 
This message includes a CM SERVICE 
ACCEPT message. 


<- 


DOWNLINK DIRECT TRANSFER 






9 


The UE transmits an UPLINK DIRECT 
TRANSFER message on Cell 5. 
This message includes an EMERGENCY 
SETUP message. 


-> 


UPLINK DIRECT TRANSFER 






10 


The SS transmits a DOWNLINK DIRECT 

TRANSFER message on Cell 5. 

This message includes a CALL PROCEEDING 

message. 


<- 


DOWNLINK DIRECT TRANSFER 






11 


The SS transmits a RADIO BEARER SETUP 
message on Cell 5. 


<- 


RADIO BEARER SETUP 


- 


- 


12 


The UE transmits a RADIO BEARER SETUP 
COMPLETE message on Cell 5. 


-> 


RADIO BEARER SETUP 
COMPLETE 


- 


- 


13 


The SS transmits a DOWNLINK DIRECT 
TRANSFER message on Cell 5. 
This message includes an ALERTING 
message. 


<— 


DOWNLINK DIRECT TRANSFER 






14 


The SS transmits a DOWNLINK DIRECT 

TRANSFER message on Cell 5. 

This message includes a CONNECT message. 


<~ 


DOWNLINK DIRECT TRANSFER 






15 


The UE transmits an UPLINK DIRECT 
TRANSFER message on Cell 5. 
This message includes a CONNECT 
ACKNOWLEDGE message. 


-> 


UPLINK DIRECT TRANSFER 







6.2.2.5.3.3 

None. 

6.2.2.6 

6.2.2.6.1 
(1) 



Specific message contents 



Inter-RAT Cell selection / From GSM_ldle/GPRS Packetjdie to E- 
UTRA_RRC_IDLE / Serving cell becomes non-suitable (Sservingceii<0) 

Test Purpose (TP) 



with { UE in GSM/GPRS Registered state and no RR connection } 
ensure that { 

when { the serving cell becomes non- suitable and there is a suitable E-UTRA neighbour cell 
then { UE selects the suitable E-UTRA neighbour cell } 
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(2) 

with { UE in GSM/GPRS Registered state and no RR connection } 
ensure that { 

when { the serving cell becomes barred and there is a suitable E-UTRA neighbour cell} 
then { UE selects the suitable E-UTRA neighbour cell } 
} 

6.2.2.6.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 45.008, clause 6.4 . 



[TS 45.008, clause 6.4] 

The path loss criterion parameter CI used for cell selection and reselection is defined by: 

Cl = (A-Max(B,0)) 

where 

A = RLA_C - RXLEV_ACCESS_MIN 

B = MS_TXPWR_MAX_CCH - P 

except for the class 3 DCS 1 800 MS where: 

B = MS_TXPWR_MAX_CCH + POWER OFFSET - P 

RXLEV_ACCESS_MIN = Minimum received signal level at the MS required for access to the 

system. 

MS_TXPWR_MAX_CCH = Maximum TX power level an MS may use when accessing the system 

until otherwise commanded. 

POWER OFFSET = The power offset to be used in conjunction with the MS TXPWR 

MAX CCH parameter by the class 3 DCS 1 800 MS. 
P = Maximum RF output power of the MS. 

All values are expressed in dBm. 

The path loss criterion (3GPP TS 43.022) is satisfied if CI > 0. 

6.2.2.6.3 Test description 

6.2.2.6.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 24. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 24 according to [18]. 

6.2.2.6.3.2 Test procedure sequence 

Tables 6.2.2.6.3.2-1 & 6.2.2.6.3.2-2 illustrates the downlink power levels and other changing parameters to be applied 
for the cells at various time instants of the test execution. Row marked "TO" denotes the initial conditions after the 
preamble, while rows marked "Tl" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



102 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 6.2.2.6.3.2-1 : Time instances of cell power level and parameter changes for E-UTRA cell 





Parameter 


Unit 


Celll 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-120 


Srxlevceii i < 


Qrxlevmin 


dBm 


-110 




Srxlev* 


dB 


N/A 




T1 


Cell-specific RS EPRE 


dBm/15kHz 


-70 




Srxlev* 


dB 


30 


SrxlevceiM >THRESH E- 
UTRAN high 


Note: Srxlev is calculated in the UE 



Table 6.2.2.6.3.2-2: Time instances of cell power level and parameter changes for GERAN cell 





Parameter 


Unit 


Cell 24 


Remark 


TO 


RF Signal Level 


dBm 


-80 




RXLEV ACCESS MIN 


dBm 


-101 




CI* 


dB 


21 




T1 


RF Signal Level 


dBm 


OFF 




RXLEV ACCESS MIN 


dBm 


-101 




CI* 


dB 


N/A 




Note: CI is calculated in the UE 



Table 6.2.2.6.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS re-adjusts the cell-specific reference signal 
level of Cell 1 according to row "T1" in Table 
6.2.2.6.3.2-1 & cell 24 power level is set 
according to row "T1" in table 6.2.2.6.3.2-2 










2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 1? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 




Note: GERAN cell priority is not allocated, hence it will be considered as the less than all allowed values of 1 to 8. 



6.2.2.6.3.3 

None. 

6.2.2.7 

6.2.2.7.1 
(1) 



Specific message contents 



Inter-RAT Cell selection / From GSM_ldle/GPRS Packetjdie to E- 
UTRA_RRC_IDLE ,when the serving cell is barred. 

Test Purpose (TP) 



with { UE in GSM/GPRS Registered state and no RR connection } 
ensure that { 

when { the serving cell becomes barred and there is a suitable E-UTRA neighbour cell} 
then { UE selects the suitable E-UTRA neighbour cell } 



6.2.2.7.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 45.008, clause 6.4 and 6.6.1, 

&TS 43.022 clause 3.2.1. 



[TS 45.008, clause 6.4] 
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The path loss criterion parameter CI used for cell selection and reselection is defined by: 

CI = (A - Max(B,0)) 

where 

A = RLA_C - RXLEV_ACCESS_MIN 

B = MS_TXPWR_MAX_CCH - P 

except for the class 3 DCS 1 800 MS where: 

B = MS_TXPWR_MAX_CCH + POWER OFFSET - P 

RXLEV_ACCESS_MIN = Minimum received signal level at the MS required for access to the 

system. 

MS_TXPWR_MAX_CCH = Maximum TX power level an MS may use when accessing the system 

until otherwise commanded. 

POWER OFFSET = The power offset to be used in conjunction with the MS TXPWR 

MAX CCH parameter by the class 3 DCS 1 800 MS. 
P = Maximum RF output power of the MS. 

All values are expressed in dBm. 

The path loss criterion (3GPP TS 43.022) is satisfied if CI > 0. 

[TS 45.008, clause 6.6.1] 

The MS shall attempt to decode the full BCCH data of the serving cell at least every 30 seconds or at least as often as 
possible in the case that system information scheduling period exceeds 30 seconds. 

If SI13 is broadcast, the MS supporting change mark in SI13 (See 3GPP TS 44.018) is only required to confirm system 
information on the BCCH of the serving cell if indicated by change mark in SI13. 

[TS 43.022, clause 3.2.1] 

The choice of such a suitable cell for the purpose of receiving normal service is referred to as "normal camping". There 
are various requirements that a cell must satisfy before an MS can perform normal camping on it: 

i) It should be a cell of the selected PLMN or, if the selected PLMN is equal to the last registered PLMN, an 
equivalent PLMN; 

ii) It should not be "barred" (see subclause 3.5.1); 

6.2.2.7.3 Test description 

6.2.2.7.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 24. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 24 according to [18]. 

6.2.2.7.3.2 Test procedure sequence 

Tables 6.2.2.7.3.2-1 & 6.2.2.7.3.2-2 illustrates the downlink power levels and other changing parameters to be applied 
for the cells at various time instants of the test execution. Row marked "TO" denotes the initial conditions after the 
preamble, while rows marked "Tl" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 
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Table 6.2.2.7.3.2-1 : Time instances of cell power level and parameter changes for E-UTRA cell 





Parameter 


Unit 


Celll 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-120 


Srxlevceii i < 


Qrxlevmin 


dBm 


-110 




Srxlev* 


dB 


N/A 




T1 


Cell-specific RS EPRE 


dBm/15kHz 


-70 




Srxlev* 


dB 


30 


SrxlevceiM >THRESH E- 
UTRAN high 


Note: Srxlev is calculated in the UE 



Table 6.2.2.7.3.2-2: Time instances of cell power level and parameter changes for GERAN cell 





Parameter 


Unit 


Cell 24 


Remark 


TO 


RF Signal Level 


dBm 


-80 




RXLEV ACCESS MIN 


dBm 


-101 




CI* 


dB 


21 




T1 


RF Signal Level 


dBm 


-80 




CI* 


dB 


21 




cellBarred 




Barred 




Note: CI is calculated in the UE 



Table 6.2.2.7.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS changes cell 1 power level according to 
row "T1 " in table 6.1 .2.2.7.2-1 &changes cell 
24 signal level and SI2 IE ce//Sarrec/ according 
to row "T1" in table 6.2.2.7.3.2-2. 










2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 1? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 




Note: GERAN cell priority is not allocated, hence it will be considered as the less than all allowed values of 1 to 8. 



6.2.2.7.3.3 Specific message contents 

Table 6.2.2.7.3.3-1 : RACH Control Parameters of SI2, SI3 and SI4 for Cell 24[step 1, Table 6.2.2.7.3.2-3] 



Derivation Path: 51.010-1 clause 40.2.1.1 


Information Element 


Value/remark 


Comment 


Condition 


RACH Control Parameters! 








Cell Barred for Access 


Barred 






} 









Table 6.2.2.7.3.3-2: S1 13 Rest Octets of , SI13 for Cell 24[step 1, Table 6.2.2.7.3.2-3] 



Derivation Path: 51.010-1 clause 40.2.1.1 


Information Element 


Value/remark 


Comment 


Condition 


BCCH CHANGE MARK { 


001 






SI CHANGE FIELD 


0011 






1 
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6.2.3 Inter-RAT cell reselection 

6.2.3.1 Inter-RAT cell reselection / From E-UTRA RRCJDLE to GSMJdIe/GPRS 
Packet_ldle 

6.2.3.1 .1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the higher 
priority inter-RAT (GERAN) frequency for TreselectionRAT } 

then { UE reselects the cell which belongs to the higher priority inter-RAT (GERAN) frequency } 
} 

(2) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the lower 
priority inter-RAT (GERAN) frequency for TreselectionRAT} 

then { UE reselects the cell which belongs to the lower priority inter-RAT (GERAN) frequency } 

} 

6.2.3.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.304, clause 5.2.4.1, 

5.2.4.2 and 5.2.4.5. 

[TS 36.304, clause 5.2.4.1] 

Absolute priorities of different E-UTRAN frequencies or inter-RAT frequencies may be provided to the UE in the 
system information, in the RRCConnectionRelease message, or by inheriting from another RAT at inter-RAT cell 
(re)selection. In the case of system information, an E-UTRAN frequency or inter-RAT frequency may be listed without 
providing a priority (i.e. the field cellReselectionPriority is absent for that frequency). If priorities are provided in 
dedicated signalling, the UE shall ignore all the priorities provided in system information. If UE is in camped on any 
cell state, UE shall only apply the priorities provided by system information from current cell, and the UE preserves 
priorities provided by dedicated signalling unless specified otherwise. When the UE in camped normally state, has only 
dedicated priorities other than for the current frequency, the UE shall consider the current frequency to be the lowest 
priority frequency (i.e. lower than the eight network configured values). The UE shall delete priorities provided by 
dedicated signalling when: 

- the UE enters RRC_CONNECTED state; or 

the optional validity time of dedicated priorities (T320) expires; or 

a PLMN selection is performed on request by NAS [5]. 

NOTE: Equal priorities between RATs are not supported. 

The UE shall only perform cell reselection evaluation for E-UTRAN frequencies and inter-RAT frequencies that are 
given in system information and for which the UE has a priority provided. 

The UE shall not consider any black listed cells as candidate for cell reselection. 

The UE shall inherit the priorities provided by dedicated signalling and the remaining validity time (i.e., T320 in E- 
UTRA, T322 in UTRA and [T3230, FFS] in GERAN), if configured, at inter-RAT cell (re)selection. 

NOTE: The network may assign dedicated cell reselection priorities for frequencies not configured by system 
information. 

[TS 36.304, clause 5.2.4.2] 

When evaluating for reselection purposes cell selection criterion or SnonServingCell,x, the UE shall use parameters 
provided by the serving cell. 
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Following rules are used by the UE to limit needed measurements: 

If Sintrasearch IS seut iu the serviug cell and SservingCeii > Sintiasearch, UE may choose to not perform intra-frequency 
measurements. 

- If SservingCdi <= Sintrasearch, Or Sintrasearch IS not Sent in the Serving Cell UE shall perform intra-frequency 
measurements. 

The UE shall apply the following rules for E-UTRAN inter-frequencies and inter-RAT frequencies which are 
indicated in system information and for which the UE has priority provided as defined in 5.2.4.1: 

For an E-UTRAN inter-frequency or inter-RAT frequency with a reselection priority higher than the 
reselection priority of the current E-UTRA frequency the UE shall perform measurements of higher priority 
E-UTRAN inter-frequency or inter-RAT frequencies according to [10]. 

For an E-UTRAN inter-frequency with an equal or lower reselection priority than the reselection priority of 
the current E-UTRA frequency and for inter-RAT frequency with lower reselection priority than the 
reselection priority of the current E-UTRAN frequency: 

- If Snonmtrasearch IS scnt in the scrving ccU and Sservingceii > S nonmtrasearch UE may choosc not to pcrform 
measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority. 

- If SservingCell <= Snonmtrasearch Or Snonmtrasearch IS HOt SCnt in the SCrving CCll the UE shall perform 

measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority 
according to [10]. 

Where SservingCeii is the Srxlev- value of the serving cell. 

[TS 36.304, clause 5.2.4.5] 

Criteria 1 : the SnonServingCeii.x of a cell on evaluated frequency is greater than Threshx, high during a time interval 
TreselectionRAx; 

Cell reselection to a cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

A cell of a higher priority E-UTRAN frequency or inter-RAT frequency fulfils criteria 1 ; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 

Cell reselection to a cell on a lower priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

No cell on serving frequency or on an equal priority E-UTRAN frequency or on a higher priority E-UTRAN 
frequency or inter-RAT frequency than serving frequency fulfills the criteria 1 ; and 

- SservingCeii < Threshserving, low and the SnonServingCeii.x of a ccU of a lower priority E-UTRAN frequency or inter-RAT 
frequency is greater than Threshx, low during a time interval TreselectionRAx; and 



or if: 



more than 1 second has elapsed since the UE camped on the current serving cell. 



there are no candidate cells for reselection on serving frequency according to 5.2.4.4 or 5.3.1. 



Cell reselection to a cell on an equal priority E-UTRAN frequency shall be based on ranking for Intra-frequency cell 
reselection as defined in sub-clause 5.2.4.6. 

For GERAN, UTRAN, and E-UTRAN, SnonServingCeii.x is the Srxlev-value of an evaluated cell. For UTRAN FDD, Squal 
is higher than 0, as defined in [8]. For cdma2000 RATs, SnonServingCeii.x is equal to FLOOR(-2 x 10 x loglO Ec/Io) in units 
of 0.5 dB, as defined in [18], with Ec/Io referring to the value measured From the evaluated cell. 
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6.2.3.1.3 Test description 

6.2.3.1.3.1 Pre-test conditions 
System Simulator: 

- cell 1 Cell 24 and Cell 25. 
UE: 

None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.2.3.1 .3.2 Test procedure sequence 

Tables 6.2.3.1.3.2-1 & 6.2.3.1.3.2-2 illustrates the downlink power levels and other changing parameters to be applied 
for the cells at various time instants of the test execution. Row marked "TO" denotes the initial conditions, while rows 
marked "Tl" or "T2" are to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 6.2.3.1.3.2-1 : Time instances of cell power level and parameter changes for E-UTRA cells 





Parameter 


Unit 


CelM 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-60 




Qrxlevmin 


dBm 


-106 


Default value 


Qrxlevminoffset 


dB 





Default value 


Qhyst 


dB 





Default value 


Srxlev* 


dB 


46 


Cell 1 is the strongest cell 


s-NonlntraSearch 


dB 


N/A 


Not transmitted 
Default value 


T1 


Cell-specific RS EPRE 


dBm/15kHz 


-70 


SrxlevceiM >0 


Srxlev* 


dB 


36 


Srxlevceii i > Srxlevceii 24 > 


T2 


Cell-specific RS EPRE 


dBm/15kHz 


-100 


Srxlevceii i <20 [threshServingLow] 


Srxlev* 


dB 


6 




Note: Srxlev is calculated in the UE 



Table 6.2.3.1.3.2-2: Time instances of cell power level and parameter changes for GERAN cells 





Parameter 


Unit 


Cell 24 


Cell 25 


Remark 


TO 


RF Signal Level 


dBm 


OFF 


OFF 


Camping on Cell 1 is guaranteed 


RXLEV ACCESS MIN 


dBm 


-101 


-101 




CI* 


dB 


N/A 


N/A 




T1 


RF Signal Level 


dBm 


-80 


OFF 


Srxlevceii 24 > 4[threshX-High] 


CI* 


dB 


21 


N/A 




T2 


RF Signal Level 


dBm 


OFF 


-80 




CI* 


dB 


N/A 


21 


Srxlevceii 25 > 4[threshX-Low] 


Note: CI is calculated in the UE 
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Table 6.2.3.1.3.2-3: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes Cell 1 according to the row 
"T1 " in table 6.2.3.1 .3.2-1 and Cell 24 level 
according to the row "11 " in table 6.2.3.1 .3.2-2. 










2 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.9 

indicate that the UE is camped on GERAN Cell 

24? 

NOTE: The UE performs a RAU procedure 

and the RRC connection is released. 






1 




3 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.9 

indicate that the UE is camped on GERAN Cell 

24? 

NOTE: The UE performs a RAU procedure 

and the RRC connection is released. 






1 




4 


Wait for [5 s]. 


- 


- 


- 


- 


5 


The SS changes Cell 1 according to the row 
"TO" in table 6.2.3.1. 3.2-1 and Cell 24 level 
according to the row "TO" in table 6.2.3.1 .3.2-2 










6 


UE reselects Cell 1 and completes tracking 
area update procedure. 


- 


- 


- 


- 


7 


Wait for [5sl. 


- 


- 


- 


- 


8 


The SS changes Cell 1 according to the row 
"T2" in table 6.2.3.1. 3.2-1 and Cell 25 level 
according to the row "T2" in table 6.2.3.1 .3.2-2. 










9 


Void 


- 


- 


- 


- 


10 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.9 

indicate that the UE is camped on GERAN Cell 

25? 

NOTE: The UE performs a RAU procedure 

and the RRC connection is released. 






2 





6.2.3.1 .3.3 Specific message contents 

Table 6.2.3.1.3.3-1: SystemlnformationBlockTypeS ceW 1 [preamble] 



Derivation Path: 36.508 table 4.4.3.3-2 


Information Element 


Value/remarl< 


Comment 


Condition 


SystemlnformationBlockType3 ::= SEQUENCE { 








cellReselectionServingFreqInfo SEQUENCE { 








s-NonlntraSearch 


Not present 






threshServingLow 


10 


Actual value =20 
dB 




cellReselectlonPriority 


4 


A middle value in 
the range has 
been selected. 




} 








1 
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Table 6.2.3.1.3.3-2: SystemlnformationBlockType? ceW 1 [preamble] 



Derivation Path: 36.508 table 4.4.3.3-6 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type7 ::= SEQUENCE { 








t-ReselectionGERAN 


7 


INTEGER (0..7) 




speedDependentScalingParameters SEQUENCE 
{} 


Not present 






carrierFreqslnfoList SEQUENCE (SIZE 
(L.maxGNFG)) OF SEQUENCE { 


2 elements 






CarrierFreqsGERAN SEQUENCE { 








startingARFCN 


Same as cell 24 






bandlndicator 


Same as cell 24 






followingARFCNs CHOICE { 








equallySpacedARFCNs SEQUENCE { 








arfcn-Spacing 


Same as cell 24 






numberOf FollowingARFCNs 


Same as cell 24 






} 








} 








1 








commonlnfo SEQUENCE { 








geran-CellReselectionPriority 


5 


Greater than 
EUTRA Freq 




ncc-Permitted 


'11111111'B 






q-RxLevMin 


2 


The actual value 

of Qrxlevmin in dBm 

= (IE value* 2)- 
115. 




threshX-High 


2 


Actual value =4 
dB 




threshX-Low 


2 


Actual value =4 
dB 




1 








CarrierFreqsGERAN SEQUENCE { 








StartingARFCN 


Same as cell 25 






bandlndicator 


Same as cell 25 






followingARFCNs CHOICE { 








equallySpacedARFCNs SEQUENCE { 








arfcn-Spacing 


Same as cell 25 






numberOf FollowingARFCNs 


Same as cell 25 






} 








} 








1 








commonlnfo SEQUENCE { 








geran-CellReselectionPriority 


3 


Less than EUTRA 
Freq 




ncc-Permitted 


'11111111'B 






q-RxLevMin 


2 


The actual value 

of Qrxlevmin in dBm 

= (IE value* 2)- 
115. 




threshX-High 


2 


Actual value =4 
dB 




threshX-Low 


2 


Actual value =4 
dB 




1 








1 








} 
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6.2.3.2 Inter-RAT Cell reselection / From GSM_ldle/GPRS Packet_ldle to E-UTRA 

6.2.3.2.1 Test Purpose (TP) 
(1) 

with { UE in GSM/GPRS Registered state and no RR connection } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the higher 
priority inter-RAT E-UTRA cell} 

then { UE reselects the cell which belongs to the higher priority inter-RAT E-UTRA cell } 
} 

6.2.3.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 45.008, clause 10.1.3.3 & TS 
44.018, clause 3.4.1.2.1.1a. 

[TS 45.008, clause 10.1.3.3] 

The algorithm in this subclause shall be used for inter-RAT cell reselection if priority information is available to the MS 
and threshold information is provided by the network. The network shall provide priority information if E-UTRAN 
frequencies are included in the neighbour cell list. The mobile station may apply either priorities broadcast in system 
information or individual priorities received through dedicated signalling. The rules regarding which set of priorities 
shall apply are defined in 3GPP TS 44.018 and 3GPP TS 44.060. 

NOTE: Throughout the specification, the phrase "neighbour cell list" will include also the E-UTRAN Neighbour 
Cell list and/or the GPRS E-UTRANNeighbour Cell list where appropriate. 

If the GPRS 3G Cell Reselection list or the GPRS E-UTRAN Neighbour Cell list include frequencies of other radio 
access technologies, the MS shall, at least every 5 seconds update the value RLA_P for the serving cell and each of the 
at least 6 strongest non serving GSM cells. 

The MS shall then reselect a suitable (see 3GPP TS 25.304 for UTRAN and 3GPP TS 36.304 for E-UTRAN) cell of 
another radio access technology if the criteria below are satisfied. S_non-serving_XXX is the measurement quantity of 
a non-serving inter-RAT cell and XXX indicates the other radio access technology/mode. S_non-serving_XXX is 
defined in subclause 6.6.6. 

Cell reselection to a cell of another inter-RAT frequency shall be performed if any of the conditions below (to be 
evaluated in the order shown) is satisfied: 

The S_non-serving_XXX of one or more cells of a higher priority inter-RAT frequency is greater than 
THRESH_XXX_high during a time interval T_reselection; in that case, the mobile station shall consider the 
cells for reselection in decreasing order of priority and, for cells of the same inter-RAT frequency, in decreasing 
order of S_non-serving_XXX, and reselect the first cell that satisfies the conditions above; 

The value of S_serving is lower than THRESH_serving_low for the serving cell and all measured GSM cells; in 
this case, the mobile station shall consider for reselection the inter-RAT cells in the following order, and reselect 
the first one that satisfies the following criteria: 

cells of a lower priority inter-RAT frequency whose S_non-serving_XXX is greater than 
THRESH_XXX_low during a time interval T_reselection; these cells shall be considered in decreasing order 
of priority and, for cells of the same RAT, in decreasing order of S_non-serving_XXX; 

if no cells satisfy the criterion above, inter-RAT cells for which, during a time interval T_reselection, S_non- 
serving_XXX is higher than S_serving by at least a specific hysteresis H_PRIO; these cells shall be 
considered in decreasing order of S_non-serving_XXX. 

A UTRAN FDD cell shall only be reselected if, in addition to the criteria above, its measured Ec/No value is equal to or 
greater than FDD_Qmin - FDD_Qmin_Offset.. 

Cell reselection to a cell of another radio access technology (e.g. UTRAN or E-UTRAN) shall not occur within [5] 
seconds after the MS has reselected a GSM cell from an inter-RAT cell if a suitable GSM cell can be found. 

If the mobile station applies individual priorities received through dedicated signalling and priority information is 
available only for some inter-RAT frequencies, cells belonging to frequencies for which no individual priority is 
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available or no threshold is broadcast in system information shall not be considered for measurement and for cell re- 
selection. 

If a mobile station in camped normally state (see 3GPP TS 43.022) applies individual priorities received through 
dedicated signalling and no priority is available for the serving cell, the mobile station shall consider any GSM cell 
(including the serving cell) to have lowest priority (i.e. lower than the eight network configured values). 

A mobile station in camped on any cell state (see 3GPP TS 43.022) shall ignore individual priorities received through 
dedicated signalling and shall apply priorities received from the system information of the serving cell while attempting 
to find a suitable cell. If the mobile station supports CS voice services, the MS shall avoid reselecting acceptable (but 
not suitable) E-UTRA cells regardless of the priorities provided in system information. 

NOTE: If the MS is camping on an acceptable cell, individual priorities are not discarded until an event leading to 
their deletion occurs. 

In case of a reselection attempt towards a barred UTRAN cell, the MS shall abandon further reselection attempts 
towards this UTRAN cell as defined by the Tba„ed value on the barred UTRAN cell (see 3GPP TS 25.331). 

NOTE: It is EPS whether a similar requirement should be added in case of a reselection attempt towards a barred 
E-UTRAN cell. 

NOTE: Requirements for cells belonging to "forbidden LAs for roaming" should be included here. 

[TS 44.018, clause 3.4.1.2.1.1a] 

This applies only to a multi-RAT MS supporting E-UTRAN. One or more instances of the Measurement Information 
message or SI2quater message may provide E-UTRAN Neighbour Cell Description information in one or more 
instances of the Repeated E-UTRAN Neighbour Cells IE. This is used to build the E-UTRAN Neighbour Cell list. The 
E-UTRAN Neighbour Cell list may contain up to 8 E-UTRAN frequencies. For each E-UTRAN frequency, zero or 
more E-UTRAN neighbour cells may be specified that are not allowed for cell reselection. The list of not allowed cells 
is defined in the Not Allowed Cells lEs. 

Each EARFCN in each instance of the Repeated E-UTRAN Neighbour Cells IE is added to the E-UTRAN Neighbour 
Cell list in the order in which it is received. 

6.2.3.2.3 Test description 

6.2.3.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 24. 
UE: 

None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 24 according to [18]. 

6.2.3.2.3.2 Test procedure sequence 

Tables 6.2.3.2.3.2-1 & 6.2.3.2.3.2-2 illustrates the downlink power levels and other changing parameters to be applied 
for the cells at various time instants of the test execution. Row marked "TO" denotes the initial conditions, while rows 
marked "Tl" are to be applied subsequently. The exact instants on which these values shall be applied are described in 
the texts in this clause. 
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Table 6.2.3.2.3.2-1 : Time instances of cell power level and parameter changes for E-UTRA cell 





Parameter 


Unit 


CelH 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


OFF 




Qrxlevmin 


dBm 


-110 




Srxlev* 


dB 


N/A 




T1 


Cell-specific RS EPRE 


dBm/15kHz 


-70 




Srxlev* 


dB 


30 


SrxlevceiM >THRESH E- 
UTRAN high 


Note: Srxlev is calculated ir 


theUE 







Table 6.2.3.2.3.2-2: Time instances of cell power level and parameter changes for GERAN cells 





Parameter 


Unit 


Cell 24 


Remark 


TO 


RF Signal Level 


dBm 


-80 


Camping on Cell 24 is guaranteed 


RXLEV ACCESS MIN 


dBm 


-101 




CI* 


dB 


21 




Note: CI is calculated in the UE 



Table 6.2.3.2.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes Cell 1 according to the row 
"11 "in table 6.2.3.2.3.2-1. 


- 


- 


- 


- 


2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7A 
indicate that the UE is camped on E-UTRAN 
Cell 1? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 




Note: GERAN cell priority is not allocated, hence it will be considered as the less than all allowed values of 1 to 8. 



6.2.3.2.3.3 Specific message contents 

Table 6.2.3.2.3.3-1 Repeated E-UTRAN Neighbour Cells struct of SI2Quarter for Cell 24[Preamble] 



Derivation Path: 36.508 table FFS 


Information Element 


Value/remark 


Comment 


Condition 


Repeated E-UTRAN Neighbour Cells ::= 
SEOUENCE{ 








EARFCN 


Same as cell 1 


This field specifies 
the E-UTRA Absolute 
Radio Frequency 
Channel Number as 
defined in 
3GPPTS 36.104. 




Measurement Bandwidth 


Same as cell 1 






E-UTRAN PRIORITY 


'100'B 


Same as cell 1 




THRESH E-UTRAN high 


'0001 0'B 


Actual value =4 dB 




THRESH E-UTRAN low 


'0001 0'B 


Actual value =4 dB 




E-UTRAN QRXLEVMIN 


FFS 






} 









6.2.3.3 
6.2.3.3.1 

(1) 



Inter-RAT cell reselection / From UTRA_ldle to E-UTRA RRC_IDLE 
Test Purpose (TP) 



with { UE in UTRA_Idle state } 
ensure that { 

when { UE detects the cell re- selection criteria are met for the cell which belongs to the lower 
priority inter-RAT E-UTRA cell} 
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then { UE reselects the cell which belongs to the lower priority inter-RAT E-UTRA cell } 
} 

(2) 

with { UE in UTRA_Idle state } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the higher 
priority inter-RAT E-UTRA cell} 

then { UE reselects the cell which belongs to the higher priority inter-RAT E-UTRA cell } 
} 

6.2.3.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 25.304, clause 5.2.6.1.2a and 
5.2.6.1.4a. 

[TS 25.304, clause 5.2.6.1.2a] 

If the UE has received absolute priority information for inter-RAT layers, the UE shall follow these rules: 

The UE shall perform measurements of inter-RAT layers with a priority higher than the priority of the current 
serving cell. 

NOTE: The rate of these measurements may vary depending on whether Srxlev and Squal of the serving cell are 
above or below Sp„ontysearchi and Spri„itysearch2- This is specified in [10]. 

For inter-RAT layers with a priority lower than the priority of the current serving cell: 

- If SrxlevservingCeii > Spnoritysearchi and SqualservingCeii > Sprioritysearch2 the UE may choosc uot to perform 
measurements of inter-RAT layers of lower priority. 

- If SrxlevservingCeii <= Sprforitysearchi Or SqualservingCeii <= Spnontysearch2 Ac UE shall perform measurcmcuts of 
inter-RAT layers of lower priority. 

[TS 25.304, clause 5.2.6.1.4a] 

Absolute priorities of different absolute priority layers may be provided to the UE. The following cell reselection 
criteria are used for inter-frequency cells if absolute priority information for inter-frequency is available to the UE, and 
inter-RAT cells if absolute priority information for inter-RAT is available to the UE. 



The following definitions apply: 

Criterion 1 : the Srxlev„onServingCeii,x of a cell on an evaluated higher absolute priority layer is greater than 
Threshx.high during a time interval Treselection; 



- Criterion 3: SrxlevservmgCeii < Threshservmgjow or Squal servmgCeii < and the SrxleVnonServmgCeii.x of a cell on an 
evaluated lower absolute priority layer is greater than Thresh^jow during a time interval Treselection; 

Cell reselection to a cell on a higher absolute priority layer than the camped frequency shall be performed if criterion 1 
is fulfilled. 



Cell reselection to a cell on a lower absolute priority layer than the camped frequency shall be performed if criterion 3 is 
fulfilled. 

If more than one cell meets the above criteria, the UE shall reselect the cell with the highest SrxleVnnnServingCeii.x among 
the cells meeting the criteria on the highest absolute priority layer. 

The UE shall not perform cell reselection to cells for which the cell selection criterion S is not fulfilled. 
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The UE shall not perform cell reselection until more than 1 second has elapsed since the UE camped on the current 
serving cell. 



Test description 
Pre-test conditions 



6.2.3.3.3 
6.2.3.3.3.1 
System Simulator: 
- Cell 1 and Cell 5. 

Cell 1 suitable neighbour E-UTRA cell 

- Cell 5 UTRA serving cell 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 5 according to [5]. 

6.2.3.3.3.2 Test procedure sequence 

Table 6.2.3.3.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while row 
marked "Tl", "T2" and "T3" are to be applied subsequently. The exact instants on which these values shall be applied 
are described in the texts in this clause. 

Table 6.2.3.3.3.2-1 : Time instances of cell power level and parameter changes for E-UTRA cell 





Parameter 


Unit 


CelM 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-97 




Qrxlevmin 


dBm 


-106 


Default value 


Srxlev* 


dB 


9 




T1 


Cell-specific RS EPRE 


dBm/15kHz 


-85 




Srxlev* 


dB 


21 


Srxlev = Cell-specific RS EPRE - 
qRxLevMinEUTRA 

S nonServinqCell, Cein > ThreSh CellUow 


T2 


Cell-specific RS EPRE 


dBm/15kHz 


"Off" 


Power level "Off" is defined in 
TS36.508 Table 6.2.2.1-1. 


T3 


Cell-specific RS EPRE 


dBm/15kHz 


-80 




Srxlev* 


dB 


26 


Srxlev = Cell-specific RS EPRE - 
qRxLevMinEUTRA 

S nonServingCell, Cein > Thresh Cein.high 


Note: Srxlev is calculated in the UE 
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Table 6.2.3.3.3.2-2: Time instances of cell power level and parameter changes for UTRA cell 





Parameter 


Unit 


Cell 5 


Remark 


TO 


CPICH_Ec 


dBm/3.84 MHz 


-60 


The power levels are such that 
camping on Cell 5 is guaranteed. 


P-CCPCH 


dBm/1.28MHz 


-62 


The power levels are such that 
camping on Cell 5 is guaranteed. 
For TDD 


Qrxlevmin (FDD) 


dBm 


-79 


Default value 


Qrxlevmin(TDD) 


dBm 


-81 


Default value 


Srxlev* 


dB 


19 




T1 


CPICH Ec 


dBm/3.84 IVIHz 


-90 




P-CCPCH 


dBm/1.28MHz 


-92 




Srxlev* 


dB 


-11 


SrxleVServinqCell < ThrOSh Servinq.low 


T2 


CPICH Ec 


dBm/3.84 MHz 


-60 




P-CCPCH 


dBm/1.28MHz 


-62 




Srxlev* 


dB 


19 




T3 


CPICH Ec 


dBm/3.84 MHz 


-70 




P-CCPCH 


dBm/1.28MHz 


-72 




Srxlev* 


dB 


9 




Note : Srxlev is calculated in the UE 



Table 6.2.3.3.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes Cell 1 and Cell 5 levels 
according to the row "T1" in table 6.2.3.3.3.2-1 
and table 6.2.3.3.3.2-2. 










2 


Check: does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.7A 

indicate that the UE is camped on E-UTRAN 

CelM? 

NOTE: The UE performs a TAU procedure and 

the RRC Connection is released. 






1 




3 


The SS changes Cell 1 and Cell 5 levels 
according to the row "T2" in table 6.2.3.3.3.2-1 
and table 6.2.3.3.3.2-2. 










4 


The UE reselects Cell5 and camp on Cell5. 


- 


- 


- 


- 


5 


The SS changes the E-UTRA cell priority 
broadcast in system information. 


- 


- 


- 


- 


6 


Notify UE change of System Information. 


<- 


PAGING TYPE 1 


- 


- 


7 


The SS changes Cell 1 and Cell 5 levels 
according to the row "T3" in table 6.2.3.3.3.2-1 
and table 6.2.3.3.3.2-2. 










8 


Check: does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7A 
indicate that the UE is camped on E-UTRAN 
CelM? 






2 
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6.2.3.3.3.3 Specific message contents 

Table 6.2.3.3.3.3-1 : System Information Block type 19 for Cell 5 (preamble, Table 6.2.3.3.3.2-3) 



Derivation Path : 34. 1 08 table FFS 


Information Element 


Value/remark 


Comment 


Condition 


SyslnfoType19 ::= SEQUENCE { 








utra-PrioritylnfoList ::= SEQUENCE { 








utra-ServingCell ::= SEQUENCE { 








priority 


[41 






s-PrioritySearcli1 


[8{16dB)] 






s-PrioritySearcli2 


Not present 






threshServingLow 


[4 (8 dB)] 






1 








utran-FDD-FrequencyList 


Not present 




UTRA- 
FDD 


utran-TDD-FrequencyList 


Not present 




UTRA- 
TDD 


} 








gsm-PrioritylnfoList 


Not present 






eutra-FrequencyAndPrioritylnfoList ::= SEQUENCE 
(SIZE (1..maxNumEUTRAFreqs) OF SEQUENCE { 


1 entry 






earfcn [1 ] 


Same downlink EARFCN 
as used for Cell 1 






measurementBandwidth [1] 


Not present 






priority [1] 


[31 






qRxLevMJnEUTRA[1] 


[-60(-120dBm)l 






threshXliigh[1] 


[16(32dB)] 






threshXlow[1] 


[10{20dB)] 






eutra-blackListedCellList [1] 


Not present 






eutraDetection [1] 


[TRUE] 






1 








} 








Note: GERAN cell priority is not allocated, hence it will be considered as the less than all allowed values of to 
7. 
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Table 6.2.3.3.3.3-2: System Information Block type 19 for Cell 5 (step 5, Table 6.2.3.3.3.2-3) 



Derivation Path : 34. 1 08 table FFS 


Information Element 


Value/remark 


Comment 


Condition 


SyslnfoType19 ::= SEQUENCE { 








utra-PriorityinfoLJst ::= SEQUENCE { 








utra-ServingCell ::= SEQUENCE { 








Priority 


[4] 






s-PrioritySearcli1 


[8{16dB)] 






s-PrioritySearcli2 


Not present 






threshServingLow 


[4 (8 dB)] 






} 








utran-FDD-FrequencyList 


Not present 




UTRA- 
FDD 


utran-TDD-FrequencyList 


Not present 




UTRA- 
TDD 


} 








gsm-PrioritylnfoList 


Not present 






eutra-FrequencyAndPrioritylnfoList ::= SEQUENCE 
(SIZE (1..maxNumEUTRAFreqs) OF SEQUENCE { 


1 entry 






earfcn [1 ] 


Same downlink EARFCN 
as used for Cell 1 






measurementBandwidth [1] 


Not present 






priority [1] 


[5] 






qRxLevMinEUTRA[1] 


[-60(-120dBm)] 






threshXliigh[1] 


[16(32dB)] 






threshXlow[1] 


[10(20dB)l 






Eutra-blacl<ListedCellList [1] 


Not present 






eutraDetection [1] 


[TRUE] 






} 








1 








Note: GERAN cell priority is not allocated, hence it will be considered as the less than all allowed values of to 
7. 



Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 



Table 6.2.3.3.3.3-3: PAGING TYPE 1 (step 6, Table 6.2.3.3.3.2-3) 



Derivation path: 34.108 clause 9.1.1 


Information Element 


Value/Remark 


Comment 


Condition 


PagingTypel ::= SEQUENCE { 








pagingRecordList 


Not present 






bcch-Modificationlnfo ::= SEQUENCE { 








mib-ValueTag 


Set to (Current IVIIB 
value tag + 1) 






Bcch-ModificationTime 


Not present 






1 








laterNonCriticalExtensions SEQUENCE {} 


Not present 






} 









Table 6.2.3.3.3.3-4:SystemlnformationBlockType3 \or Cell 1 (preamble, Table 6.2.3.3.3.2-3) 



Derivation path: 36.508 table 4.4.3.3-2 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType3 ::= SEQUENCE { 








cellReselectionServingFreqInfo SEQUENCE { 








CellReselectionPriority 


3 






} 








} 









ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



118 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 6.2.3.3.3.3-5:SystemlnformationBlockType3 ior Cell 1(step 5, Table 6.2.3.3.3.2-3) 



Derivation path: 36.508 table 4.4.3.3-2 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlocl<Type3 ::= SEQUENCE { 








cellReselectionServingFreqInfo SEQUENCE { 








CellReselectionPriority 


5 






} 








} 









Table 6.2.3.3.3.3-6:SystemlnformationBlockType6 \or Cell 1 (preamble, Table 6.2.3.3.3.2-3) 



Derivation path: 36.508 table 4.4.3.3-5 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType6 ::= SEQUENCE { 








CarrierFreqListUTRA-FDD SEQUENCE (SIZE 
(1..maxUTRA-FDD-Carrier)) QF SEQUENCE { 






UTRA-FDD 


carrierFreq[n] 


Same as cell 5 






cellReselectionPriority[n] 


4 






} 








CarrierFreqListUTRA-TDD SEQUENCE (SIZE 
(1..maxUTRA-TDD-Carrier)) QF SEQUENCE { 






UTRA-TDD 


carrierFreq[n] 


Same as cell 5 






cellReselectionPriority[n] 


4 






} 








} 









6.2.3.5 
6.2.3.5.1 

(1) 



Inter-RAT cell reselection / From E-UTRA RRC_IDLE to UTRA_ldle 
Test Purpose (IP) 



with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE detects the cell re- selection criteria are met for the neighbour cell which belongs to 
the higher priority UTRAN frequency } 

then { UE reselects the UTRA cell } 
} 

6.2.3.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.304, clause 5.2.4.5. 

[TS 36.304, clause 5.2.4.5] 

Criteria 1 : the SnonServingCeii.x of a cell on evaluated frequency is greater than Threshx, high during a time interval 
TreselectionRAx; 

Cell reselection to a cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

A cell of a higher priority E-UTRAN frequency or inter-RAT frequency fulfils criteria 1 ; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 



For GERAN, UTRAN, and E-UTRAN, S 



nonServingi 



ceii.x is the Srxlev-value of an evaluated cell. 
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6.2.3.5.3 Test description 

6.2.3.5.3.1 Pre-test conditions 
System Simulator: 

2 cells, one E-UTRA and one UTRA cell and different location areas: 

- Cell 1 E-UTRA serving cell 

Cell 5 suitable neighbour UTRA cell 

The parameters settings and power levels for Cell 1 and Cell 5 are selected according to [18], [5] so that camping 
on Cell 1 is guaranteed (utra priority is higher than serving and S nonServingCeii, ceiis < Thresh ceiis.iow)- 

UE: 

None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.2.3.5.3.2 Test procedure sequence 

Table 6.2.3.5.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while row 
marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are described in 
the texts in this clause. 

Table 6.2.3.5.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 5 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-85 


- 


The power levels are such that 
camping on Cell 1 is guaranteed. 


CPICH Ec 


dBm/3.84 MHz 


- 


[-89] 


S nonServinqCell, Cell5 < ThreSh Cell 5,low 


T1 


Cell-specific RS EPRE 


dBm/15kHz 


-85 






CPICH Ec 


dBm/3.84 MHz 


- 


[-65] 


S nonServinqCell, Cells > Thresh Cell 5,hiqh 



Table 6.2.3.5.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes Cell 1 and Cell 5 levels 
according to the row "11 " in table 6.2.3.5.3.2-1 . 


- 


- 


- 


- 


2 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.8 

indicate that the UE is camped on UTRAN Cell 

5? 

NOTE: The UE performs an RAU procedure 

and the RRC connection is released. 






1 





6.2.3.5.3.3 



Specific message contents 

Table 6.2.3.5.3.3-1 : Conditions for specific message contents 
in Tables 6.2.3.5.3.3-2 and 6.2.3.5.3.3-3 



Condition 


Explanation 


CelM 


This condition applies to system information transmitted on Cell 1 . 


Cells 


This condition applies to system information transmitted on Cell 5. 
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Table 6.2.3.5.3.3-2: SystemlnformationBlockTypel for Cell 1 (preamble and all steps, Table 

6.2.3.5.3.2-2) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type1 ::= SEQUENCE { 








schedulinginfoLlst ::= SEQUENCE (SIZE (1..maxSI- 
Message))QF SEQUENCER 


Combination 4 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB6 are 
transmitted 




} 









Table 6.2.3.5.3.3-3: SystemlnformationBlockTypeS ior Cell 1 (preamble and all steps, Table 

6.2.3.5.3.2-2) 



Derivation Path: 36.508 table 4.4.3.3-5 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType6 ::= SEQUENCE { 








carrierFreqLlstUTRA-FDD SEQUENCE (SIZE 
(1 ..maxUTRA-FDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA- 
FDD 


cellReselectionPriority 


5 


Higher priority 
than E-UTRA 




} 








carrierFreqListUTRA-TDD SEQUENCE (SIZE 
(1 ..maxUTRA-TDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA- 
TDD 


cellReselectionPriority 


5 


Higher priority 
than E-UTRA 




} 








} 









6.2.3.6 



6.2.3.6.1 



Inter-RAT cell reselection / From E-UTRA RRC_IDLE to UTRA_ldle 
according to RAT priority provided by dedicated signalling 

Test Purpose (TP) 



(1) 

with { UE in E-UTRA RRC_IDLE state having received an RRCConnectionRelease message including a 
cellReselectionPriority } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the higher 
priority RAT } 

then { UE reselects the cell which belongs to the higher priority RAT } 
} 

(2) 

with { UE in E-UTRA RRC_IDLE state having received an RRCConnectionRelease message including a 
cellReselectionPriority } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the lower 
priority RAT } 

then { UE reselects the cell which belongs to the lower priority RAT } 



(3) 

with { UE in E-UTRA RRC_IDLE state having received an RRCConnectionRelease message including a 
cellReselectionPriority } 
ensure that { 

when { T320 expires } 

then { UE reselects a cell by applying the cellReselectionPriority broadcast in the system 
information | 
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(4) 

with { UE in E-UTRA RRC_IDLE state, and reselection priorities have been provided in dedicated 
signalling } 
ensure that { 

when { T32 has not expired } 

then { The UE shall ignore all the priorities provided in system information, and not perform 
cell reselection evaluation for E-UTRAN frequencies and inter-RAT frequencies for which the UE 
doesn't have a priority provided } 
} 

6.2.3.6.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.304, clause 5.2.4.1 and 
5.2.4.5 and TS 36.331, clause 5.3.8.3 and 5.3.8.4. 

[TS 36.304, clause 5.2.4.1] 

Absolute priorities of different E-UTRAN frequencies or inter-RAT frequencies may be provided to the UE in the 
system information, in the RRCConnectionRelease message, or by inheriting from another RAT at inter-RAT cell 
(re)selection. In the case of system information, an E-UTRAN frequency or inter-RAT frequency may be listed without 
providing a priority (i.e. the field cellReselectionPriority is absent for that frequency). If priorities are provided in 
dedicated signalling, the UE shall ignore all the priorities provided in system information. If UE is in camped on any 
cell state, UE shall only apply the priorities provided by system information from current cell, and the UE preserves 
priorities provided by dedicated signalling unless specified otherwise. When the UE in camped normally state, has only 
dedicated priorities other than for the current frequency, the UE shall consider the current frequency to be the lowest 
priority frequency (i.e. lower than the eight network configured values). While the UE is camped on a suitable CSG 
cell, the UE shall always consider the current frequency to be the highest priority frequency (i.e. higher than the eight 
network configured values), irrespective of any other priority value allocated to this frequency. The UE shall delete 
priorities provided by dedicated signalling when: 

- the UE enters RRC_CONNECTED state; or 

the optional validity time of dedicated priorities (T320) expires; or 

a PLMN selection is performed on request by NAS [5]. 

NOTE: Equal priorities between RATs are not supported. 

The UE shall only perform cell reselection evaluation for E-UTRAN frequencies and inter-RAT frequencies that are 
given in system information and for which the UE has a priority provided. 

The UE shall not consider any black listed cells as candidate for cell reselection. 

The UE shall inherit the priorities provided by dedicated signalling and the remaining validity time (i.e., T320 in E- 
UTRA, T322 in UTRA and T3230 in GERAN), if configured, at inter-RAT cell (re)selection. 

NOTE: The network may assign dedicated cell reselection priorities for frequencies not configured by system 
information. 

[TS 36.304, clause 5.2.4.5] 

Criteria 1 : the SnonServingCdi.x of a cell on evaluated frequency is greater than Thresh^^ high during a time interval 
TreselectionRAx; 

Cell reselection to a cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

A cell of a higher priority E-UTRAN frequency or inter-RAT frequency fulfils criteria 1 ; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 

Cell reselection to a cell on an equal priority E-UTRAN frequency shall be based on ranking for Intra-frequency cell 
reselection as defined in sub-clause 5.2.4.6. 

Cell reselection to a cell on a lower priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 
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No cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency fulfills the 
criteria 1; and 

No cell on serving frequency or on an equal priority E-UTRAN frequency fulfills the criteria in 5.2.4.6; and 

SservingCeii < Thrcshserving, low ^ud the SnonServingCeii.x of a ccll of a lowcr priority E-UTRAN frequency or inter-RAT 
frequency is greater than Threshx, low during a time interval TreselectionRAx; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 



For GERAN, UTRAN, and E-UTRAN, S„o„seivmgCeii.x is the Srxlev-value of an evaluated cell. For UTRAN FDD, Squal 
is higher than 0, as defined in [8]. For cdma2000 RATs, SnonServingCeii.x is equal to -FLOOR(-2 x 10 x loglO Ec/Io) in 
units of 0.5 dB, as defined in [18], with Ec/Io referring to the value measured from the evaluated cell. 

For cdma2000 RATs, Threshx, high and Threshx, low are equal to -1 times the values signalled for the corresponding 
parameters in the system information. 

In all the above criteria the value of TreselectionRAx is scaled when the UE is in the medium or high mobility state as 
defined in subclause 5.2.4.3.1. If more than one cell meets the above criteria, the UE shall reselect a cell ranked as the 
best cell among the cells meeting the criteria on the highest priority frequencies or the highest priority RAT if the 
highest priority RAT is E-UTRA according to criteria defined in 5.2.4.6. 

[TS 36.331, clause 5.3.8.3] 

The UE shall: 

1> delay the following actions defined in this sub-clause 60 ms from the moment the RRCConnectionRelease 
message was received or optionally when lower layers indicate that the receipt of the RRCConnectionRelease 
message has been successfully acknowledged, whichever is earlier; 

1> if the RRCConnectionRelease message includes the idleModeMobilityControlInfo: 

2> store the cell reselection priority information provided by the idleModeMobilityControlInfo; 
2> if the t320 is included: 

3> start timer T320, with the timer value set according to the value of t320; 

1> else: 

2> apply the cell reselection priority information broadcast in the system information; 

1> if the releaseCause received in the RRCConnectionRelease message indicates 'loadBalancingTAURequired': 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'load 
balancing TAU required'; 

1> else: 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'; 
[TS 36.331, clause 5.3.8.4] 
The UE shall: 

1> if T320 expires: 

2> if stored, discard the cell reselection priority information provided by the idleModeMobilityControlInfo or 
inherited from another RAT; 

2> apply the cell reselection priority information broadcast in the system information; 
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6.2.3.6.3 Test description 

6.2.3.6.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 (E-UTRA) and Cell 5(UTRA). 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

6.2.3.6.3.2 Test procedure sequence 

Table 6.2.3.6.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl", "T2", "T3", "T4" and "T5" are to be applied subsequently. The exact instants on which these 
values are applied are described in the texts in this clause. 

Table 6.2.3.6.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 5 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-70 


- 


The power level values are 
assigned to satisfy Srxlevceii i > 
and Srxlevceii5< 0. 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-115 


PCCPCH 
RSCP 


dBm/1.2 
8MHz 




-115 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-90 


- 


The power level values are 
assigned to satisfy Threshx,high < 
Srxlevceii 5. 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-65 


PCCPCH 
RSCP 


dBm/1.2 
8MHz 




-65 


T2 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-70 


- 


The power level values are such 
that camping on Cell 1 is 
guaranteed. 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-115 


PCCPCH 
RSCP 


dBm/1.2 
8MHz 




-115 


T3 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-115 


- 


The power level values are 
assigned to satisfy Srxlevceii i < 
Threshserving, lowand Threshx.iow < 
Srxlevceii 5- 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-65 


PCCPCH 
RSCP 


dBm/1.2 
8MHz 




-65 


T4 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-70 


- 


The power level values are such 
that camping on Cell 1 is 
guaranteed. 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-115 


PCCPCH 
RSCP 


dBm/1.2 
8MHz 




-115 


T5 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-70 


- 


The power level values are 
assigned to satisfy Srxlevceii i > 
Threshserving, lowand Threshx.high < 
Srxlevceii 5. 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-65 


PCCPCH 
RSCP 


dBm/1.2 
8MHz 




-65 
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Table 6.2.3.6.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits an RRCConnectionRelease 
message with an idleModeMobilityControllnfo 
including a cellReselectionPriority on Cell 1. 


<~ 


RRCConnectionReiease 






2 


The SS changes Cell 5 level according to row 
"T1" in table 6.2.3.6.3.2-1. 


- 


- 


- 


- 


3 


Check: Does the UE transmit an RRC 
CONNECTION REOUEST message within the 
next 30s on Cell 5? 


-> 


RRC CONNECTION REQUEST 


4 


F 


4 


The SS transmits a Paging message including 
matched identity on Cell 1 . 


<— 


Paging 


- 


- 


5 


UE transmit an RRCConnectionRequest 
message on Cell 1. 


-> 


RRCConnectionRequest 


- 


- 


6 


The SS transmits an RRCConnectionSetup 
message on Cell 1. 


<- 


RRCConnectionSetup 


- 


- 


7 


The UE transmits an 
RRCConnectionSetupComplete on Cell 1 . 


-> 


RRCConnectionSetupComplete 


- 


- 


8 


The SS transmits an RRCConnectionRelease 
message with an idleModeMobilityControilnfo 
including a ceilReselectionPriority on Cell 1. 


<~ 


RRCConnectionRelease 






9 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.8 

indicate that the UE is camped on UTRAN Cell 

5? 

NOTE: The UE performs an RAU procedure 

and the RRC connection is released. 






1 




10 


The SS changes Cell 1 and Cell 5 parameters 
according to the row "T2" in table 6.2.3.6.3.2-1 . 


- 


- 


- 


- 


11 


Generic test procedure in TS 36.508 
subclause 6.4.2.7 is performed on Cell 1 . 
NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 










12 


The SS changes Cell 1 and Cell 5 parameters 
according to the row "T3" in table 6.2.3.6.3.2-1 . 


- 


- 


- 


- 


13 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.8 

indicate that the UE is camped on UTRAN Cell 

5? 

NOTE: The UE performs an RAU procedure 

and the RRC connection is released. 






2 




14 


The SS changes Cell 1 and Cell 5 parameters 
according to the row "T4" in table 6.2.3.6.3.2-1 . 


- 


- 


- 


- 


15 


Generic test procedure in TS 36.508 
subclause 6.4.2.7 is performed on Cell 1 . 
NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 










16 


The SS changes Cell 1 and Cell 5 parameters 
according to the row "T5" in table 6.2.3.6.3.2-1 . 


- 


- 


- 


- 


17 


Wait for 5 minutes from step 15 to ensure that 
T320 expires. 


- 


- 


- 


- 


18 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.8 
indicate that the UE is camped on UTRAN Cell 
5? 






3 
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6.2.3.6.3.3 



Specific message contents 



Table 6.2.3.6.3.3-1 : SystemlnformationBlockTypel for Cell 1 (preamble and all steps, Table 

6.2.3.6.3.2-2) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type1 ::= SEQUENCE { 








SchedulinglnfoList SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 4 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 
and SIB6 are 
transmitted 




1 









Table 6.2.3.6.3.3-2: Systemlnformation BlockTypeS ior Cell 1 (preamble and all steps, Table 

6.2.3.6.3.2-2) 



Derivation Path: 36.508 table 4.4.3.3-2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType3 ::= SEQUENCE { 








cellReselectionServingPreqinfo SEQUENCE { 








threshServingLow 


1 






1 








} 









Table 6.2.3.6.3.3-3: SystemlnformationBlockTypeS ior Cell 1 (preamble and all steps. Table 

6.2.3.6.3.2-2) 



Derivation path: 36.508 table 4.4.3.3-5 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypee ::= SEQUENCE { 








carrierFreqLlstUTRA-FDD SEQUENCE (SIZE 
(1 ..maxUTRA-FDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA-FDD 


carrierFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


5 






p-MaxUTRA[1] 









} 








carrierFreqLlstUTRA-TDD SEQUENCE (SIZE 
(1..maxUTRA-TDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA-TDD 


carrierFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


5 






p-MaxUTRA[1] 









1 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 
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Table 6.2.3.6.3.3-4: RRCConnection Release (Step 1, Table 6.2.3.6.3.2-2) 



Derivation path: 36.508 table 4.6.1-15 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE { 








rrcConnectionRelease-r8 SEQUENCE { 








IdleModeMobilityControllnfo ::= SEQUENCE { 








freqPriorityListEUTRA SEQUENCE (SIZE (1.. 
maxFreq)) OF SEQUENCE { 


1 entry 






carrierFreq[1] 


Same downlinl< 
EARFCN as used for 
Celll 






cellReselectionPriority[1 ] 


4 






1 








freqPriorityListGERAN 


Not present 






freqPriorityListUTRA-FDD 


Not present 




UTRA-TDD 


freqPriorityListUTRA-TDD 


Not present 




UTRA-FDD 


bandClassPriorityListHRPD 


Not present 






bandClassPriorityListI XRTT 


Not present 






1320 


Not present 






} 








} 








1 








1 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 
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Table 6.2.3.6.3.3-5: RRCConnection Release (step 8, Table 6.2.3.6.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionRelease-r8 SEQUENCE { 








idleModeMobilityControllnfo SEQUENCE { 








freqPriorityListEUTRA SEQUENCE (SIZE (1.. 
maxFreq)) OF SEQUENCE { 


1 entry 






carrierFreq[1] 


Same downlink EARFCN 
as used for Cell 1 






cellReselectionPriority[1 ] 


4 






) 








freqPriorityLlstGERAN 


Not present 






freqPriorityListUTRA-FDD SEQUENCE (SIZE 
(1..maxUTRA-FDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA-FDD 


carrierFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


5 






1 








freqPrJorJtyListUTRA-TDD SEQUENCE (SIZE 
(1..maxUTRA-TDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA-TDD 


carrierFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


5 






1 








bandClassPriorityListHRPD 


Not present 






bandClassPriorityListI XRTT 


Not present 






1320 


Not present 






1 








} 








} 








} 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



128 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 6.2.3.6.3.3-6: RRCConnectionRelease (step 11, Table 6.2.3.6.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionRelease-r8 SEQUENCE { 








idleModeMobilityControllnfo SEQUENCE { 








freqPriorityListEUTRA SEQUENCE (SIZE (1.. 
maxFreq)) OF SEQUENCE { 


1 entry 






carrierFreq[1] 


Same downlink EARFCN 
as used for Cell 1 






cellReselectionPriority[1 ] 


4 






) 








freqPriorityLlstGERAN 


Not present 






freqPriorityListUTRA-FDD SEQUENCE (SIZE 
(1..maxUTRA-FDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA-FDD 


carrierFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


3 






1 








freqPriorityListUTRA-TDD SEQUENCE (SIZE 
(1..maxUTRA-TDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA-TDD 


carrierFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


3 






1 








bandClassPriorityListHRPD 


Not present 






bandClassPriorityListI XRTT 


Not present 






1320 


Not present 






1 








} 








} 








} 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 
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Table 6.2.3.6.3.3-7: RRCConnectionRelease (step 15, Table 6.2.3.6.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionRelease-r8 SEQUENCE { 








idleModeMobilityControllnfo SEQUENCE { 








freqPriorityListEUTRA SEQUENCE (SIZE (1.. 
maxFreq)) OF SEQUENCE { 


1 entry 






carrierFreq[1] 


Same downlink EARFCN 
as used for Cell 1 






cellReselectionPriority[1 ] 


4 






) 








freqPriorityLlstGERAN 


Not present 






freqPriorityListUTRA-FDD SEQUENCE (SIZE 
(1..maxUTRA-FDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA-FDD 


carrierFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


3 






1 








freqPriorityListUTRA-TDD SEQUENCE (SIZE 
(1..maxUTRA-TDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA-TDD 


carrierFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


3 






1 








bandClassPriorityListHRPD 


Not present 






bandClassPriorityListI XRTT 


Not present 






1320 


min5 






1 








} 








} 








} 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 



6.2.3.7 



6.2.3.7.1 



Inter-RAT cell reselection / From E-UTRA RRCJDLE to HRPD Idle / HRPD 
cell is higher reselection priority than E-UTRA 

Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_IDLE state and UE detects the cell re- selection criteria that HRPD cell is 
higher reselection priority than E-UTRAN serving cell } 

ensure that { when { UE searches for and measures HRPD cell at least every Thigherprioritysearch 
and SnonServingCell, HRPD > ThreshnHPD, high } 
then { UE reselects the HRPD cell } 



6.2.3.7.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.304, clause 5.2.4.1, 
5.2.4.2 and 5.2.4.5 and TS 36.133, clause 4.2.2.5 and 4.2.2.5.4. 

[TS 36.304, clause 5.2.4.1] 

Absolute priorities of different E-UTRAN frequencies or inter-RAT frequencies may be provided to the UE in the 
system information , in the RRCConnectionRelease message,or by inheriting from another RAT at inter-RAT cell 
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(re)selection. In the case of system information, an E-UTRAN frequency or inter-RAT frequency may be listed without 
providing a priority (i.e. the field cellReselectionPriority is absent for that frequency). If priorities are provided in 
dedicated signalling, the UE shall ignore all the priorities provided in system information. If UE is in camped on any 
cell state, UE shall only apply the priorities provided by system information from current cell, and the UE preserves 
priorities provided by dedicated signalling unless specified otherwise. When the UE in camped normally state, has only 
dedicated priorities other than for the current frequency, the UE shall consider the current frequency to be the lowest 
priority frequency (i.e. lower than the eight network configured values). While the UE is camped on a suitable CSG 
cell, the UE shall always consider the current frequency to be the highest priority frequency (i.e. higher than the eight 
network configured values), irrespective of any other priority value allocated to this frequency. The UE shall delete 
priorities provided by dedicated signalling when: 

- the UE enters RRC_CONNECTED state; or 

the optional validity time of dedicated priorities (T320) expires; or 

a PLMN selection is performed on request by NAS [5]. 

NOTE: Equal priorities between RATs are not supported. 

The UE shall only perform cell reselection evaluation for E-UTRAN frequencies and inter-RAT frequencies that are 
given in system information and for which the UE has a priority provided. 

[TS 36.304, clause 5.2.4.2] 

Following rules are used by the UE to limit needed measurements: 

- If Sintrasearch IS scnt in the scrving cell and SservingCdi > Sintrasearch, UE may choose to not perform intra-frequency 
measurements. 

If SServingCell <= Sintrasearch, or Sintrasearch is not sent in the serving cell UE shall perform intra-frequency 
measurements. 

The UE shall apply the following rules for E-UTRAN inter-frequencies and inter-RAT frequencies which are 
indicated in system information and for which the UE has priority provided as defined in 5.2.4. 1 : 

For an E-UTRAN inter-frequency or inter-RAT frequency with a reselection priority higher than the 
reselection priority of the current E-UTRA frequency the UE shall perform measurements of higher priority 
E-UTRAN inter- frequency or inter-RAT frequencies according to [10]. 

For an E-UTRAN inter-frequency with an equal or lower reselection priority than the reselection priority of 
the current E-UTRA frequency and for inter-RAT frequency with lower reselection priority than the 
reselection priority of the current E-UTRAN frequency: 

If Snonintrasearch IS scnt in the scrving ccll and SServingCell > Snonintrasearch UE may choose not to 
perform measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower 
priority. 

If SServingCell <= Snonintrasearch or Snonintrasearch is not sent in the serving cell the UE shall perform 
measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority 
according to [10]. 

Where SservingCeii is the Srxlev- value of the serving cell. 

[TS 36.304, clause 5.2.4.5] 

Criteria 1 : the SnonServingCeii.x of a cell on evaluated frequency is greater than Thresh^, high during a time interval 
TreselectionRAx; 

Cell reselection to a cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

A cell of a higher priority E-UTRAN frequency or inter-RAT frequency fulfils criteria 1 ; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 
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Cell reselection to a cell on an equal priority E-UTRAN frequency shall be based on ranking for Intra-frequency cell 
reselection as defined in sub-clause 5.2.4.6. 

Cell reselection to a cell on a lower priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

No cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency fulfills the 
criteria 1; and 

No cell on serving frequency or on an equal priority E-UTRAN frequency fulfills the criteria in 5.2.4.6; and 

SServingCell < Threshserving, low and the SnonServingCell,x of a cell of a lower priority E-UTRAN frequency 
or inter-RAT frequency is greater than Threshx, low during a time interval TreselectionRAT; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 

For GERAN, UTRAN, and E-UTRAN, SnonServingCell,x is the Srxlev-value of an evaluated cell. For cdma2000 
RATs, SnonServingCell,x is equal to FLOOR(-2 x 10 x loglO Ec/Io) in units of 0.5 db, as defined in [18], with Ec/Io 
referring to the value measured from the evaluated cell. 

For cdma2000 RATs, Threshx, high and Threshx, low are equal to -1 times the values signalled for the corresponding 
parameters in the system information. 

In all the above criteria the value of TreselectionRAT is scaled when the UE is in the medium or high mobility state as 
defined in subclause 5.2.4.3.1. If more than one cell meets the above criteria, the UE shall reselect a cell ranked as the 
best cell among the cells meeting the criteria on the highest priority frequencies or the highest priority RATif the 
highest priority RAT is E-UTRA according to criteria defined in 5.2.4.6. 

[TS 36. 133, clause 4.2.2.5] 

If the SServingCellof the E-UTRA serving cell is greater than Snonintraseaich, then the UE shall search for inter-RAT layers 
of higher priority at least every Th,ghei-_p„onty_search where Th,gher_prionty_search is described in section 4.2.2. 

If the SservingCeiiof the E-UTRA scrviug ccll is Icss than or equal to Snonimrasearchthen the UE shall search for and measure inter- 
RAT layers of higher, lower priority in preparation for possible reselection. In this scenario, the minimum rate at which 
the UE is required to search for and measure higher priority inter-RAT layers shall be the same as that defined below 
for lower priority RATs. 

[TS 36. 133, clause 4.2.2.5.4] 

In order to perform measurement and cell reselection to HRPD cell, the UE shall acquire the timing of HRPD cells. 

When the measurement rules indicate that HRPD cells are to be measured, the UE shall measure CDMA2000 HRPD 
Pilot Strength of HRPD cells in the neighbour cell list at the minimum measurement rate specified in this section. 

The parameter 'Number of HRPD Neighbor Frequency', which is transmitted on E-UTRAN BCCH, is the number of 
carriers used for all HRPD cells in the neighbour cell list. 

When the RSRP of the E-UTRA serving cell (or other cells on the same frequency layer) is lower than 'HRPD Start 
Measuring E-UTRAN Rx Power Strength Threshold' and HRPD is of lower priority than the currently selected E- 
UTRAN frequency layer, the UE shall measure CDMA2000 HRPD Pilot Strength of the HRPD cells at least every 
(Number of HRPD Neighbor Frequency) *T|neasureHRPD- 

The UE shall be capable of evaluating that the HRPD cell has met cell reselection criterion defined in [1] within 

TevaluateHRPD- 



Table 4.2.2.5.4-1 gives values of Tmeasui-eHRPD and Teva 



evaluateHRPD. 
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Table 4.2.2.5.4-1 : TmeasureHRPO and TevaluateHRPO 



DRX 
cycle 
length 
[s] 


TnieasureHRPD 

[s] (number 
of DRX 
cycles) 


TevaluateHRPD [S] 

(number of 
DRX cycles) 


0.32 


5.12(16) 


15.36(48) 


0.64 


5.12(8) 


15.36(24) 


1.28 


6.4 (5) 


19.2(15) 


2.56 


7.68 (3) 


23.04 (9) 



Test description 
Pre-test conditions 



6.2.3.7.3 

6.2.3.7.3.1 

System Simulator: 

- Cell 1 for E-UTRAN 

Cell 15 for HRPD with higher reselection priority than Cell 1 

UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.2.3.7.3.2 Test procedure sequence 

Table 6.2.3.7.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while rows marked "Tl" 
and "T2" are to be applied subsequently. The exact instants on which these values shall be applied are described in the 
texts in this clause. 

Table 6.2.3.7.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 15 


Remark 


TO 


Cell-specific RS EPRE 


dBm 


-60 


- 


Srxlevceii i >0 and Cell 1 5 is off such that 
camping on Cell 1 is guaranteed 


Srxlev* 


dB 


50 


T1 


lor/loc 


dB 


- 


-20 


Cell 15 is on 


loc 


dBm/1. 

23 

MHz 


- 


-75 


CPICH Ec/lo(Note1) 


dB 


- 


-20 


T2 


lor/loc 


dB 


- 





Increase pilot power of HRPD cell such 

that SnonServingCell.HRPD Of Cell 15 > 

ThreshhRPD, high 


loc 


dBm/1. 

23 

MHz 


- 


-75 


CPICH Ec/lo(Note1) 


dB 


- 





Note 1 : This parameter is not directly sellable, but is derived by calculation from the other parameters set by the 
SS. 
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Table 6.2.3.7.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS adjust the serving cell signal level to make 
sure UE is camping on Cell 1 , according to 
"TO" in 6.2.3.7.3.2 










2 


Cell 15 is on and it has higher reselection 
priority than CelH, according to "T1" in 
6.2.3.7.3.2 










3 


UE performs measurement for Cell 15 at every 

1 higher priority search 


- 


- 


- 


- 


4 


Check: Does the UE transmit an Access Probe 
on Cell 15 within the next [60s]? 


~> 


Access Probe 


1 


F 


5 


SS adjust HRPD cell signal level to make sure 

SnonServingCell.HRPD Of Cell 15 > ThreShhRPD, high, 

according to "T2" in6.2.3.7.3.2 










6 


Check: Does the UE transmit an Access Probe 
on Cell 15? 


~> 


Access Probe 


1 


P 



6.2.3.7.3.3 



Specific message contents 



Table 6.2.3.7.3.3-1 : SystemlnformationBlockTypel to Cell 1 preamble and all steps, table 6.2.3.7.3.2- 

1) 



Derivation path: 36.508 table clause 4.4.3.2 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellSelectionlnfo SEQUENCE { 








q-Rxlevmin 


-55(-110dBm) 






q-Rxlevminoffset 


Not present 






} 








schedulinglnfoList SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 6 in TS 
36.508 section 4.4.3.1.1 






} 
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Table 6.2.3.7.3.3-2: SystemlnformationBlockTypeS to Cell 1 CPreamble and all steps, table 6.2.3.7.3.2- 

1) 



Derivation path: 36.508 table 4.4.3.3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlocl<Type8 ::= SEQUENCE { 








SystemTimelnfo SEQUENCE { 








cdma-EUTRA-Synchronisation 


TRUE 






cdma-SystemTime CHQICE { 








SynchronousSystemTime 


A valid value as per TS 
36.331 and calculated by 
theSS 






1 








} 








searcliWindowSize 


5 






ParametersHRPD SEQUENCE { 






HRPD 


CellReselectionParametersHRPD SEQUENCE { 








BandClassList SEQUENCE (SIZE (1 ..maxCDMA - 
BandClass)) OF SEQUENCE { 


The same number of 
entries as the configured 
HRPD carriers 






BandClass 


Band Class of frequency 
under test 


[Set according to 
specific test case] 




CellReselectionPriority 


5 


[3 is applicable 
when HRPD is 
lower priority than 
E-UTRA. 5 is 
applicable when 
HRPD is higher 
priority than E- 
UTRA] 




thresliX-High 


FFS 


INTEGER (0..63) 




threshX-Low 


FFS 


INTEGER (0..63) 




} 








t-ReselectionCDMA 


[7] 


INTEGER (0..7) 




1 








1 








} 









Inter-RAT cell reselection / From E-UTRA RRCJDLE to HRPD Idle / HRPD 
is lower reselection priority than E-UTRA 

Test Purpose (TP) 



6.2.3.8 

6.2.3.8.1 

(1) 

with { UE in E-UTRA RRC_IDLE state and UE detects the cell re-selection criteria that HRPD cell is 
equial to or lower reselection priority than E-UTRAN serving cell } 
ensure that { 

When( SservingCell <= Snonintrasearch and SnonServingCell , HRPD > ThrSShHRPD, low ) 



then { UE searches for and measures HRPD cell at least every Thigher_pr 
HRPD cell } 



itY_i 



and reselects the 



6.2.3.8.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.304, clause 5.2.4.1, 
5.2.4.2 and 5.2.4.5 and TS 36.133, clause 4.2.2.5 and 4.2.2.5.4. 

[TS 36.304, clause 5.2.4.1] 

Absolute priorities of different E-UTRAN frequencies or inter-RAT frequencies may be provided to the UE in the 
system information or in the RRC message releasing the RRC connection. If priorities are assigned via dedicated 
signalling, the UE shall ignore all the priorities provided in system information. The UE shall delete priorities provided 
by dedicated signalling when: 

- the UE enters RRC CONNECTED state; or 
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the optional validity time of dedicated priorities (T320) expires; or 

a PLMN selection is performed on request by NAS [5]. 

NOTE: Equal priorities between RATs are not supported. 

UE shall only perform reselection evaluation for E-UTRAN frequencies and inter-RAT frequencies that are given in 
system information and for which the UE has a priority provided. 

[TS 36.304, clause 5.2.4.2] 

Following rules are used by the UE to limit needed measurements: 

If SServingCell > Sintrasearch, UE may choose to not perform intra-frequency measurements. 

If SServingCell <= Sintrasearch, UE shall perform intra-frequency measurements. 

The UE shall apply the following rules for E-UTRAN inter-frequencies and inter-RAT frequencies which are 
indicated in system information and for which the UE has priority provided as defined in 5.2.4. 1 : 

o For an E-UTRAN inter-frequency or inter-RAT frequency with a reselection priority higher than the 

reselection priority of the current E-UTRA frequency the UE shall perform measurements of higher priority 
E-UTRAN inter-frequency or inter-RAT frequencies according to [10]. 

o For an E-UTRAN inter-frequency with a equal or lower reselection priority than the reselection priority of 
the current E-UTRA frequency and for inter-RAT frequency with lower reselection priority than the 
reselection priority of the current E-UTRAN frequency: 

■ If SServingCell > Snonintrasearch UE may choose not to perform measurements of E-UTRAN inter- 
frequencies or inter-RAT frequencies of equal or lower priority. 

■ If SServingCell <= Snonintrasearch the UE shall perform measurements of E-UTRAN inter-frequencies 
or inter-RAT frequencies cells of equal or lower priority according to [10]. 

Where SservingCeii is the Srxlev- value of the serving cell. 

[TS 36.304, clause 5.2.4.5] 

Criteria 1 : the SnonServingCeii.x of a cell on evaluated frequency is greater than Threshx, high during a time interval 
TreselectionRAx; 

Cell reselection to a cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

A cell of a higher priority E-UTRAN frequency or inter-RAT frequency fulfils criteria 1 ; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 

Cell reselection to a cell on a lower priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

No cell on serving frequency or on a higher priority E-UTRAN frequency or inter-RAT frequency than serving 
frequency fulfills the criteria 1 ; and 

SServingCell < Threshserving, low and the SnonServingCell,x of a cell of a lower priority E-UTRAN frequency 
or inter-RAT frequency is greater than Threshx, low during a time interval TreselectionRAT; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 

Cell reselection to a cell on an equal priority E-UTRAN frequency shall be based on ranking for Intra-frequency Cell 
Reselection as defined in sub-clause 5.2.4.6. 

For GERAN, UTRAN, and E-UTRAN, SnonServingCell,x is the Srxlev-value of an evaluated cell. For cdma2000 
RATs, SnonServingCell,x is equal to FLOOR(-2 x 10 x loglO Ec/Io) in units of 0.5 db, as defined in [18], with Ec/Io 
referring to the value measured from the evaluated cell. 
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In all the above criteria the value of TreselectionRAT is scaled when the UE is in the medium or high mobility state as 
defined in subclause 5.2.4.3.1. If more than one cell meets the above criteria, the UE shall reselect a cell ranked as the 
best cell among the cells meeting the criteria on the highest priority frequencies or the highest priority RATif the 
highest priority RAT is E-UTRA according to criteria defined in 5.2.4.6. 

[TS 36. 133, clause 4.2.2.5] 

If the SServingCellof the E-UTRA serving cell (or other cells on the same frequency layer) is greater than Snonintiaseaich, 
then 

the UE may not search for, or measure inter-RAT layers of equal or lower priority. 

- the UE shall search for inter-RAT layers of higher priority at least every Thigher_priority_search where Thigher_priority_search 
is described in section 4.2.2. 

If the SservingCeiiof the E-UTRA scrving ccll is Icss than or equal to Snonimrasearch, then the UE shall search for and measure inter- 
RAT layers of higher, equal or lower priority in preparation for possible reselection. In this scenario, the minimum rate 
at which the UE is required to search for and measure such layers is not reduced and shall be the same as that defined 
below for lower priority RATs. 

[TS 36. 133, clause 4.2.2.5.4] 

In order to perform measurement and cell reselection to HRPD cell, the UE shall acquire the timing of HRPD cells. 

When the measurement rules indicate that HRPD cells are to be measured, the UE shall measure CDMA2000 HRPD 
Pilot Strength of HRPD cells in the neighbour cell list at the minimum measurement rate specified in this section. 

The parameter 'Number of HRPD Neighbor Frequency', which is transmitted on E-UTRAN BCCH, is the number of 
carriers used for all HRPD cells in the neighbour cell list. 

When the RSRP of the E-UTRA serving cell (or other cells on the same frequency layer) is lower than 'HRPD Start 
Measuring E-UTRAN Rx Power Strength Threshold' and HRPD is of lower priority than the currently selected E- 
UTRAN frequency layer, the UE shall measure CDMA2000 HRPD Pilot Strength of the HRPD cells at least every 
(Number of HRPD Neighbor Frequency) *TnieasureHRPD- In case HRPD is of higher priority than the currently selected E- 
UTRAN frequency layer the UE shall measure HRPD cells at least every (Number of HRPD Neighbor Frequency)* 
Thigher_proirty_search- The parameter Ti,igher_proirty_search IS defined in section 4.2.2. 

The UE shall be capable of evaluating that the HRPD cell has met cell reselection criterion defined in [1] within 

TevaluateHRPD- 

Table 4.2.2.5.4-1 gives values of TmeasureHRPD and TevaluateHRPO. 

Table 4.2.2.5.4-1 : TmeasureHRPO and TevaluateHRPO 



DRX 
cycle 
length 
[s] 


A measureHRPD 

[s] (number 
of DRX 
cycles) 


TevaluateHRPD [S] 

(number of 
DRX cycles) 


0.32 


5.12(16) 


15.36(48) 


0.64 


5.12(8) 


15.36(24) 


1.28 


6.4 (5) 


19.2(15) 


2.56 


7.68 (3) 


23.04 (9) 



6.2.3.8.3 Test description 

6.2.3.8.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 for E-UTRAN 

Cell 15 for HRPD with lower reselection priority than Cell 1 
UE: 
None. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



137 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

6.2.3.8.3.2 Test procedure sequence 

Table 6.2.3.8.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while rows marked "Tl" 
and "T2" are to be applied subsequently. The exact instants on which these values shall be applied are described in the 
texts in this clause. 

Table 6.2.3.8.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Cell 15 


Remark 


TO 


Cell-specific RS EPRE 


dBm 


-60 


- 


Srxlevceii i >0 and Cell 15 is off such 
that camping on Cell 1 is guaranteed 


Srxlev* 


dB 


50 


Tl 


lor/loc 


dB 


- 


-20 


Cell 15 is on 


loc 


dBm/ 
1.23 
MHz 


- 


-55 


CPICH Ec/lo(Note1) 


dB 


- 


-20 


Cell-specific RS EPRE 


dBm 


-120 


- 


SservingCellof the E-UTRA <= Snonintrasearch 


Srxlev* 


dB 


40 


T2 


lor/loc 


dB 


- 


-5 


Increase pilot power of HRPD cell 

such that SnonServingCell.HRPD Of Coll 15 > 

Threshx, low 


loc 


dBm/1. 

23 

MHz 


- 


-55 


CPICH Ec/lo(Note1) 


dB 


- 


-6 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other parameters set by the 
SS. 



Table 6.2.3.8.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cell 15 is on and it has lower reselection 

priority than Cell 1 , according to "T1 " in 

6.2.3.8.3-1. 

SS adjusts the serving cell signal level so that 

SservinqCellof the E-UTRA <= Snonintrasearch. 2 










3 


UE performs measurement for Cell 15 at every 

1 higher priority search 


- 


- 


- 


- 


4 


Check: Does the UE transmit an Access Probe 
on Cell 15 within the next [60s]? 


-> 


Access Probe 


1 


F 


5 


SS adjust HRPD cell signal level to make sure 

SnonServingCell.HRPD Of Coll 15 > ThreShHRPD, low 

according to "12" in 6.2.3.8.3.2-1 . 










6 


Check: Does the UE transmit an Access Probe 
on Cell 15? 


-> 


Access Probe 


1 


P 
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6.2.3.8.3.3 



Specific message contents 



Table 6.2.3.8.3.3-1 : SystemlnformationBlockTypel to Cell 1 preamble and all steps, table 6.2.3.8.3.2- 

1) 



Derivation path: 36.508 table 4.4.3.2 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellSelectionlnfo SEQUENCE { 








q-Rxlevmin 


-55(-110dBm) 






q-Rxlevminoffset 


Not present 






I 








schedulinglnfoList SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 6 in TS 
36.508 section 4.4.3.1.1 






} 









Table 6.2.3.8.3.3-2: SystemlnformatlonBlockTypeS to Cell 1 CPreamble and all steps, table 6.2.3.8.3.2- 

1) 



Derivation path: 36.508 table 4.4.3.3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType8 ::= SEQUENCE { 








SystemTimelnfo SEQUENCE { 








cdma-EUTRA-Synchronisation 


TRUE 






cdma-SystemTime CHQICE { 








SynchronousSystemTlme 


A valid value as per TS 
36.331 and calculated by 
theSS 






} 








} 








searchWindowSize 


5 






ParametersHRPD SEQUENCE { 






HRPD 


CellReselectionParametersHRPD SEQUENCE { 








BandClassList SEQUENCE (SIZE (1 ..maxCDMA - 
BandClass)) OF SEQUENCE { 


The same number of 
entries as the configured 
HRPD carriers 






BandClass 


Band Class of frequency 
under test 


[Set according to 
specific test case] 




CellReselectionPriority 


3 


[3 is applicable 
when HRPD is 
lower priority than 
E-UTRA. 5 is 
applicable when 
HRPD is higher 
priority than E- 
UTRA] 




threshX-High 


FFS 


INTEGER (0..63) 




threshX-Low 


FFS 


INTEGER (0..63) 




} 








t-ReselectionCDMA 


[7] 


INTEGER (0..7) 




1 








} 








} 









6.2.3.13 

6.2.3.13.1 
(1) 



Inter-RAT cell reselection / From UTRA_ldle to E-UTRA RRC_IDLE 
according to RAT priority provided by dedicated signalling 

Test Purpose (TP) 



with { UE in UTRA_Idle state 
ensure that { 
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when { UE detects the cell re- selection criteria are met for the cell which belongs to the lower 
priority inter-RAT E-UTRA cell based on the configured RAT priority provided by dedicated signaling 

} 

then { UE reselects the cell which belongs to the lower priority inter-RAT E-UTRA cell } 



(2) 

with { UE in E-UTRA RRC_IDLE state having inherit RAT priority provided by dedicated signaling with 
the remaining validity time } 
ensure that { 

when { UE discard the inherit RAT priority upon connection establishment } 

then { UE reselects a cell by applying the cellReselectionPriority broadcast in the system 
information } 



6.2.3.13.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 25.304, clause 5.2.6.1.2a and 
5.2.6.1.4a; TS 25.331, clause 8.3.3.3 and 8.6.7.23; TS 36.331, clause 5.3.3.4. 

[TS 25.304, clause 5.2.6.1.2a] 

If the UE has received absolute priority information for inter-RAT layers, the UE shall follow these rules: 

The UE shall perform measurements of inter-RAT layers with a priority higher than the priority of the current 
serving cell. 

NOTE: The rate of these measurements may vary depending on whether Srxlev and Squal of the serving cell are 
above or below Sp„ontysearchi and Sp„o„tysearch2- This is specified in [10]. 

For inter-RAT layers with a priority lower than the priority of the current serving cell: 

- If SrxlevservingCeii > Spnomysearchi and SqualservingCeii > Spnorityseaichi the UE may choosc not to perform 
measurements of inter-RAT layers of lower priority. 

- If SrxlevservingCeii <= Spnontyseaichi Or SqualservingCeii <= Sp„ontysearch2 Ae UE shall perform measurements of 
inter-RAT layers of lower priority. 

[TS 25.304, clause 5.2.6.1.4a] 

Absolute priorities of different absolute priority layers may be provided to the UE. The following cell reselection 
criteria are used for inter-frequency cells if absolute priority information for inter-frequency is available to the UE, and 
inter-RAT cells if absolute priority information for inter-RAT is available to the UE. 



The UE shall inherit the priorities provided by dedicated signalling and the remaining validity time (i.e., T320 in E- 
UTRA, T322 in UTRA and [T3230, FFS] in GERAN), if configured, at inter-RAT cell (re)selection. 

The following definitions apply: 

Criterion 1 : the SrxleVnonServingCeii.x of a cell on an evaluated higher absolute priority layer is greater than 
Threshx high during a time interval Treselection; 



- Criterion 3: SrxlevservingCeii < Thresh^ervingjow or Squal servmgCeii < and the Srxlev„onServingCeii,x of a cell on an 
evaluated lower absolute priority layer is greater than Threshx,iow during a time interval Treselection; 

Cell reselection to a cell on a higher absolute priority layer than the camped frequency shall be performed if criterion 1 
is fulfilled. 



Cell reselection to a cell on a lower absolute priority layer than the camped frequency shall be performed if criterion 3 is 
fulfilled. 
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If more than one cell meets the above criteria, the UE shall reselect the cell with the highest SrxleVnnnServingCeii.x among 
the cells meeting the criteria on the highest absolute priority layer. 

The UE shall not perform cell reselection to cells for which the cell selection criterion S is not fulfilled. 

The UE shall not perform cell reselection until more than 1 second has elapsed since the UE camped on the current 
serving cell. 

[TS 25.331, clause 8.3.3.3] 

When the UE receives a UTRAN MOBILITY INFORMATION message, it shall: 

1> act on received information elements as specified in subclause 8.6; 

1> if the IE "Dedicated Priority Information" is present: 

2> act upon the received IE as described in subclause 8.6.7.23. 
[TS 25.331, clause 8.6.7.23] 
If the CHOICE "Action" has the value "Configure dedicated priorities", the UE shall: 

1> clear the variable PRIORITY_INFO_LIST; 

1> stop timer T322, if it is running; 

1> set the value of IE "Priority status" in the variable PRIORITY_INFO_LIST to "dedicated_priority"; 

1> for each occurrence of the IE "Priority Level List": 

2> create a new entry in the IE "Priority Info List" in the variable PRIORITY_INFO_LIST, and in that new 
entry: 

3> set the CHOICE "Radio Access Technology" to the value received in the IE "Priority Level List"; 

3> set the IE "priority" to the value received in the IE "Priority Level List"; 

3> set the values in IE "Frequency List" or "BCCH ARFCN List" to the values received in the IE "Priority 
Level List". 

1> set the IE "E-UTRA detection" to the value received in the IE "Priority Level List". 

1> if the IE "T322" is present: 

2> start timer T322 using the value signalled in this IE. 

1> if the UE is not in CELL_DCH state: 

2> take the actions as described in subclause 8.1.1.6.19 using stored System information Block type 19. 

[TS 36.331, clause 5.3.3.4] 

The UE shall: 

1> perform the radio resource configuration procedure in accordance with the received 
radioResourceConfigDedicated and as specified in 5.3.10; 

1> if stored, discard the cell reselection priority information provided by the idleModeMobilityControlInfo or 
inherited from another RAT; 

1> stop timer T300; 

1> stop timer T302, if running; 

1> stop timer T303, if running; 

1> stop timer T305, if running; 
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1> perform the actions as specified in 5.3.3.7; 

1> stop timer T320, if running; 

1> enter RRC_CONNECTED; 

1> stop the cell re-selection procedure; 

1> set the content of RRCConnectionSetupComplete message as follows: 

2> submit the RRCConnectionSetupComplete message to lower layers for transmission, upon which the 
procedure ends; 

6.2.3.13.3 Test description 

6.2.3.13.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 5. 

Cell 1 suitable neighbour E-UTRA cell 
- Cell 5 UTRA serving cell 
NOTE: Common Priority information for Cell 1 & Cell 5: UTRA priority = 3; E-UTRA priority = 4. 
UE: 
None. 
Preamble: 

- The UE is in state PS-DCCHh-DTCH_DCH (state 6-10) on Cell 5 according to [5]. 

6.2.3.1 3.3.2 Test procedure sequence 

Table 6.2.3.13.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while row 
marked "Tl" and "T2" are to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 6.2.3.13.2-1 : Time instances of cell power level and parameter changes for E-UTRA cell 





Parameter 


Unit 


CelM 


Remarl< 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-97 




Qrxlevmin 


dBm 


-106 


Default value 


Srxlev* 


dB 


9 




Tl 


Cell-specific RS EPRE 


dBm/15kHz 


-85 




Srxlev* 


dB 


21 


Srxlev = Cell-specific RS EPRE - 
qRxLevMinEUTRA 

S nonServinqCell, Cein > ThreSh CellUow 


T2 


Cell-specific RS EPRE 


dBm/15kHz 


-97 




Qrxlevmin 


dBm 


-106 


Default value 


Srxlev* 


dB 


9 




Note: Srxlev is calculated in the UE 
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Table 6.2.3.13.2-2: Time instances of cell power level and parameter changes for UTRA cell 





Parameter 


Unit 


Cell 5 


Remaric 


TO 


CPICH_Ec 


dBm/3.84 MHz 


-60 


The power levels are such that 
camping on Cell 5 is guaranteed. 


Qrxlevmin 


dBm 


-79 


Default value 


Srxlev* 


dB 


19 




T1 


CPICH Ec 


dBm/3.84 MHz 


-75 




Srxlev* 


dB 


4 


SrxleVServinqCell < ThrCSh Servinq.low 


T2 


CPICH Ec 


dBm/3.84 MHz 


-60 




Srxlev* 


dB 


19 




Note: Srxlev is calculated in the UE 



Table 6.2.3.13.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS provides dedicated priority information 
(UTRA priority = 5; E-UTRA priority = 4) and 
validity timer to the UE. 


<- 


UTRAN MOBILITY 
INFORMATION 






2 


The SS receives the UTRAN MOBILITY 
INFOMRATION CONFIRM message. 


-> 


UTRAN MOBILITY 
INFORMATION CONFIRM 


- 


- 


3 


The SS releases the UE connection. 


<- 


RRC CONNECTION RELEASE 


- 


- 


4 


The SS receives UE release complete 
message. 


-> 


RRC CONNECTION RELEASE 
COMPLETE 


- 


- 


5 


The SS receives UE release complete 
message. 


-> 


RRC CONNECTION RELEASE 
COMPLETE 


- 


- 


6 


The SS receives UE release complete 
message. 


-> 


RRC CONNECTION RELEASE 
COMPLETE 


- 


- 


7 


The SS changes Cell 1 and Cell 5 levels 
according to the row "T1" in table 6.2.3.13.3.2- 
1 and table 6.2.3.13.3.2-2. 










8 


Check: does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7A 
indicate that the UE is camped on E-UTRAN 
Cell 1? 

NOTE: The UE performs a TAU procedure and 
the RRC Connection is released. 






1 




9 


Void 


- 


- 


- 


- 


10 


Void 


- 


- 


- 


- 


11 


The SS changes Cell 1 and Cell 5 levels 
according to the row "T2" in table 6.2.3.13.3.2- 
1 and table 6.2.3.13.3.2-2. 










12 


Check: does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.8 
indicate that the UE is camped on UTRAN Cell 
5? 






2 
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6.2.3.13.3.3 Specific message contents 

Table 6.2.3.13.3.3-1 : UTRAN MOBILITY INFORMATION for Cell 5 (step 1, Table 6.2.3.13.3.2-3) 



Derivation Path: 34.108, clause 9 


Information Element 


Value/remark 


Comment 


Condition 


UTRANMobilitylnformation ::= CHOICE { 








Iater-than-r3 SEQUENCE { 








criticalExtensions CHOICE { 








criticalExtensions CHOICE { 








r7 SEQUENCE { 








v860NonCriticalExtensions SEQUENCE { 








utranMobilitylnformation-vSeOext SEQUENCE 

{ 








dedicatedPrioritylnformation SEQUENCE { 








action CHOICE { 








configureDedicatedPriorities SEQUENCE 
{ 








t-322 


5 


Time in minutes 




priorityLevelList SEQUENCE (SIZE 
(1..maxPrio)) OF SEQUENCE! 


2 entry 






priority[1] 


5 






radioAccessTechnology[1] CHOICE { 








utraFDD SEQUENCE (SIZE 
(L.maxNumFDDFreqs)) OF SEQUENCE { 


1 entry 




UTRA- 
FDD 


uarfcn 


Same downlink UARFCN 
as used for Cell 5 






} 








utraTDD SEQUENCE (SIZE 
(1..maxNumTDDFreqs)) OF SEQUENCE { 


1 entry 




UTRA- 
TDD 


uarfcn 


Same downlink UARFCN 
as used for Cell 5 






1 








} 








priority[2] 


4 






radioAccessTechnology[2] CHOICE { 








eutra SEQUENCE (SIZE 
(L.maxNumEUTRAFreqs)) OF SEQUENCE { 


1 entry 






earfcn 


Same downlink EARFCN 
as used for Cell 1 






} 








} 








1 








E-UTRA detection 


TRUE 






} 








} 








1 








1 








} 








} 








} 








1 








1 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 
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Table 6.2.3.13.3.3-2: RRC CONNECTION RELEASE for Cell 5 (step 3, Table 6.2.3.13.3.2-3) 



Derivation Path: 34.108, clause 9 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= CHOICE { 








Iater-than-r3 SEQUENCE { 








crJticalExtensions CHOICE { 








r4 SEQUENCE { 








rrcConnectionRelease-r4 SEQUENCE { 








n-308 


2 


2 (for CELL_DCH 
state). Not 
Present (for UE in 
other connected 
mode states). 




releaseCause 


normalEvent 






rplmn-information 


Not Present 






1 








v4dONonCriticalExtensions SEQUENCE {} 


Not Present 






} 








} 








1 








} 









Table 6.2.3.13.3.3-3: System Information Block type 19 for Cell 5 (preamble and all steps, Table 

6.2.3.13.3.2-3) 



Derivation Path: 36.508 table 4.4.4.1-1 


Information Element 


Value/remark 


Comment 


Condition 


SyslnfoType19 ::= SEQUENCE { 








utra-PrioritylnfoList ::= SEQUENCE { 








utra-ServingCell ::= SEQUENCE { 








s-PrioritySearchI 


8(16dB) 






threshServingLow 


4 (8 dB) 






} 








} 








eutra-FrequencyAndPrioritylnfoList ::= SEQUENCE 
(SIZE (L.maxNumEUTRAFreqs) OF SEQUENCE { 


1 entry 






earfcn [1] 


Same downlink EARFCN 
as used for Cell 1 






measurementBandwidth [1] 


Not present 






qRxLevMinEUTRA[1] 


-53(-106dBm) 






threshXhigh[1] 


16(32dB) 






threshXlow[1] 


10(20dB) 






} 








} 








Note: GERAN cell priority is not allocated, hence it will be considered as the less than all allowed values of to 7. 



Table 6.2.3.13.3.3-4: SystemlnformationBlockTypeS ior Cell 1 (preamble and all steps, Table 

6.2.3.13.3.2-3) 



Derivation path: 36.508 table 4.4.3.3-2 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType3 ::= SEQUENCE { 








cellReselectionServingFreqInfo SEQUENCE { 








threshServingLow 


5(10dB) 






cellReselectionPriority 


4 






} 








} 
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Table 6.2.3.13.3.3-5: SystemlnformationBlockTypeGior Cell 1 (preamble and all steps, Table 

6.2.3.3.3.2-3) 



Derivation Path: 36.508 table 4.4.3.3-5 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type6 ::= SEQUENCE { 








carrierFreqListUTRA-FDD SEQUENCE (SIZE 
(1..maxUTRA-FDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA-FDD 


camerFreq[1] 


Downlink UARFCN of 
Cells 






cellReselectionPriority[1 ] 


3 






threshX-High[1] 


5(10dB) 






threshX-Low[1] 


5(10dB) 






} 








carrierFreqListUTRA-TDD SEQUENCE (SIZE 
(1..maxUTRA-TDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA-TDD 


camerFreq[1] 


Downlink UARFCN of 
Cells 






cellReselectionPriority[1 ] 


3 






threshX-High[1] 


S(10dB) 






threshX-Low[1] 


S(10dB) 






1 








1 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 



6.2.3.21 Inter-RAT cell reselection / From GPRS PaGket_Transfer (NCO mode) to E- 

UTRA 



6.2.3.21.1 
(1) 



Test Purpose (TP) 



with { UE in GPRS Registered state with active packet data transfer in NCO mode } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the higher 
priority inter-RAT E-UTRA cell} 

then { UE reselects the cell which belongs to the higher priority inter-RAT E-UTRA cell } 



6.2.3.21.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 45.008, clause 10.1.3.3 & TS 
44.018, clause 3.4.1.2.1.1a. 

[TS 45.008, clause 10.1.3.3] 



The algorithm in this subclause shall be used for inter-RAT cell reselection if priority information is available to the MS 
and threshold information is provided by the network. The network shall provide priority information if E-UTRAN 
frequencies are included in the neighbour cell list. The mobile station may apply either priorities broadcast in system 
information or individual priorities received through dedicated signalling. The rules regarding which set of priorities 
shall apply are defined in 3GPP TS 44.018 and 3GPP TS 44.060. 

NOTE: Throughout the specification, the phrase "neighbour cell list" will include also the E-UTRAN Neighbour 
Cell list and/or the GPRS E-UTRANNeighbour Cell list where appropriate. 

If the GPRS 3G Cell Reselection list or the GPRS E-UTRAN Neighbour Cell list include frequencies of other radio 
access technologies, the MS shall, at least every 5 seconds update the value RLA_P for the serving cell and each of the 
at least 6 strongest non serving GSM cells. 

The MS shall then reselect a suitable (see 3GPP TS 25.304 for UTRAN and 3GPP TS 36.304 for E-UTRAN) cell of 
another radio access technology if the criteria below are satisfied. S_non-serving_XXX is the measurement quantity of 
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a non-serving inter-RAT cell and XXX indicates the other radio access technology/mode. S_non-serving_XXX is 
defined in subclause 6.6.6. 

Cell reselection to a cell of another inter-RAT frequency shall be performed if any of the conditions below (to be 
evaluated in the order shown) is satisfied: 

The S_non-serving_XXX of one or more cells of a higher priority inter-RAT frequency is greater than 
THRESH_XXX_high during a time interval T_reselection; in that case, the mobile station shall consider the 
cells for reselection in decreasing order of priority and, for cells of the same inter-RAT frequency, in decreasing 
order of S_non-serving_XXX, and reselect the first cell that satisfies the conditions above; 

The value of S_serving is lower than THRESH_serving_low for the serving cell and all measured GSM cells; in 
this case, the mobile station shall consider for reselection the inter-RAT cells in the following order, and reselect 
the first one that satisfies the following criteria: 

cells of a lower priority inter-RAT frequency whose S_non-serving_XXX is greater than 
THRESH_XXX_low during a time interval T_reselection; these cells shall be considered in decreasing order 
of priority and, for cells of the same RAT, in decreasing order of S_non-serving_XXX; 

if no cells satisfy the criterion above, inter-RAT cells for which, during a time interval T_reselection, S_non- 
serving_XXX is higher than S_serving by at least a specific hysteresis H_PRIO; these cells shall be 
considered in decreasing order of S_non-serving_XXX. 

A UTRAN FDD cell shall only be reselected if, in addition to the criteria above, its measured Ec/No value is equal to or 
greater than FDD_Qmin - FDD_Qmin_Offset. . 

Cell reselection to a cell of another radio access technology (e.g. UTRAN or E-UTRAN) shall not occur within [5] 
seconds after the MS has reselected a GSM cell from an inter-RAT cell if a suitable GSM cell can be found. 

If the mobile station applies individual priorities received through dedicated signalling and priority information is 
available only for some inter-RAT frequencies, cells belonging to frequencies for which no individual priority is 
available or no threshold is broadcast in system information shall not be considered for measurement and for cell re- 
selection. 

If a mobile station in camped normally state (see 3GPP TS 43.022) applies individual priorities received through 
dedicated signalling and no priority is available for the serving cell, the mobile station shall consider any GSM cell 
(including the serving cell) to have lowest priority (i.e. lower than the eight network configured values). 

A mobile station in camped on any cell state (see 3GPP TS 43.022) shall ignore individual priorities received through 
dedicated signalling and shall apply priorities received from the system information of the serving cell while attempting 
to find a suitable cell. If the mobile station supports CS voice services, the MS shall avoid reselecting acceptable (but 
not suitable) E-UTRA cells regardless of the priorities provided in system information. 

NOTE: If the MS is camping on an acceptable cell, individual priorities are not discarded until an event leading to 
their deletion occurs. 

In case of a reselection attempt towards a barred UTRAN cell, the MS shall abandon further reselection attempts 
towards this UTRAN cell as defined by the Tbarred value on the barred UTRAN cell (see 3GPP TS 25.331). 

NOTE: It is FFS whether a similar requirement should be added in case of a reselection attempt towards a barred 
E-UTRAN cell. 

NOTE: Requirements for cells belonging to "forbidden LAs for roaming" should be included here. 

[TS 44.018, clause 3.4.1.2.1.1a] 

This applies only to a multi-RAT MS supporting E-UTRAN. One or more instances of the Measurement Information 
message or SI2quater message may provide E-UTRAN Neighbour Cell Description information in one or more 
instances of the Repeated E-UTRAN Neighbour Cells IE. This is used to build the E-UTRAN Neighbour Cell list. The 
E-UTRAN Neighbour Cell list may contain up to 8 E-UTRAN frequencies. For each E-UTRAN frequency, zero or 
more E-UTRAN neighbour cells may be specified that are not allowed for cell reselection. The list of not allowed cells 
is defined in the Not Allowed Cells lEs. 

Each EARFCN in each instance of the Repeated E-UTRAN Neighbour Cells IE is added to the E-UTRAN Neighbour 
Cell list in the order in which it is received. 
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6.2.3.21.3 Test description 

6.2.3.21.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 24. 
UE: 

None. 
Preamble: 

The UE is GPRS attached and the PDP context 2 activated according to [23]. 

6.2.3.21 .3.2 Test procedure sequence 

Tables 6.2.3.21.3.2-1 & 6.2.3.21.3.2-2 illustrates the downlink power levels and other changing parameters to be 
applied for the cells at various time instants of the test execution. Row marked "TO" denotes the initial conditions after 
the preamble, while rows marked "Tl" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 

Table 6.2.3.21.3.2-1 : Time instances of cell power level and parameter changes for E-UTRA cell 





Parameter 


Unit 


CelM 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


OFF 




Qrxlevmin 


dBm 


-106 




Srxlev* 


dB 


N/A 




T1 


Cell-specific RS EPRE 


dBm/15kHz 


-70 




Srxlev* 


dB 


30 


SrxlevceiM >THRESH E- 
UTRAN high 


Note: Srxlev is calculated ir 


theUE 







Table 6.2.3.21.3.2-2: Time instances of cell power level and parameter changes for GERAN cells 





Parameter 


Unit 


Cell 24 


Remark 


TO 


RF Signal Level 


dBm 


-80 


Camping on Cell 24 is guaranteed 


RXLEV ACCESS MIN 


dBm 


-101 




CI* 


dB 


21 




Note: CI is calculated in the UE 



Table 6.2.3.21.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Downlink TBF is established according to TS 
51.010 clause 40.4.3.14 


- 


- 


- 


- 


2 


EXCEPTION: Step 3 and 4 are repeated 5 
times. 


- 


- 


- 


- 


3 


The SS transmits DOWNLINK RLC DATA 
BLOCK 


<— 


DOWNLINK RLC DATA BLOCK 


- 


- 


4 


The UE transmits PACKET DOWNLINK 
ACK/NACK 


-> 


PACKET DOWNLINK ACK/NACK 


- 


- 


5 


SS adjusts cell levels for Cell 1 according to 
rowT1 of table 6.2.3.21.3.2-1 


- 


- 


- 


- 




EXCEPTION: Steps 6 and 7 are repeated until 
the parallel behaviour in table 6.2.3.21 .3.2-4 
takes place. 










6 


The SS transmits DOWNLINK RLC DATA 
BLOCK 


<- 


DOWNLINK RLC DATA BLOCK 


- 


- 


7 


The UE transmits PACKET DOWNLINK 
ACK/NACK 


-> 


PACKET DOWNLINK ACK/NACK 


- 


- 


Note: GERAN cell priority is not allocated, hence it will be considered as the less than all allowed values of 1 to 8. 
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Table 6.2.3.21.3.2-4: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7A 
indicate that the UE is camped on E-UTRAN 
CelH? 






1 





6.2.3.21 .3.3 Specific message contents 

Table 6.2.3.21.3.3-1 Repeated E-UTRAN Neighbour Cells struct of SI2Quater for Cell 24[Preamble] 



Derivation Path: 36.508 table FFS 


Information Element 


Value/remark 


Comment 


Condition 


Repeated E-UTRAN Neighbour Cells ::= 
SEQUENCE! 








EARFCN 


Same as cell 1 


This field specifies 
the E-UTRA Absolute 
Radio Frequency 
Channel Number as 
defined in 
3GPPTS 36.104. 




Measurement Bandwidth 


Same as cell 1 






E-UTRAN PRIORITY 


'100'B 


Same as cell 1 




THRESH E-UTRAN high 


'0001 0'B 


Actual value =4 dB 




THRESH E-UTRAN low 


'0001 0'B 


Actual value =4 dB 




E-UTRAN QRXLEVMIN 


17(-106dBm) 






} 









6.2.3.22 



6.2.3.22.1 



Inter-RAT Cell Reselection Failure /from GPRS Packet_Transfer (NCO 
mode) to E-UTRA 

Test Purpose (TP) 



(1) 



with { UE in GPRS Registered state with active packet data transfer in NCO mode } 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the higher 
priority inter-RAT E-UTRA cell} 

then { UE fails to reselect as the E-UTRA cell is Barred and reselcts back to GERAN cell } 



6.2.3.22.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 45.008, clause 10.1.3.3 , TS 
44.018, clause 3.4.1.2.1.1a & TS 36.304, clause 5.3.1. 

[TS 45.008, clause 10.1.3.3] 



The algorithm in this subclause shall be used for inter-RAT cell reselection if priority information is available to the MS 
and threshold information is provided by the network. The network shall provide priority information if E-UTRAN 
frequencies are included in the neighbour cell list. The mobile station may apply either priorities broadcast in system 
information or individual priorities received through dedicated signalling. The rules regarding which set of priorities 
shall apply are defined in 3GPP TS 44.018 and 3GPP TS 44.060. 

NOTE 1 : Throughout the specification, the phrase "neighbour cell list" will include also the E-UTRAN Neighbour 
Cell list and/or the GPRS E-UTRANNeighbour Cell list where appropriate. 

If the GPRS 3G Cell Reselection Ust or the GPRS E-UTRAN Neighbour Cell list include frequencies of other radio 
access technologies, the MS shall, at least every 5 seconds update the value RLA_P for the serving cell and each of the 
at least 6 strongest non serving GSM cells. 
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The MS shall then reselect a suitable (see 3GPP TS 25.304 for UTRAN and 3GPP TS 36.304 for E-UTRAN) cell of 
another radio access technology if the criteria below are satisfied. S_non-serving_XXX is the measurement quantity of 
a non-serving inter-RAT cell and XXX indicates the other radio access technology/mode. S_non-serving_XXX is 
defined in subclause 6.6.6. 

Cell reselection to a cell of another inter-RAT frequency shall be performed if any of the conditions below (to be 
evaluated in the order shown) is satisfied: 

The S_non-serving_XXX of one or more cells of a higher priority inter-RAT frequency is greater than 
THRESH_XXX_high during a time interval T_reselection; in that case, the mobile station shall consider the 
cells for reselection in decreasing order of priority and, for cells of the same inter-RAT frequency, in decreasing 
order of S_non-serving_XXX, and reselect the first cell that satisfies the conditions above; 

The value of S_serving is lower than THRESH_serving_low for the serving cell and all measured GSM cells; in 
this case, the mobile station shall consider for reselection the inter-RAT cells in the following order, and reselect 
the first one that satisfies the following criteria: 

cells of a lower priority inter-RAT frequency whose S_non-serving_XXX is greater than 
THRESH_XXX_low during a time interval T_reselection; these cells shall be considered in decreasing order 
of priority and, for cells of the same RAT, in decreasing order of S_non-serving_XXX; 

if no cells satisfy the criterion above, inter-RAT cells for which, during a time interval T_reselection, S_non- 
serving_XXX is higher than S_serving by at least a specific hysteresis H_PRIO; these cells shall be 
considered in decreasing order of S_non-serving_XXX. 

A UTRAN FDD cell shall only be reselected if, in addition to the criteria above, its measured Ec/No value is equal to or 
greater than FDD_Qmin - FDD_Qmin_Offset. 

Cell reselection to a cell of another radio access technology (e.g. UTRAN or E-UTRAN) shall not occur within [5] 
seconds after the MS has reselected a GSM cell from an inter-RAT cell if a suitable GSM cell can be found. 

If the mobile station applies individual priorities received through dedicated signalling and priority information is 
available only for some inter-RAT frequencies, cells belonging to frequencies for which no individual priority is 
available or no threshold is broadcast in system information shall not be considered for measurement and for cell re- 
selection. 

If a mobile station in camped normally state (see 3GPP TS 43.022) applies individual priorities received through 
dedicated signalling and no priority is available for the serving cell, the mobile station shall consider any GSM cell 
(including the serving cell) to have lowest priority (i.e. lower than the eight network configured values). 

A mobile station in camped on any cell state (see 3GPP TS 43.022) shall ignore individual priorities received through 
dedicated signalling and shall apply priorities received from the system information of the serving cell while attempting 
to find a suitable cell. If the mobile station supports CS voice services, the MS shall avoid reselecting acceptable (but 
not suitable) E-UTRA cells regardless of the priorities provided in system information. 

NOTE 2: If the MS is camping on an acceptable cell, individual priorities are not discarded until an event leading to 
their deletion occurs. 

In case of a reselection attempt towards a barred UTRAN cell, the MS shall abandon further reselection attempts 
towards this UTRAN cell as defined by the Tbarred value on the barred UTRAN cell (see 3GPP TS 25.331). 

NOTE 3: It is FFS whether a similar requirement should be added in case of a reselection attempt towards a barred 
E-UTRAN cell. 

NOTE 4: Requirements for cells belonging to "forbidden LAs for roaming" should be included here. 

[TS 44.018, clause 3.4.1.2.1.1a] 

This applies only to a multi-RAT MS supporting E-UTRAN. One or more instances of the Measurement Information 
message or SI2quater message may provide E-UTRAN Neighbour Cell Description information in one or more 
instances of the Repeated E-UTRAN Neighbour Cells IE. This is used to build the E-UTRAN Neighbour Cell list. The 
E-UTRAN Neighbour Cell list may contain up to 8 E-UTRAN frequencies. For each E-UTRAN frequency, zero or 
more E-UTRAN neighbour cells may be specified that are not allowed for cell reselection. The list of not allowed cells 
is defined in the Not Allowed Cells lEs. 
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Each EARFCN in each instance of the Repeated E-UTRAN Neighbour Cells IE is added to the E-UTRAN Neighbour 
Cell list in the order in which it is received. 

[TS 36.304, clause 5.3.1] 

Cell status and cell reservations are indicated in the SystemlnformationBlockTypel [3] by means of two Information 
Elements: 

cellBarred (IE type: "barred" or "not barred") 

In case of multiple PLMNs indicated in SIB 1 sharing, this IE is common for all PLMNs 



When cell status is indicated as "not barred" and "not reserved" for operator use. 

All UEs shall treat this cell as candidate during the cell selection and cell re-selection procedures. 

When cell status "barred" is indicated or to be treated as if the cell status is "barred". 

The UE is not permitted to select/re-select this cell, not even for emergency calls. 

The UE shall select another cell according to the following rule: 

- IfthecellisaCSGcell: 

the UE may select another cell on the same frequency if the selection/reselection criteria are fulfilled. 

else 

If the IE intmFreqReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to 
"allowed", the UE may select another cell on the same frequency if re-selection criteria are fulfilled. 

The UE shall exclude the barred cell as a candidate for cell selection/reselection for 300 seconds. 

If the IE intraFreqReselection in IE cellAccessRelatedlnfo in SystemlnformationBlockTypel is set to "not 
allowed" the UE shall not re-select a cell on the same frequency as the barred cell. 

The UE shall exclude the barred cell and the cells on the same frequency as a candidate for cell 
selection/reselection for 300 seconds. 

6.2.3.22.3 Test description 

6.2.3.22.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 24. 
UE: 
None. 
Preamble: 

The UE is GPRS attached and the PDP context 2 activated according to [23]. 

6.2.3.22.3.2 Test procedure sequence 

Tables 6.2.3.22.3.2-1 & 6.2.3.22.3.2-2 illustrates the downlink power levels and other changing parameters to be 
applied for the cells at various time instants of the test execution. Row marked "TO" denotes the initial conditions after 
the preamble, while rows marked "Tl" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 
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Table 6.2.3.22.3.2-1 : Time instances of cell power level and parameter changes for E-UTRA cell 





Parameter 


Unit 


CelH 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


OFF 




Qrxlevmin 


dBm 


-106 




Srxlev* 


dB 


N/A 




cellBarred 




barred 


E-UTRAN cell is Barred, as 
indicated in 

SysteminformationBlocklypel 
(Table 6.2.3.22.3.3-2) 


11 


Cell-specific RS EPRE 


dBm/15kHz 


-70 




Srxlev* 


dB 


30 


SrxlevceiM >THRESH E- 
UTRAN high 


cellBarred 




barred 


E-UTRAN cell is Barred, as 
indicated in 

SystemlnformationBlockTypel 
(Table 6.2.3.22.3.3-2) 


Note: Srxlev is calculated in the UE 



Table 6.2.3.22.3.2-2: Time instances of cell power level and parameter changes for GERAN cell 





Parameter 


Unit 


Cell 24 


Remark 


TO 


RF Signal Level 


dBm 


-80 


Camping on Cell 24 is guaranteed 


RXLEV ACCESS MIN 


dBm 


-101 




CI* 


dB 


21 




Note: CI is calculated in the UE 



Table 6.2.3.22.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Downlink TBF is established according to TS 
51.010 clause 40.4.3.14 


- 


- 


- 


- 




EXCEPTION: Step 3 and 4 are repeated 5 
times. 


- 


- 


- 


- 


2 


The SS transmits DOWNLINK RLC DATA 
BLOCK 


<— 


DOWNLINK RLC DATA BLOCK 


- 


- 


3 


The UE transmits PACKET DOWNLINK 
ACK/NACK 


-> 


PACKET DOWNLINK ACK/NACK 


- 


- 


4 


SS adjusts cell levels for Cell 1 according to 
rowTI of table 6.2.3.22.3.2-1 


- 


- 


- 


- 


- 


EXCEPTION: Steps 6 and 7 are repeated until 
the TBF is released in Cell 24. 


- 


- 


- 


- 


6 


The SS transmits DOWNLINK RLC DATA 
BLOCK 


<— 


DOWNLINK RLC DATA BLOCK 


- 


- 


7 


The UE transmits PACKET DOWNLINK 
ACK/NACK 


~> 


PACKET DOWNLINK ACK/NACK 


- 


- 




NOTE: UE tries to Synchornise with Cell 1 and 
acquire System Information Blocks. On 
acquiring SystemlnformationBlockTypel for 
Colli , UE fails to reselct to E-UTRAN as Cell 1 
is Barred. 










8 


Check: Does UE send Channel Request on 
Cell 24? 


-> 


CHANNEL REQUEST 


1 


P 


9 


SS sends Immediate assignment 


<— 


IMMEDIATE ASSIGNMENT 






10 


Check: Does UE send Cell Update? 


— > 


CELL UPDATE 


1 


P 


11 


Downlink TBF is established according to TS 
51.010 clause 40.4.3.14 and data transfer is 
completed. 










Note: GERAN cell priority is not allocated, hence it will be considered as the less than all allowed values of 1 to 8. 
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6.2.3.22.3.3 Specific message contents 

Table 6.2.3.22.3.3-1 : Repeated E-UTRAN Neighbour Cells struct of SI2Quater for Cell 24[Preamble] 



Derivation Path: 36.508 table FFS 


Information Element 


Value/remark 


Comment 


Condition 


Repeated E-UTRAN Neighbour Cells ;:= 
SEQUENCE! 








EARFCN 


Same as cell 1 


This field specifies 
the E-UTRA Absolute 
Radio Frequency 
Channel Number as 
defined in 
3GPPTS 36.104. 




Measurement Bandwidth 


Same as cell 1 






E-UTRAN PRIORITY 


'100'B 


Same as cell 1 




THRESH E-UTRAN high 


'0001 0'B 


Actual value =4 dB 




THRESH E-UTRAN low 


'0001 0'B 


Actual value =4 dB 




E-UTRAN QRXLEVMIN 


17(-106dBm) 






} 









Table 6.2.3.22.3.3-2: SystemlnformationBlockTypel for CelH [Preamble] 



Derivation Path: 36.508 clause 4.4.3.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








cellBarred 


barred 






IntraFreqReselection 


notallowed 






1 








} 









6.2.3.28 Inter-RAT Cell Reselection from GPRS Packetjransfer to E-UTRA 
(Network Assisted Cell Change) 

6.2.3.28.1 Test Purpose (TP) 

(1) with { UE in GPRS Registered state with active packet data transfer in NC2 mode } 
ensure that { 

when { UE detects network assisted cell change and the target E-UTRA cell} 
then { UE reselects for the target E-UTRA cell} 



6.2.3.28.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 45.008, clause 10.1.4, and 
10.1.4.2: 

[TS 45.008, clause 10.1.4] 

The network may request measurement reports from the MS and control its cell re-selection. This is indicated by the 
parameter NETWORK_CONTROL_ORDER. The meaning of the different parameter values is specified as follows: 



NCO 



NCI 



Normal MS control 

The MS shall perform autonomous cell re-selection. 

MS control with measurement reports 

The MS shall send measurement reports to the network as defined in subclause 10.1.4.1. 

The MS shall perform autonomous cell re-selection. 
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NC2 Network control 

The MS shall send measurement reports to the network as defined in subclause 10.1.4.1. 
The MS shall only perform autonomous cell re-selection when the reselection is triggered by a 
downlink signalling failure as defined in subclause 6.5 or a random access failure as defined in 
3GPP TS 44.018 and 3GPP TS 44.060 or if the cell is barred or the CI criterion falls below zero. 
The MS shall only determine whether the cell is barred once camped on the cell. 

RESET The MS shall return to the broadcast parameters. Only sent on PCCCH or PACCH. 

A list given by Packet Cell Change Order applies in the new cell. This list may also include cells with other radio access 
technologies. 

All signalling for support of network controlled cell re-selection and measurement reports are defined in 3GPP TS 
44.060. 

If the MS operates in NC2 mode, the following rules shall be applied: 

The network controls the measurements of UTRAN cells by the parameter Qsearch_P. The network controls the 
measurements of E-UTRAN cells by the parameter Qsearch_P_E-UTRAN. 

The network may control UTRAN measurements per individual UTRAN frequency by the parameters 
Measurement_Control_UTRAN and E-UTRAN measurements per individual E-UTRAN frequency by the 
parameters Measurement_Control_E-UTRAN. 

[TS 45.008, clause 10.1.4.1] 

When ordered to send measurement reports, the MS shall continuously monitor all carriers in BA(GPRS) or as 
indicated by the parameter NC_FREQUENCY_LIST and the BCCH carrier of the serving cell. The measurement 
requirements are defined in subclause 10.1.1 for the actual packet mode 

[TS 45.008, clause 10.1.4.2] 

A cell re-selection command may be sent from the network to an MS. When the MS receives the command, it shall re- 
select the cell according to the included cell description and change the network control mode according to the 
command (see 3GPP TS 44.060). The command may include re-selection of another radio access technology/mode. 

[TS 44.018, clause 3.4.1.2.1.1a] 

This applies only to a multi-RAT MS supporting E-UTRAN. One or more instances of the Measurement Information 
message or SI2quater message may provide E-UTRAN Neighbour Cell Description information in one or more 
instances of the Repeated E-UTRAN Neighbour Cells IE. This is used to build the E-UTRAN Neighbour Cell list. The 
fast acquisition of system information procedure, as defined in subclause 3.4.1.2.1.11, shall be used to acquire E- 
UTRAN measurement parameters and neighbour cell information from SI2quater and MEASUREMENT 
INFORMATION. 

6.2.3.28.3 Test description 

6.2.3.28.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 and Cell 24. 
UE: 

-TheHPLMNisPLMNl. 

Preamble: 

The UE is GPRS attached to the home PLMN and the PDP context 2 activated according to [23]. 

Tables 6.2.3.28.3.2-1 & 6.2.3.28.3.2-2 illustrates the downlink power levels and other changing parameters to be 
applied for the cells at various time instants of the test execution. Row marked "TO" denotes the initial conditions after 
the preamble, while rows marked "Tl" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 
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Table 6.2.3.28.3.2-1 : Time instances of cell power level and parameter changes for the E-UTRA cell 





Parameter 


Unit 


Celll 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


OFF 




Qrxlevmin 


dBm 


-106 




Qrxlevminoffset 


dB 







Pcompensation 


dB 







T1 


Cell-specific RS EPRE 


dBm/15kHz 


-70 


SrxlevCein > 


Qrxlevmin 


dBm 


-106 




Qrxlevminoffset 


dB 







Pcompensation 


dB 







Note: Srxiev is calculated in the UE 



Table 6.2.3.28.3.2-2: Time instances of cell power level and parameter changes for the GERAN cell 





Parameter 


Unit 


Cell 24 


Remark 


TO 


RF Signal Level 


dBm 


-80 


Camping on Cell 24 is guaranteed 


RXLEV ACCESS MIN 


dBm 


-101 




CI* 


dB 


21 




T1 


RF Signal Level 


dBm 


-80 




RXLEV ACCESS MIN 


dBm 


-101 




CI* 


dB 


21 




Note: CI is calculated in the UE 



Table 6.2.3.28.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


UE is brought into downlink packet transfer 
mode . SS sends PACKET DQWNLINK 
ASSIGNMENT 


<— 


PACKET DOWNLINK 
ASSIGNMENT 






2 


SS sends PACKET MEASUREMENT ORDER 


<- 


PACKET MEASUREMENT 
ORDER 


- 


- 


3 


SS sends downlink data 


<— 


- 


- 


- 


4 


The UE transmits PACKET MEASUREMENT 
REPORT 


-> 


PACKET MEASUREMENT 
REPORT 






5 


SS adjusts cell levels according to row T1 of 
tables 6.2.3.28.3.2-1 and 6.2.3.28.3.2-2. 


- 


- 


- 


- 


6 


EXCEPTION: Step 3 to 4 are repeated until 
measurement results for cell 1 are included in 
the PACKET MEASUREMENT REPORT 
message 










7 


SS sends PACKET CELL CHANGE ORDER 
for cell 1 as the target cell 


<- 


PACKET CELL CHANGE ORDER 


- 


- 


8 


Check: Does UE send RRC CONNECTION 
REQUEST on cell 1? 


-> 


RRCConnectionRequest 


1 


P 


9 


SS sends RRCCconnectionSetupXo the UE 


<- 


RRCCconnectionSetup 


- 


- 


10 


Check: Does the UE send 
RRCCconnectionSetupComplete message on 
cell 1? 


-> 


RRCCconnectionSetupComplete 


1 


P 


Note: GERAN cell priority is not allocated, hence it will be considered as the less than all allowed values of 1 to 8. 
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6.2.3.28.3.3 



Specific message contents 

Table 6.2.3.28.3.3-1 : SI2Quater for Cell 24 (Preamble) 



Derivation Path: 44.018 Table 1 0.5.2.33b. 1 


Information Element 


Value/remark 


Comment 


Condition 


Repeated E-UTRAN Neighbour Cells ;:= 
SEQUENCE! 








EARFCN 


Same as cell 1 


This field specifies 
the E-UTRA Absolute 
Radio Frequency 
Channel Number as 
defined in 
3GPPTS 36.104. 




Measurement Bandwidth 


Same as cell 1 






E-UTRAN PRIORITY 


'100'B 


Same as cell 1 




E-UTRAN QRXLEVMIN 


17(-106dBm) 






} 









Table 6.2.3.28.3.3-2: Message ATTACH REQUEST (Preamble) 



Derivation Path: Table 9.4.1/3GPP TS 24.008 


Information Element 


Value/remark 


Comment 


Condition 


MS Radio Access capability 








GERAN to E-UTRA support in GERAN packet 
transfer mode 


'IO'Bor'11'B 


UTRAN Neighbour 
Cell measurements 
and MS autonomous 
cell reselection to E- 
UTRAN and CCN 
towards E-UTRAN, 
E-UTRAN Neighbour 
Cell measurement 
reporting and 
Network controlled 
cell reselection to E- 
UTRAN 




Mobile station classmark 3 








E-UTRA FDD support 


'O'Bor'1'B 




CI 


..E-UTRA TDD support 


'O'Bor'1'B 




C1 



CI 



At least one of these fields shall be set to '1 'B 



Table 6.2.3.28.3.3-3: Message PACKET MEASUREMENT ORDER (step 2, Table 6.2.3.28.3.2-3) 



Derivation Path: 51 .01 0-1 clause 42.4.3.2.3 


Information Element 


Value/remark 


Comment 


Condition 


Global TFI 


TFI of the uplink TBF 






NC Measurement parameters ::={ 








NETWORK CONTROL ORDER 


'10'B 


NC2 




NC REPORTING PERIOD 1 


'111'B 


61.44 sec 




NC REPORTING PERIOD T 


'010'B 


1.92 sec 




1 








NC FREQUENCY LIST 





Not present 
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Table 6.2.3.28.3.3-4: Message PACKET CELL CHANGE ORDER (step 7, Table 6.2.3.28.3.2-3) 



Derivation Path: 51.010-1 clause 42.4.3.2.1 


Information Element 


Value/remark 


Comment 


Condition 


Global TFI 


TFI of the uplink TBF 






IMMEDIATE REL 


1 






ARFCN, BSIC 


specified for cell 1 






NC Measurement parameters ::={ 








NETWORK CONTROL ORDER 


'10'B 


NC2 




NC REPORTING PERIOD 1 


'111'B 


61.44 sec 




NC REPORTING PERIOD T 


'100'B 


7.68 sec 




} 








NC FREQUENCY LIST 





Not present 





Table 6.2.3.28.3.3-5: RRCConnectionRequest (step 8, Table 6.2.3.28.3.2-3) 



Derivation Path: 36.508 table 4.6.1-16 


Information Element 


Value/remark 


Comment 


Condition 


ue-ldentity 


Any allowed value 







6.2.3.30 Inter-RAT Cell Reselectlon failure from GPRS Packet transfer to E-UTRA 
(Network Assisted Cell Change) 

6.2.3.30.1 Test Purpose (TP) 

(1) 

with { UE in GPRS Registered state with active packet data transfer in NC2 mode } 
ensure that { 

when { UE detects network assisted cell change and cell re-selection failure for the target E-UTRA 
cell} 

then { UE reselects back the GERAN cell and downlink data transfer is continued and completed in 
GERAN cell } 



6.2.3.30.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 45.008, clause 10.1.4, and 
10.1.4.2: 

[TS 45.008, clause 10.1.4] 

The network may request measurement reports from the MS and control its cell re-selection. This is indicated by the 
parameter NETWORK_CONTROL_ORDER. The meaning of the different parameter values is specified as follows: 



NCO 



NCI 



NC2 



RESET 



Normal MS control 

The MS shall perform autonomous cell re-selection. 

MS control with measurement reports 

The MS shall send measurement reports to the network as defined in subclause 10.1.4.1. 

The MS shall perform autonomous cell re-selection. 

Network control 

The MS shall send measurement reports to the network as defined in subclause 10.1.4.1. 

The MS shall only perform autonomous cell re-selection when the reselection is triggered by a 

downlink signalling failure as defined in subclause 6.5 or a random access failure as defined in 

3GPP TS 44.018 and 3GPP TS 44.060 or if the cell is barred or the CI criterion falls below zero. 

The MS shall only determine whether the cell is barred once camped on the cell. 

The MS shall return to the broadcast parameters. Only sent on PCCCH or PACCH. 



A list given by Packet Cell Change Order applies in the new cell. This list may also include cells with other radio access 
technologies. 
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All signalling for support of network controlled cell re-selection and measurement reports are defined in 3GPP TS 
44.060. 

If the MS operates in NC2 mode, the following rules shall be applied: 

The network controls the measurements of UTRAN cells by the parameter Qsearch_P. The network controls the 
measurements of E-UTRAN cells by the parameter Qsearch_P_E-UTRAN. 

The network may control UTRAN measurements per individual UTRAN frequency by the parameters 
Measurement_Control_UTRAN and E-UTRAN measurements per individual E-UTRAN frequency by the 
parameters Measurement_Control_E-UTRAN. 

[TS 45.008, clause 10.1.4.2] 

A cell re-selection command may be sent from the network to an MS. When the MS receives the command, it shall re- 
select the cell according to the included cell description and change the network control mode according to the 
command (see 3GPP TS 44.060). The command may include re-selection of another radio access technology/mode. 

If a UTRAN capable MS receives a cell re-selection command towards a not known UTRAN cell (see 3GPP TS 25. 133 
and 3GPP TS 25.123), or if a E-UTRAN capable MS receives a cell re-selection command towards a not known E- 
UTRAN cell (see 3GPP TS 36.133), then the MS shall search for synchronisation information up to 800 ms. In case of 
failure, the MS shall return to the old cell and indicate a packet cell change failure (see 3GPP TS 44.060). 



Test description 
Pre-test conditions 



6.2.3.30.3 
6.2.3.30.3.1 
System Simulator: 

- Cell 1 and Cell 24. 
UE: 

TheHPLMNisPLMNl. 

Preamble: 

The UE is GPRS attached to the home PLMN and the PDP context 2 activated according to [23]. 

6.2.3.30.3.2 Test procedure sequence 

Tables 6.2.3.30.3.2-1 & 6.2.3.30.3.2-2 illustrates the downlink power levels and other changing parameters to be 
applied for the cells at various time instants of the test execution. Row marked "TO" denotes the initial conditions after 
the preamble, while rows marked "Tl" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 

Table 6.2.3.30.3.2-1 : Time instances of cell power level and parameter changes for E-UTRA cell 





Parameter 


Unit 


Cein 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


OFF 




Qrxlevmin 


dBm 


-106 




Qrxlevminoffset 


dB 







Pcompensation 


dB 







11 


Cell-specific RS EPRE 


dBm/15kHz 


-70 


The power level is such that 
SrxlevCell 1 > 


Note: Srxlev is calculated in the UE 
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Table 6.2.3.30.3.2-2: Time instances of cell power level and parameter changes for GERAN cells 





Parameter 


Unit 


Cell 24 


Remark 


TO 


RF Signal Level 


dBm 


-80 


Camping on Cell 24 is guaranteed 


RXLEV ACCESS MIN 


dBm 


-101 




C1* 


dB 


21 




T1 


RF Signal Level 


dBm 


-80 




RXLEV ACCESS MIN 


dBm 


-101 




C1* 


dB 


21 




Note: C1 is calculated in the UE 



Table 6.2.3.30.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


UE is brought into downlink packet transfer 
mode . SS sends PACKET DOWNLINK 
ASSIGNMENT 


<— 


PACKET DOWNLINK 
ASSIGNMENT 






2 


SS sends PACKET MEASUREMENT ORDER 


<- 


PACKET MEASUREMENT 
ORDER 


- 


- 


3 


SS sends downlink data 


<— 


- 


- 


- 


4 


The UE transmits PACKET MEASUREMENT 
REPORT 


-> 


PACKET MEASUREMENT 
REPORT 






5 


SS adjusts cell levels for Cell 1 according to 
rowTI of table 6.2.3.30.3.2-1 


- 


- 


- 


- 


6 


EXCEPTION: Step 3 to 4 are repeated until 
measurement results for cell 1 are included in 
the PACKET MEASUREMENT REPORT 
message 










7 


SS sends PACKET CELL CHANGE ORDER 
for cell 1 as the target cell 


<- 


PACKET CELL CHANGE ORDER 


- 


- 


8 


UE sends RRCConnectionRequestXo cell 1 


-> 


RRCConnectionRequest 


- 


- 


9 


SS sends RRCConnectionRejectto the UE 


<- 


RRCConnectionReject 


- 


- 


10 


All the UL/DL messages sent in steps 1 1 -20 
shall be sent on cell 24. 


- 




- 


- 


11 


Check: Does the UE send CHANNEL 
REOUEST ? 


-> 


CHANNEL REQUEST 


1 


P 


12 


SS sends IMMEDIATE ASSIGNMENT 


<— 


IMMEDIATE ASSIGNMENT 


- 


- 


13 


Check: Does the UE send PACKET CELL 
CHANGE FAILURE? 


-> 


PACKET CELL CHANGE 
FAILURE 


1 


P 


14 


UE may perform ROUTING AREA UPDATE 

procedure 

SS sends PACKET DOWNLINK 

ASSIGNMENT 


<— 


PACKET DOWNLINK 
ASSIGNMENT 






15 


SS sends downlink data until downlink 
data transfer is complete 


<— 


~ 


~ 


" 


Note 1 : GERAN cell priority is not allocated, hence it will be considered as the less than all allowed values of 1 to 8. 
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6.2.3.30.3.3 Specific message contents 

Table 6.2.3.30.3.3-1 : Message SI2Quater for Cell 24 (Preamble) 



Derivation Path: 44.018 Table 1 0.5.2.33b. 1 


Information Element 


Value/remark 


Comment 


Condition 


Repeated E-UTRAN Neighbour Cells ;:= 
SEQUENCE! 








EARFCN 


Same as cell 1 


This field specifies 
the E-UTRA Absolute 
Radio Frequency 
Channel Number as 
defined in 
3GPPTS 36.104. 




Measurement Bandwidth 


Same as cell 1 






E-UTRAN PRIORITY 


'100'B 


Same as cell 1 




E-UTRAN QRXLEVMIN 


17(-106dBm) 






} 









Table 6.2.3.30.3.3-2: Message ATTACH REQUEST (Preamble) 



Derivation Path: Table 9.4.1/3GPP TS 24.008 


Information Element 


Value/remark 


Comment 


Condition 


MS Radio Access capability 








GERAN to E-UTRA support in GERAN packet 
transfer mode 


'IO'Bor'11'B 


UTRAN Neighbour 
Cell measurements 
and MS autonomous 
cell reselection to E- 
UTRAN and CCN 
towards E-UTRAN, 
E-UTRAN Neighbour 
Cell measurement 
reporting and 
Network controlled 
cell reselection to E- 
UTRAN 




Mobile station classmark 3 








E-UTRA FDD support 


'O'Bor'1'B 




CI 


..E-UTRA TDD support 


'O'Bor'1'B 




C1 



CI 



At least one of these fields shall be set to '1 'B 



Table 6.2.3.30.3.3-3: Message PACKET MEASUREMENT ORDER (step 2, Table 6.2.3.30.3.2-3) 



Derivation Path: 51 .01 0-1 clause 42.4.3.2.3 


Information Element 


Value/remark 


Comment 


Condition 


Global TFI 


TFI of the uplink TBF 






NC Measurement parameters ::={ 








NETWORK CONTROL ORDER 


'10'B 


NC2 




NC REPORTING PERIOD 1 


'111'B 


61.44 sec 




NC REPORTING PERIOD T 


'010'B 


1.92 sec 




1 








NC FREQUENCY LIST 





Not present 
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Table 6.2.3.30.3.3-4: Message PACKET CELL CHANGE ORDER (step 7, Table 6.2.3.30.3.2-3) 



Derivation Path: 51.010-1 clause 42.4.3.2.1 


Information Element 


Value/remark 


Comment 


Condition 


Global TFI 


TFI of the uplink TBF 






IMMEDIATE REL 


1 






ARFCN, BSIC 


specified for cell 1 






NC Measurement parameters ::={ 








NETWORK CONTROL ORDER 


'10'B 


NC2 




NC REPORTING PERIOD 1 


'111'B 


61.44 sec 




NC REPORTING PERIOD T 


'100'B 


7.68 sec 




} 








NC FREQUENCY LIST 





Not present 





Table 6.2.3.30.3.3-5: RRCConnectionRequest (step 8, Table 6.2.3.30.3.2-3) 



Derivation Path: 36.508 table 4.6.1-16 


Information Element 


Value/remark 


Comment 


Condition 


ue-ldentity 


Any allowed value 







Table 6.2.3.30.3.3-6: Message PACKET CELL CHANGE FAILURE (step 13, Table 6.2.3.30.3.2-3) 



Derivation Path: 51 .01 0-1 clause 42.4.3.2.2 


Information Element 


Value/remark 


Comment 


Condition 


CAUSE 


'001 0'B 







6.3 
6.3.6 

6.3.6.1 
(1) 



Closed Subscriber Group cells 

Ignoring CSG cells in cell selection/reselection when allowed CSG 
list is empty or not supported 

Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state and UE does not support Allowed CSG list or UE's Allowed CSG list 
is empty } 
ensure that { 

when { Srvlev < for non-CSG cell and Srxlev > for intra- frequency CSG cell and Srxlev > for 
inter- frequency CSG cell } 

then { UE does not select the intra- freq CSG cell nor the inter- frequency CSG cell } 

} 

(2) 

with { UE in E-UTRA RRC_IDLE state and UE does not support Allowed CSG list or UE's Allowed CSG list 
is empty } 
ensure that { 

when { Srvlev > for non-CSG cell and Srxlev of non-CSG cell < Srxlev of intra- frequency CSG cell 
and Srxlev of non-CSG cell < Srxlev of inter- frequency CSG cell } 
then { UE selects the non-CSG cell } 



(3) 

with { UE in E-UTRA RRC_IDLE state and UE does not support Allowed CSG list or UE's Allowed CSG list 
is empty } 
ensure that { 

when { UE detects an intra- frequency CSG cell with R„ higher than Rg } 
then { UE does not reselect to the intra- frequency CSG cell } 
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(4) 

with { UE in E-UTRA RRC_IDLE state and UE does not support Allowed CSG list or UE's Allowed CSG list 
is empty } 
ensure that { 

when { UE detects an inter- frequency CSG cell with R„ higher than Rg } 
then { UE does not reselect to the inter- frequency CSG cell } 



6.3.6.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.304, clause 5.2.3.2, 
5.2.4.6 and TS 36.331, clause B.2. 

[TS 36.304, clause 5.2.3.2] 

The cell selection criterion S is fulfilled when: 



Srxlev > 



Where: 



Srxlev = Qrxlevmeas - (Qrxlevmin + Qrxlevminoffset) " PcOmpCnSation 



Where: 

the signalled value QrxlevminOffset is only applied when a cell is evaluated for cell selection as a result of a periodic 
search for a higher priority PLMN while camped normally in a VPLMN [3]. During this periodic search for higher 
priority PLMN the UE may check the S criteria of a cell using parameter values stored from a different cell of this 
higher priority PLMN. 



Srxlev 


Cell Selection RX level value (dB) 


^rxlevmeas 


Measured cell RX level value (RSRP). 


Urxlevmin 


Minimum required RX level in the cell (dBm) 


CJrxlevminoffset 


Offset to the signalled Qrxievmin taken into account in the Srxlev 
evaluation as a result of a periodic search for a higher priority PLMN 
while camped normally in a VPLMN [5] 


Pcompensation 


max(PEMAx- PuMAx, 0) (dB) 


Pemax 


Maximum TX power level an UE may use when transmitting on the 
uplink in the cell (dBm) defined as Pemax in [TS 36.101] 


PUMAX 


Maximum RF output power of the UE (dBm) according to the UE 
power class as defined in [TS 36.101] 



[TS 36.304, clause 5.2.4.6] 

The cell-ranking criterion Rs for serving cell and Rn for neighbouring cells is defined by: 



where: 



Qrr 



Qoffset 



Rs = Qmeas,s + Qhystg 

Rn=Qmeas,n- Qoffset 



RSRP measurement quantity used in cell reselections. 



For intra-frequency: Equals to Qoffsets,n, if Qoffsets,n is valid, 
otherwise this equals to zero. 

For inter-frequency: Equals to Qoffsets.n plus Qoffsetfrequency, if 
Qoffsets.n is valid, otherwise this equals to Qoffsettrequency. 
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The UE shall perform ranking of all cells that fulfill the cell selection criterion S, which is defined in 5.2.3.2 

The cells shall be ranked according to the R criteria specified above, deriving Qmeas.n and Qmeas.s and calculating the R 
values using averaged RSRP results. 

If a cell is ranked as the best cell the UE shall perform cell re-selection to that cell. If this cell is found to be not- 
suitable, the UE shall behave according to subclause 5.2.4.4. 

In all cases, the UE shall reselect the new cell, only if the following conditions are met: 

the new cell is better ranked than the serving cell during a time interval TreselectionRAi; 

more than 1 second has elapsed since the UE camped on the current serving cell. 
[TS 36.331, clause B.2] 
In this release of the protocol, it is mandatory for the UE to support a minimum set of CSG functionality consisting of: 

Identifying whether a cell is CSG or not; 

Ignoring CSG cells in cell selection/reselection. 
6.3.6.3 Test description 

6.3.6.3.1 Pre-test conditions 
System Simulator: 

- Celll,Cell2andCell3. 

- Cell 1 is not a CSG cell. 

- Cell 2 and Cell 3 are CSG cells. 
UE: 

- If pc_Allowed_CSGJist, the UE's Allowed CSG list is empty. 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 

6.3.6.3.2 Test procedure sequence 

Table 6.3.6.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while rows marked "Tl", 
"T2" and "T3" are to be applied subsequently. The exact instants on which these values shall be applied are described in 
the texts in this clause. 

Table 6.3.6.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 2 


Cell 3 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-115 


-97 


-85 


Srxlevceii i < and Srxlevceii 3 > 
Srxlevceii 2 > 0. 


Qrxlevmin 


dBm 


-106 


-106 


-106 




Qhyst 


dB 













Srxlev* 


dB 


-9 


9 


21 


Cell 3 is the strongest cell 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-97 


-73 


-85 


Srxlevceii 2 > Srxlevceii 3 > Srxlevceii 1 
>0. 


Srxlev* 


dB 


9 


33 


21 


Cell 2 is the strongest cell 


T2 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-79 


-115 


The power level values are assigned 
to satisfy Rceii 1 < Rceii 2. 


T3 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-115 


-73 


The power level values are assigned 
to satisfy Rceii 1 < Rceii 3. 
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Table 6.3.6.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


Checl<: Does the UE send an 
RRCConnectionRequest on Cell 2 or Cell 3 
within 60 seconds? 


-> 


RRCConnectionRequest 


1 


F 


3 


The SS changes Cell 1 , Cell 2 and Cell 3 
levels according to row "T1" in table 6.3.6.3.2- 
1. 










4 


Check: Does the UE send an 
RRCConnectionRequest on Cell 1? 


-> 


RRCConnectionRequest 


2 


P 


5- 
19 


Steps 3 to 17 of the registration procedure 
described in TS 36.508 subclause 4.5.2.3 are 
performed on Cell 1 . 

NOTE: The UE performs registration and the 
RRC connection is released. 










20 


The SS changes Cell 1 , Cell 2 and Cell 3 
levels according to row "T2" in table 6.3.6.3.2- 
1. 










21 


Check: Does the UE send an 
RRCConnectionRequest on Cell 2 within 60 
seconds? 


-> 


RRCConnectionRequest 


3 


F 


22 


The SS changes Cell 1 , Cell 2 and Cell 3 
levels according to row "T3" in table 6.3.6.3.2- 
1. 










23 


Check: Does the UE send an 
RRCConnectionReques on Cell 3 within 60 
seconds? 


-> 


RRCConnectionRequest 


4 


F 



6.3.6.3.3 



Specific message contents 
Table 6.3.6.3.3-1 : Conditions for tables 6.3.6.3.3-2 and 6.3.6.3.3-3 



Condition 


Explanation 


Cell 1 


This condition applies to system information transmitted on Cell 1 . 


Cell 2 


This condition applies to system information transmitted on Cell 2. 


Cell 3 


This condition applies to system information transmitted on Cell 3. 
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Table 6.3.6.3.3-2: SystemlnformationBlockTypel for Cell 1, 2 and 3 (Pre-test conditions and all steps, 

Table 6.3.6.3.2-2) 



Derivation Path: S6.508 clause 4.4.3.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








csg-lndication 


FALSE 




CelM 




TRUE 




Cell 2 
Cell 3 


csg-ldentity 


Not present 




Colli 




'000 0000 0000 0000 
0000 0000 001 0'B 




Cell 2 




'000 0000 0000 0000 
0000 0000 001 1'B 




Cell 3 


} 








cellSelectionlnfo SEQUENCE { 








q-RxLevlVlin 


-55(-110dBm) 






} 








schedulinglnfo ::= SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 1 in TS 
S6.508 section 4.4.3.1.1 


Only SIB2 and 
SIB3 are 
transmitted 


Colli 


schedulinglnfo ::= SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 2 in TS 
36.508 section 4.4.3.1.1 


OnlySIB2, SIB3 
and SIB4 are 
transmitted 


Cell 2 
Cell 3 


} 









Table 6.3.6.3.3-3: SystemlnformationBlockTypeS ior Cell 1, 2 and 3 (Pre-test conditions and all steps, 

table 6.3.6.3.2-2 



Derivation Path: 36.508 clause 4.4.3.3, Table 4.4.3.3-2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType3 ::= SEQUENCE { 








cellReselectionlnfoCommon SEQUENCE { 








q-Hyst 


dBO 






} 








} 









Table 6.3.6.3.3-4: SystemlnformationBlockType4 ior Cell 2 and 3 (Pre-test conditions and all steps, 

table 6.3.6.3.2-2 



Derivation Path: 36.508 clause 4.4.3.3, Table 4.4.3.3-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType4 ::= SEQUENCE { 








csg-PhysCellldRange ::= SEQUENCE { 








Start 


2 


Cell 2 




3 


Cell 3 




Range 


Not present 


The UE shall 
apply value 1 in 
case the field is 
absent, in which 
case only the 
physical cell 
identity value 
indicated by start 
applies. 




1 








} 
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Layer 2 



For all layer 2 test cases, default values for periodicBSR-Timer, retxBSR-Timer and phr-Config shall be taken 
according to the condition no_periodic_BSR_or_PHR as specified in TS 36.508 subclause 4.8.2.1.5 unless test case 
specific values are given in the test case. In test cases configuring UM RLC default value for drx-InactivityTimer shall 
be taken according to condition drx_inactivity_timer_high as specified in TS 36.508 subclause 4.8.2.1.5 unless test case 
specific values are given in the test case. 

In all MAC and RLC handover test cases during the execution of generic test procedure defined in [18] section 4.5.3A 
following specific message content should be used for RRC Connection Reconfiguration message transmitted at step 8 
ofthe table 4.5.3.3-1 [18] 

Table 7-1 : PDCP-Config-DRB-AM 



Information Element 


Value/remark 


Comment 


Condition 


PDCP-Config-DRB-AM ::= SEQUENCE { 
















rIc-AM SEQUENCE { 








statusReportRequired 


FALSE 






} 








} 









7.1 

7.1.1 

7.1.1.1 

7.1.1.1.1 
(1) 



MAC 

Mapping between logical channels and transport channels 
CCCH mapped to UL SCH/ DL-SCH / Reserved Logical Channel ID 
Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state and after transmitting a RRCConnectionRequest message } 
ensure that { 

when { UE receives a MAC PDU on DL SCH and addressed to its T-CRNTI but including a reserved value 
for LCID } 

then { UE discards the MAC PDU } 



(2) 

with { UE in E-UTRA RRC_IDLE state and after transmitting a RRCConnectionRequest message } 
ensure that { 
when { UE receives a MAC PDU on DL SCH and addressed to its T-CRNTI with value ' 00000 'B as LCID 
then { UE forwards to upper layers the disassembled and demultiplexed SDU on logical channel 
CCCH } 



7.1.1.1.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.11, 6.2.1 , 
5.3.3 and 6.1.2. 

[TS 36.321, clause 5.11] 

When a MAC entity receives a MAC PDU for the UE's C-RNTI or Semi-Persistent Scheduhng C-RNTI, containing 
reserved or invalid values, the MAC entity shall: 

discard the received PDU. 

[TS 36.321, clause 6.2.1] 

The MAC header is of variable size and consists of the following fields: 
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LCID: The Logical Channel ID field identifies the logical channel instance of the corresponding MAC SDU or 
the type of the corresponding MAC control element or padding as described in tables 6.2.1-1 and 6.2. 1-2 for the 
DL and UL-SCH respectively. There is one LCID field for each MAC SDU, MAC control element or padding 
included in the MAC PDU. The LCID field size is 5 bits; 



Table 6.2.1-1 : Values of LCID for DL-SCH 



Index 


LCID values 


00000 


CCCH 


00001-01010 


Identity of the logical channel 


01011-11011 


Reserved 


11100 


UE Contention Resolution Identity 


11101 


Timing Advance 


11110 


DRX Command 


11111 


Padding 



[TS 36.321, clause 5.3.3] 

The UE shall disassemble and demultiplex a MAC PDU as defined in subclause 6.1.2. 

[TS 36.321, clause 6.1.2] 

A MAC PDU consists of a MAC header, zero or more MAC Service Data Units (MAC SDU), zero, or more MAC 
control elements, and optionally padding; as described in Figure 6.1.2-3. 

Both the MAC header and the MAC SDUs are of variable sizes. 

A MAC PDU header consists of one or more MAC PDU sub-headers; each subheader corresponds to either a MAC 
SDU, a MAC control element or padding. 

A MAC PDU subheader consists of the six header fields R/R/E/LCID/F/L but for the last subheader in the MAC PDU 
and for fixed sized MAC control elements. The last subheader in the MAC PDU and sub-headers for fixed sized MAC 
control elements consist solely of the four header fields R/R/E/LCID. A MAC PDU subheader corresponding to 
padding consists of the four header fields R/R/E/LCID. 



Octi 
Oct 2 
Oct 3 




R 


R 


E 


LCID 


F 


L 


L 



R/R/E/LCID/F/L sub-header with 
7-bits L field 



R/R/E/LCID/F/L sub-header with 
15-bitsL field 



Figure 6.1.2-1 : R/R/E/LCID/F/L MAC subheader 



R R E 



LCID 



Octi 



R/R/E/LCID sub-header 



Figure 6.1.2-2: R/R/E/LCID MAC subheader 



MAC PDU sub-headers have the same order as the corresponding MAC SDUs, MAC control elements and padding. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



167 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



MAC control elements, are always placed before any MAC SDU. 

Padding occurs at the end of the MAC PDU, except when single-byte or two-byte padding is required. Padding may 
have any value and the UE shall ignore it. 

When single-byte or two-byte padding is required, one or two MAC PDU sub-headers corresponding to padding are 
placed at the beginning of the MAC PDU before any other MAC PDU subheader. 

A maximum of one MAC PDU can be transmitted per TB per UE. 



R/R/E/LCID R/R/E/LCID R/R/E/LCID/F/L R/R/E/LCID/F/L 

sub-header sub-header sub-header sub-header 



R/R/E/LCID/F/L R/R/E/LCID padding 
sub-header sub-header 



MAC header 



MAC Control MAC Control 
element 1 element 2 



MAC SDU 



MAC SDU 



Padding 
(opt) 



■< MAC payload ► 

Figure 6.1.2-3: Example of lUIAC PDU consisting of IVIAC header, IVIAC control elements, MAC SDUs 

and padding 



7.1.1.1.3 Test description 

7.1.1.1.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
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7.1.1.1.3.2 



Test procedure sequence 

Table 7.1 .1 .1 .3.2-1 : Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Steps 1 to 4 shall be repeated 
for decreasing reserved LCID values from 
01011 to 11011. 










1 


The SS transmits a Paging message including 
a matched identity. 


<— 


- 


- 


- 


2 


The UE transmits an RRCConnectionRequest 
message. 


— > 


- 


- 


- 


3 


The SS Transmits a valid MAC PDU 
containing RRCConnectionSetup, and 
Contention Resolution Identity MAC Control 
Element except for LCID in MAC Header set to 
reserved value 11011 or lower (depending on 
iteration number). 


<— 


MAC PDU 








EXCEPTION: In parallel with step 4, UE may 
execute parallel behaviour defined in table 
7.1.1.1.3.2-2 










4 


Check: For 5 seconds after Step3, does the 
UE transmit RRCConnectionSetupComplete 
message? 


— > 


RRCConnectionSetupComplete 


1 


F 


5 


The SS transmits a Paging message including 
a matched identity. 


<— 


- 


- 


- 


6 


The UE transmits an RRCConnectionRequest 
message. 


— > 


- 


- 


- 


7 


The SS transmits a valid MAC PDU containing 
RRCConnectionSetup, and Contention 
Resolution Identity MAC Control Element and 
LCID in MAC Header set correctly to CCCH 
00000 


<— 


MAC PDU 






8 


Check: does the UE transmit an 
RRCConnectionSetupComplete message 
including SERVICE REQUEST message? 


— > 


RRCConnectionSetupComplete 


2 


P 


9- 
12 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 











Table 7.1.1.1.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE transmits an RRCConnectionRequest 
message. 


— > 


- 


- 


- 



7.1.1.1.3.3 

None. 

7.1.1.2 

7.1.1.2.1 

(1) 



Specific message contents 

DTCH or DCCH mapped to UL SCH/ DL-SCH / Reserved Logical Channel ID 
Test Purpose (TP) 



with { UE in E-UTRA RRC_Connected state with DRB [Logical channel ID 3] established } 
ensure that { 

when { UE receives a MAC PDU on DL SCH and addressed to its CRNTI but including a reserved value 
for LCID } 

then { UE shall not forward the disassembled and demultiplexed SDU on the configured logical 
channels } 
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(2) 

with { UE in E-UTRA RRC_IDLE state and after transmitting a RRCConnectionRequest message } 
ensure that { 
when { UE receives a MAC PDU on DL SCH and addressed to its CRNTI with value ' 00011 'B as LCID } 
then { UE shall forward the disassembled and demultiplexed SDU on the corresponding logical 
channel } 



7.1.1.2.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 6.2.1, 5.3.3 
and 6.1.2. 

[TS 36.321, clause 6.2.1] 

The MAC header is of variable size and consists of the following fields: 

LCID: The Logical Channel ID field identifies the logical channel instance of the corresponding MAC SDU or 
the type of the corresponding MAC control element or padding as described in tables 6.2.1-1 and 6.2.1-2 for the 
DL and UL-SCH respectively. There is one LCID field for each MAC SDU, MAC control element or padding 
included in the MAC PDU. The LCID field size is 5 bits; 



Table 6.2.1-1 : Values of LCID for DL-SCH 



Index 


LCID values 


00000 


CCCH 


00001-01010 


Identity of the logical channel 


01011-11011 


Reserved 


11100 


UE Contention Resolution Identity 


11101 


Timing Advance 


11110 


DRX Command 


11111 


Padding 



[TS 36.321, clause 5.3.3] 

The UE shall disassemble and demultiplex a MAC PDU as defined in subclause 6.1.2. 

[TS 36.321, clause 6.1.2] 

A MAC PDU consists of a MAC header, zero or more MAC Service Data Units (MAC SDU), zero, or more MAC 
control elements, and optionally padding; as described in Figure 6.1.2-3. 

Both the MAC header and the MAC SDUs are of variable sizes. 

A MAC PDU header consists of one or more MAC PDU sub-headers; each subheader corresponds to either a MAC 
SDU, a MAC control element or padding. 

A MAC PDU subheader consists of the six header fields R/R/E/LCID/F/L but for the last subheader in the MAC PDU 
and for fixed sized MAC control elements. The last subheader in the MAC PDU and sub-headers for fixed sized MAC 
control elements consist solely of the four header fields R/R/E/LCID. A MAC PDU subheader corresponding to 
padding consists of the four header fields R/R/E/LCID. 
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R 


R 


E 


LCID 


F 


L 


L 



Octi 
Oct 2 
Oct 3 



R/R/E/LCID/F/L sub-header with 
7-bits L field 



R/R/E/LCID/F/L sub-header with 
15-bitsL field 



Figure 6.1.2-1 : R/R/E/LCID/F/L lUIAC subheader 



R R E 



LCID 



Octi 



R/R/E/LCID sub-header 



Figure 6.1.2-2: R/R/E/LCID MAC subheader 



MAC PDU sub-headers have the same order as the corresponding MAC SDUs, MAC control elements and padding. 

MAC control elements, are always placed before any MAC SDU. 

Padding occurs at the end of the MAC PDU, except when single-byte or two-byte padding is required. Padding may 
have any value and the UE shall ignore it. 

When single-byte or two-byte padding is required, one or two MAC PDU sub-headers corresponding to padding are 
placed at the beginning of the MAC PDU before any other MAC PDU subheader. 

A maximum of one MAC PDU can be transmitted per TB per UE. 



R/R/E/LCID R/R/E/LCID R/R/E/LCID/F/L R/R/E/LCID/F/L 

sub-header sub-header sub-header sub-header 



R/R/E/LCID/F/L R/R/E/LCID padding 
sub-header sub-header 



MAC header 



MAC Control MAC Control 
element 1 element 2 



MAC SDU 



MAC SDU 



Padding 
(opt) 



-MAC payload- 



Figure 6.1.2-3: Example of MAC PDU consisting of MAC header, MAC control elements, MAC SDUs 

and padding 
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7.1.1.2.3 Test description 

7.1.1.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

NOTE: In the following, the established DRB is assumed to have Logical channel ID 3 

7.1 .1 .2.3.2 Test procedure sequence 

Table 7.1.1.2.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 




EXCEPTION: the steps 1 and 2 are repeated 
for decreasing reserved LCID values from 
01011 to 11011 










1 


The SS transmits a valid MAC PDU containing 
a RLC PDU except for LCID in MAC Header 
set to reserved value 11011. 


<— 


MAC PDU 






2 


Check: does the UE transmit a Scheduling 
Request on PUCCH within 5 seconds after 
step 1 ? 


-> 


(SR) 


1 


F 


3 


The SS Transmits a valid MAC PDU 
containing RLC PDU with LCID in MAC 
Header set correctly to DRB 0001 1 . 


<- 


MAC PDU 






4 


Check: does the UE transmits a Scheduling 
Request on PUCCH? 


-> 


(SR) 


2 


P 


5 


The SS sends an UL grant suitable for the loop 
back PDU to transmitted 


<- 


(UL Grant) 


- 


- 


6 


Check: does the UE transmit a MAC PDU with 
LCID set to DRB 00011? 


-> 


MAC PDU 


2 


P 



7.1.1.2.3.3 
None. 

7.1.2 

7.1.2.1 

7.1.2.1.1 
(1) 



Specific message contents 



RACH 

Correct selection of RACH parameters / Random access preamble and 
PRACH resource explicitly signalled to the UE by RRC / Non-contention 
based random access procedure 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { SS sends an RRCConnectionReconf iguration message including RACH-ConfigDedicated information 
element } 

then { UE sends a prach preamble given in the RACH-ConfigDedicated on the target cell } 
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7.1.2.1.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clauses 5.1.2 and 
5.1.4. 

[TS 36.321, clause 5.1.2] 

The Random Access Resource selection procedure shall be performed as follows: 

If ra-Preamblelndex (Random Access Preamble) and ra-PRACH-Masklndex (PRACH Mask Index) have been 
explicitly signalled and ra-Preamblelndex is not 000000: 

the Random Access Preamble and the PRACH Mask Index are those explicitly signalled. 

[TS 36.321, clause 5.1.4] 

Once the Random Access Preamble is transmitted and regardless of the possible occurrence of a measurement gap, the 
UE shall monitor the PDCCH for Random Access Response(s) identified by the RA-RNTI defined below, in the RA 
Response window which starts at the subframe that contains the end of the preamble transmission [7] plus three 
subframes and has length ra-ResponseWindowSize subframes. The RA-RNTI associated with the PRACH in which the 
Random Access Preamble is transmitted, is computed as: 

RA-RNT1= 1 + t_id+10*f_id 

Where t_id is the index of the first subframe of the specified PRACH (0< t_id <10), and f_id is the index of the 
specified PRACH within that subframe, in ascending order of frequency domain (0< f_id< 6). The UE may stop 
monitoring for Random Access Response(s) after successful reception of a Random Access Response containing 
Random Access Preamble identifiers that matches the transmitted Random Access Preamble. 

If a downlink assignment for this TTI has been received on the PDCCH for the RA-RNTI and the received TB is 
successfully decoded, the UE shall regardless of the possible occurrence of a measurement gap: 



if the Random Access Response contains a Random Access Preamble identifier corresponding to the 
transmitted Random Access Preamble (see subclause 5.1.3), the UE shall: 

consider this Random Access Response reception successful; 

- process the received Timing Advance Command (see subclause 5.2); 

indicate the preamblelnitialReceivedTargetPower and the amount of power ramping applied to the latest 
preamble transmission to lower layers (i.e., (PREAMBLE_TRANSMlSSION_COUNTER - 1) * 
powerRampingStep); 

- process the received UL grant value and indicate it to the lower layers; 

if ra-Preamblelndex was explicitly signalled and it was not 000000 (i.e., not selected by MAC): 
consider the Random Access procedure successfully completed. 
7.1.2.1.3 Test description 

7.1.2.1.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 and Cell 2. 
UE: 
None. 
Preamble: 

UE is in state Generic RB Established (state 3) according to [18] in cell 1. 
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7.1.2.1.3.2 



Test procedure sequence 



Table 7.1.2.1.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 7.1.2.1.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 2 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-91 


The power level values are sucli that 
measurement results for Cell 1 (Ml) and 
Cell 2 {IVI2) satisfy exit condition for event 
A3(M2<M1). 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-79 


The power level values are such that 
measurement results for Cell 1 (Ml) and 
Cell 2 {IV12) satisfy entry condition for event 
A3(M2>M1). 



Table 7.1.2.1.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


OA 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to setup intra frequency measurement. 










OB 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 










OC 


The SS changes Cell 1 and Cell 2 parameters 
according to the row "T1 " in table 8.2.4.2.3.2-1 . 


- 


- 


- 


- 


OD 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 with the 
measured RSRP, RSRQ value for Cell 2. 










1 


The SS transmits an 

RRCConnectionReconfiguration message to 
order the UE to perform intra frequency 
handover to Cell 2, including explicit Random 
Access Preamble. 










2 


Check: Does the UE transmit Preamble on 
PRACH corresponding to ra-Preambielndex'm 
step 1 ? 


-> 


(PRACH Preamble) 


1 


P 


3 


The SS transmits Random Access Response 
on cell 2, with RAPID corresponding to ra- 
Preamblelndex in step 1 


<— 


Random Access Response 






4 


Check: Does the UE sends on cell 2, a MAC 
PDU containing 
RRCConnectionReconfigurationCompiete? 


-> 


MAC PDU 

(RRCConnectionReconfigurationC 

ompiete) 


1 


P 


5 


Check: Does the test result of generic 
procedure in TS 36.508 subclause 6.4.2.3 
indicates that UE is in E-UTRA 
RRC CONNECTED state in cell 2? 






1 
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7.1 .2.1 .3.3 Specific message contents 

Table 7.1 .2.1 .3.3-1 : RRCConnectionReconfiguration (step 1 , table 7.1 .2.1 .3.2-1) 



Derivation Path: 36.508, Table 4.6.1-8, condition RBC-HO 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








mobilityControllnfo SEQUENCE { 


MobilityControllnfo-HO 






targetPhysCellld 


PhysicalCellldentity of 
Cell 2 (see 36.508 clause 
4.4.4.2) 






carrierFreq 


Not present 






rach-ConfigDedicated SEQUENCE { 








ra-Preamblelndex 


52 (see TS 36.21 1 Table 
5.7.1-2) 




FDD 


ra-Preamblelndex 


52 (see TS 36.21 1 Table 
5.7.1-3) 




TDD 


ra-PRACH-Masl<lndex 





All 




1 








} 








} 








} 








1 








} 









7.1 .2.2 Correct selection of RACH parameters / Random access preamble and 

PRACH resource explicitly signalled to the UE in PDCCH Order / Non- 
contention based random access procedure 



7.1.2.2.1 



(1) 



Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { PDCCH control command is received providing Random Access Preamble 
then { UE sends a prach preamble given in the PDCCH Order } 



(2) 

with { UE in E-UTRA RRC_CONNECTED state and transmitted PRACH Preamble, after reception of PDCCH 
order } 
ensure that { 

when { UE does not receive a matching Random Accees response in ra-ResponseWindowSize {hence 
considers RACH attempt as failed) and PREAMBLE_TRANSMISSION_COUNTER is less than PREAMBLE_TRANS_MAX 



then { UE retransmists the Preamble given in the PDCCH Order } 



7.1.2.2.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.321, clauses 5.1.2 and 
5.1.24. 

[TS 36.321, clause 5.1.2] 

The Random Access Resource selection procedure shall be performed as follows: 

If ra- Pre amble Index (Random Access Preamble) and ra-PRACH-Masklndex (PRACH Mask Index) have been 
explicitly signalled and ra-Preamblelndex is not 000000: 

the Random Access Preamble and the PRACH Mask Index are those explicitly signalled. 
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[TS 36.321, clause 5.1.4] 

Once the Random Access Preamble is transmitted and regardless of the possible occurrence of a measurement gap, the 
UE shall monitor the PDCCH for Random Access Response(s) identified by the RA-RNTl defined below, in the RA 
Response window which starts at the subframe that contains the end of the preamble transmission [7] plus three 
subframes and has length ra-ResponseWindowSize subframes. The RA-RNTl associated with the PRACH in which the 
Random Access Preamble is transmitted, is computed as: 

RA-RNT1= 1 + t_id+10*f_id 

Where t_id is the index of the first subframe of the specified PRACH (0< t_id <10), and f_id is the index of the 
specified PRACH within that subframe, in ascending order of frequency domain (0< f_id< 6). The UE may stop 
monitoring for Random Access Response(s) after successful reception of a Random Access Response containing the 
Random Access Preamble identifiers that matches the transmitted Random Access Preamble. 

If a downlink assignment for this TTl has been received on the PDCCH for the RA-RNTI and the received TB is 
successfully decoded, the UE shall regardless of the possible occurrence of a measurement gap: 



if the Random Access Response contains a Random Access Preamble identifier corresponding to the 
transmitted Random Access Preamble (see subclause 5.1.3), the UE shall: 

consider this Random Access Response reception successful; 

- process the received Timing Advance Command (see subclause 5.2); 

indicate the preamblelnitialReceivedTargetPower and the amount of power ramping applied to the latest 
preamble transmission to lower layers (i.e., (PREAMBLE_TRANSM1SS10N_C0UNTER - 1) * 
powerRampingStep); 

- process the received UL grant value and indicate it to the lower layers; 

if ra-Preamblelndex was explicitly signalled and it was not 000000 (i.e., not selected by MAC): 
consider the Random Access procedure successfully completed. 

If no Random Access Response is received within the RA Response window, or if none of all received Random Access 
Responses contains a Random Access Preamble identifier corresponding to the transmitted Random Access Preamble, 
the Random Access Response reception is considered not successful and the UE shall: 

- increment PREAMBLE_TRANSMlSS10N_COUNTER by 1 ; 

- If PREAMBLE_TRANSM1S S10N_COUNTER = preambleTransMax + 1 : 

indicate a Random Access problem to upper layers 

if in this Random Access procedure, the Random Access Preamble was selected by MAC: 

based on the backoff parameter in the UE, select a random backoff time according to a uniform 
distribution between and the Backoff Parameter Value; 

delay the subsequent Random Access transmission by the backoff time; 

- proceed to the selection of a Random Access Resource (see subclause 5.1.2). 

7.1.2.2.3 Test description 

7.1.2.2.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
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UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) according to [18] in cell 1 
7.1 .2.2.3.2 Test procedure sequence 

Table 7.1.2.2.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits a PDCCH order providing 
Random Access Preamble. 


<— 


(PDCCH Order) 


- 


- 


2 


Check: does the UE transmit a preamble on 
PRACH using the same preamble index as 
given in step 1? 


-> 


(PRACH Preamble) 


1 


P 


3 


Check: does the UE transmit a preamble on 
PRACH after ra-ResponseWindowSize using 
the same preamble index as given in step 1? 


-> 


(PRACH Preamble) 


2 


P 


4 


Check: does the UE transmit a preamble on 
PRACH after ra-ResponseWindowSize using 
the same preamble index as given in step 1? 


-> 


(PRACH Preamble) 


2 


P 


5 


Check: does the UE transmit a preamble on 
PRACH after ra-ResponseWindowSize using 
the same preamble index as given in step 1? 


-> 


(PRACH Preamble) 


2 


P 


6 


The SS transmits Random Access Response 
with RAPID corresponding to Preamble in step 
1. 


<— 


Random Access Response 






7 


Check: does the test result of CALL generic 
procedure indicate that UE is in E-UTRA 
RRC CONNECTED state? 






2 





7.1 .2.2.3.3 Specific message contents 

Table 7.1 .2.2.3.3-1 : SystemlnformationBlockType2 (all steps, table 7.1 .2.2.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.3, Table Nr. 4.4.3.3.-1 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








radioResourceConfigCommon SEQUENCE { 








rach-Configuration SEQUENCE { 








ra-Supervisionlnformation SEQUENCE { 








preambleTransMax 


N4 


PREAMBLE TRA 
MS MAX 




1 








1 








} 








} 








} 









7.1 .2.3 Correct selection of RACH parameters / Preamble selected by MAC itself / 

Contention based random access procedure 

7.1.2.3.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { SS sends a Paging message to the UE and MAC PDU Size carrying CCCH PDU is less than 
messageSizeGroupA } 

then { UE transmits a random access preamble using a preamble in group A of random access 
preambles indicated in SIB2 } 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 177 ETSI TS 136 523-1 V9.1.1 (2010-07) 



(2) 

with { UE in E-UTRA RRC_IDLE state and has transmitted Msg3 } 
ensure that { 

when { SS does not respond before contention resolution timer expiry } 

then { UE transmits a random access preamble using a preamble in the same group of random access 
preambles as used for the first transmission of Msg3 } 



(3) 

with { UE in E-UTRA RRC_IDLE state and has transmitted Msg3 } 
ensure that { 

when { SS does not respond before contention resolution timer expiry after more than 
preambleTransMax transmissions from UE } 

then { UE transmits a random access preamble using a preamble in the same group of random access 
preambles as used for the first transmission of Msg3 } 
} 

(4) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE has data available for transmission and the MAC PDU Size carrying this data is greater 
than messageSizeGroupA } 

then { UE transmits a random access preamble using a preamble in group B of random access 
preambles indicated in SIB2 } 
} 

7.1.2.3.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.1.2 and 
5.1.5. 

[TS 36.321, clause 5.1.2] 

The Random Access Resource selection procedure shall be performed as follows: 

If ra-Preamblelndex (Random Access Preamble) and ra-PRACH-Masklndex (PRACH Mask Index) have been 
explicitly signalled andra- Pre amble Index is not 000000: 



else the Random Access Preamble shall be selected by the UE as follows: 

If Msg3 has not yet been transmitted, the UE shall: 

if Random Access Preambles group B exists and if the potential message size (data available for 
transmission plus MAC header and, where required, MAC control elements) is greater than 
messageSizeGroupA and if the pathloss is less than Pcmax -preamblelnitialReceivedTargetPower - 
deltaPreambleMsgS - messagePowerOffsetGroupB, then: 

select the Random Access Preambles group B; 

else: 

select the Random Access Preambles group A. 

else, if Msg3 is being retransmitted, the UE shall, the UE shall: 

select the same group of Random Access Preambles as was used for the preamble transmission attempt 
corresponding to the first transmission of Msg3. 

randomly select a Random Access Preamble within the selected group. The random function shall be such 
that each of the allowed selections can be chosen with equal probability; 

- set PRACH Mask Index to 0. 
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determine the next available subframe containing PRACH permitted by the restrictions given by the prach- 
Configlndex and PRACH Mask Index (see subclause 7.3) and physical layer timing requirements [2] (a UE may 
take into account the possible occurrence of measurement gaps when determining the next available PRACH 
subframe); 

if the transmission mode is TDD and the PRACH Mask Index is equal to zero: 

if ra-Preamblelndex was explicitly signalled and the signalled random access preamble ID was not 000000 
(i.e., not selected by MAC): 

- randomly select, with equal probability, one PRACH from the PRACHs available in the determined 
subframe. 



else: 



randomly select, with equal probability, one PRACH from the PRACHs available in the determined 
subframe and the next two consecutive subframes. 



else: 



determine a PRACH within the determined subframe in accordance with the requirements of the PRACH 
Mask Index. 

proceed to the transmission of the Random Access Preamble (see subclause 5.1.3). 

[TS 36.321, clause 5.1.5] 

Contention Resolution is based on either C-RNTI on PDCCH or UE Contention Resolution Identity on DL-SCH.. 

Once Msg3 is transmitted, the UE shall: 

start mac-ContentionResolutionTimer and restart mac-ContentionResolutioriTimer at each HARQ 
retransmission; 

regardless of the possible occurrence of a measurement gap, monitor the PDCCH until mac- 
ContentionResolutionTimer expires or is stopped; 

if mac-ContentionResolutionTimer expires: 

discard the Temporary C-RNTI; 

consider the Contention Resolution not successful, 
if the Contention Resolution is considered not successful the UE shall: 

- flush the HARQ buffer used for transmission of the MAC PDU in the Msg3 buffer; 

- increment PREAMBLE_TRANSMISSION_COUNTER by 1 ; 

- If PREAMBLE_TRANSMISSION_COUNTER = preambleTransMax + 1 : 

indicate a Random Access problem to upper layers. 

proceed to the selection of a Random Access Resource (see subclause 5.1.2). 
7.1.2.3.3 Test description 

7.1.2.3.3.1 Pre-test conditions 

System Simulator: 
- Cell 1. 

System information set using parameters as specified in Table 7.1.2.3.3.3-1. 
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UE: 

None. 
Preamble: 

- The UE is in state Registered, Idle mode, Test Mode Activated (State 2A) according to [18]. 
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7.1.2.3.3.2 



Test procedure sequence 

Table 7.1.2.3.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits a Paging message including 
a matched identity. 


- 


- 


- 


- 


2 


Checl<: Does the UE transmit preamble on 
PRACH using a preamble in group A defined 
in SIB2 (numberOfRA-Preambles and 
sizeOfRA -PreamblesGroupA) ? 


-> 


PRACH Preamble 


1 


P 


3 


Check: Does the UE transmit preamble on 
PRACH using a preamble in group A defined 
in SIB2 {numberOfRA-Preambles and 
sizeOfRA -PreamblesGroupA) ? 


-> 


PRACH Preamble 


1 


P 


4 


Check: Does the UE transmit preamble on 
PRACH using a preamble in group A defined 
in SIB2 {numberOfRA-Preambles and 
SizeOfRA -PreamblesGroupA) ? 


-> 


PRACH Preamble 


1 


P 


5 


The SS transmits Random Access Response 
with RAPID corresponding to the transmitted 
Preamble in step 4, including T-CRNTI and not 
including Backoff Indicator sub header. 


<— 


Random Access Response 






6 


The UE transmits an RRCConnectionRequest 
message. 


-> 


MAC PDU 


- 


- 


7 


Check: Does the UE transmit preamble on 
PRACH using a preamble belonging to group 
A? 


-> 


PRACH Preamble 


2 


P 


8 


Check: Does the UE continue to repeatedly 
transmit for 2s after step 2 a preamble 
belonging to group A? 
Note: 2s is the value of T300. 


~> 


PRACH Preamble 


2,3 


P 


9 


The UE is in state Loopback Activated (state 4) 
according to [18] using parameters as 
specified in Table 7.1 .2.3.3.3-2 










10 


The SS transmits a MAC PDU containing a 
PDCP SDU of size 320 bits[>208]. 


<— 


MAC PDU 


- 


- 


- 


Exception: steps 1 1 and 12 are repeated 
dsr-TransMax times. 


- 


- 


- 


- 


11 


UE transmits a Scheduling Request. 


— > 


Scheduling Request 


- 


- 


12 


The SS does not allocate UL grant for the 
scheduling request in step 1 1 . 


- 


- 


- 


- 


13 


Check: Does the UE transmit preamble on 
PRACH using a preamble in group B defined 
In SIB2 {numberOfRA-Preambles and 
SizeOfRA -PreamblesGroupA) ? 


-> 


PRACH Preamble 


4 


P 


14 


Check: Does the UE transmit preamble on 
PRACH using a preamble in group B defined 
in SIB2 {numberOfRA-Preambles and 
SizeOfRA -PreamblesGroupA) ? 


-> 


PRACH Preamble 


4 


P 


15 


Check: Does the UE transmit preamble on 
PRACH using a preamble in group B defined 
in SIB2 {numberOfRA-Preambles and 
SizeOfRA -PreamblesGroupA) ? 


-> 


PRACH Preamble 


4 


P 


16 


The SS transmits Random Access Response 
with RAPID corresponding to the transmitted 
Preamble in step 15, including T-CRNTI and 
not including Backoff Indicator sub header. 


<— 


Random Access Response 






17 


The UE transmits a IVIAC PDU with C-RNTI 
containing loop backed PDCP SDU 


-> 


MAC PDU 


- 


- 


18 


The SS ignores the UL MAC PDU and does 
not allocate UL grant for the C-RNTI in step 
17. 










19 


Check: Does the UE transmit preamble on 
PRACH using a preamble belonging to group 
B? 


-> 


PRACH Preamble 


2 


P 
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20 


The SS transmits Random Access Response 
with RAPID corresponding to the transmitted 
Preamble in step 19 


<~ 


Random Access Response 






21 


The UE transmits a IVIAC PDU containing loop 
backed PDCP SDU 


-> 


MAC PDU 


- 


- 


22 


SS sends PDCCH transmission for UE C-RNTI 


- 


- 


- 


- 


Note: Size of RRCConnectionRequest message is 45 bits, octet aligned =48 bits. With 8 bits of IVIAC Header the 
minimum size of IVIAC PDU carrying RRCConnectionRequest is 56 bits. 



7.1 .2.3.3.3 Specific message contents 

Table 7.1.2.3.3.3-1 : SystemlnformationBlockType2 (all steps, table 7.1.2.3.3.2-1) 



Derivation path: 36.508 clause 4.4.3.3, Table 4.4.3.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








radioResourceConfigCommon SEQUENCE { 








rach-Configuration SEQUENCE { 








preamblelnformation SEQUENCE { 








numberQfRA-Preambles 


n64 






preamblesGroupAConfig := {SEQUENCE { 








sizeOfRA-PreamblesGroupA 


n28 






messageSizeGroupA 


b208 






messaqePowerOffsetGroupB 


minusinfinity 






1 








} 








} 








} 








ue-TimersAndConstants SEQUENCE! 








1300 


ms2000 


T300 




} 








} 








} 








1 








Table 7.1.2.3.3.3-2: RLC-Config-DRB-AM 


Derivation path: 36.508 clause 4.8.2.1 .3.2, Table 4.8.2.1 .3.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


RLC-Config-DRB-AM ::= CHOICE { 








am SEQUENCE { 








ul-AM-RLC SEQUENCE ( 








t-PollRetransmit 


ms200 






} 








} 








} 









7.1.2.4 



7.1.2.4.1 



(1) 



Random access procedure / Successful 
Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { The SS pages the UE with a matching identity } 

then { UE tranmits a random access preamble in the next available Random Access occasion 



(2) 

with { UE in E-UTRA RRC_IDLE state after transmission of a PRACH preamble } 
ensure that { 

when { SS does not answer with a matching Random Accees Response within ra-ResponseWindowSize 
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then { UE retransmits a PRACH preamble } 
} 

(3) 

with { SS transmits Random Access Response and UE send msg3 } 
ensure that { 

when { SS ignores the RRCConnectionRequest and does not send any Response } 

then { UE select available PRACH resource to retransmits a PRACH preamble according to the 
timing requirement } 
} 

7.1.2.4.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.1.2, 5.1.3 & 
5.1.4. 

[TS 36.321, clause 5.1.2] 

The Random Access Resource selection procedure shall be performed as follows: 

If ra-Preamblelndex (Random Access Preamble) and ra-PRACH-Masklndex (PRACH Mask Index) have been 
explicitly signalled and ra-Preamblelndex is not 000000: 

the Random Access Preamble and the PRACH Mask Index are those explicitly signalled. 

else the Random Access Preamble shall be selected by the UE as follows: 

If Msg3 has not yet been transmitted, the UE shall: 

if Random Access Preambles group B exists and if the potential message size (data available for 
transmission plus MAC header and, where required, MAC control elements) is greater than 
messageSizeGroupA and if the pathloss is less than Pcmax - preamblelnitialReceivedTargetPower - 
deltaPreambleMsgS - messagePowerOffsetGroupB, then: 

select the Random Access Preambles group B; 

else: 

select the Random Access Preambles group A. 

else, if Msg3 is being retransmitted, the UE shall: 

select the same group of Random Access Preambles as was used for the preamble transmission attempt 
corresponding to the first transmission of Msg3. 

randomly select a Random Access Preamble within the selected group. The random function shall be such 
that each of the allowed selections can be chosen with equal probability; 

- set PRACH Mask Index to 0. 

determine the next available subframe containing PRACH permitted by the restrictions given by the prach- 
Configurationlndex and the PRACH Mask Index (see subclause 7.3) (a UE may take into account the possible 
occurrence of measurement gaps when determining the next available PRACH subframe); 

if the transmission mode is TDD and the PRACH Mask Index is equal to zero: 

if ra-Preamblelndex was explicitly signalled and it was not 000000 (i.e., not selected by MAC): 

- randomly select, with equal probability, one PRACH from the PRACHs available in the determined 
subframe. 

else: 

- randomly select, with equal probability, one PRACH from the PRACHs available in the determined 
subframe and the next two consecutive subframes. 



else: 
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determine a PRACH within the determined subframe in accordance with the requirements of the PRACH 
Mask Index. 

proceed to the transmission of the Random Access Preamble (see subclause 5.1.3). 

[TS 36.321, clause 5.1.3] 

The random-access procedure shall be performed as follows: 

- set PREAMBLE_RECEIVED_TARGET_POWER to preamblelnitialReceivedTargetPower + 

DELTA_PREAMBLE + (PREAMBLE_TRANSMISSION_COUNTER- 1) * powerRampingStep;] 

instruct the physical layer to transmit a preamble using the selected PRACH, corresponding RA-RNTI, preamble 
index and PREAMBLE_RECEIVED_TARGET_POWER. 

[TS 36.321, clause 5.1.4] 

Once the Random Access Preamble is transmitted and regardless of the possible occurrence of a measurement gap, the 
UE shall monitor the PDCCH for Random Access Response(s) identified by the RA-RNTI defined below, in the RA 
Response window which starts at the subframe that contains the end of the preamble transmission [7] plus three 
subframes and has length ra-ResponseWindowSize subframes The RA-RNTI associated with the PRACH in which the 
Random Access Preamble is transmitted, is computed as: 

RA-RNTI= tl + _idH-10*f_id 

Where t_id is the index of the first subframe of the specified PRACH (0< t_id <10), and f_id is the index of the 
specified PRACH within that subframe, in ascending order of frequency domain (0< f_id< 6). The UE may stop 
monitoring for Random Access Response(s) after successful reception of a Random Access Response containing 
Random Access Preamble identifiers that matches the transmitted Random Access Preamble. 

If a downlink assignment for this TTI has been received on the PDCCH for the RA-RNTI and the received TB is 
successfully decoded, the UE shall regardless of the possible occurrence of a measurement gap: 

if the Random Access Response contains a Backoff Indicator sub header: 

set the backoff parameter value in the UE as indicated by the BI field of the Backoff Indicator sub header 
and Table 7.2-1. 

else, set the backoff parameter value in the UE to ms. 

if the Random Access Response contains a Random Access Preamble identifier corresponding to the 
transmitted Random Access Preamble (see subclause 5.1.3), the UE shall: 

consider this Random Access Response reception successful; 

- process the received Timing Advance Command (see subclause 5.2); 

indicate ihepreamblelnitialReceivedTargetPower and the amount of power ramping applied to the latest 
preamble transmission to lower layers (i.e., (PREAMBLE_TRANSMISSION_COUNTER - 1) * 
powerRampingStep); 

- process the received UL grant value and indicate it to the lower layers; 

if ra-Preamblelndex was explicitly signalled and it was not 000000 (i.e., not selected by MAC): 

consider the Random Access procedure successfully completed. 

else, if the Random Access Preamble was selected by UE MAC: 

set the Temporary C-RNTI to the value received in the Random Access Response message no later 
than at the time of the first transmission corresponding to the UL grant provided in the Random 
Access Response message; 

if this is the first successfully received Random Access Response within this Random Access 
procedure: 
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NOTE: 



NOTE: 



if the transmission is not being made for the CCCH logical channel, indicate to the Multiplexing 
and assembly entity to include a C-RNTI MAC control element in the subsequent uplink 
transmission; 

obtain the MAC PDU to transmit from the "Multiplexing and assembly" entity and store it in the 
Msg3 buffer. 

When an uplink transmission is required, e.g., for contention resolution, the eNB should not provide a 
grant smaller than 56 bits in the Random Access Response. 

If within a Random Access procedure, an uplink grant provided in the Random Access Response for the 
same group of Random Access Preambles has a different size than the first uplink grant allocated during 
that Random Access procedure, the UE behaviour is not defined. 



If no Random Access Response is received within the RA Response window, or if none of all received Random Access 
Responses contains a Random Access Preamble identifier corresponding to the transmitted Random Access Preamble, 
the Random Access Response reception is considered not successful and the UE shall: 

- increment PREAMBLE_TRANSMISSION_COUNTER by 1 ; 

- If PREAMBLE_TRANSMIS SION_COUNTER = preambleTransMax + 1 : 

indicate a Random Access problem to upper layers. 

- proceed to the selection of a Random Access Resource (see subclause 5.1.2). 

TS 36.321, clause 6. 1.5 

A MAC PDU consists of a MAC header and one or more MAC Random Access Responses (MAC RAR) and optionally 
padding as described in figure 6.1.5-4. 

The MAC header is of variable size. 

A MAC PDU header consists of one or more MAC PDU sub-headers; each subheader corresponding to a MAC RAR 
except for the Backoff Indicator sub-header. If included, the Backoff Indicator sub-header is only included once and is 
the first sub-header included within the MAC PDU header. 

A MAC RAR consists of the four fields R/Timing Advance Command/UL Grant/Temporary C-RNTI (as described in 
figure 6.1.5-3). 

Padding may occur after the last MAC RAR. Presence and length of padding is implicit based on TB size, size of MAC 
header and number of RARs. 



Timing Advance 
Command 



UL Grant 



Timing Advance Command Oct 1 
UL Grant Oct 2 
Oct 3 
Oct 4 
Oct 5 
Oct 6 



UL Grant 
Temporary C-RNTI 
Temporary C-RNTI 



Figure 6.1.5-3: MAC RAR 
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E/T/R/R/BI E/T/RAPID E/T/RAPID 

subheader subheader 1 subheader 2 



MAC header 



MAC RAR 1 



E/T/RAPID 
subheader n 



MAC RAR 2 



MAC RAR n 



Padding 
(opt) 



M MAC payload ► 

Figure 6.1.5-4: Example of IVIAC PDU consisting of a IVIAC header and IVIAC RARs 



[TS 36.213, clause 6.1] 

For the LI random access procedure, UE's uplink transmission timing after a random access preamble transmission is 
as follows. 

a. If a PDCCH with associated RA-RNTl is detected in subframe n, and the corresponding DL-SCH 
transport block contains a response to the transmitted preamble sequence, the UE shall, according to 
the information in the response, transmit an UL-SCH transport block in the first subframe n + k^, 

fei > 6 , if the UL delay field in section 6.2 is set to zero. The UE shall postpone the PUSCH 
transmission to the next available UL subframe if the field is set to 1 . 

[TS 36.213, clause 6.2] 

The higher layers indicate the 20-bit UL Grant to the physical layer, as defined in [8]. This is referred to the Random 
Access Response Grant in the physical layer. The content of these 20 bits starting with the MSB and ending with the 
LSB are as follows: 

- Hopping flag - 1 bit 

- Fixed size resource block assignment - 10 bits 

- Truncated modulation and coding scheme - 4 bits 

- TPC command for scheduled PUSCH - 3 bits 

- UL delay - 1 bit 

- CQI request - 1 bit 



The UL delay applies for both TDD and FDD and this field can be set to or 1 to indicate whether the delay of PUSCH 
is introduced as shown in section 6.1.1. 

7.1.2.4.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 

System information are set according to table 7.1.2.4.3.3-1 

UE: 

None. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



186 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
7.1 .2.4.3.2 Test procedure sequence 

Table 7.1.2.4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


lUlessage 


1 


The SS transmits a Paging message including 
a matched identity. 


- 


- 


- 


- 


2 


Check: does the UE transmit a preamble on 
PRACH, in frame number X, subframe number 
2, 5, 8 (FDD)/2,3,8(TDD)? 


— > 


PRACH Preamble 


1 


P 


3 


Check: does the UE transmit a preamble on 
PRACH, in frame number X+1 or X+2, 
subframe number 2, 5, 8 (FDD)/ 2,3,8 (TDD)? 


— > 


PRACH Preamble 


1,2 


P 


4 


Check: does the UE transmit a preamble on 
PRACH, in frame number X+2, X+3 or X+4, 
subframe number 2, 5, 8 (FDD)/ 2,3,8 (TDD)? 


— > 


PRACH Preamble 


1,2 


P 


5 


The SS transmits a Random Access 
Response with not-matching RA-ld, including 
T-CRNTI and not including Backoff Indicator 
sub header. 


<— 


Random Access Response 






6 


Check: does the UE transmit a preamble on 
PRACH in frame number X+4, X+5 or X+6, 
subframe number 2, 5, 8 (FDD)/ 2,3,8 (TDD)? 


— > 


PRACH Preamble 


1,2 


P 


7 


The SS transmits Random Access Response 
with RAPID corresponding to the transmitted 
Preamble in step 6, including T-CRNTI and UL 
grant and not including Backoff Indicator sub 
header. The UL delay bit in the UL grant field 
is set to 


<— 


Random Access Response 






8 


The UE transmits an RRCConnectionRequest 
message. 


-> 


- 


- 


- 


9 


The SS ignores the RRCConnectionRequest 
message and does not send any response. 


- 


- 


- 


- 


10 


UE waits for mac-ContentResolutionTimer 
expire. 


- 


- 


- 


- 


11 


Check: does the UE transmit preamble on 
PRACH using a preamble in subframe number 
2,5,8 for FDD and subframe number 2,3 or 8 
for TDD? 


— > 


PRACH Preamble 


3 


P 


12 


The SS transmits Random Access Response 
with RAPID corresponding to the transmitted 
Preamble in step 1 1 , including T-CRNTI and 
not including Backoff Indicator sub header. 


<— 


Random Access Response 






13 


The UE transmits an RRCConnectionRequest 
message. 


— > 


- 


- 


- 


14 


The SS Transmits a valid MAC PDU 
containing RRCConnectionSetup, and 
including 'UE Contention Resolution Identity' 
MAC control element with matching 
'Contention Resolution Identity' 


<— 


MAC PDU 






15 


The UE transmits an 
RRCConnectionSetupComplete message. 


— > 


- 


- 


- 


16- 
19 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 











ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



187 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



7.1 .2.4.3.3 Specific message contents 

Table 7.1.2.4.3.3-1 : SystemlnformationBlockType2 (all steps, table 7.1.2.4.3.2-1) 



Derivation path: 36.508 table 4.4.3.3.-1 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








radioResourceConfigCommon SEQUENCE { 








rach-Configuration SEQUENCE { 








ra-Supervisionlnformation SEQUENCE { 








mac-ContentionResolutionlimer 


sf8 


Timer for 
contention 
resolution is 8 
subframes 




ra-ResponseWindowSize 


sflO 






1 








1 








prach-Configuration SEQUENCE { 








prach-Configlnfo SEQUENCE { 








prach-Configurationlndex 


10 


As portable 5.7.1- 
2 of 36.211, this 
results in PRACH 
preamble 
transmission start 
in any frame 
numbers and sub- 
frame number 2, 
5,8 


FDD 


prach-Configurationlndex 


9 


As per table 5.7.1 - 
4 of 36.211, this 
results in PRACH 
preamble 
transmission with 
frequency 
resource index=0; 
occurring in any 
radio frames; 
resource is 
located in sub 
frame number 2,3 
,8 Note 1 


TDD 


} 








1 








1 








} 








Note 1 : 36.508, Table 4.4.3.2-3 specifies tdd-Configuration-> subframeAssignment as sal . 



7.1 .2.5 Random access procedure / MAC PDU containing multiple RARs 

7.1.2.5.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_IDLE state and transmitted PRACH preamble } 
ensure that { 

when { UE receives during TTI window [RA_WINDOW_BEGIN-RA_WINDOW_END] MAC PDU containing multiple 
RAR's but none of the subheaders contains a RAPID correseponding to the UE } 

then { UE tranmits a random access preamble in the next available Random Access occasion } 



(2) 

with { UE in E-UTRA RRC_IDLE state and transmitted PRACH preamble } 
ensure that { 

when { UE receives during TTI window [RA_WINDOW_BEGIN-RA_WINDOW_END] MAC PDU containing multiple 
RAR's and one of the subheaders contains a RAPID correseponding to the UE } 
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then { UE transmits MAC PDU containing RRCConnectionRequest } 
} 

7.1.2.5.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.1.3 and 
5.1.4. 

[TS 36.321, clause 5.1.3] 

The random-access procedure shall be performed as follows: 

- set PREAMBLE_RECElVED_TARGET_POWER to preamblelnitialReceivedTargetPower + 

DELTA_PREAMBLE + (PREAMBLE_TRANSM1SS10N_C0UNTER- 1) * powerRampingStep;] 

instruct the physical layer to transmit a preamble using the selected PRACH resource, corresponding RA-RNTl, 
preamble index and PREAMBLE_RECEIVED_TARGET_POWER. 

[TS 36.321, clause 5.1.4] 

Once the Random Access Preamble is transmitted and regardless of the possible occurrence of a measurement gap, the 
UE shall monitor the PDCCH for Random Access Response(s) identified by the RA-RNTl defined below, in the RA 
Response window which starts at the subframe that contains the end of the preamble transmission [7] plus three 
subframes and has length ra-ResponseWindowSize sub frames. The RA-RNTl associated with the PRACH in which the 
Random Access Preamble is transmitted, is computed as: 

RA-RNTI= 1 + t_idH-10*f_id 

Where t_id is the index of the first subframe of the specified PRACH (0< t_id <10), and f_id is the index of the 
specified PRACH within that subframe, in ascending order of frequency domain (0< f_id< 6). The UE may stop 
monitoring for Random Access Response(s) after successful reception of a Random Access Response containing the 
Random Access Preamble identifiers that matches the transmitted Random Access Preamble. 

If a downlink assignment for this TTl has been received on the PDCCH for the RA-RNTI and the received TB is 
successfully decoded, the UE shall regardless of the possible occurrence of a measurement gap: 

if the Random Access Response contains a Backoff Indicator sub header: 

set the backoff parameter value in the UE as indicated by the BI field of the Backoff Indicator sub header 
and Table 7.2-1. 

else, set the backoff parameter value in the UE to ms. 

if the Random Access Response contains a Random Access Preamble identifier corresponding to the 
transmitted Random Access Preamble (see subclause 5.1.3), the UE shall: 

consider this Random Access Response reception successful; 

- process the received Timing Advance Command (see subclause 5.2); 

indicate the preamblelnitialReceivedTargetPower and the amount of power ramping applied to the latest 
preamble transmission to lower layers (i.e., (PREAMBLE_TRANSMISSION_COUNTER - 1) * 
powerRampingStep); 

- process the received UL grant value and indicate it to the lower layers; 

if ra-Preamblelndex was explicitly signalled and it was not 000000 (i.e., not selected by MAC): 

consider the Random Access procedure successfully completed. 

else, if the Random Access Preamble was selected by UE MAC: 

set the Temporary C-RNTI to the value received in the Random Access Response message no later 
than at the time of the first transmission corresponding to the UL grant provided in the Random 
Access Response message; 
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NOTE: 



NOTE: 



if this is the first successfully received Random Access Response within this Random Access 
procedure: 

if the transmission is not being made for the CCCH logical channel, indicate to the Multiplexing 
and assembly entity to include a C-RNTI MAC control element in the subsequent uplink 
transmission; 

obtain the MAC PDU to transmit from the "Multiplexing and assembly" entity and store it in the 
Msg3 buffer. 

When an uplink transmission is required, e.g., for contention resolution, the eNB should not provide a 
grant smaller than 56 bits in the Random Access Response. 

If within a Random Access procedure, an uplink grant provided in the Random Access Response for the 
same group of Random Access Preambles has a different size than the first uplink grant allocated during 
that Random Access procedure, the UE behaviour is not defined. 



If no Random Access Response is received within the RA Response window, or if none of all received Random Access 
Responses contains a Random Access Preamble identifier corresponding to the transmitted Random Access Preamble, 
the Random Access Response reception is considered not successful and the UE shall: 

- increment PREAMBLE_TRANSMISSION_COUNTER by 1 ; 

- If PREAMBLE_TRANSMISSION_COUNTER = preambleTransMax + 1 : 

indicate a Random Access problem to upper layers. 

- proceed to the selection of a Random Access Resource (see subclause 5.1.2). 
7.1.2.5.3 Test description 

7.1.2.5.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 

System information are set according to table 7.1.2.4.3.3-1 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
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7.1.2.5.3.2 



Test procedure sequence 

Table 7.1.2.5.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits a Paging message including 
a matched identity. 


<— 


- 


- 


- 


2 


Checl<: Does the UE transmit a preamble on 
PRACH? 


-> 


PRACH Preamble 


1 


P 


3 


The SS transmits a IVIAC PDU addressed to 
UE RA-RNTI, containing multiple RAR's but 
none of the MAC sub headers contains a 
matching RAPID 


<- 


Random Access Response 








EXCEPTION: In parallel with step 4, parallel 
behaviour defined in table 7.1 .2.5.3.2-2 is 
executed 










4 


Check: Does the UE re-transmit a preamble on 
PRACH? 


-> 


PRACH Preamble 


1 


P 


5 


The SS transmits a IVIAC PDU addressed to 
UE RA-RNTI, containing multiple RAR's one 
of the MAC sub headers contains a matching 
RAPID 


<- 


Random Access Response 






6 


Check: does tCheck: Does the UE transmit a 
MAC PDU containing RRCConnectionRequest 
message? 


-> 


MAC PDU 
(RRCConnectionRequest) 


2 


P 


7 


The SS sends a MAC PDU containing 
matching Contention Resolution Identity MAC 
control element 


<- 


MAC Control PDU 






7A 


SS transmit RRCConnectionSetup message 


<- 


- 


- 


- 


8 


The UE transmit 

RRCConnectionSetupComplete message 
including SERVICE REQUEST message. 


-> 








9- 
12 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 











Table 7.1.2.5.3.2-2: Parallel behaviour 



St 



Procedure 



Check: Does the UE transmit an 
RRCConnectionRequest message. 



U-S 



Message Sequence 



Message 



TP 



Verdict 



MAC PDU 

( RRCConnectionRequest) 



7.1.2.5.3.3 
None. 

7.1.2.6 

7.1.2.6.1 
(1) 



Specific message contents 

Maintenance of uplink time alignment 
Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state and having initiated a random access procedure } 

ensure that { 

when { The SS transmits a Timing Advance Command in a Random Access Response message } 

then { the UE applies the received Timing Advance value in the next transmitted MAC PDU} 



(2) 



with { UE in E-UTRA RRC CONNECTED state 
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ensure that { 

when { Timing Advanced Command MAC control element is received and UE has pending data during the 
period the timeAlignmentTimer is running } 

then { UE does not send any Random Access Preamble, but Scheduling Requests to request 
transmission of data while timeAlignmentTimer is running } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when{ timeAlignmentTimer has expired or is not running and UL transmission is required} 
then { UE triggers a RA Procedure } 
} 

7.1.2.6.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in; TS 36.321 clause 5.2. 

[TS 36.321 clause 5.2] 

The UE has a configurable timer timeAlignmentTimer which is used to control how long the UE is considered uplink 
time aligned. 

The UE shall: 

when a Timing Advance Command MAC control element is received: 

apply the Timing Advance Command; 

start or restart timeAlignmentTimer. 

when a Timing Advance Command is received in a Random Access Response message: 

if the Random Access Preamble was not selected by UE MAC: 

apply the Timing Advance Command; 

start or restart timeAlignmentTimer. 

else, if the timeAlignmentTimer is not running: 

apply the Timing Advance Command; 

start timeAlignmentTimer; 

when the contention resolution is considered not successful as described in subclause 5.1.5, stop 
timeAlignmentTimer. 

else: 

ignore the received Timing Advance Command. 

when timeAlignmentTimer expires: 

- flush all HARQ buffers; 

- notify RRC to release PUCCH/SRS ; 

clear any configured downlink assignments and uplink grants. 

7.1.2.6.3 Test description 
7.1.2.6.3.1 Pre-test condition 
System Simulator: 

- Cell 1 
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UE: 

None. 

Preamble: 

The generic procedure to get UE in state Registered, Idle mode, UE Test Mode Activated (State 2a) according to 
TS 36.508 clause 4.5 is executed. 
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7.1.2.6.3.2 



Test procedure sequence 

Table 7.1.2.6.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 




1 


SS pages the UE 


<— 


- 


- 


- 


2 


SS respond to UE Random Access request 
by a Random Access Response with TA field 
within message set to 600 (Note 2). 


<— 


MAC PDU(Random Access 
Response (TA=600)) 






3 


Check: Does UE send an 
RRCConnectionRequest message in the first 
scheduled UL transmission using the Timing 
Advance value sent by the SS in step 2? 


— > 


MAC PDU 
{RRCConnectionRequest) 


1 


P 


4 


The SS transmits a valid MAC PDU 
containing "UE Contention Resolution 
Identity" IVIAC control element with matching 
"Contention Resolution Identity" and RA 
Procedure considered a success. 


<— 


MAC PDU (UE Contention 
Resolution Identity) 






5 


The SS sends an RRCConnectionSetup 
message. 


<— 


MAC PDU 


- 


- 


6 


Check: Does the UE transmit an 
RRCConnectionSetupComplete'? 


— > 


MAC PDU 

( RRCConnectionSetupComplete) 


1 


P 


7 


The generic procedure to get UE in test state 
Loopback Activated (State 4) according to 
TS 36.508 clause 4.5 is executed with UL 
SDU size set to '0' (no data returned in 
uplink) 










8 


SS transmits Timing Advance command. SS 
does not send any subsequent alignments. 
SS Starts Timer_1 = 0.8 * 
timeAlignmentTimer 


<— 


MAC PDU (Timing Advance 
Command MAC Control Element) 






9 


SS sends a MAC PDU containing a RLC 
PDU with SN=0 and poll bit set to trigger UE 
to transmit a status report in uplink. SS does 
not respond to any scheduling requests or 
Random Access Preambles from the UE. 


<— 


MAC PDU 






10 


Check: Does UE transmit Scheduling 
Requests, but no Random Access Preamble 
message while Timer 1 is running? 
(Note 1) 


— > 


SR 


2 


P 


11 


SS waits 0.2* timeAiignmentTimer 


- 


- 


- 


- 


12 


Check: Does the UE transmit a Random 
Access Preamble? 


— > 


Random Access Preamble 


3 


P 


13 


SS responds with a valid Random Access 
Response 


<— 


MAC PDU (Random Access 
Response (Temporary C-RNTI)) 


- 


- 


14 


Check: Does the UE transmit a MAC PDU 
with C-RNTI containing RLC STATUS PDU 
for the acknowledgement of the DL Data with 
the Temporary C-RNTI set to the value 
received in the Random Access Response 
message?? 


— > 


MAC PDU(RLC STATUS PDU 
(ACK_SN=1)) 


3 


P 


15 


The SS Transmits a PDCCH transmission 
addressed to the C-RNTl stored in the UE 
and contains an UL grant for a new 
transmission 


<— 








Note 1 A conformant UE correctly applies Timing Advance Command IVIAC Control and restarts 

timeAlignmentTimer, causing the uplink to stay in sync for a period equal to the received Time Alignment 

Value. 
Note 2 Ta value of 600 has been chosen arbitrarily in the middle of the range to 1 282 and corresponds to 0.31 25 

ms (timing advance in ms = 1000 x Nta x T, where Nta = TAX^6 and T^ = 1/(15000x2048) seconds 

according to TS 36.21 3 and TS 36.21 1 ). 



7.1.2.6.3.3 
None. 



Specific Message Contents 
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7.1 .2.7 MAC contention resolution / Temporary C-RNTI 

7.1.2.7.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_IDLE state and after transmitting a RRCConnectionRequest message } 
ensure that { 

when { SS does not send any MAC PDU including 'UE Contention Resolution Identity' MAC control 
element before contention resolution timer expires } 
then { UE re-transmits RRCConnectionRequest } 
} 

(2) 

with { UE in E-UTRA RRC_IDLE state and after transmitting a RRCConnectionRequest message } 
ensure that { 

when { SS transmits a valid MAC PDU containing RRCConnectionSetup, but not including 'UE 
Contention Resolution Identity' MAC control element } 
then { UE re-transmits RRCConnectionRequest } 
} 

(3) 

with { UE in E-UTRA RRC_IDLE state and after transmitting a RRCConnectionRequest message } 
ensure that { 

when { SS transmits a valid MAC PDU containing RRCConnectionSetup, including 'UE Contention 
Resolution Identity' MAC control element but with un-matched 'Contention Resolution Identity' } 
then { UE re-transmits RRCConnectionRequest } 
} 

(4) 

with { UE in E-UTRA RRC_IDLE state and after transmitting a RRCConnectionRequest message } 
ensure that { 

when { SS transmits a valid MAC PDU containing a RRCConnectionSetup, including 'UE Contention 
Resolution Identity' MAC control element and matching 'Contention Resolution Identity' } 
then { UE transmits a RRCConnectionSetupComplete message } 

} 

7.1.2.7.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.1.5. 

[TS 36.321, clause 5.1.5] 

Contention Resolution is based on either C-RNTI on PDCCH or UE Contention Resolution Identity on DL-SCH.. 

Once Msg3 is transmitted, the UE shall: 

start mac-ContentionResolutionTknei and restart mac-ContentionResolutionTiniei at each HARQ 
retransmission; 

regardless of the possible occurrence of a measurement gap, monitor the PDCCH until mac- 
ContentionResolutionY\ms.r expires or is stopped; 

if notification of a reception of a PDCCH transmission is received from lower layers, the UE shall: 

else if the CCCH SDU was included in Msg3 and the PDCCH transmission is addressed to its Temporary C- 
RNTl: 

if the MAC PDU is successfully decoded: 

stop mac-ContentionResolutionYimeT; 

if the MAC PDU contains a UE Contention Resolution Identity MAC control element; and 
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if the UE Contention Resolution Identity included in the MAC control element matches the CCCH 
SDU transmitted in Msg3: 

consider this Contention Resolution successful and finish the disassembly and demultiplexing of 
the MAC PDU; 

- set the C-RNTI to the value of the Temporary C-RNTI; 

discard the Temporary C-RNTI; 

consider this Random Access procedure successfully completed, 
else 

discard the Temporary C-RNTI; 

consider this Contention Resolution not successful and discard the successfully decoded MAC 
PDU. 

if mac-ContentionResolutionYvcne.r expires: 

discard the Temporary C-RNTI; 

consider the Contention Resolution not successful, 
if the Contention Resolution is considered not successful the UE shall: 
- flush the HARQ buffer used for transmission of the MAC PDU in the Msg3 buffer; 

- increment PREAMBLE_TRANSMISSION_COUNTER by 1 ; 

- If PREAMBLE_TRANSMISSION_COUNTER = preambleTransMax + 1 : 

indicate a Random Access problem to upper layers. 

based on the backoff parameter in the UE, select a random backoff time according to a uniform 
distribution between and the Backoff Parameter Value; 

delay the subsequent Random Access transmission by the backoff time; 

proceed to the selection of a Random Access Resource (see subclause 5.1.2). 
7.1.2.7.3 Test description 

7.1.2.7.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
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7.1.2.7.3.2 



Test procedure sequence 

Table 7.1.2.7.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits a Paging message including 
a matched identity. 


<— 


- 


1 


- 


2 


The UE transmits a IVIAC PDU containing an 
RRCConnectionRequest message. 


-> 


MAC PDU 


1 


- 


3 


Checl<: For time equal to 'Contention 
Resolution Timer', does UE send a PRACH 
preamble? 


-> 


PRACH preamble 


1 


F 


4 


Check: does the UE transmit a IVIAC PDU 
containing an RRCConnectionRequest 
message? 


-> 


MAC PDU 

( RRCConnectionRequest) 


1 


P 




EXCEPTION: In parallel with steps 5 to 8, the 
parallel behaviour in table 7.1 .2.7.3.2-2 is 
running. 










5 


The SS Transmits a valid MAC PDU 
containing RRCConnectionSetup, but not 
including 'UE Contention Resolution Identity' 
MAC control element 


<- 


MAC PDU 

( RRCConnectionSetup) 


2 




6 


Check: does the UE transmit a MAC PDU 
containing an RRCConnectionRequest 
message? 


-> 


MAC PDU 

( RRCConnectionRequest) 


2 


P 


7 


The SS Transmits a valid MAC PDU 
containing RRCConnectionSetup, and 
including 'UE Contention Resolution Identity' 
MAC control element but with un matched 
'Contention Resolution Identity' 


<- 


MAC PDU 


3 




8 


Check: does the UE transmit a MAC PDU 
containing an RRCConnectionRequest 
message? 


-> 


MAC PDU 


3 


P 


9 


The SS Transmits a valid MAC PDU 
containing RRCConnectionSetup, and 
including 'UE Contention Resolution Identity' 
MAC control element with matching 
'Contention Resolution Identity' 


<— 


MAC PDU 


4 




10 


Check: does the UE transmit a MAC PDU 
containing an RRCConnectionSetupComplete 
message including SERVICE REQUEST 
message? 


-> 


MAC PDU 
{RRCConnectionSetupComplete) 


4 


P 


11- 
14 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 











Table 7.1.2.7.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: UE transmits a MAC PDU containing 
an RRCConnectionSetupComplete message 
indicating acceptance of 
RRCConnectionSetup message? 


-> 


MAC PDU 
{RRCConnectionSetupComplete) 


2,3 


F 
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7.1 .2.7.3.3 Specific message contents 

7.1.2.7.3.3-1: SystemlnformationBlockType2 {a\\ steps, table 7.1.2.7.3.2-1) 



Derivation path: 36.508 table 4.4.3.3-1 
Information Element 

SystennlnformationBlocl<Type2 ::= SEQUENCE { 
radioResourceConfigCommon SEQUENCE { 
rach-Configuration SEQUENCE { 
ra-Supervisionlnformation SEQUENCE { 
preambleTransMax 
mac-ContentionResolutionTimer 
} 
} 
} 
} 



Value/Remark 



N10 
sf64 



Comment 



Condition 



Max value 
Max value 



7.1 .2.8 MAC contention resolution / C-RNTI 

7.1.2.8.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state and after transmitting a 

RRCConnectionReconfigurationComplete message for a handover without dedicated preamble } 
ensure that { 

when { The SS does not schedule any PDCCH transmission addressed to UE C-RNTI before Contention 
resolution timer expiry } 

then { The UE retransmits the RRCConnectionReconf igrationComplete message } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and after transmitting a 

RRCConnectionReconf igurationComplete message for a handover without dedicated preamble } 

ensure that { 

when { UE receive PDCCH transmission addressed to its C-RNTI before Contention resolution timer 
expiry } 

then { The UE does not retransmit the RRCConnectionReconf igrationComplete message } 
} 

7.1.2.8.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.1.5. 

[TS 36.321, clause 5.1.5] 

Contention Resolution is based on either C-RNTI on PDCCH or UE Contention Resolution Identity on DL-SCH.. 

Once Msg3 is transmitted, the UE shall: 

start mac-ContentionResolutionTiniei and restart mac-ContentionResolutionTinier at each HARQ 
retransmission; 

regardless of the possible occurrence of a measurement gap, monitor the PDCCH until mac- 
ContentionResolutionYimsr expires or is stopped; 

if notification of a reception of a PDCCH transmission is received from lower layers, the UE shall: 

if the C-RNTl MAC control element was included in Msg3: 

if the Random Access procedure was initiated by the MAC sublayer itself and the PDCCH transmission is 
addressed to the C-RNTI and contains an UL grant for a new transmission; or 

if the Random Access procedure was initiated by a PDCCH order and the PDCCH transmission is 
addressed to the C-RNTI: 

consider this Contention Resolution successful; 
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stop mac-ContentionResolutionTmier, 

discard the Temporary C-RNTI; 

consider this Random Access procedure successfully completed. 

else 

discard the Temporary C-RNTI; 

consider this Contention Resolution not successful and discard the successfully decoded MAC 
PDU. 

if mac-ContentionResolutionlimsT expires; 

discard the Temporary C-RNTI; 

consider the Contention Resolution not successful, 
if the Contention Resolution is considered not successful the UE shall: 
- flush the HARQ buffer used for transmission of the MAC PDU in the Msg3 buffer; 

- increment PREAMBLE_TRANSMISSION_COUNTER by 1 ; 

- If PREAMBLE_TRANSMIS SION_COUNTER = preambleTransMax + 1 : 

indicate a Random Access problem to upper layers. 

based on the backoff parameter in the UE, select a random backoff time according to a uniform 
distribution between and the Backoff Parameter Value; 

delay the subsequent Random Access transmission by the backoff time; 

proceed to the selection of a Random Access Resource (see subclause 5.1.2). 

7.1.2.8.3 Test description 

7.1.2.8.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 and Cell 2 

System information as in table 7.1.2.8.3.3-1. 

UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) according to [18] on cell 1. 
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7.1.2.8.3.2 



Test procedure sequence 

Table 7.1.2.8.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits a MAC PDU containing an 
RRCConnectionReconfiguration message to 
order the UE to perform intra frequency 
handover to Cell 2, not including explicit 
Random Access Preamble. 


<— 


MAC PDU 






2 


The UE transmits on cell 2 a MAC PDU 
containing 

RRCConnectionReconfigurationComplete, 
including C-RNTI MAC control element 


-> 


MAC PDU 






3 


SS Does not schedule any PDCCH 
transmission for UE C-RNTI 


- 


- 


- 


- 


4 


Check: does the UE transmit a PRACH 
preamble within time equal to 'Contention 
Resolution Timer'? 


-> 


(PRACH preamble) 


1 


F 


5 


Check: does the UE transmit on cell 2 a MAC 
PDU containing 

RRCConnectionReconfigurationComplete, 
including C-RNTI MAC control element? 


-> 


MAC PDU 

{RRCConnectionReconfigurationC 

omplete) 


1 


P 


6 


SS sends PDCCH transmission for UE C-RNTI 


<— 


- 


- 


- 


7 


Check: does the UE transmit MAC PDU 
containing 

RRCConnectionReconfigurationComplete 
within the next 2s? 


-> 


MAC PDU 

(RRCConnectionReconfigurationC 

omplete) 


2 


F 


8 


Check: does the test result of CALL generic 
procedure indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 2? 






2 





7.1 .2.8.3.3 Specific message contents 

Table 7.1.2.8.3.3-1: SystemlnformationBlockType2 {a\\ steps, Table 7.1.2.8.3.2-1) 



Derivation path: 36.508 table 4.4.3.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








radioResourceConfigCommon SEQUENCE { 








rach-Configuration SEQUENCE { 








ra-Supervisionlnformation SEQUENCE { 








preambleTransMax 


N10 


Max value 




mac-ContentionResolutionTimer 


sf64 


Max value 




1 








} 








} 








} 
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Table 7.1.2.8.3.3-2: RRCConnectionReconfiguration (step 1, Table 7.1.2.8.3.2-1) 



Derivation path: 36.508 table 4.6.1-6, condition RBC-HO 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








mobilityControllnformation SEQUENCE { 


MobilityControllnformatio 
n-HO 






targetCellldentity 


PhysicalCellldentity of 
Cell 2 (see 36.508 clause 
4.4.4.2) 






eutra-CarrierFreq 


Not present 






} 








1 








1 








} 








} 









7.1.2.9 



MAC backoff indicator 



7.1.2.9.1 



Test Purpose (TP) 



(1) 

with { UE in E-UTRA RRC_IDLE state and having initiated a random access procedure } 
ensure that { 

when { SS sends a Random Access Response including a Backoff Indicator and the Random Access 
Preamble identifier is different from the value received from the UE } 

then { UE triggers RA preamble after a random time between and the indicated Backoff parameter 



(2) 

with { UE in E-UTRA RRC_IDLE state and having initiated a random access procedure } 
ensure that { 

when { SS sends a Random Access Response containing Backoff Indicator and a Random Access Preamble 
identifier with the same value as received from the UE } 

then { UE stores Backoff Indicator and sends a RRC connection request in the first scheduled UL 
transmission } 



(3) 

with { UE in E-UTRA RRC_IDLE state and having initiated a random access procedure } 
ensure that { 

when { UE receives a Contention Resolution failure } 

then { UE triggers RA preamble after random time between and the UE stored Backoff parameter 



7.1.2.9.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.321, clauses 5.1.4, 5.1.5 
and 7.2. 

[TS 36.321 clause 5.1.4] 

If a downlink assignment for this TTI has been received on the PDCCH for the RA-RNTI and the received TB is 
successfully decoded, the UE shall regardless of the possible occurrence of a measurement gap: 

if the Random Access Response contains a Backoff Indicator sub header: 

set the backoff parameter value in the UE as indicated by the BI field of the Backoff Indicator sub header 
and Table 7.2-1. 
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else, set the backoff parameter value in the UE to ms. 



If no Random Access Response is received within the RA Response window, or if none of all received Random Access 
Responses contains a Random Access Preamble identifier corresponding to the transmitted Random Access Preamble, 
the Random Access Response reception is considered not successful and the UE shall: 



if in this Random Access procedure, the Random Access Preamble was selected by MAC: 

based on the backoff parameter in the UE, select a random backoff time according to a uniform distribution 
between and the Backoff Parameter Value; 

delay the subsequent Random Access transmission by the backoff time; 

[TS 36.321 clause 5.1.5] 

if the Contention Resolution is considered not successful the UE shall: 

- flush the HARQ buffer used for transmission of the MAC PDU in the Msg3 buffer; 

- increment PREAMBLE_TRANSMISSION_COUNTER by 1 ; 

- If PREAMBLE_TRANSMISSION_COUNTER = preambleTransMax + 1 : 

indicate a Random Access problem to upper layers. 

based on the backoff parameter in the UE, select a random backoff time according to a uniform distribution 
between and the Backoff Parameter Value; 

delay the subsequent Random Access transmission by the backoff time; 

proceed to the selection of a Random Access Resource (see subclause 5.1.2). 
[TS 36.321 clause 7.2] 
Backoff Parameter values are presented in Table 7.2-1. 

Table 7.2-1 : Backoff Parameter values 



Index 


Backoff Parameter value (ms) 








1 


10 


2 


20 


3 


30 


4 


40 


5 


60 


6 


80 


7 


120 


8 


160 


9 


240 


10 


320 


11 


480 


12 


960 


13 


Reserved 


14 


Reserved 


15 


Reserved 



The reserved values of the backoff parameter if received by the current release version UEs shall be taken as 960 ms. 
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Test description 
Pre-test conditions 



7.1.2.9.3 
7.1.2.9.3.1 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle Mode (state 2) according to [18]. 

Table 7.1 .2.9.3.1-1: (Void) 
7.1 .2.9.3.2 Test procedure sequence 

Table 7.1.2.9.3.2-1 : Backoff Parameter values. 



x: Index 


y: Backoff Parameter value (ms) 


1 


10 


2 


20 


3 


30 


4 


40 


5 


60 


6 


80 


7 


120 


8 


160 


9 


240 


10 


320 


11 


480 


12 


960 


13 


960 


14 


960 


15 


960 



Table 7.1.2.9.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 






EXCEPTION: Steps 1 to 5e are repeated for 
values of 'x' and 'y' according to table 
7.1.2.9.3.2-1 










1 


SS pages the UE 


<— 


- 


- 


- 


2 


UE sends a Random Access Preamble 


-> 


Random Access Preamble 


- 


- 


3 


SS sends a Random Access Response with 
the backoff parameter set to value Index field 
'x' and with the Random Access Preamble 
identifier different from the value received from 
the UE in the Random Access Preamble. 
The SS sets TimerTI to the Backoff value 'y' 
associated with the Index value 'x' and starts 
Timer T1. 


<— 


Random Access Response(BI, 
RAPID) 






4 


Check: Does UE send a Random Access 
Preamble while Timer T1 is running? 


— > 


Random Access Preamble 


1 


P 


5 


The SS transmits Random Access Response 
with RAPID corresponding to the transmitted 
Preamble in step 4, including T-CRNTI and not 
including Backoff Indicator sub header 


<— 


Random Access Response 






5A 


The UE transmits an RRCConnectionRequest 
message. 


— > 


- 


- 


- 


5B 


The SS Transmits a valid MAC PDU 
containing RRCConnectionSetup, and 


<— 


MAC PDU 

( RRCConnectionSetup) 


- 


- 
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including 'UE Contention Resolution Identity' 
IVIAC control element with matching 
'Contention Resolution Identity' 










5C 


The UE transmits an 
RRCConnectionSetupComplete message. 


— > 


- 


- 


- 


5D 


SS transmits SERVICE REJECT message 

with EIVIM cause "Congestion" to complete the 

procedure 

Note: The EIVIM cause chosen is just for 

convenience, to ensure that UE will abort the 

procedure without side effects. 


<— 








5E 


The SS transmits an RRCConnectionRelease 
message to release RRC connection and 
move to RRC IDLE. 


<— 










EXCEPTION: Steps 6 to 20 are repeated for 
values of 'x' and 'y' according to table 
7.1.2.9.3.2-1 










6 


SS pages the UE 


<— 


- 


- 


- 


7 


UE sends a Random Access Preamble 


-> 


Random Access Preamble 


- 


- 


8 


SS sends Random Access Response with a 
backoff parameter set to value Index field 'x' 
and the Random Access Preamble identifier 
value set to the same value as received from 
the UE in the Random Access Preamble. 


<— 


Random Access Response(BI, 
RAPID) 






9 


Check: Does UE sends an 
RRCConnectionRequest'm the grant 
associated to the Random Access 'Response 
received in step 8? 


— > 


MAC PDU 

( RRCConnectionRequest) 


2 


P 


10 


The SS sends a Contention Resolution Failure. 
The SS sets TimerTI to the Backoff value 'y' 
associated with the Index value 'x' and starts 
Timer T1. 


<— 


MAC Control PDU (Un 
matching UE Contention 
Resolution Identity) 






11 


Check: Does UE send a Random Access 
Preamble while Timer T1 is running? 


— > 


Random Access Preamble 


3 


P 


12 


The SS transmits Random Access Response 
with RAPID corresponding to the transmitted 
Preamble in step 1 1 , including T-CRNTI and 
not including Backoff Indicator sub header 


<— 


Random Access Response 






13 


The UE transmits an RRCConnectionRequest 
message. 


— > 


- 


- 


- 


14 


The SS Transmits a valid IVIAC PDU 
containing RRCConnectionSetup, and 
including 'UE Contention Resolution Identity' 
MAC control element with matching 
'Contention Resolution Identity' 


<— 


MAC PDU 

( RRCConnectionSetup) 






15 


The UE transmits an 
RRCConnectionSetupComplete message. 


— > 


- 


- 


- 


16- 
19 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 










20 


The SS transmits an RRCConnectionRelease 
message to release RRC connection and 
move to RRC IDLE. 


<— 









7.1.2.9.3.3 
None 



Specific Message Contents 
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7. 1 .3 DL-SCH data transfer 

7.1 .3.1 Correct handling of DL assignment / Dynamic case 

7.1.3.1.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives downlink assignment on the PDCCH for the UE's C-RNTI and receives data in the 
associated subframe and UE performs HARQ operation } 

then { UE sends a HARQ feedback on the HARQ process } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives downlink assignment on the PDCCH with a C-RNTI unknown by the UE and data is 
available in the associated subframe } 

then { UE does not send any HARQ feedback on the HARQ process } 

} 

7.1 .3.1 .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.321 clause 5.3.1 

[TS 36.321, clause 5.3.1] 

Downlink assignments transmitted on the PDCCH indicate if there is a transmission on the DL-SCH for a particular UE 
and provide the relevant HARQ information. 

When the UE has a C-RNTl, Semi-Persistent Scheduling C-RNTl, or Temporary C-RNTl, the UE shall for each TTI 
during which it monitors PDCCH: 

if a downlink assignment for this TTI has been received on the PDCCH for the UE's C-RNTl, or Temporary 
C-RNTl: 

if this is the first downlink assignment for this Temporary C-RNTl: 

consider the NDl to have been toggled. 

if the downlink assignment is for UE's C-RNTl and if the previous downlink assignment indicated to the 
HARQ entity of the same HARQ process was either a downlink assignment received for the UE's Semi- 
Persistent Scheduling C-RNTl or a configured downlink assignment: 

consider the NDl to have been toggled regardless of the value of the NDl. 

indicate the presence of a downlink assignment and deliver the associated HARQ information to the HARQ 
entity for this TTI. 

7.1.3.1.3 Test description 
7.1.3.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 

RRC Connection setup (preamble: Table 4.5.3.3-1, step 4) using parameters as specified in Table 7.1.3.1.3.3-1 

RRC Connection Reconfiguration (preamble: Table 4.5.3.3-1, step 8) using parameters as specified in Table 
7.1.3.1.3.3-2 

UE: 

None. 
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Preamble: 



The generic procedure to get UE in test state Loopback Activated (State 4) according to TS 36.508 clause 4.5 is 
executed, with all the parameters as specified in the procedure except that the RLC SDU size is set to return no 
data in uplink. 



7.1.3.1.3.2 



Test procedure sequence 

Table 7.1.3.1.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS transmits a downlink assignment including 
the C-RNTI assigned to the UE 


<- 


(PDCCH (C-RNTI)) 


- 


- 


2 


SS transmits in the indicated downlink 
assignment a RLC PDU in a MAC PDU. 


<- 


MAC PDU 


- 


- 


3 


Check: Does the UE transmit an HARQ ACK 
on PUCCH? 


-> 


HARQ ACK 


1 


P 


4 


SS transmits a downlink assignment to 
including a C-RNTI different from the assigned 
totheUE 


<~ 


(PDCCH (unknown C-RNTI)) 






5 


SS transmits in the indicated downlink 
assignment a RLC PDU in a MAC PDU. 


<- 


MAC PDU 


- 


- 


6 


Check: Does the UE send any HARQ ACK on 
PUCCH? 


-> 


HARQ ACK 


2 


F 



NOTE 1: For TDD, the timing of ACK/NACK is not constant as FDD, see Table 10.1-1 of TS 36.213. 
7.1 .3.1 .3.3 Specific Message Contents 

Table 7.1.3.1.3.3-1 : MAC-MainConfig-SRB (preamble: Table 4.5.3.3-1, step 4) 



Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


timeAlignmentTimerDedicated 


Infinity 







Table 7.1.3.1.3.3-2: RRCConnectionReconfiguration (preamble: Table 4.5.3.3-1, step 8) 

Derivation Path: 36.508, Table 4.6.1-8, condition SRB2-DRB(n, m) | 

Table 7.1.3.1.3.3-3: RadioResourceConfigDedicated-SRB2-DRB(n,m) (preamble: Table 4.5.3.3-1, step 

8) 



Derivation Path: 36.508, Table 4.6.3-16 


Information Element 


Value/remark 


Comment 


Condition 


mac-MainConfig 


Not present 







7.1 .3.2 Correct handling of DL assignment / Semi-persistent case 

7.1.3.2.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_Connected state with DRB established and sps-Conf iguration in DL is enabled 

} 

ensure that { 

when { UE receives a DL assignment addressed to its stored SPS-CRNTI in SF-Num y and with NDI set 
as } 

then { UE starts receiving DL MAC PDU in SF-Nums y+n* [semiPersistSchedlntervalDL] where 'n' is 
positive integer starting at zero } 
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(2) 

with { UE in E-UTRA RRC_Connected state with DRB established and stored DL SPS assignment to receive 
MAC PDU at SF-Num y+n* [semiPersistSchedlntervalDL] } 
ensure that { 

when { UE receives a DL assignment addressed to its SPS-CRNTI in SF-Num p and with NDI set as 0, 
where p!= y+n* [semiPersistSchedlntervalDL] } 

then { UE starts receiving DL MAC PDU in SF-Nums p+n* [semiPersistSchedlntervalDL] and stops 
receiving DL MAC PDU at SF-Nums y+n* [semiPersistSchedlntervalDL] where "n' is positive integer 
starting at zero } 
} 

(3) 

with { UE in E-UTRA RRC_Connected state with DRB established and stored DL SPS assignment to receive 
MAC PDU at SF-Num p+n* [semiPersistSchedlntervalDL] } 
ensure that { 

when { UE receives a DL assignment [for retransmission] addressed to its SPS-CRNTI in SF-Num z and 
with NDI set as 1, where z!= p+n* [semiPersistSchedlntervalDL] } 

then { UE receives MAC PDU in SF-Num z as per the new grant for SPS-CRNTI } 
} 

(4) 

with { UE in E-UTRA RRC_Connected state with DRB established and stored DL SPS assignment to receive 
MAC PDU at SF-Num z+n* [semiPersistSchedlntervalDL] } 
ensure that { 

when { UE receives a DL assignment addressed to its CRNTI in SF-Num p, such that p= 
z+n* [semiPersistSchedlntervalDL] } 

then { UE receives MAC PDU in SF-Num p as per assignment addresed to its C-RNTI } 
} 

(5) 

with { UE in E-UTRA RRC_Connected state with DRB established and stored DL SPS grant to receive MAC 
PDU at SF-Num z+n* [semiPersistSchedlntervalDL] } 
ensure that { 

when { UE receives a RRCConnectionReconf iguration including sps-Conf iguration with sps- 
Conf igurationDL set as 'disable' and hence resulting in DL SPS grant deactivation } 

then { UE deletes the stored sps-Conf iguration DL parameters and stops receiving DL MAC PDU' s as 
per stored SPS assignment in SF-Num z+n* [semiPersistSchedlntervalDL] } 
} 

(6) 

with { UE in E-UTRA RRC_Connected state with DRB established and stored DL SPS assignment to receive 
MAC PDU at SF-Num z+n* [semiPersistSchedlntervalDL] } 
ensure that { 

when { UE receives a PDCCH [for DL SPS explicit release according to Table 9.2-lA in TS 36.213] 
addressed to its SPS C-RNTI in SF-Num p and with NDI set as 0, where p!= 
z+n* [semiPersistSchedlntervalDL] } 

then { UE sends an ACK to SS and releases the configured SPS assignment and stops receiving MAC 
PDU in SF-Num z+n* [semiPersistSchedlntervalDL] as per assignment addresed to its SPS C-RNTI } 
} 

NOTE: SF-Num = [10*SFN + subframe] modulo 10240. 

7.1.3.2.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321 clause 5.3.1, 5.10 & 
5.10.1, 36.331 clause 5.3.10.5, 36.300 clause 11.1.1 and 36.213 clause 9.2. 

[TS 36.321, clause 5.3.1] 

Downlink assignments transmitted on the PDCCH indicate if there is a transmission on the DL-SCH for a particular UE 
and provide the relevant HARQ information. 

When the UE has a C-RNTI, Semi-Persistent Scheduling C-RNTI, or Temporary C-RNTI, the UE shall for each TTI 
during which it monitors PDCCH: 
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if a downlink assignment for this TTI has been received on the PDCCH for the UE's C-RNTI, or Temporary 
C-RNTI: 

if this is the first downhnk assignment for this Temporary C-RNTI: 

consider the NDI to have been toggled. 

if the downlink assignment is for UE's C-RNTI and if the previous downlink assignment indicated to the 
HARQ entity of the same HARQ process was either a downlink assignment received for the UE's Semi- 
Persistent Scheduling C-RNTI or a configured downlink assignment: 

consider the NDI to have been toggled regardless of the value of the NDI. 

indicate the presence of a downlink assignment and deliver the associated HARQ information to the HARQ 
entity for this TTI. 

else, if a downlink assignment for this TTI has been received on the PDCCH for the UE's Semi -Persistent 
Scheduling C-RNTI: 

if the NDI in the received HARQ information is 1 : 

consider the NDI not to have been toggled; 

indicate the presence of a downlink assignment and deliver the associated HARQ information to the 
HARQ entity for this TTI. 

else, if the NDI in the received HARQ information is 0: 

if PDCCH contents indicate SPS release: 

clear the configured downlink assignment (if any); 

if UmeAUgnmentTimer is running: 

instruct the physical layer to transmit a positive acknowledgement, 
else: 

store the downlink assignment and the associated HARQ information as configured downlink 

assignment; 

initialise (if not active) or re -initialise (if already active) the configured downlink assignment to start 
in this TTI and to recur according to rules in subclause 5.10.1; 

- set the HARQ Process ID to the HARQ Process ID associated with this TTI; 

consider the NDI bit to have been toggled; 

indicate the presence of a configured downlink assignment and deliver the stored HARQ information 
to the HARQ entity for this TTI. 

else, if a downlink assignment for this TTI has been configured and there is no measurement gap in this TTI: 

instruct the physical layer to receive, in this TTI, transport block on the DL-SCH according to the configured 
downlink assignment and to deliver it to the HARQ entity; 

- set the HARQ Process ID to the HARQ Process ID associated with this TTI; 

consider the NDI bit to have been toggled; 

indicate the presence of a configured downlink assignment and deliver the stored HARQ information to the 
HARQ entity for this TTI. 

For downlink assignments received on the PDCCH for the UE's Semi -Persistent Scheduling C-RNTI and for 
configured downlink assignments, the HARQ Process ID associated with this TTI is derived from the following 
equation: 
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HARQ Process ID = [floor(CURRENT_TTI/(Downlink Semi-Persistent Scheduling Interval))] modulo Number of 
Configured SPS Processes, 

where CURRENT_TTI=[(SFN * 10) + subframe number], Downlink Semi-Persistent Scheduling Interval is the 
periodicity of semi -persistent scheduling signalled via RRC and Number of Configured SPS Processes is the number of 
HARQ processes allocated for semi-persistent scheduling signalled via RRC. 

[TS 36.321, clause 5.10] 

When Semi-Persistent Scheduling is enabled by upper layer, the following information is provided: 

- Semi-Persistent Scheduling C-RNTI; 

Uplink Semi-Persistent Scheduling Interval semiPersistSchedlntervalUL and number of empty transmissions 
before implicit release impUcitReleaseAfter, if Semi-Persistent Scheduling is enabled for the uplink; 

Whether twoIntervalsConfig is enabled or disabled for uplink, only for TDD; 

Downlink Semi-Persistent Scheduling Interval semiPersistSchedlntervalDL and number of configured HARQ 
processes for Semi-Persistent Scheduling numberOfConfSPS-Processes, if Semi-Persistent Scheduling is 
enabled for the downlink; 

When Semi-Persistent Scheduling for uplink or downlink is disabled by RRC, the corresponding configured grant or 
configured assignment shall be discarded. 

[TS 36.321, clause 5.10.1] 

After a Semi-Persistent downlink assignment is configured, the UE shall consider that the assignment recurs in each 
subframe for which: 

(10 * SFN + subframe) = [(10 * SENsta^unie + sub frame start time) + N * (Downlink Semi-Persistent Scheduling 
Interval)] modulo 10240, for all N>0. 

Where SFNstan time and subframCstart time are the SFN and subframe, respectively, at the time the configured downlink 
assignment were (re-)initialised. 

[TS 36.331, clause 5.3.10.5] 

The UE shall: 

1> reconfigure the semi -persistent scheduling in accordance with the received sps-Config: 

[TS 36.300, clause 11.1.1] 

In addition, E-UTRAN can allocate semi-persistent downlink resources for the first HARQ transmissions to UEs: 

RRC defines the periodicity of the semi-persistent downUnk grant; 

PDCCH indicates whether the downlink grant is a semi-persistent one i.e. whether it can be implicitly reused in 
the following TTIs according to the periodicity defined by RRC. 

When required, retransmissions are explicitly signalled via the PDCCH(s). In the sub-frames where the UE has semi- 
persistent downlink resource, if the UE cannot find its C-RNTI on the PDCCH(s), a downlink transmission according to 
the semi-persistent allocation that the UE has been assigned in the TTI is assumed. Otherwise, in the sub-frames where 
the UE has semi -persistent downlink resource, if the UE finds its C-RNTI on the PDCCH(s), the PDCCH allocation 
overrides the semi-persistent allocation for that TTI and the UE does not decode the semi-persistent resources. 

[TS 36.213, clause 9.2] 

A UE shall validate a Semi-Persistent Scheduling assignment PDCCH only if all the following conditions are met: 

the CRC parity bits obtained for the PDCCH payload are scrambled with the Semi-Persistent Scheduling C- 
RNTI 

- the new data indicator field is set to '0'. In case of DCI formats 2 and 2A, the new data indicator field refers to 
the one for the enabled transport block. 
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Validation is achieved if all the fields for the respective used DCI format are set according to Table 9.2-1 or Table 9.2- 
lA. 

If validation is achieved, the UE shall consider the received DCI information accordingly as a valid semi -persistent 
activation or release. 

If validation is not achieved, the received DCI format shall be considered by the UE as having been received with a 
non-matching CRC. 

Table 9.2-1 : Special fields for Semi-Persistent Scheduling Activation PDCCH Validation 





DCI format 


DCI format 1/1 A 


DCI format 2/2A 


TPC command for 
scheduled PUSCH 


set to '00' 


N/A 


N/A 


Cyclic shift DM RS 


set to '000' 


N/A 


N/A 


IVIodulation and coding 

scheme and 

redundancy version 


MSB is set to '0' 


N/A 


N/A 


HARQ process number 


N/A 


FDD: set to '000' 
TDD: set to '0000' 


FDD: set to '000' 
TDD: set to '0000' 


Modulation and coding 
scheme 


N/A 


MSB is set to '0' 


For the enabled 
transport block: 
MSB is set to '0' 


Redundancy version 


N/A 


set to '00' 


For the enabled 

transport block: 

set to '00' 



Table 9.2-1 A: Special fields for Semi-Persistent Scheduling Release PDCCH Validation 





DCI format 


DCI format 1 A 


TPC command for scheduled 
PUSCH 


set to '00' 


N/A 


Cyclic shift DM RS 


set to '000' 


N/A 


Modulation and coding scheme and 
redundancy version 


set to '11111' 


N/A 


Resource block assignment and 
hopping resource allocation 


Settoall'I's 


N/A 


HARQ process number 


N/A 


FDD: set to '000' 
TDD: set to '0000' 


Modulation and coding scheme 


N/A 


set to '11111' 


Redundancy version 


N/A 


set to '00' 


Resource block assignment 


N/A 


Settoall'I's 



7.1 . 3.2.3 Test description 

7.1.3.2.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 

None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 
The UL RLC SDU size is set to not return any data. 
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7.1.3.2.3.2 



Test procedure sequence 

Table 7.1.3.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS Transmits a DL assignment using UE's 
SPS C-RNTI in SF-Num 'Y', NDI=0 


<— 


(DL SPS Grant) 


- 


- 


2 


The SS transmits in SF-Num 'Y', a DL IVIAC 
PDU containing a RLC PDU (DL-SQN=0)on 
UMDRB 


<- 


MAC PDU 






3 


Checl<: Does the UE transmit a HARQ ACK? 


— > 


HARQ ACK 


1 


P 


4 


The SS transmits in SF-Num 
'Y+X(semiPersistSchedlntervalDL)', a DL IVIAC 
PDU containing a RLC PDU (DL-SQN=1)on 
DRB 


<- 


MAC PDU 






5 


Checl<: Does the UE transmit a HARQ ACK? 


— > 


HARQ ACK 


1 


P 


6 


The SS Transmits a DL assignment using UE's 
SPS C-RNTI in SF-Num 'P', NDI=0; 
(Where Y-hX<P< Y+2X) 


<- 


(DL SPS Grant) 






7 


The SS transmits in SF-Num 'P', a DL IVIAC 
PDU containing a RLC PDU (DL-SQN=2)on 
UMDRB 


<— 


MAC PDU 






8 


Check: Does the UE transmit a HARQ ACK? 


— > 


HARQ ACK 


2 


P 


9 


The SS transmits in SF-Num 'Y-h2X', a DL 
MAC PDU containing a RLC PDU (DL- 
SQN=3)on UM DRB 


<- 


MAC PDU 






10 


Check: Does the UE transmit a HARQ 
Feedback? 


-> 


HARQ ACK/NACK 


2 


F 


11 


The SS transmits in SF-Num 
'P-i-X(semiPersistSchedlntervalDL)', a DL MAC 
PDU containing a RLC PDU (DL-SQN=3)on 
UM DRB; CRC is calculated in such a way will 
result in CRC error in UE. 


<— 


MAC PDU 






12 


Check: Does the UE transmit a HARQ NACK? 


— > 


HARQ NACK 


2 


P 


13 


The SS Transmits a DL assignment using UE's 
SPS C-RNTI in SF-Num 'Z', NDI=1 ; 
Where (P+X < Z <P-h2X); The DL HARQ 
process is same as in step 1 1 


<- 


(DL SPS Grant) 






14 


The SS re-transmits in SF-Num 'Z', a DL MAC 
PDU containing a RLC PDU (DL-SQN=3)on 
UM DRB; 


<— 


MAC PDU 






15 


Check: Does the UE transmit a HARQ ACK? 


— > 


HARQ ACK 


3 


P 


16 


The SS transmits in SF-Num 
'P-i-2X(semiPersistSchedlntervalDL)', a DL 
MAC PDU containing a RLC PDU (DL- 
SQN=4)on UM DRB 


<- 


MAC PDU 






17 


Check: Does the UE transmit a HARQ ACK? 


— > 


HARQ ACK 


1 


P 


18 


The SS Transmits a DL assignment using UE's 
C-RNTI in SF-Num 
'P-H3X(semiPersistSchedlntervalDL)' 


<- 


(DL Grant) 






19 


The SS transmits in SF-Num 
'P-H3X(semiPersistSchedlntervalDL)', a DL 
MAC PDU containing 1 RLC PDU's (DL- 
SQN=4)on UM DRB;Note 1 


<— 


MAC PDU 






20 


Check: Does the UE transmit a HARQ ACK ? 


— > 


HARQ ACK 


4 


P 


21 


The SS Transmits a PDCCH [for DL SPS 
explicit release] using UE's SPS C-RNTI in SF- 
Num 'Q', ND1=0; Where (P-^3X< Q <P-i-4X). 


<~ 


PDCCH [for DL SPS explicit 
release] 






22 


Check: Does the UE transmit a HARQ ACK? 


— > 


HARQ ACK 


6 


P 


23 


The SS transmits in SF-Num 
'P-H4X(semiPersistSchedlntervalDL)', a DL 
MAC PDU containing 1 RLC PDU's (DL- 
SQN=5)on UM DRB; 


<- 


MAC PDU 






24 


Check: Does the UE transmit a HARQ 


— > 


HARQ ACK/NACK 


6 


F 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



211 



ETSI TS 136 523-1 V9.1.1 (2010-07) 





Feedback? 










25 


The SS Transmits a DL assignment using UE's 
SPS C-RNTI in SF-Num V+5X\ NDI=0 


<— 


(DL SPS Grant) 


- 


- 


26 


The SS transmits in SF-Num 'P+5X', a DL 
IVIAC PDU containing a RLC PDU (DL- 
SQN=5)on UM DRB 


<— 


MAC PDU 






27 


Check: Does the UE transmit a HARQ ACK? 


— > 


HARQ ACK 


1 


P 


28 


Void 


- 


- 


- 


- 


29 


Void 


- 


- 


- 


- 


30 


SS Transmits RRCConnectionReconfiguration 
to disable SPS-ConfigurationDL 


- 


- 


- 


- 


31 


The UE transmits 
RRCConnectionReconfigurationComplete 


-> 


- 


- 


- 


32 


The SS transmits in SF-Num 
'P-i-nX(semiPersistSchedlntervalDL)', a DL 
MAC PDU containing 1 RLC PDU's (DL- 
SQN=5) on UM DRB; {n>5) 


<— 


MAC PDU 






33 


Check: Dose the UE transmit a HARQ 
Feedback? 


-> 


HARQ ACK/NACK 


5 


F 


Note 1 : The DL assignment for C-RNTI and hence the size of IVIAC PDU is different in size than stored SPS C-RNTI 
DL assignment in step 6. This assures UE is reciving DSCH data as per DL assignment for C-RNTI and not 
as per stored grant for SPS C-RNTI. 

Note 2: For TDD, the subframe number for 'Y', 'P', 'Z' and 'Q' should be '0', '4', '5' and '9' respectively based on TDD 
configuration 1 . 



7.1 .3.2.3.3 Specific message contents 

Table 7.1.3.2.3.3-1: RRCConnectionReconfiguration. RadioResourceConfigDedicated (Preamble) 



Derivation path: 36.508 table 4.6.3-1 6 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated::^ SEQUENCE { 








sps-Configuration ::= SEQUENCE { 








semiPersistSchedC-RNTI 


'FFFO'H 






sps-ConfigurationDL::=CHQICE{ 








enable SEQUENCE! 








semiPersistSchedlntervalDL 


sf160 


160 Subframe 




numberQfConfSPS-Processes 


8 




FDD 


numberQfConfSPS-Processes 


7 


Max DL HARQ 
processes is 7 
considering TDD 
configuration 1. 


TDD 


n1 Pucch-AN-Persistent 









1 








1 








sps-ConfigurationUL 


Not Present 






} 








} 









Table 7.1.3.2.3.3-2: RRCConnectionReconfiguration. RadioResourceConfigDedicated (step 30 of table 

7.1.3.2.3.2-1) 



Derivation path: 36.508 table 4.6.3-1 6 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated::^ SEQUENCE { 








sps-Configuration ::= SEQUENCE { 








semiPersistSchedC-RNTl 


Not Present 






sps-ConfigurationDL::=CHQICE{ 








disable 


NULL 






} 








sps-ConfigurationUL 


Not Present 






} 








} 
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7.1 .3.3 MAC PDU header handling 

7.1.3.3.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a MAC PDU containing an AMD PDU that is larger than 128 bytes with padding at 
the end } 

then { UE successfully decodes the MAC PDU and forward to higher layer } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a MAC PDU containing an AMD PDU that is smaller than 128 bytes with padding at 
the end } 

then { UE successfully decodes the MAC PDU and forward to higher layer } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a MAC PDU containing an single AMD PDU with no padding } 
then { UE successfully decodes the MAC PDU and forward to higher layer } 
} 

(4) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a MAC PDU containing multiple MAC SDUs each containg an AMD PDU and no padding 

} 

then { UE successfully decodes the MAC PDU and forward the AMD PDUs to higher layer } 

} 

7.1.3.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.321 clauses 6.1.2 
and 6.2.1. 

[TS 36.321, clause 6.1.2] 

A MAC PDU consists of a MAC header, zero or more MAC Service Data Units (MAC SDU), zero, or more MAC 
control elements, and optionally padding; as described in Figure 6.1.2-3. 

Both the MAC header and the MAC SDUs are of variable sizes. 

A MAC PDU header consists of one or more MAC PDU sub-headers; each sub header corresponding to either a MAC 
SDU, a MAC control element or padding. 

A MAC PDU sub header consists of the six header fields R/R/E/LCID/F/L but for the last sub header in the MAC PDU 
and for fixed sized MAC control elements. The last sub header in the MAC PDU and sub-headers for fixed sized MAC 
control elements consist solely of the four header fields R/R/E/LCID. It follows that a MAC PDU sub header 
corresponding to padding consists of the four header fields R/R/E/LCID. 
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R 


R 


E 


LCID 


F 


L 


L 



Octi 
Oct 2 
Oct 3 



R/R/E/LCID/F/L sub-header with 
7-bits L field 



R/R/E/LCID/F/L sub-header with 
15-bitsL field 



Figure 6.1.2-1 : R/R/E/LCID/F/L lUIAC sub header 



R R E 



LCID 



Octi 



R/R/E/LCID sub-header 



Figure 6.1.2-2: R/R/E/LCID MAC sub header 



MAC PDU sub-headers have the same order as the corresponding MAC SDUs, MAC control elements and padding. 

MAC control elements, are always placed before any MAC SDU. 

Padding occurs at the end of the MAC PDU, except when single -byte or two-byte padding is required. Padding may 
have any value and the UE shall ignore it. When padding is performed at the end of the MAC PDU, zero or more 
padding bytes are allowed. 

When single -byte or two-byte padding is required, one or two MAC PDU sub-headers corresponding to padding are 
placed at the beginning of the MAC PDU before any other MAC PDU subheader.A maximum of one MAC PDU can be 
transmitted per TB per UE. 



R/R/E/LCID R/R/E/LCID[/F/L] R/R/E/LCID/F/L R/R/E/LCID/F/L 
sub-header sub-header sub-header sub-header 



R/R/E/LCID/F/L R/R/E/LCID padding 
sub-header sub-header 



MAC header 



MAC Control MAC Control 
element 1 element 2 



MAC SDU 



MAC SDU 



Padding 
(opt) 



-MAC payload- 



Figure 6.1.2-3: Example of MAC PDU consisting of MAC header, MAC control elements, MAC SDUs 

and padding 

[TS 36.321, clause 6.2.1] 

The MAC header is of variable size and consists of the following fields: 

LCID: The Logical Channel ID field identifies the logical channel instance of the corresponding MAC SDU or 
the type of the corresponding MAC control element or padding as described in tables 6.2.1-1 and 6.2. 1 -2 for the 
DL and UL-SCH respectively. There is one LCID field for each MAC SDU, MAC control element or padding 
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included in the MAC PDU. In addition to that, one or two additional LCID fields are included in the MAC PDU, 
when single -byte or two-byte padding is required but cannot be achieved by padding at the end of the MAC 
PDU. The LCID field size is 5 bits; 

L: The Length field indicates the length of the corresponding MAC SDU or MAC control element in bytes. 
There is one L field per MAC PDU sub header except for the last sub header and sub-headers corresponding to 
fixed-sized MAC control elements. The size of the L field is indicated by the F field; 

F: The Format field indicates the size of the Length field as indicated in table 6.2. 1-3. There is one F field per 
MAC PDU sub header except for the last sub header and sub-headers corresponding to fixed-sized MAC control 
elements. The size of the F field is 1 bit. If the size of the MAC SDU or MAC control element is less than 128 
bytes, the UE shall set the value of the F field to 0, otherwise the UE shall set it to 1; 

E: The Extension field is a flag indicating if more fields are present in the MAC header or not. The E field is set 
to "1" to indicate another set of at least R/R/E/LCID fields. The E field is set to "0" to indicate that either a MAC 
SDU, a MAC control element or padding starts at the next byte; 

- R: Reserved bits, set to "0". 

The MAC header and sub-headers are octet aligned. 

Table 6.2.1-1 : Values of LCID for DL-SCH 



Index 


LCID values 


00000 


CCCH 


00001-01010 


Identity of the logical channel 


01011-11011 


Reserved 


11100 


UE Contention Resolution Identity 


11101 


Timing Advance Command 


11110 


DRX Command 


11111 


Padding 



Table 6.2.1-2: Values of LCID for UL-SCH 



Index 


LCID values 


00000 


CCCH 


00001-01010 


Identity of the logical channel 


01011-11001 


Reserved 


11010 


Power Headroom Report 


11011 


C-RNTI 


11100 


Truncated BSR 


11101 


Short BSR 


11110 


Long BSR 


11111 


Padding 



Table 6.2.1-3: Values of F field: 



Index 


Size of Lengtii field (in bits) 





7 


1 


15 



7.1.3.3.3 
7.1.3.3.3.1 
System Simulator: 

- Cell 1 
UE: 
None. 



Test description 
Pre-test conditions 
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Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
The UL RLC SDU size is set to not return any data. 
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7.1.3.3.3.2 



Test procedure sequence 

Table 7.1.3.3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 




1 


The SS transmits a MAC PDU containing a 
RLC SDU of 130 bytes in an AMD PDU 
(SN=0) with polling field 'P' set to '1 ' and 5 
bytes of padding. The MAC header contains 
two MAC sub-headers where the first MAC 
sub-header is a 3-byte R/R/E/LCID/F/L MAC 
sub-header with 'E' field set to '1 ', the 'F' set to 
'1 ', the 'LCID' field set to '0001 1 ' and the 'L' 
field set to '132' bytes. The second MAC sub- 
header is a padding control Ibyte R/R/E/LCID 
MAC sub-header with 'E' field set to '0' and 
'LCID' field set to '11111'. 


<— 


MAC PDU (R/R/E/LCID/F/L MAC 
sub-header (E='1 ', LCID='0001 1 ', 
F='1', L='132'), MAC R/R/E/LCID 
MAC sub-header (E='0', 
LCID='11111'), 132 bytes MAC 
SDU and 5 bytes padding) 






2 


Check: Does the UE transmit a MAC PDU 
containing an RLC STATUS PDU 
achnowleding the reception of the AMD PDU 
in step 1 ? 


-> 


MAC PDU (RLC STATUS PDU 
(ACK_SN'1')) 


1 


P 


3 


The SS transmits a MAC PDU containing a 
RLC SDU of 40 bytes in an AMD PDU{SN=1 ) 
with polling field 'P' set to '1 'and 5 bytes of 
padding. The MAC header contains two MAC 
sub-headers where the first MAC sub-header 
is a 2-byte R/R/E/LCID/F/L MAC sub-header 
with 'E' field set to '1 ', the 'F' set to '0', the 
'LCID' field set to '0001 1 ' and the 'L' field set to 
'42' bytes. The second MAC sub-header is a 
padding control Ibyte R/R/E/LCID MAC sub- 
header with 'E' field set to '0' and 'LCID' field 
set to '11111'. 


<- 


MAC PDU (R/R/E/LCID/F/L MAC 
sub-header (E='1 ', LCID='0001 1 ', 
F='0', L='42'), R/R/E/LCID MAC 
sub-header (E='0', LCID='1 1111'), 
42 bytes MAC SDU and 5 bytes 
padding) 






4 


Check: Does the UE transmit a MAC PDU 
containing an RLC STATUS PDU 
achnowleding the reception of the AMD PDU 
in step 3? 


-> 


MAC PDU (RLC STATUS PDU 
(ACK_SN '2')) 


2 


P 


5 


The SS transmits a MAC PDU containing a 
MAC SDU with a RLC SDU of 130 bytes in an 
AMD PDU(SN=2) with polling field 'P' set to '1 '. 
The MAC header contains one R/R/E/LCID 
MAC sub-header with 'E' field set to '0' and the 
'LCID' field set to '00011'. 


<- 


MAC PDU (R/R/E/LCID MAC sub- 
header (E='0', LCID='0001 1 '), 1 32 
bytes MAC SDU) 






6 


Check: Does the UE transmit a MAC PDU 
containing an RLC STATUS PDU 
achnowleding the reception of the AMD PDU 
in step 5? 


-> 


MAC PDU (RLC STATUS PDU 
(ACK_SN '3')) 


3 


P 


7 


The SS transmits a MAC PDU containing one 
MAC SDU containing a RLC SDU of size 127 
bytes in an AMD PDU (SN=3) and five MAC 
SDUs each containing a RLC SDU of 41 bytes 
in an AMD PDU (SN=4 to 8) in an AMD PDU 
with the polling field 'P' set to '1 ' in the last 
AMD PDU. The MAC header contains six MAC 
sub-headers where the first The MAC sub- 
header contains a 3 byte R/R/E/LCID/F/L MAC 
sub-header with 'E' field set to '1 ' , 'LCID' field 
set to '0001 1 ', 'F' field set to '1 ' and the 'L' field 
set to '129'. The second to fifth MAC sub- 
header are two byte R/R/E/LCID/F/L MAC sub- 
headers with 'E' field set to '1 ' , 'LCID' field set 
to '0001 1 ', 'F' field set to '0' and the 'L' field set 
to '43' bytes. The sixth MAC sub-header is a 
one byte R/R/E/LCID MAC sub-header with 'E' 
field set to '0' and the 'LCID' field set to 
'00011'. 


<- 


MAC PDU (R/R/E/LCID/L MAC 
sub-header (E='1 ', LCID='0001 1 ', 
F='1', L='1 29'), 4 X R/R/E/LCID/L 
MAC sub-header (E='1', 
LCID='00011', F='0', L='43'), 
R/R/E/LCID MAC sub-header 
(E='0', LCID='00011'), 129 bytes 
MAC SDU, 5 X 43 bytes MAC 
SDUs) 


4 
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8 


Check: Does the UE transmit a MAC PDU 
containing an RLC STATUS PDU 
achnowleding the reception of the AMD PDUs 
in step 7? 


-> 


MAC PDU (RLC STATUS PDU 
(ACK_SN '9')) 


4 


P 



7.1.3.3.3.3 
None 

7.1.3.4 

7.1.3.4.1 
(1) 



Specific Message Contents 

Correct HARQ process handling / DCCH and DTCH 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state with DRB established } 
ensure that { 

when { the UE receives a MAC PDU for DRB and CRC fails } 

then { the UE transmits a NACK for the corresponding HARQ process 



(2) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established } 
ensure that { 

when { the UE receives a MAC PDU retranmission for DRB, and results in CRC pass on combined data 
then { the UE transmits an ACK for the corresponding HARQ process and delivers data to upper 
layers } 

} 



7.1.3.4.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.3.2.1 & 
5.3.2.2. 

[TS 36.321, clause 5.3.2.1] 

There is one HARQ entity at the UE which maintains a number of parallel HARQ processes. Each HARQ process is 
associated with a HARQ process identifier. The HARQ entity directs HARQ information and associated TBs received 
on the DL-SCH to the corresponding HARQ processes (see subclause 5.3.2.2). 

The number of DL HARQ processes is specified in [2], clause 7. 

When the physical layer is configured for spatial multiplexing [2], one or two TBs are expected per subframe and they 
are associated with the same HARQ process. Otherwise, one TB is expected per subframe. 

The UE shall: 

If a downlink assignment has been indicated for this TTl: 

allocate the TBs received from the physical layer and the associated HARQ information to the HARQ 
process indicated by the associated HARQ information. 

If a downlink assignment has been indicated for the broadcast HARQ process: 

allocate the received TB to the broadcast HARQ process. 

NOTE: In case of BCCH a dedicated broadcast HARQ process is used. 

[TS 36.321, clause 5.3.2.2] 

For each subframe where a transmission takes place for the HARQ process, one or two (in case of spatial multiplexing) 
TBs and the associated HARQ information are received from the HARQ entity. 

For each received TB and associated HARQ information, the HARQ process shall: 
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if the NDI, when provided, has been toggled compared to the value of the previous received transmission 
corresponding to this TB; or 

if the HARQ process is equal to the broadcast process and if this is the first received transmission for the TB 
according to the system information schedule indicated by RRC; or 

if this is the very first received transmission for this TB(i.e. there is no previous NDI for this TB): 

consider this transmission to be a new transmission, 
else: 

consider this transmission to be a retransmission. 
The UE then shall: 

if this is a new transmission 

replace the data currently in the soft buffer for this TB with the received data, 
else if this is a retransmission: 

if the data has not yet been successfully decoded: 

combine the received data with the data currently in the soft buffer for this TB. 

if the TB size is different from the last valid TB size signalled for this TB: 

- the UE may replace the data currently in the soft buffer for this TB with the received data, 
attempt to decode the data in the soft buffer for this TB; 
if the data in the soft buffer was successfully decoded for this TB: 

if the HARQ process is equal to the broadcast process, deliver the decoded MAC PDU to upper layers. 

else if this is the first successful decoding of the data in the soft buffer for this TB: 

-deliver the decoded MAC PDU to the disassembly and demultiplexing entity. 

generate a positive acknowledgement (ACK) of the data in this TB. 
else: 

generate a negative acknowledgement (NACK) of the data in this TB. 

if the HARQ process is associated with a transmission indicated with a Temporary C-RNTI and the Contention 
Resolution is not successful (see subclause 5.1.5); or 

if the HARQ process is equal to the broadcast process; or 

if timeAlignmentTimer is stopped or expired: 

do not indicate the generated positive or negative acknowledgement to the physical layer, 
else: 

indicate the generated positive or negative acknowledgement for this TB to the physical layer. 

The UE shall ignore NDI received in all downlink assignments on PDCCH for its Temporary C-RNTI when 
determining if NDI on PDCCH for its C-RNTI has been toggled compared to the value in the previous transmission. 

7.1.3.4.3 Test description 

7.1.3.4.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
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RRC Connection Reconfiguration (preamble: Table 4.5.3.3-1, step 8) using parameters as specified in Table 

7.1.3.4.3.3-1 

UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
7.1 .3.4.3.2 Test procedure sequence 

Table 7.1.3.4.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 




EXCEPTION: Steps 1 to 7 are run 
8[FDD]/7[ 1 UD] times using test parameter 
values as given for each iteration in table 
7.1.3.4.3.2.-2. 










1 


The SS indicates a new transmission on 
PDCCH and transmits a IVIAC PDU (containing 
an RLC PDU) on HARQ process X, but the 
CRC is calculated in such a way that it will 
result in CRC error on UE side. The AIVID PDU 
contains a full RLC SDU. 


<— 


MAC PDU 


1 




2 


Check: Does the UE transmit a HARQ NACK? 


— > 


HARQ NACK 


1 


P 


3 


The SS indicates a retransmission on PDCCH 
and transmits the same IVIAC PDU like step 1 , 
with CRC is calculated in such a way that it will 
result in CRC pass on UE side. 


<— 


MAC PDU 






4 


Check: Does the UE send a HARQ ACK? 


— > 


HARQ ACK 


2 


P 


5 


UE transmit a Scheduling Request on PUCCH 


-> 


(SR) 


- 


- 


6 


The SS sends an UL grant suitable for the loop 
back PDU to transmitted 


<- 


(UL Grant) 


- 


- 


7 


The UE transmit a IVIAC PDU containing the 
loop back PDU corresponding to step 1 and 3 


-> 


MAC PDU 


- 


- 



Table 7.1.3.4.3.2-2: Test Parameters 



Iteration 


DL HARQ process 

(X) 


1 





2 


1 


3 


2 


4 


3 


5 


4 


6 


5 


7 


6 


8 


7[only for FDD] 


Note: The maximum DL HARQ process is 7 for 
TDD configuration 1. 
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7.1 .3.4.3.3 Specific message contents 

Table 7.1.3.4.3.3-1 : RRCConnectionReconfiguration (preamble: Table 4.5.3.3-1, step 8) 



Derivation path: 36.508 table 4.8.2.1 .5-1 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








RadioResourceConfigDedicated SEQUENCE { 








mac-MainConfig CHOICE { 








timeAlignmentlimerDedicated 


Infinity 






1 








1 








} 








} 








} 








1 









7.1.3.5 
7.1.3.5.1 
(1) 



Correct HARQ process handling / CCCH 
Test Purpose (TP) 



with { UE in E-UTRA RRC_ IDLE state with RRC connection establishment procedure initiated 
ensure that { 

when { UE receives a MAC PDU addressed to RA-RNTI } 

then { UE does not transmit ACK/NACK for the corresponding HARQ process } 



(2) 

with { UE in E-UTRA RRC_ IDLE state with RRC connection establishment procedure initiated } 
ensure that { 

when { UE receives a MAC PDU addressed to T-CRNTI without UE Contention Resolution Identity 
matching the one included in the RRCConnectionRequest message } 

then { UE does not transmit a ACK/NACK for the corresponding HARQ process } 



(3) 

with { UE in E-UTRA RRC_ IDLE state with RRC connection establishment procedure initiated 
ensure that { 

when { UE receives a MAC PDU addressed to T-CRNTI and cannot decode properly } 
then { UE does not transmits a NACK for the corresponding HARQ } 



(4) 



with { UE in E-UTRA RRC_ IDLE state with RRC connection establishment procedure initiated } 
ensure that { 

when { UE receives a MAC PDU addressed to T-CRNTI with UE Contention Resolution Identity matching 
the one included in the RRCConnectionRequest message } 

then { UE transmits an ACK for the corresponding HARQ process and delivers data to upper layers 



7.1.3.5.2 



Conformance requirements 



References; The conformance requirements covered in the current TC are specified in; TS 36.321, clause 5.3.2.1 and 
5.3.2.2. 

[TS 36.321, clause 5.3.2.1] 
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There is one HARQ entity at the UE which maintains a number of parallel HARQ processes. Each HARQ process is 
associated with a HARQ process identifier. The HARQ entity directs HARQ information and associated TBs received 
on the DL-SCH to the corresponding HARQ processes (see subclause 5.3.2.2). 

The number of DL HARQ processes is specified in [2], clause 7. 

When the physical layer is configured for spatial multiplexing [2], one or two TBs are expected per subframe and they 
are associated with the same HARQ process. Otherwise, one TB is expected per subframe. 

The UE shall: 

If a downlink assignment has been indicated for this TTI: 

allocate the TBs received from the physical layer and the associated HARQ information to the HARQ 
process indicated by the associated HARQ information. 

If a downlink assignment has been indicated for the broadcast HARQ process; 

allocate the received TB to the broadcast HARQ process. 

NOTE: In case of BCCH a dedicated broadcast HARQ process is used. 

[TS 36.321, clause 5.3.2.2] 

For each subframe where a transmission takes place for the HARQ process, one or two (in case of spatial multiplexing) 
TBs and the associated HARQ information are received from the HARQ entity. 

For each received TB and associated HARQ information, the HARQ process shall: 

if the NDI, when provided, has been toggled compared to the value of the previous received transmission 
corresponding to this TB; or 

if the HARQ process is equal to the broadcast process and if this is the first received transmission for the TB 
according to the system information schedule indicated by RRC; or 

if this is the very first received transmission for this TB(i.e. there is no previous NDI for this TB): 

consider this transmission to be a new transmission. 

else: 

consider this transmission to be a retransmission. 

The UE then shall: 

if this is a new transmission 

replace the data currently in the soft buffer for this TB with the received data. 

if a retransmission is indicated for this TB: 

if the data has not yet been successfully decoded: 

combine the received data with the data currently in the soft buffer for this TB. 

if the TB size is different from the last valid TB size signalled for this TB: 

the UE may replace the data currently in the soft buffer for this TB with the received data. 

attempt to decode the data in the soft buffer for this TB; 

if the data in the soft buffer was successfully decoded for this TB: 

if the HARQ process is equal to the broadcast process: 

deliver the decoded MAC PDU to upper layers. 

else if this is the first successful decoding of the data in the soft buffer for this TB: 
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deliver the decoded MAC PDU to the disassembly and demultiplexing entity. 

generate a positive acknowledgement (ACK) of the data in this TB. 

else: 

generate a negative acknowledgement (NACK) of the data in this TB. 

if the HARQ process is associated with a transmission indicated with a Temporary C-RNTI and a UE the 
Contention Resolution Identity match is not indicated successful (see subclause 5.1.5); or 

if the HARQ process is equal to the broadcast process; or 

if timeAlignmentTimer is stopped or expired: 

do not indicate the generated positive or negative acknowledgement to the physical layer, 
else: 

indicate the generated positive or negative acknowledgement for this TB to the physical layer. 

The UE shall ignore NDI received in all downlink assignments on PDCCH for its Temporary C-RNTI when 
determining if NDI on PDCCH for its C-RNTI has been toggled compared to the value in the previous transmission. 

7.1.3.5.3 Test description 

7.1.3.5.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 

System information taking into account parameters in table 7.1.3.5.3.3-1 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode state (state 2) according to [18]. 
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7.1.3.5.3.2 



Test procedure sequence 

Table 7.1.3.5.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits a Paging message including 
a matched identity. 


<— 


- 


- 


- 


2 


The UE transmits Preamble on PRACH 


— > 


PRACH Preamble 


- 


- 


3 


The SS transmits Random Access Response 
with matching RA-ld and including T-CRNTI. 
The CRC is calculated in such a way, it will 
result in CRC error on UE side 


<— 


Random Access Response 






4 


Check: does the UE transmit a HARQ 
ACK/NACK? 


-> 


HARQ ACK/NACK 


1 


F 


5 


The UE transmits Preamble on PRACH 


— > 


PRACH Preamble 


- 


- 


6 


The SS transmits Random Access Response 
with matching RA-ld and including T-CRNTI . 
The CRC is calculated in such a way, it will 
result in CRC pass on UE side. 


<~ 


Random Access Response 






7 


Check: does the UE transmit a HARQ 
ACK/NACK? 


-> 


HARQ ACK/NACK 


1 


F 


8 


The UE transmits a IVIAC PDU containing an 
RRCConnectionRequest message. 


-> 


MAC PDU 


- 


- 


9 


The SS transmits a valid IVIAC PDU containing 
RRCConnectionSetup, and including 'UE 
Contention Resolution Identity' IVIAC control 
element with not matching 'Contention 
Resolution Identity'. 


<- 


MAC PDU 






10 


Check: does the UE transmit a HARQ 
ACK/NACK? 


-> 


HARQ ACK/NACK 


2 


F 


11 


The UE transmits Preamble on PRACH 


— > 


PRACH Preamble 


- 


- 


12 


The SS transmits Random Access Response 
with matching RA-ld and including T-CRNTI. 


<— 


Random Access Response 


- 


- 


13 


The UE transmits a IVIAC PDU containing an 
RRCConnectionRequest message. 


-> 


MAC PDU 


- 


- 


14 


The SS transmits a valid IVIAC PDU containing 
RRCConnectionSetup, and including 'UE 
Contention Resolution Identity' IVIAC control 
element with matching 'Contention Resolution 
Identity'. The CRC is calculated in such a way 
that it will result in CRC error on UE side 


<- 


MAC PDU 






15 


Check: Does UE transmit a HARQ NACK? 


— > 


HARQ NACK 


3 


F 


16 


The UE transmits Preamble on PRACH 


— > 


PRACH Preamble 


- 


- 


17 


The SS transmits Random Access Response 
with matching RA-ld and including T-CRNTI. 


<— 


Random Access Response 


- 


- 


18 


The UE transmits a IVIAC PDU containing an 
RRCConnectionRequest message. 


-> 


MAC PDU 


- 


- 


19 


The SS transmits the same IVIAC PDU like in 
step 14, but the CRC is calculated in such a 
way that it will result in CRC pass on UE side 


<- 


MAC PDU 






20 


Check: does the UE transmit a HARQ ACK? 


— > 


HARQ ACK 


4 


P 


21 


The UE transmits a IVIAC PDU containing an 
RRCConnectionSetupComplete message 
including SERVICE REQUEST message 
indicating acceptance of 
RRCConnectionSetup message 


-> 


MAC PDU 






22- 
25 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 
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7.1 .3.5.3.3 Specific message contents 

Table 7.1.3.5.3.3-1 : SystemlnformationBlockType2 (all steps, table 7.1.3.5.3.2-1) 



Derivation path: 36.508 table 4.4.3.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








radioResourceConfigCommon SEQUENCE { 








rach-Configuration SEQUENCE { 








ra-Supervisionlnformation SEQUENCE { 








preamblelransMax 


n8 






mac-ContentionResolutionlimer 


sf64 


IVIax Value 




} 








1 








prach-Confiquration SEQUENCE { 








prach-Configlnfo SEQUENCE { 








prach-Configurationlndex 


1 


As per table 5.7.1 - 
2 of 36.211, this 
results in PRACH 
preamble 
transmission start 
in even frame 
numbers and sub- 
frame number 4 


FDD 


prach-Configurationlndex 





As portable 5.7.1- 
4 of 36.211, this 
results in PRACH 
preamble 
transmission with 
frequency 
resource index=0; 
occurring in even 
radio frames; 
resource is 
located in first half 
frame and sub 
frame number 3 
Note 1 


TDD 


} 








} 








} 








ue-TimersAndConstants SEQUENCE! 








1300 


ms2000 


T300 




} 








} 









7.1.3.6 



7.1.3.6.1 



Correct HARQ process handling / BCCH 
Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a MAC PDU addressed to SI-RNTI } 

then { UE does not send any ACK/NACK for the corresponding dedicated HARQ process 



7.1.3.6.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.3.2.1 & 
5.3.2.2. 

[TS 36.321, clause 5.3.2.1] 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 225 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

There is one HARQ entity at the UE which maintains a number of parallel HARQ processes. Each HARQ process is 
associated with a HARQ process identifier. The HARQ entity directs HARQ information and associated TBs received 
on the DL-SCH to the corresponding HARQ processes (see subclause 5.3.2.2). 

The number of DL HARQ processes is specified in [2], clause 7. 

When the physical layer is configured for spatial multiplexing [2], one or two TBs are expected per subframe and they 
are associated with the same HARQ process. Otherwise, one TB is expected per subframe. 

The UE shall: 

If a downlink assignment has been indicated for this TTI: 

allocate the TBs received from the physical layer and the associated HARQ information to the HARQ 
process indicated by the associated HARQ information. 

If a downlink assignment has been indicated for the broadcast HARQ process; 

allocate the received TB to the broadcast HARQ process. 

NOTE: In case of BCCH a dedicated broadcast HARQ process is used. 

[TS 36.321, clause 5.3.2.2] 

For each subframe where a transmission takes place for the HARQ process, one or two (in case of spatial multiplexing) 
TBs and the associated HARQ information are received from the HARQ entity. 

For each received TB and associated HARQ information, the HARQ process shall: 

if the NDI, when provided, has been toggled compared to the value of the previous received transmission 
corresponding tothis TB; or 

if the HARQ process is equal to the broadcast process and if the physical layer indicates a new transmission for 
the TB according to the system information schedule indicated by RRC; or 

if this is the very first received transmission for this TB(i.e. there is no previous NDI for this TB): 

consider this transmission to be a new transmission. 

else: 

consider this transmission to be a retransmission. 

The UE then shall: 

if this is a new transmission: 

replace the data currently in the soft buffer for this TB with the received data. 

else if this is a retransmission: 

if the data has not yet been successfully decoded: 

combine the received data with the data currently in the soft buffer for this TB. 

if the TB size is different from the last valid TB size signalled for this TB: 

the UE may replace the data currently in the soft buffer for this TB with the received data. 

attempt to decode the data in the soft buffer for this TB; 

if the data in the soft buffer was successfully decoded for this TB: 

if the HARQ process is equal to the broadcast process: 

- deliver the decoded MAC PDU to upper layers. 

else if this is the first successful decoding of the data in the soft buffer for this TB: 
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deliver the decoded MAC PDU to the disassembly and demultiplexing entity. 

generate a positive acknowledgement (ACK) of the data in this TB. 

else: 

generate a negative acknowledgement (NACK) of the data in this TB. 

if the HARQ process is associated with a transmission indicated with a Temporary C-RNTI and the Contention 
Resolution is not yet successful (see subclause 5.1.5); or 

if the HARQ process is equal to the broadcast process; or 

if timeAlignmentTimer is stopped or expired: 

do not indicate the generated positive or negative acknowledgement to the physical layer, 
else: 

indicate the generated positive or negative acknowledgement for this TB to the physical layer. 

The UE shall ignore NDI received in all downlink assignments on PDCCH for its Temporary C-RNTI when 
determining if NDI on PDCCH for its C-RNTI has been toggled compared to the value in the previous 
transmission. 

7.1.3.6.3 Test description 

7.1.3.6.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

RRC Connection Reconfiguration (Preamble: Table 4.5.3.3-1) using parameters as specified in Table 7.1.3.6.3.3- 
4 
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7.1.3.6.3.2 



Test procedure sequence 

Table 7.1.3.6.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


A 


The SS transmits a Paging message including 
the systemlnfoModification. (Note 1) 


- 


- 


- 


- 


1 


The SS transmits an updated system 
information with SI-RNTI addressed in L1/L2 
header. CRC is calculated in such a way, it will 
result in CRC fail on UE side. Dedicated 
HARQ process for broadcast is used. 


<— 








2 


Check: Does the UE transmit a HARQ 
ACK/NACK? (Note 2) 


-> 


HARQ ACK/NACK 


1 


F 


3 


Void 


- 


- 


- 


- 


4 


Void 


- 


- 






5 


Void 


- 


- 


- 


- 


6 


The SS transmits an updated system 
information [contents same as in step 1] with 
SI-RNTI addressed in L1/L2 header. CRC is 
calculated in such a way, it will result in CRC 
pass on UE side. Dedicated HARQ process for 
broadcast is used. 










7 


Check: Does the UE transmit an ACK/NACK? 
(Note 2) 


-> 


HARQ ACK/NACK 


1 


F 


8 


SS is configured to not allocate UL Grants on 
Scheduling Request 


- 


- 


- 


- 


9 


The SS Transmits MAC PDU containing a RLC 
PDU 


<- 


MAC PDU 


- 


- 


10 


The UE transmits a HARQ ACK 


— > 


HARQ ACK 


- 


- 


11 


Check: Does the UE transmit PRACH 
Preamble, using PRACH resources as in new 
SI? 


-> 


PRACH Preamble 


1 


P 


12 


The SS transmits Random Access Response 


<— 


Random Access Response 


- 


- 


13 


The UE transmits a MAC PDU with C-RNTI 
containing loop backed RLC PDU 


-> 


MAC PDU 


- 


- 


14 


SS sends PDCCH transmission for UE C-RNTI 
to complete contention resolution. 


- 


- 


- 


- 


Note 1 : To guarantee that the UE will receive at least one Paging in the Modification Period preceding the Syslnfo 
change, SS should send the Paging message in every eligible PO in this IVIodification Period. 

Note 2: When requested to check HARQ feedback for the dedicated broadcast HARQ process, the SS 

shall assume the same PUCCH reception requirement as specified in TS 36.213 section 10 for a normal 
HARQ process. In addition, the check applies to all broadcast SIBs and SS should listen for a specified 
duration which is set to 5120ms here. 5120ms is the system information modification period calculated 
based on the default values of parameters specified in TS 36.508. ( modification period = 
modificationPeriodCoeff * defaultPagingCycle,and in TS 36.508, modification PerlodCoeff =4 and 
defaultPagingCycle=128radio frames). 
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7.1 .3.6.3.3 Specific message contents 

Table 7.1 .3.6.3.3-1 : SystemlnformationBlockType2 (steps 1 and 6 of table 7.1 .3.6.3.2-1) 



Derivation path: 36.508 table 4.4.3.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








radioResourceConfigCommon SEQUENCE { 








prach-Config SEQUENCE { 








rootSequencelndex 


20 {u = 2, Value different 
than default in TS 
36.508) 




FDD 


rootSequenceindex 


2 (u = 2, Value different 
than default in TS 
36.508) 


rootSequencelnde 
X should take 
value from table of 
5.7.2-5 in TS 
36.211 since, the 
PRACH format 4 
is used as default 
for testing for 
TDD. 


TDD 


} 








1 








} 









Table 7.1.3.6.3.3-2: Paging (step A, 5 of table 7.1.3.6.3.2-1) 



Derivation path: 36.508 table 4.6.1-7 


Information Element 


Value/Remark 


Comment 


Condition 


Paging ::= SEQUENCE { 








pagingRecordList 


Not present 






systemlnfolVlodification 


true 






etws-lndication 


Not present 






nonCrJticalExtension SEQUENCE {} 


Not present 






} 









Table 7.1.3.6.3.3-3: SystemlnformationBlockTypel (step 1 of table 7.1.3.6.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








systemlnfoValueTag 


1 






} 









Table 7.1.3.6.3.3-4: RRCConnectionReconfiguration (Preamble) 



Derivation path: 36.508 table 4.8.2.1 .5-1 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








RadioResourceConfigDedicated SEQUENCE { 








mac-MainConfig CHOICE { 








timeAlignmentTimerDedicated 


Infinity 






} 








} 








1 








1 








} 








} 
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7.1.3.7 

7.1.3.7.1 
(1) 



MAC padding 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensurethat { 

when{ UE is receiving RLC PDUs in MAC PDUs with padding greater than 2 bytes } 
then { UE acknowledges reception of the RLC PDUs } 



(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is receiving RLC PDUs in MAC PDUs with padding equal to or less than 2 bytes 
then { UE acknowledges reception of the RLC PDUs } 



(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { SS is tranmitting a MAC control Timing Advance PDU with padding equal to or less than 2 
bytes and no Data MAC PDU sub-headers followed by tranmitting a RLC PDU } 

then { UE acknowledges reception of the RLC PDU using the new Timing Advance } 



7.1.3.7.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 6.1.2. 

[TS 36.321 clause 6.1.2] 

Padding occurs at the end of the MAC PDU, except when single -byte or two-byte padding is required. Padding may 
have any value and the UE shall ignore it. When padding is performed at the end of the MAC PDU, zero or more 
padding bytes are allowed. 

When single -byte or two-byte padding is required, one or two MAC PDU subheaders corresponding to padding are 
placed at the beginning of the MAC PDU before any other MAC PDU subheader. 

A maximum of one MAC PDU can be transmitted per TB per UE. 



R/R/E/LCID R/R/E/LCID R/R/E/LCID/F/L R/R/E/LCID/F/L 

sub-header sub-header sub-header sub-header 



R/R/E/LCID/F/L R/R/E/LCID padding 
sub-header sub-header 



MAC header 



MAC Control MAC Control 
element 1 element 2 



MAC SDU 



MAC SDU 



Padding 
(opt) 



-MAC payload- 



Figure 6.1.2-3: Example of MAC PDU consisting of IVIAC header, lUIAC control elements, MAC SDUs 

and padding 
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Test description 
Pre-test conditions 



7.1.3.7.3 
7.1.3.7.3.1 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

The UL RLC SDU size is set to not return any data. 
7.1 .3.7.3.2 Test procedure sequence 

Table 7.1.3.7.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




1 


The SS transmits a MAC PDU containing an 
RLC SDU in an AIVID PDU with polling field 'P' 
set to '1 '. The MAC SDU payload is set 8 bytes 
smaller than the TB size allocated in the DL 
Assignment minus AMD PDU and MAC 
headers. SS adds a 7-byte padding at the end 
of the MAC PDU and inserts a MAC padding 
sub-header after the MAC SDU sub-header. 


<- 


MAC PDU{AMD PDU, 7-byte 
padding) 






2 


Check: Does the UE transmit an RLC STATUS 
PDU with ACK SN field equal to 1 ? 


-> 


RLC STATUS PDU (ACK_SN '1') 


1 


P 


3 


The SS transmits a MAC PDU containing an 
RLC SDU in an AMD PDU with polling field 'P' 
set to '1'. The MAC SDU payload is set to 1- 
byte smaller than the TB size allocated in the 
DL Assignment minus AMD PDU and MAC 
headers. SS adds a 1 byte padding by 
inserting a MAC PDU sub-header before first 
Data MAC PDU sub-header. 


<— 


MACPDU(AMD PDU, one byte 
padding) 






4 


Check: Does the UE transmit an RLC STATUS 
PDU with ACK SN field equal to 2? 


-> 


MAC PDU(RLC STATUS PDU 
(ACK SN =2) ) 


2 


P 


5 


The SS sets the downlink assignment for TBS 
of '16-bits' 


- 


- 


- 


- 


6 


The SS transmits a Timing Advance without 
any additional padding. Start Timer_1 = Time 
Alignment timer value. 


<— 


MAC Control PDU(Timing 
Advance) 






7 


The SS sets the downlink assignment for TBS 
of '24-bits' 


- 


- 


- 


- 


8 


The SS waits a time period equal to 0.5 of 
Timer_1 value and configures a MAC PDU that 
consists of only a Control MAC PDU sub 
header {8-bits). Transmit another Timing 
Advance MAC PDU (8-bits) which leaves 1- 
byte padding. The SS does not transmit any 
subsequent timing alignment. Restart Timer_1 
= Time Alignment timer value 


<— 


MAC Control Element (Timing 
Advance) + 1 -byte padding 






9 


The SS waits a time period equal to 0.7 of 
Timer 1. 


- 


- 


- 


- 


9A 


SS transmits MAC PDU containing one RLC 
SDU in an AMD PDU with polling field 'P' set 
to'1'. 


<- 


MAC PDU(AMD PDU (SN=2, 
P=1)) 






10 


Check: Does the UE transmit an RLC STATUS 
PDU acknowledging the reception of the RLC 
PDU in step 9 with new Timing Advance? 


-> 


MAC PDU(RLC STATUS PDU 
(ACK_SN =3)) 


3 


P 
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7.1 .3.7.3.3 Specific Message Contents 

None. 

7.1.3.9 MAC reset / DL 

7.1.3.9.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE MAC is reset, due to handover to a new cell } 
then { UE flushes DL HARQ buffer } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state ) 
ensure that { 

when{ UE MAC is reset, due to handover to a new cell } 

then { UE considers the next transmission for each DL HARQ process as very first } 
} 

7.1.3.9.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.9. 

[TS 36.321 clause 5.9] 

If a reset of the MAC entity is requested by upper layers, the UE shall: 

initialize Bj for each logical channel to zero; 

stop (if running) all timers; 

consider the timeAlignmentTimer as expired and perform the corresponding actions in subclause 5.2; 

set the NDIs for all uplink HARQ processes to the value 0; 

stop, if any, ongoing RACH procedure; 

- discard explicitly signalled ra-Preamblelndex and ra-PRACH-Masklndex, if any; 

- flush Msg3 buffer; 

cancel, if any, triggered Scheduling Request procedure; 

cancel, if any, triggered Buffer Status Reporting procedure; 

cancel, if any, triggered Power Headroom Reporting procedure; 

flush the soft buffers for all DL HARQ processes; 

for each DL HARQ process, consider the next received transmission for a TB as the very first; 

release, if any. Temporary C-RNTI. 

7.1.3.9.3 Test description 
7.1.3.9.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2 
UE: 

None. 
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Preamble: 

The UE is in state Loopback Activated (state 4) in Cell 1 according to [18] 

7.1 .3.9.3.2 Test procedure sequence 

Table 7.1.3.9.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while columns marked "Tl" 
is to be applied subsequently. The exact instants on which these values shall be applied are described in the texts in this 
clause. 

Table 7.1.3.9.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 2 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15Khz 


-90 


Off 




T1 


Cell-specific RS EPRE 


ciBm/15Khz 


-90 


-80 





Table 7.1.3.9.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


The SS transmits a MAC PDU containing one 
RLC SDU on DRB, but the CRC is calculated 
in such a way that it will result in CRC error on 
UEside. 


<- 


MAC PDU (1 RLC SDU of 40 
bytes on DRB) 






3 


The UE transmit a HARQ NACK 


-> 


HARQ NACK 


- 


- 


4 


The SS changes Cell 2 level according to the 
row "Tl" in table 7.1.4.12.3.2-1 


- 


- 


- 


- 


5 


The SS transmits an 

RRCConnectionReconfiguration message to 
order the UE to perform intra frequency 
handover to Cell 2, including explicit Random 
Access Preamble. 


<- 








6 


The UE transmits on Cell 2, 
RRCConnectionReconfigurationComplete 


-> 


- 


- 


- 


7 


Check: For 100 ms, does the UE transmit any 
HARQ NACK? 


-> 


HARQ NACK 


1 


F 


8 


The SS transmits a IVIAC PDU containing RLC 
SDU on DRB. The NDI on PDCCH is same as 
in step 2 


<- 


MAC PDU (1 RLC SDU of 40 
bytes on DRB) 






9 


Check: Does the UE transmit a scheduling 
request? 


-> 


(SR) 


2 


P 


10 


The SS allocates UL Grant sufficient for one 
RLC SDU to be loop backed in a TTI, and NDI 
indicates new transmission 


<- 


Uplink Grant 






11 


The UE transmits a IVIAC PDU including one 
RLC SDU 


-> 


MAC PDU 


- 


- 
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7.1 .3.9.3.3 Specific Message Contents 

Table 7.1.3.9.3.3-1 : RRCConnectionReconfiguration (step 5, table 7.1.3.9.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-6, condition RBC-HO 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








mobilityControllnfo SEQUENCE { 


MobilityControllnfo-HO 






targetPhysCellld 


PhysicalCellldentity of 
Cell 2 (see 36.508 clause 
4.6.5) 






carrierFreq 


Not present 






1 








} 








} 








} 








} 









7.1.4 

7.1.4.1 

7.1.4.1.1 
(1) 



UL-SCH data transfer 

Correct handling of UL assignment / Dynamic case 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives for a TTI an uplink grant with valid C-RNTI } 

then { UE transmits data and associated HARQ information to the HARQ entity for this TTI 



7.1 .4.1 .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.321 clause 5.4.1. 

[TS 36.321, clause 5.4.1] 

In order to transmit on the UL-SCH the UE must have a valid uplink grant (except for non-adaptive HARQ 
retransmissions) which it may receive dynamically on the PDCCH or in a Random Access Response or which may be 
configured semi-persistently. To perform requested transmissions, the MAC layer receives HARQ information from 
lower layers. 

When timeAlignmentTimer is running and the UE has a C-RNTl, Semi-Persistent Scheduling C-RNTl, or Temporary C- 
RNTI, the UE shall for each TTI : 

if an uplink grant for this TTI has been received in a Random Access Response: 

set NDl to the value and consider the NDl to have been toggled. 

if an uplink grant for this TTI has been received on the PDCCH for the UE's C-RNTl or Temporary C- 
RNTl; or 

if an uplink grant for this TTI has been received in a Random Access Response: 

if the uplink grant is for UE's C-RNTl and if the previous uplink grant delivered to the HARQ entity for the 
same HARQ process was either an uplink grant received for the UE's Semi-Persistent Scheduling C-RNTl or 
a configured uplink grant: 

consider the NDl to have been toggled regardless of the value of the NDl. 

deliver the uplink grant and the associated HARQ information to the HARQ entity for this TTI. 
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else, if an uplink grant for this TTI has been received on the PDCCH for the UE's Semi-Persistent C-RNTI: 
if the NDI in the received H ARQ information is 1 : 
consider the NDI not to have been toggled; 
indicate a valid uplink grant and the associated HARQ information to the HARQ entity for this TTI. 

NOTE 1 : The period of configured uplink grants is expressed in TTIs. 

NOTE 2: If the UE receives both a grant in a Random Access Response and a grant for its C-RNTI or Semi 

persistent scheduling C-RNTI requiring transmissions in the same UL subframe , the UE may choose to 
continue with either the grant for its RA-RNTI or the grant for its C-RNTI or Semi persistent scheduling 
C-RNTI. 

NOTE 3: When a configured uplink grant is indicated during a measurement gap and indicates an UL-SCH 

transmission during a measurement gap, the UE processes the grant but does not transmit on UL-SCH. 



7.1.4.1.3 


Test description 


7.1.4.1.3.1 


Pre-test conditions 


System Simulator: 




- Cell 1 




UE: 




None. 




Preamble: 





The UE is in state Loopback Activated (state 4) according to [18]. 
7.1 .4.1 .3.2 Test procedure sequence 

Table 7.1.4.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


SS transmits a MAC PDU including a RLC 
SDU 


<- 


MAC PDU 


1 


- 


3 


Void 


-> 


- 


- 


- 


- 


EXCEPTION: Step 4 runs in parallel with 
behaviour in table 7.1 .4.1 .3.2-2 


- 


- 


- 


- 


4 


For 40 ms SS transmits an UL Grant, allowing 
the UE to return the RLC SDU as received in 
step 2, on PDCCH, but with the C-RNTI 
different from the C-RNTI assigned to the 
UE.Notel: 


<- 


(UL Grant (unknown C-RNTI)) 






5 


Check: Does the UE transmit a MAC PDU 
corresponding to grant in step 4? 


-> 


MAC PDU 


1 


F 


6 


SS transmits an UL Grant, allowing the UE to 
return the RLC SDU as received in step 2, on 
PDCCH with the C-RNTI assigned to the UE. 


<- 


(UL Grant (C-RNTI)) 






7 


Check: Does the UE transmit a MAC PDU 
corresponding to grant in step 6? 


-> 


MAC PDU 


1 


P 


Note 1 : Note 40 ms corresponding to 4 frames is selected to be sufficiently large than loop back delay and small 
than the dsr-TransMax[64 sub frames]. 
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Table 7.1.4.1.3.2-2: Parallel behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


UE transmits a Scheduling Request. 


— > 


(SR) 


- 


- 



7.1.4.1.3.3 



Specific message contents. 



Table 7.1 .4.1 .3.3-1 : SchedulingRequest-Configuration to be used in RRCConnectionReconfiguration 

in preamble 



Derivation Path: 36.508 clause 4.6.3-20 


Information Element 


Value/remark 


Comment 


Condition 


SchedulingRequest-Configuration ::= CHOICE { 








setup SEQUENCE { 








dsr-TransMax 


n64 


IVlax value allowed 




} 








} 









7.1 .4.2 Correct handling of UL assignment / Semi-persistent case 

7.1 .4.2.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_Connected state with DRB established and sps-Conf iguration in UL is enabled 

} 

ensure that { 

when { UE receives a UL grant addressed to its stored SPS-CRNTI in SF-Num y and with NDI set as 

} 

then { UE starts transmitting UL MAC PDU in SF-Num Fl } 



(2) 

with { UE in E-UTRA RRC_Connected state with DRB established and stored UL SPS grant to transmit MAC 
PDU at SF-Num Fl } 
ensure that { 

when { UE receives a UL grant addressed to its SPS-CRNTI in SF-Num-frame p and with NDI set as 0, 
where p+4!=Fl{FDD) or p+k (p) ! =F1 (TDD) } 

then { UE starts transmiting UL MAC PDU in SF-Num F2 and stops transmiting UL MAC PDU at SF- 
NFlum } 



(3) 

with { UE in E-UTRA RRC_Connected state with DRB established and stored UL SPS grant to transmit MAC 
PDU at SF-Num Fl } 
ensure that { 

when { UE receives a UL grant [for retransmission] addressed to its SPS-CRNTI in SF-Num z and with 
NDI set as 1, for the corresponding HARQ Process, where z+4!=Fl(FDD) or z+k{z) !=F1{TDD) } 

then { UE re-tranmis MAC PDU in SF-Num z+4 (FDD) or z+k{z) (TDD) as per the new grant for SPS- 
CRNTI } 



(4) 



with { UE in E-UTRA RRC_Connected state with DRB established and stored UL SPS grant to transmit MAC 
PDU at SF-Num F3 } 
ensure that { 

when { UE receives a UL grant addressed to its CRNTI in SF-Num p, such that in SF-Num p+4=F3 (FDD) 
or p+k{p)=F3 (TDD) } 

then { UE transmits MAC PDU in SF-Num p+4 (FDD) or p+k{p) (TDD) as per grant addresed to its C- 
RNTI } 
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(5) 

with { UE in E-UTRA RRC_Connected state with DRB established and stored UL SPS grant to transmit MAC 
PDU at SF-Num F3 } 
ensure that { 

when { UE receives a RRCConnectionReconf iguration including sps-Conf iguration with sps- 
Conf igurationUL set as 'disable' and hence resulting in UL SPS grant deactivation } 

then { UE deletes the stored sps-Conf iguration UL parameters and stops transmitting UL MAC PDU' s 
as per stored SPS grant in SF-Num F3 } 
} 

(6) 

with { UE in E-UTRA RRC_Connected state with DRB established and configured UL SPS grant } 
ensure that { 

when { UE transmits ' implicitReleaseAf ter ' MAC PDU' s on SPS-Grant containing zero MAC SDU } 
then { UE clears configured SPS grant } 
} 

(7) 

with { UE in E-UTRA RRC_Connected state with DRB established and stored UL SPS grant to transmit MAC 
PDU at SF-Num F3 } 
ensure that { 

when { UE receives a PDCCH [for UL SPS explicit release according to Table 9.2-lA in TS 3S.213] 
addressed to its SPS C-RNTI in SF-Num p and with NDI set as 0, where p+4!=F3{FDD) or p+k{p) !=F3{TDD) 

} 

then { UE releases the configured SPS grant and stops transmitting UL MAC PDU in SF-Num F3 as 

per grant addresed to its SPS C-RNTI } 
} 

NOTE: SF-Num = [10*SFN + subframe] modulo 10240. 

NOTE 2: The value of the k(y), k(p), k(z) is k value determined according to the table 8-2 in the TS 36.213, given 
that UL grant is in subframe y, p, z. 

NOTE 3: The Subframe_Offset(yH-k(y)), Subframe_Offset(pH-k(p)), Subframe_Offset(zH-k(z)) is subframe_offset 
value determined according to the clause 5.10.2 in the TS36.321, given the position of initial Semi- 
Persistent grant on subframe yH-k(y), pH-k(p), zH-k(z). 

NOTE 4: To simply the TP description, following abbreviations are defined: 

For FDD: 

Fl = yH-4H-n*[semiPersistSchedIntervalUL] 

F2 = pH-4H-n*[semiPersistSchedIntervalUL] 

F3 = zH-4H-n*[semiPersistSchedIntervalUL] 

For TDD: 

Fl = yH-k(y)H-n*[semiPersistSchedIntervalUL]H- Subframe_Offset(yH-k(y))*(n modulo 2) 

F2 = pH-k(p)H-n*[semiPersistSchedIntervalUL]H- Subframe_Offset(pH-k(p))*(n modulo 2) 

F3 = zH-k(z)H-n*[semiPersistSchedIntervalUL]H- Subframe_Offset(zH-k(z))*(n modulo 2) 

n>=0 

7.1.4.2.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321 clause 5.4.1, 5.10, 
5.10.2, 7.4, 36.331 clause 5.3.10.5, 36.213 clause 8, 9.2 and 36.300 clause 11.1.2. 

[TS 36.321, clause 5.4.1] 

In order to transmit on the UL-SCH the UE must have a valid uplink grant (except for non-adaptive HARQ 
retransmissions) which it may receive dynamically on the PDCCH or in a Random Access Response or which may be 
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configured semi-persistently. To perform requested transmissions, the MAC layer receives HARQ information from 
lower layers. 

When timeAlignmentTimer is running and the UE has a C-RNTI, Semi-Persistent Scheduling C-RNTI, or Temporary C- 
RNTI, the UE shall for each TTI: 

if an uplink grant for this TTI has been received in a Random Access Response: 

set NDI to the value and consider the NDI to have been toggled. 

if an uplink grant for this TTI has been received on the PDCCH for the UE's C-RNTI or Temporary C-RNTI; or 

if an uplink grant for this TTI has been received in a Random Access Response: 

if the uplink grant is for UE's C-RNTI and if the previous uplink grant delivered to the HARQ entity for the 
same HARQ process was the uplink grant is for UE's C-RNTI and if the previous uplink grant delivered to 
the HARQ entity for the same HARQ process was either an uplink grant received for the UE's Semi- 
Persistent Scheduling C-RNTI or a configured uplink grant: 

consider the NDI to have been toggled regardless of the value of the NDI. 

deliver the uplink grant and the associated HARQ information to the HARQ entity for this TTI. 

else, if an uplink grant for this TTI has been received on the PDCCH for the UE's Semi -Persistent Scheduling C- 
RNTI: 

if the NDI in the received HARQ information is 1 : 

consider the NDI not to have been toggled; 

deliver the uplink grant and the associated HARQ information to the HARQ entity for this TTI. 

else if the NDI in the received HARQ information is 0: 

if PDCCH contents indicate SPS release: 

clear the configured uplink grant (if any). 

else: 

store the uplink grant and the associated HARQ information as configured uplink grant; 

initialise (if not active) or re -initialise (if already active) the configured uplink grant to start in this TTI 
and to recur according to rules in subclause 5.10.2; 

consider the NDI bit to have been toggled; 

deliver the configured uplink grant and the associated HARQ information to the HARQ entity for this 
TTI. 

else, if an uplink grant for this TTI has been configured: 

consider the NDI bit to have been toggled; 

deliver the configured uplink grant, and the associated HARQ information to the HARQ entity for this TTI. 

NOTE: The period of configured uplink grants is expressed in TTIs. 

NOTE: If the UE receives both a grant in a Random Access Response and a grant for its C-RNTI or Semi 

persistent scheduling C-RNTI requiring transmissions in the same UL subframe, the UE may choose to 
continue with either the grant for its RA-RNTI or the grant for its C-RNTI or Semi persistent scheduling 
C-RNTI. 

NOTE: When a configured uplink grant is indicated during a measurement gap and indicates an UL-SCH 

transmission during a measurement gap, the UE processes the grant but does not transmit on UL-SCH. 

[TS 36.321, clause 5.10] 
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When Semi-Persistent Scheduling is enabled by RRC, the following information is provided: 

- Semi-Persistent Scheduling C-RNTI; 

Uplink Semi-Persistent Scheduling Interval semiPersistSchedlntervalUL and number of empty transmissions 
before implicit release implicitRelease After, if Semi-Persistent Scheduling is enabled for the uplink; 

Whether twoIntervalsConfig is enabled or disabled for uplink, only for TDD; 

Downlink Semi-Persistent Scheduling Interval semiPersistSchedlntervalDL and number of configured HARQ 
processes for Semi-Persistent Scheduling numberOfConfSPS-Processes, if Semi-Persistent Scheduling is 
enabled for the downlink; 

When Semi-Persistent Scheduling for uplink or downlink is disabled by RRC, the corresponding configured grant or 
configured assignment shall be discarded. 

[TS 36.321, clause 5.10.2] 

After a Semi-Persistent Scheduling uplink grant is configured, the UE shall: 

if twoIntervalsConfig is enabled by upper layer; 

set the Subframe_Offset according to Table 7.4-1. 

else: 

set Subframe_Offset to 0. 

consider that the grant recurs in each subframe for which: 

- (10 * SFN + subframe) = [(10 * SFNstan time + sub framCstart time) + N * semiPersistSchedlntervalUL + 
Subframe_Offset * (N modulo 2)] modulo 10240, for all N>0. 

Where SFNs,a„,inie and subframCstart tiine are the SFN and subframe, respectively, at the time the configured uplink grant 
were (re-)initialised. 

The UE shall clear the configured uplink grant immediately after implicitReleaseAfter number of consecutive new MAC 
PDUs each containing zero MAC SDUs have been provided by the Multiplexing and Assembly entity, on the Semi- 
Persistent Scheduling resource. 

NOTE: Retransmissions for Semi-Persistent Scheduling can continue after clearing the configured uplink grant. 

[TS 36.321, clause 7.4] 

Subframe_Offset values are presented in Table 7.4-1. 

Table 7.4-1 : Subframe Offset values 



TDD UL/DL configuration 


Position of initial Semi-Persistent grant 


Subframe_Offset value (ms) 





N/A 





1 


Subframes 2 and 7 


1 


Subframes 3 and 8 


-1 


2 


Subframe 2 


5 


Subframe 7 


-5 


3 


Subframes 2 and 3 


1 


Subframe 4 


-2 


4 


Subframe 2 


1 


Subframe 3 


-1 


5 


N/A 





6 


N/A 






[TS 36.331, clause 5.3.10.5] 
The UE shall: 

1> reconfigure the semi -persistent scheduling in accordance with the received sps-Confiig: 
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[TS 36.213, clause 8] 



For TDD UL/DL configurations 1 and 6 and subframe bundling operation, the UE shall upon detection of a PDCCH 
with DCl format in subframe n intended for the UE, and/or a PHICH transmission intended for the UE in subframe n-l 
with / given in Table 8-2a, adjust the corresponding first PUSCH transmission in the bundle in subframe n+k, with k 
given in Table 8-2, according to the PDCCH and PHICH information. 



Table 8-2 k\or TDD configurations 0-6 



TDD UL/DL 
Configuration 


DL subframe number n 





1 


2 


3 


4 


5 


6 


7 


8 


9 





4 


6 








4 


6 








1 




6 






4 




6 






4 


2 








4 










4 




3 


4 
















4 


4 


4 


















4 


4 


5 


















4 




6 


7 


7 








7 


7 






5 



[TS 36.213, clause 9.2] 

A UE shall validate a Semi-Persistent Scheduling assignment PDCCH only if all the following conditions are met: 

the CRC parity bits obtained for the PDCCH payload are scrambled with the Semi-Persistent Scheduling C- 
RNTI 

- the new data indicator field is set to '0'. In case of DCl formats 2 and 2A, the new data indicator field refers to 
the one for the enabled transport block. 

Validation is achieved if all the fields for the respective used DCl format are set according to Table 9.2-1 or Table 9.2- 
lA. 

If validation is achieved, the UE shall consider the received DCl information accordingly as a valid semi -persistent 
activation or release. 

If validation is not achieved, the received DCl format shall be considered by the UE as having been received with a 
non-matching CRC. 

Table 9.2-1 : Special fields for Semi-Persistent Scheduling Activation PDCCH Validation 





DCl format 


DCl format 1/1 A 


DCl format 2/2A 


IPC command for 
scheduled PUSCH 


set to '00' 


N/A 


N/A 


Cyclic shift DM RS 


set to '000' 


N/A 


N/A 


IVIodulation and coding 

scheme and 

redundancy version 


MSB is set to '0' 


N/A 


N/A 


HARQ process number 


N/A 


FDD: set to '000' 
TDD: set to '0000' 


FDD: set to '000' 
TDD: set to '0000' 


Modulation and coding 
scheme 


N/A 


MSB is set to '0' 


For the enabled 
transport block: 
MSB is set to '0' 


Redundancy version 


N/A 


set to '00' 


For the enabled 

transport block: 

set to '00' 
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Table 9.2-1 A: Special fields for Semi-Persistent Scheduling Release PDCCH Validation 





DCI format 


DCI format 1 A 


IPC command for scheduled 
PUSCH 


set to '00' 


N/A 


Cyclic shift DM RS 


set to '000' 


N/A 


IVIodulation and coding scheme and 
redundancy version 


set to '11111' 


N/A 


Resource blocl< assignment and 
hopping resource allocation 


Settoall'I's 


N/A 


HARQ process number 


N/A 


FDD: set to '000' 
TDD: set to '0000' 


Modulation and coding scheme 


N/A 


set to '11111' 


Redundancy version 


N/A 


set to '00' 


Resource block assignment 


N/A 


Settoall'I's 



[TS 36.300, clause 11.1.2] 

In addition, E-UTRAN can allocate a semi-persistent uplink resource for the first HARQ transmissions and potentially 
retransmissions to UEs: 

RRC defines the periodicity of the semi-persistent uplink grant; 

PDCCH indicates whether the uplink grant is a semi-persistent one i.e. whether it can be implicitly reused in the 
following TTIs according to the periodicity defined by RRC. 

In the sub-frames where the UE has semi -persistent uplink resource, if the UE cannot find its C-RNTI on the 
PDCCH(s), an uplink transmission according to the semi-persistent allocation that the UE has been assigned in the TTI 
can be made. The network performs decoding of the pre-defined PRBs according to the pre-defined MCS. Otherwise, in 
the sub-frames where the UE has semi-persistent uplink resource, if the UE finds its C-RNTI on the PDCCH(s), the 
PDCCH allocation overrides the persistent allocation for that TTI and the UE's transmission follows the PDCCH 
allocation, not the semi-persistent allocation. Retransmissions are either implicitly allocated in which case the UE uses 
the semi-persistent uplink allocation, or explicitly allocated via PDCCH(s) in which case the UE does not follow the 
semi-persistent allocation. 



Test description 
Pre-test conditions 



7.1.4.2.3 
7.1.4.2.3.1 
System Simulator: 

- Cell 1 
UE: 

None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

The loop back size is set in such a way that one RLC SDU in DL shall result in 1 RLC SDU's in UL of same 
size. 
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7.1.4.2.3.2 



Test procedure sequence 

Table 7.1.4.2.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits a DL MAC PDU containing 
10RLC SOU'S on UMDRB. 


<— 


MAC PDU 


- 


- 


2 


The UE transmits a Scheduling Request, 
indicating that loop back PDUs are ready for 
transmission in UL RLC 


-> 


(SR) 






3 


The SS transmits an UL Grant using UE's SPS 
C-RNTI in SF-Num '4', NDI=0, allowing the UE 
to transmit one loop back PDU per MAC PDU. 


<— 


(UL SPS Grant) 






4 


Check: Does the UE transmit a MAC PDU in 
SF-Num '8' as per grant in step 3? 


-> 


MAC PDU 


1 


P 


5 


The SS transmits a HARQ ACK 


<— 


HARQ ACK 


- 


- 


6 


Check: Does the UE transmit a MAC PDU in 
SF-Num '168{FDD)/167{TDD)' as per grant in 
step 3? 


-> 


MAC PDU 


1 


P 


7 


The SS transmits a HARQ ACK 


<— 


HARQ ACK 


- 


- 


8 


The SS Transmits an UL Grant using UE's 
SPS C-RNTI in SF-Num '244', NDI=0 and 
allowing the UE to transmit two loop back 
PDUs per MAC PDU. 


<~ 


(UL SPS Grant) 






9 


Check: Does the UE transmit a MAC PDU in 
SF-Num '248' as per grant in step 8? 


-> 


MAC PDU 


2 


P 


10 


The SS transmits a HARQ ACK 


<— 


HARQ ACK 


- 


- 


11 


Check: Does the UE transmit a MAC PDU in 
SF-Num '328' as per grant in step 3? 


-> 


MAC PDU 


2 


F 


12 


Check: Does the UE transmit a MAC PDU in 
SF-Num '408{FDD)/407{TDD)' as per grant in 
step 8? 


-> 


MAC PDU 


2 


P 


13 


The SS transmits a HARQ ACK 


<— 


HARQ ACK 


- 


- 


14 


The SS Transmits an UL Grant using UE's 
SPS C-RNTI in SF-Num '484(FDD)/481(TDD)', 
NDI=1 ; the UL HARQ process is the same as 
in step 12 


<- 


(UL SPS Grant) 






15 


Check: Does the UE transmit in SF-Num 
488{FDD)/487(TDD)' a MAC PDU as in step 
12? 


-> 


MAC PDU 


3 


P 


16 


The SS transmits a HARQ ACK 


<— 


HARQ ACK 


- 


- 


17 


Check: Does the UE transmit a MAC PDU in 
SF-Num '568' as per grant in step 8? 


-> 


MAC PDU 


1 


P 


18 


The SS transmits a HARQ ACK 


<— 


HARQ ACK 


- 


- 


19 


The SS Transmits an UL Grant using UE's C- 
RNTI in SF-Num '724(FDD)/721(TDD)'; 
allowing UE to transmit a MAC PDU containing 
two RLC SDU's 


<~ 


(UL Grant) 






20 


Check: Does the UE transmit a MAC PDU in 
SF-Num '728{FDD)/727{TDD)' as per grant in 
step 19? 


-> 


MAC PDU 


4 


P 


21 


The SS transmits a HARQ ACK 


<— 


HARQ ACK 


- 


- 


22 


The SS transmits a PDCCH [for UL SPS 
explicit release] using UE's SPS C-RNTI in SF- 
Num '806' with NDI=0. 


<- 


PDCCH [for UL SPS explicit 
release] 






23 


Check: Does the UE transmit a MAC PDU in 
SF-Num '888' as per grant in step 8 containing 
zero MAC SDU? 


-> 


MAC PDU 


7 


F 


24 


The SS transmits an UL Grant using UE's SPS 
C-RNTI in SF-Num '969', NDI=0, transmit one 
loop back PDU per MAC PDU 


<- 


(UL SPS Grant) 






25 


Check: Does the UE transmit a MAC PDU in 
SF-Num '973' as per grant in step 24 
containing zero MAC SDU? 


-> 


MAC PDU 


1 


P 


26 


The SS transmits a HARQ ACK 


<— 


HARQ ACK 


- 


- 


27 


Check: Does the UE transmit a MAC PDU in 


— > 


MAC PDU 


1 


P 
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SF-Num '1 133(FDD)/1 132(TDD)' as per grant 
in step 24 containing zero MAC SDU? 










28 


The SS transmits a HARQ ACK 


<— 


HARQ ACK 


- 


- 


29 


Checl<: Does the UE transmit a MAC PDU in 
SF-Num '1293' as per grant in step 24? 


-> 


MAC PDU 


6 


F 


30 


The SS Transmits an UL Grant using UE's 
SPS C-RNTI in SF-Num '1374', NDI=0, 
transmit one loop bacl< PDU per MAC PDU. 


<- 


(UL SPS Grant) 






31 


Checl<: Does the UE transmit a MAC PDU in 
SF-Num '1378' as per grant in step 30 
containing zero MAC SDU? 


-> 


MAC PDU 


1 


P 


32 


The SS transmits a HARQ ACK 


<— 


HARQ ACK 


- 


- 


33 


SS Transmits RRCConnectionReconfiguration 
to disable SPS-ConfigurationUL. 


<- 


- 


- 


- 


34 


The UE transmits 
RRCConnectionReconfigurationComplete 


-> 


- 


- 


- 


35 


The SS transmits a DL MAC PDU containing 1 
RLC SDU 


<- 


MAC PDU 


- 


- 


36 


The UE transmits Scheduling request, 
indicating loop back PDU's ready for 
transmission in UL RLC 


-> 


(SR) 






37 


Check: Does the UE transmit a MAC PDU in 
SF-Num '1538(FDD)/1537(TDD)' as per grant 
in step 30? 


-> 


MAC PDU 


5 


F 


38 


SS transmits an UL Grant 


<- 


(UL Grant) 


- 


- 


39 


The UE transmits a MAC PDU as per grant in 
step 38. 


-> 


MAC PDU 


- 


- 



7.1 .4.2.3.3 Specific message contents 

Table 7.1.4.2.3.3-1: RRCConnectionReconfiguration. RadioResourceConfigDedicated (Preamble) 



Derivation path: 36.508 table 4.6.3-1 6 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated::^ SEQUENCE { 








sps-Configuration ::= SEQUENCE { 








semiPersistSchedC-RNTI 


'FFFO'H 






sps-ConfigurationDL 


Not Present 






sps-ConfigurationUL::=CHOICE{ 








enable SEQUENCE! 








semiPersistSchedlntervalUL 


sf160 


160Subframe 




ImplicitReleaseAfter 


e2 






pO-Persistent 


Not Present 






twolntervalConfig 


Not Present 




FDD 


twolntervalConfig 


true 




TDD 


} 








} 








1 








} 
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Table 7.1.4.2.3.3-2: RRCConnectionReconfiguration. RadioResourceConfigDedicated (step 33 of table 

7.1.4.2.3.2-1) 



Derivation path: 36.508 table 4.6.3-1 6 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated::^ SEQUENCE { 








sps-Configuration ::= SEQUENCE { 








semiPersistSchedC-RNTI 


Not Present 






sps-ConfigurationDL 


Not Present 






sps-ConfigurationUL::=CHOICE{ 








disable 


NULL 






1 








} 








} 









7.1 .4.3 Logical channel prioritization handling 

7.1.4.3.1 Test Purpose (IP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { sending data on the uplink } 

then { UE serves the logical channels according to their priority and configured PBR } 
} 

7.1.4.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.321 clauses 5.4.3.1. 

[TS 36.321, clause 5.4.3.1] 

The Logical Channel Prioritization procedure is applied when a new transmission is performed. 

RRC controls the scheduling of uplink data by signalling for each logical channel: priority where an increasing priority 
value indicates a lower priority level, prioritisedBitRate which sets the Prioritized Bit Rate (PBR), bucketSizeDuration 
which sets the Bucket Size Duration (BSD). 

The UE shall maintain a variable Bj for each logical channel]. Bj shall be initialized to zero when the related logical 
channel is established, and incremented by the product PBR x TTl duration for each TTl, where PBR is Prioritized Bit 
Rate of logical channel j. However, the value of Bj can never exceed the bucket size and if the value of Bj is larger than 
the bucket size of logical channel j, it shall be set to the bucket size. The bucket size of a logical channel is equal to 
PBR X BSD, where PBR and BSD are configured by upper layers. 

The UE shall perform the following Logical Channel Prioritization procedure when a new transmission is performed: 

The UE shall allocate resources to the logical channels in the following steps: 

Step 1 : All the logical channels with Bj > are allocated resources in a decreasing priority order. If the PBR 
of a radio bearer is set to "infinity", the UE shall allocate resources for all the data that is available for 
transmission on the radio bearer before meeting the PBR of the lower priority radio bearer(s); 

Step 2: the UE shall decrement Bj by the total size of MAC SDUs served to logical channel j in Step 1 

NOTE: The value of Bj can be negative. 

Step 3: if any resources remain, all the logical channels are served in a strict decreasing priority order 
(regardless of the value of Bj) until either the data for that logical channel or the UL grant is exhausted, 
whichever comes first. Logical channels configured with equal priority should be served equally. 

The UE shall also follow the rules below during the scheduling procedures above: 

the UE should not segment an RLC SDU (or partially transmitted SDU or retransmitted RLC PDU) if the 
whole SDU (or partially transmitted SDU or retransmitted RLC PDU) fits into the remaining resources; 
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if the UE segments an RLC SDU from the logical channel, it shall maximize the size of the segment to fill 
the grant as much as possible; 

UE should maximise the transmission of data. 

The UE shall not transmit data for a logical channel corresponding to a radio bearer that is suspended (the conditions for 
when a radio bearer is considered suspended are defined in [8]). 

For the Logical Channel Prioritization procedure, the UE shall take into account the following relative priority in 
decreasing order: 

- MAC control element for C-RNTI or data from UL-CCCH; 

MAC control element for BSR, with exception of BSR included for padding; 

- MAC control element for PHR; 

data from any Logical Channel, except data from UL-CCCH; 

MAC control element for BSR included for padding. 
7.1.4.3.3 Test description 

7.1.4.3.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 

None 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(1,3) is used for step 8 in 4.5.3A.3 according to [18]. 
The 3 UM DRBs are configured according to table 7.1.4.3.3.1-1. 

Table 7.1.4.3.3.1-1: Priority, PBR and Bucket Delay settings 



DRB 


priority 


prioritizedBitRate 
(kbytes/s) 


bucketSizeDuration 
(ms) 


DRB1 


6 


8 


100 


DRB2 


7 


16 


100 


DRBS 


8 


32 


100 
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7.1.4.3.3.2 



Test procedure sequence 

Table 7.1.4.3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 




EXCEPTION: Steps to 4 are run 4 times 
using the parameters specified for each run in 
table 7.1 .4.3.3.2-3. In addition, for each run, 
step 2 is run in parallel with the behaviour 
specified in table 7.1.4.3.3.2-2. 













The SS waits for 1 00 ms. (Note 1 ) 










1 


The SS transmits N1 320-octet RLC SDUs on 
DRB1 , N2 320-octet RLC SDUs on DRB2, and 
N3 320-octet RLC SDUs on DRB3. 


<- 


(RLC SDUs) 








EXCEPTION: In parallel to the event described 
in step 2 the events specified in Table 
7.1 .4.3.3.2-2 shall take place. 










2 


For a duration of T2, the SS transmits an UL 
grant of D octets every T1 . 


<— 


(UL grants) 


- 


- 


3 


Check: are the total number of octets of the UL 
RLC SDUs received at the SS for each DRB 
as follows?: 

- the total number of octets received for DRB1 
is D1 octets +/- 10% 

- the total number of octets received for DRB2 
is D2 octets +/- 1 0% 

- the total number of octets received for DRB3 
is D3 octets +/- 1 0% 






1 


P 


4 


The SS re-establishes the RLC for each RB at 
the UE. 


- 


- 


- 


- 



Table 7.1.4.3.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Check: Does the UE transmits the RLC SDUs 
back to the SS? 


~> 


- 


1 


P 



Table 7.1.4.3.3.2-3: Test parameter values 



Parameter 


First run 


Second run 


Third run 


Fourth run 


N1 (SDUs) 


13 


13 


7 


104 


N2 (SDUs) 


25 


25 


50 


25 


N3 (SDUs) 


50 


50 


50 


50 


D (octets) 


1143 


573 


1143 


1143 


T1 (ms) 


20 


20 


20 


10 


T2 (ms) 


500 


500 


500 


500 


D1 (octets) 


4160 


4160 


2240 


33000 (Note 1) 


D2 (octets) 


8000 


8000 


10260 (Note 1) 


8000 


D3 (octets) 


16000 


2090 (Note 1) 


16000 


16000 


Note 1 : It is calculated from the following equation for the case of the least header size. 
(D1 -hD2-hD3) = (D-3)*T2/T1 



NOTE: the numbers above and the test procedure assume that the UE has a loopback buffer of at least 57280 
octets. 



7.1.4.3.3.3 
None. 



Specific message contents 
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7.1 .4.4 Correct handling of MAC control information / Scheduling requests and 

PUCCH 

7.1 .4.4.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 

ensure that { 

when { PUCCH is configured and UE has UL data available for transmission and UE has no UL-SCH 
resources available and SR_COUNTER is less than dsr-TransMax } 

then { the UE transmits a SR on every available PUCCH until resources are granted } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and has pending SR{s) } 
ensure that { 

when { UE receives an UL grant for a new transmission } 
then { UE cancels all pending SR{s) } 
} 

7.1.4.4.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.4.4. 

[TS 36.321, clause 5.4.4] 

The Scheduling Request (SR) is used for requesting UL-SCH resources for new transmission. 

When an SR is triggered, it shall be considered as pending until it is cancelled. 

If an SR is triggered and there is no other SR pending, the UE shall set the SR_COUNTER to 0. 

As long as one SR is pending, the UE shall for each TTI: 

if no UL-SCH resources are available for a transmission in this TTI: 

if the UE has no valid PUCCH resource for SR configured in any TTI: initiate a Random Access procedure 
(see subclause 5.1) and cancel all pending SRs; 

else if the UE has a valid PUCCH resource for SR configured for this TTI and if this TTI is not part of a 
measurement gap: 

- if S R_COUNTER < dsr- TransMax: 

- increment SR_COUNTER by 1 ; 

instruct the physical layer to signal the SR on PUCCH; 
else: 

- notify RRC to release PUCCH/SRS ; 

clear any configured downlink assignments and uplink grants; 

initiate a Random Access procedure (see subclause 5.1) and cancel all pending SRs. 

else if UL-SCH resources for new transmission are granted in this TTI, cancel all pending SR(s). 7. 1.4.4.3 Test 
description 

7.1.4.4.3.1 Pre-test conditions 

System Simulator: 

- - Cell 1 
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RRC Connection Reconfiguration (preamble: Table 4.5.3.3-1, step 8) using parameters as specified in Table 

7.1.4.4.3.3-1 

UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
7.1 .4.4.3.2 Test procedure sequence 

Table 7.1.4.4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits a IVIAC PDU containing 10 
IVIAC SDUs each containing a RLC SDU 


<- 


MAC PDU (containing 10 MAC 
SDUs) 


- 


- 


- 


EXCEPTION: Step 2 runs in parallel with 
behaviour in table 7.1 .4.4.3.2-2. 


- 


- 


- 


- 


2 


Check: Does the UE transmit 6 Scheduling 
Requests separately on 6 consecutively 
available PUCCHs? (Note 1) 


— > 


(SR) 


1 


P 


3 


The SS transmits an UL grant to allocate UL- 
SCH resources that are enough to transmit 
IVIAC PDU containing 10 MAC SDUs 


<- 


(UL Grant ) 






4 


Check: Does the UE transmit a MAC PDU 
containing 10 RLC PDUs? 


— > 


MAC PDU (containing 10 MAC 
SDUs) 


1 


P 


5 


Check: 1 second does the UE transmit a 
Scheduling Request in the next 100ms? 


— > 


(SR) 


1,2 


F 


Note 1 : The UE repeats the scheduling requests on every available PUCCH as long as SR_COUNTER < dsr- 

TransMax and there is UL data available for transmission and there are no resources available to transmit 
it. At the reception of first Scheduling Request from the UE, SS will be scheduled to transmit a grant after 
100ms. Hence SS will receive 6 Scheduling Requests as sr-Configlndex = 30. 



Table 7.1.4.4.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does the UE transmit a MAC PDU? 


-> 


MAC PDU 


1 


F 



7.1.4.4.3.3 



Specific Message Contents 



Table 7.1.4.4.3.3-1 : SchedulingRequest-Configuratlon to be used in RRCConnectionReconfiguration 

in preamble 



Derivation Path: 36.508 clause 4.6.3-20 


Information Element 


Value/remark 


Comment 


Condition 


SchedulinqRequest-Configuration::= CHOICE { 








enable SEQUENCE { 








dsr-TransMax 


n64 






} 








1 









7.1.4.4.3.3 
None. 



Specific Message Contents 
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7.1 .4.5 Correct handling of MAC control information / Scheduling requests and 

random access procedure 

7.1.4.5.1 Test Purpose (TP) 

(1) 

with { The UE is in E-UTRA RRC_CONNECTED state and no PUCCH resource for SR is configured } 
ensure that { 

when { UE has UL data available for transmission, UE has no UL-SCH resources available and time 
alignment timer expires } 

then { the UE initiates the random access procedure } 
} 

(2) 

with { The UE in E-UTRA RRC_CONNECTED state ) 
ensure that { 

when { PUCCH Configured and UE has UL data available for transmission and UE has no UL-SCH 
resources available and SR_COUNTER becomes equal to dsr-TransMax } 

then { the UE transmits a PRACH Preamble to initiate a Random Access procedure } 



7.1.4.5.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321 , clause 5.4.4. 

[TS 36.321 clause 5.4.4] 

The Scheduling Request (SR) is used for requesting UL-SCH resources for new transmission. 

When an SR is triggered, it shall be considered as pending until it is cancelled. 

If an SR is triggered and there is no other SR pending, the UE shall set the SR_COUNTER to 0. 

As long as one SR is pending, the UE shall for each TTI: 

if no UL-SCH resources are available for a transmission in this TTI: 

if the UE has no valid PUCCH resource for SR configured in any TTI: initiate a Random Access procedure 
(see subclause 5.1) and cancel all pending SRs; 

else if the UE has a valid PUCCH resource for SR configured for this TTI and if this TTI is not part of a 
measurement gap: 

- if S R_COUNTER < dsr- TransMax: 

- increment SR_COUNTER by 1 ; 

instruct the physical layer to signal the SR on PUCCH; 
else: 

- notify RRC to release PUCCH/SRS ; 

clear any configured downlink assignments and uplink grants; 

initiate a Random Access procedure (see subclause 5.1) and cancel all pending SRs.- else if UL-SCH resources 
for new transmission are granted in this TTI, cancel all pending SR(s). 

7.1.4.5.3 Test description 
7.1.4.5.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 
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UE: 

None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
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7.1.4.5.3.2 



Test procedure sequence 

Table 7.1.4.5.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits a MAC PDU containing a 
Timing AdvancCommand e IVIAC Control 
Element, but esdo not send any subsequent 
alignments. Start Timer_1 = Time Alignment 
timer value 


<— 


MAC PDU (Timing Advance 
Command) 






1A 


The SS waits a time perioof d 40 to 50 sub 
frames lesthans Timer 1 value and transmits 
a IVIAC PDU containing a IVIAC SDU (Note 5) 


<— 


MAC PDU (MAC SDU) 






- 


EXCEPTION: Step 2B is repeated one or more 
times but less than 64 (dsr-TransMax) 


- 


- 


- 


- 


2B 


The UE may transmit Scheduling Requests 
before time alignment timer expires. The SS 
shall not respond to the Scheduling Requests 
in this step. 


-> 


(SR) 






2 


Check: does the UE transmit a preamble on 
PRACH?(Note1) 


-> 


(PRACH Preamble) 


1 


P 


3 


The SS transmits a Random Access Response 
including an UL grant to enable UE to transmit 
C-RNTI IVIAC Control Element and the MAC 
SDU as received in step 1a. 


<— 


Random Access Response 






4 


The UE transmit a MAC PDU including a C- 
RNTI MAC Control Element and a MAC SDU. 
(Note 2) 


~> 


MAC PDU (C-RNTI control 
element, MAC SDU) 






5 


The SS sends PDCCH transmission for UE C- 
RNTI 


<— 


- 


- 


- 


5A 


The SS transmits 

RRCConnectionReconfiguration containing a 
radioResourceConfiguration with a physical 
channel reconfiguration 


<~ 








- 


EXCEPTION: Steps 5a1 to 5a4 are optionally 
executed. (Note 6) 


- 




- 


- 


5A 

1 


The UE transmits a preamble on PRACH. 
(Note 6) 


-> 


(PRACH Preamble) 


- 


- 


5A 
2 


The SS transmits a Random Access Response 
including an UL grant of 7 bytes. (Note 7) 


<— 


Random Access Response 


- 


- 


5A 
3 


The UE transmit a MAC PDU including a C- 
RNTI MAC Control Element 


-> 


- 


- 


- 


5A 
4 


The SS sends PDCCH transmission for UE C- 
RNTI 


<- 


- 


- 


- 


5B 


The UE transmits a Scheduling Request on 
PUCCH. (Note 8) 


-> 


(SR) 


- 


- 


5C 


The SS transmits an UL grant to enable UE to 
transmit the 

RRCConnectionReconfigurationComplete 
message. (Note 9) The 


<- 


(UL Grant) 






5D 


The UE transmits 

RRCConnectionReconfigurationComplete 
message. (Note 6) 


— >— > 








5E 


Void 


- 


- 


- 


- 


6 


The SS ignores any Scheduling Requests from 
the UE. 


- 


- 


- 


- 


7 


The SS transmits a MAC PDU containing one 
MAC SDU containing a RLC SDU 


<- 


MAC PDU MAC SDU) 


- 


- 


- 


EXCEPTION: Step 8 shall be repeated 64 
times. 


- 


- 


- 


- 


8 


The UE transmits a Scheduling Request on 
PUCCH (Note 3) 


~> 


(SR) 


- 


- 


9 


Check: does the UE transmit a preamble on 
PRACH? (Note 4) 


-> 


(PRACH Preamble) 


2 


P 


10 


The SS transmits a Random Access Response 
including an UL grant to enable UE to transmit 


<— 


Random Access Response 


- 


- 
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C-RNTI IVIAC Control Element and the MAC 
SDU as received in step 7. 










11 


The UE transmit a IVIAC PDU including a C- 
RNTI IVIAC Control Element and a MAC SDU. 
(Note 2) 


-> 


MAC PDU (C-RNTI control 
element, MAC SDU) 






12 


The SS sends PDCCH transmission for UE C- 
RNTI 


<- 


- 


- 


- 


Note 1 : When UL time alignment timer expires in the UE then "UL synchronization" is lost and the UE initiates a 

Random Access Procedure. 
Note 2: The UE transmission of the IVIAC PDU ensures that the random access procedure was successful. 
Note 3: The UE repeats the scheduling requests as long as SR_COUNTER < dsr-TransMaxan6 there is data in the 

transmission buffer and there are no resources available to transmit it. 
Note 4: Reception of PRACH Preamble by the SS verifies that UE has initiated a Random Access procedure 

triggered by SR_COUNTER having reached dsr-TransMax. 
Note 5: In step la, a range is selected so as to be suitable for both FDD and TDD. The value 40-50 is selected to 

be less than dsr-TransMax (64) 
Note 6: RLC status PDU may trigger the UE to transmit PRACH Preamble. 
Note?: UL grant of 56 bits (ITBS=4, NPRB=1, see TS 36.213 Table 7.1.7.2.1-1) is chosen to allow the UE to 

transmit C-RNTI IVIAC Control Element but not allowing the UE to transmit RRCConnectionReconfiguration 

Complete. 
Note 8: If RRCConnectionReconfigurationComplete was not ready for transmission in step 5a3 then SR is 

triggered when RRC message arrives in the transmission buffer. Otherwise 

(RRCConnectionReconfigurationComplete was ready for the transmission in step 5a3) the SR is triggered 

because expiry of the retxBSR-Timer. 
Note 9: STATUS PDU is included if it was not transmitted by the UE in step 5a3. 



7.1.4.5.3.3 



Specific Message Contents 



Table 7.1.4.5.3.3-1: SchedulingRequest-Config to be used in RRCConnectionReconfiguration ( 

preamble, Table 7.1.4.5.3.2-1) 



Derivation Path: 36.508 clause 4.6.3-20 


Information Element 


Value/remark 


Comment 


Condition 


SchedulinqRequest-Confiq-DEFAULT::= CHOICE { 








setup SEOUENCE { 








dsr-TransMax 


n64 






} 








} 








Table 7.1.4.5.3.3-2: RRCConnectionReconfiguration (step 5a, Table 7.1.4.5.3.2-1) 


Derivation Path: 36.331 clause 6.2.2 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEOUENCE { 








rrc-Transaction Identifier 


RRC- 

Transaction Identifier-DL 






criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








measConfig 


Not present 






mobilityControllnfo 


Not present 






dedicated 1 nf oN ASList 


Not present 






radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-Step5a 






securityConfigHO 


Not present 






nonCriticalExtension SEOUENCE {} 


Not present 






1 








} 








} 








} 
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Table 7.1.4.5.3.3-3: RadioResourceConfigDedicated-StepSa (Table 7.1.4.5.3.3-2) 



Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated-HO ::= SEQUENCE 

1 








srb-ToAddlVlodList 


Not present 






drb-ToAddModList 


Not present 






drb-ToReleaseList 


Not present 






mac-IVIainConfig 


Not present 






sps-Config 


Not present 






pliysicalConfigDedicated 


PhysicalConfigDedicated- 
StepSa 






} 









Table 7.1.4.5.3.3-4: PhysicalConfigDedicated-Step5a (Table 7.1.4.5.3.3-3) 



Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


PhysicalConfigDedicated-DEFAULT ::= SEQUENCE { 








pdsch-ConfigDedicated 


Not present 






pucch-ConfigDedicated 


Not present 






pusch-ConfigDedicated 


Not present 






uplinkPowerControlDedicated 


Not present 






tpc-PDCCH-ConfigPUCCH 


Not present 






tpc-PDCCH-ConfigPUSCH 


Not present 






cqi-ReportConfig 


CQI-ReportConfig- 

DEFAULT using 

condition 

CQI PERIODIC 


See subclause 
4.6.3 of 36.508 




soundingRS-LU-ConfigDedicated 


SoundingRS-ULI- 
ConfigDedicated- 
DEFAULT 


See subclause 
4.6.3 of 36.508 




antennalnfo 


Not present 






schedulingRequestConfig 


SchedulingRequest- 
Config- Config-StepSa 






} 









Table 7.1.4.5.3.3-5: SchedulingRequest-Config-Step5a (Table 7.1.4.5.3.3-4) 



Derivation Path: 36.508 clause 4.6.3-20 


Information Element 


Value/remark 


Comment 


Condition 


SchedulingRequest-Config::= CHQICE { 








enable SEQUENCE { 








dsr-TranslVlax 


n64 






} 








} 









7.1.4.6 



7.1.4.6.1 



Correct handling of MAC control information / Buffer status / UL data arrive in 
the UE Tx buffer and retransmission of BSR / Regular BSR 

Test Purpose (IP) 



(1) 



with { UE in E-UTRA RRC_CONNECTED state ) 
ensure that { 

when { UL data arrives in the UE transmission buffer and the data belongs to a logical channel 
with higher priority than those for which data is already avialble for transmission and the new 
logical channel and the existing logical channels belongs to the different LCG } 
then { UE Reports a Long Buffer Status Reporting (BSR) } 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 253 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

(2) 

with { UE in E-UTRA RRC_CONNECTED state ) 
ensure that { 

when { UL data arrives in the UE transmission buffer and there is no data available for 
transmission for any of the logical channels which belong to a LCG } 
then { UE Reports a Short Buffer Status Reporting (BSR) } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state ) 
ensure that { 

when { UL data arrives in the UE transmission buffer and the data belongs to a logical channel 
with higher priority than those for which data is already avialalble for transmission and the new 
logical channel and existing logical channels belong to the same LCG } 
then { UE Reports a Short Buffer Status Reporting (BSR) } 
} 

(4) 

with { UE in E-UTRA RRC_CONNECTED state ) 
ensure t hat { 

when{RETX_BSR_TIMER expires and only one LCG has data available for transmission } 
then { UE triggers a regular BSR and Reports a Short Buffer Status Reporting { BSR) } 
} 

(5) 

wi th {UE in E-UTRA RRC_CONNECTED Stat e) 
ensure that { 

when { a Regular BSR has been triggered and UE has pending data for tranmission and UE has only 
resources to send either BSR report or data } 
then { UE transmits the BSR report } 
} 

(6) 

with { UE in E-UTRA RRC_CONNECTED state ) 
ensure that { 

when { UE determines that a BSR has been triggered since the last transmission of a BSR and UE has 
no UL resources allocated for new transmission for this TTI } 
then { UE transmits a scheduling request } 
} 

(7) 

with {UE in E-UTRA RRC_CONNECTED state) 
ensure that { 

when { a Regular BSR has been triggered and UE has pending data on several logical channels for 
tranmission and UE has only UL resources to send all pending data available for transmission, but UL 
grant is not sufficient to additionally accommodate the BSR MAC control element} 
then { UE cancels the triggered BSR report and transmits the UL data} 
} 

7.1.4.6.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.4.3.1, 5.4.5, 
6.1.2,6.1.3.1 and 6.2.1 and in TS 36.323 clause 4.5. 

[TS 36.321 clause 5.4.3.1] 

For the Logical Channel Prioritization procedure, the UE shall take into account the following relative priority in 
decreasing order: 

- MAC control element for C-RNTl or data from UL-CCCH; 

MAC control element for BSR, with exception of BSR included for padding; 

- MAC control element for PHR; 

data from any Logical Channel, except data from UL-CCCH; 
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MAC control element for BSR included for padding. 

[TS 36.321 clause 5.4.4] 

The Scheduling Request (SR) is used for requesting UL-SCH resources for new transmission. 

[TS 36.321 clause 5.4.5] 

The Buffer Status reporting procedure is used to provide the serving eNB with information about the amount of data 
available for transmission in the UL buffers of the UE. RRC controls BSR reporting by configuring the two timers 
periodicBSR-Timer and retxBSR-Timer and by, for each logical channel, optionally signalling logicalChannelGroup 
which allocates the logical channel to an LCG [8]. 

For the Buffer Status reporting procedure, the UE shall consider all radio bearers which are not suspended and may 
consider radio bearers which are suspended. 

A Buffer Status Report (BSR) shall be triggered if any of the following events occur: 

UL data, for a logical channel which belongs to a LCG, becomes available for transmission in the RLC entity or 
in the PDCP entity (the definition of what data shall be considered as available for transmission is specified in 
[3] and [4] respectively) and either the data belongs to a logical channel with higher priority than the priorities of 
the logical channels which belong to any LCG and for which data is already available for transmission, or there 
is no data available for transmission for any of the logical channels which belong to a LCG, in which case the 
BSR is referred below to as "Regular BSR"; 

UL resources are allocated and number of padding bits is equal to or larger than the size of the Buffer Status 
Report MAC control element plus its subheader, in which case the BSR is referred below to as "Padding BSR"; 

retxBSR-Timer expires and the UE has data available for transmission for any of the logical channels which 
belong to a LCG, in which case the BSR is referred below to as "Regular BSR"; 

- periodicBSR-Timer expires, in which case the BSR is referred below to as "Periodic BSR". 

For Regular and Periodic BSR: 

if more than one LCG has data available for transmission in the TTI where the BSR is transmitted: report Long 
BSR; 

else report Short BSR. 

For Padding BSR: 

if the number of padding bits is equal to or larger than the size of the Short BSR plus its subheader but smaller 
than the size of the Long BSR plus its subheader: 

if more than one LCG has data available for transmission in the TTI where the BSR is transmitted: report 
Truncated BSR of the LCG with the highest priority logical channel with data available for transmission; 

else report Short BSR. 

else if the number of padding bits is equal to or larger than the size of the Long BSR plus its subheader, report 
Long BSR. 

If the Buffer Status reporting procedure determines that at least one BSR has been triggered and not cancelled: 

if the UE has UL resources allocated for new transmission for this TTI: 

instruct the Multiplexing and Assembly procedure to generate a BSR MAC control element; 

start or restart periodicBSR-Timer except when the BSR is a Truncated BSR; 

start or restart retxBSR-Timer. 
else if a Regular BSR has been triggered: 

a Scheduling Request shall be triggered. 
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A MAC PDU shall contain at most one MAC BSR control element, even when multiple events trigger a BSR by the 
time a BSR can be transmitted in which case the Regular BSR and the Periodic BSR shall have precedence over the 
padding BSR. 

The UE shall restart retxBSR-Timer upon indication of a grant for transmission of new data on UL-SCH. 

All triggered BSRs shall be cancelled in case the UL grant can accommodate all pending data available for transmission 
but is not sufficient to additionally accommodate the BSR MAC control element plus its subheader. All triggered BSRs 
shall be cancelled when a BSR is included in a MAC PDU for transmission. 

[TS 36.321 clause 6.1.2] 

MAC control elements are always placed before any MAC SDU. 

[TS 36.321 clause 6.1.3.1] 

Buffer Status Report (BSR) MAC control elements consist of either: 

Short BSR and Truncated BSR format: one LCG ID field and one corresponding Buffer Size field (figure 
6.1.3.1-1); or 

Long BSR format: four Buffer Size fields, corresponding to LCG IDs #0 through #3 (figure 6.1.3.1-2). 

The BSR formats are identified by MAC PDU subheaders with LCIDs as specified in table 6.2.1.-1. 

The fields LCG ID and Buffer Size are defined as follow: 

LCG ID: The Logical Channel Group ID field identifies the group of logical channel(s) which buffer status is 
being reported. The length of the field is 2 bits; 

Buffer Size: The Buffer Size field identifies the total amount of data available across all logical channels of a 
logical channel group after the MAC PDU has been built. The amount of data is indicated in number of bytes. It 
shall include all data that is available for transmission in the RLC layer and in the PDCP layer; the definition of 
what data shall be considered as available for transmission is specified in [3] and [4] respectively. The size of 
the RLC and MAC headers are not considered in the buffer size computation. The length of this field is 6 bits. 
The values taken by the Buffer Size field are shown in Table 6.1.3.1-1. 



LCG ID Buffer Size Oct 1 

Figure 6.1.3.1-1 : Short BSR and Truncated BSR IVIAC control element 



Buffer Size #0 o^"^^'^ Oct 1 
^ Size#1 

Buffer Size #1 Buffer Size #2 Oct 2 

_^"^to Buffer Size #3 Oct 3 

bize #2 



Figure 6.1.3.1-2: Long BSR MAC control element 
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Table 6.1.3.1-1 : Buffer size levels for BSR 



Index 


Buffer Size (BS) value [bytes] 


Index 


Buffer Size (BS) value [bytes] 





BS = 


32 


1132<BS<=1326 


1 


0<BS<=10 


33 


1 326 <BS<= 1552 


2 


10<BS<= 12 


34 


1552 <BS<= 1817 


3 


12<BS<= 14 


35 


1817<BS<=2127 


4 


14<BS<= 17 


36 


2127<BS<=2490 


5 


17<BS<= 19 


37 


2490 <BS<= 2915 


6 


19<BS<=22 


38 


2915 <BS<= 3413 


7 


22 < BS <= 26 


39 


3413<BS<=3995 


8 


26 < BS <= 31 


40 


3995 < BS <= 4677 


9 


31 < BS <= 36 


41 


4677 < BS <= 5476 


10 


36 < BS <= 42 


42 


5476 < BS <= 641 1 


11 


42 < BS <= 49 


43 


641 1 < BS <= 7505 


12 


49 < BS <= 57 


44 


7505 < BS <= 8787 


13 


57 < BS <= 67 


45 


8787<BS<= 10287 


14 


67 < BS <= 78 


46 


10287<BS<= 12043 


15 


78 < BS <= 91 


47 


12043<BS<= 14099 


16 


91 <BS<= 107 


48 


1 4099 <BS<= 16507 


17 


107<BS<=125 


49 


1 6507 <BS<= 19325 


18 


125<BS<=146 


50 


1 9325 <BS<= 22624 


19 


146<BS<=171 


51 


22624 < BS <= 26487 


20 


171 <BS<=200 


52 


26487 <BS<= 31009 


21 


200 < BS <= 234 


53 


31009 <BS<= 36304 


22 


234 < BS <= 274 


54 


36304 < BS <= 42502 


23 


274 < BS <= 321 


55 


42502 < BS <= 49759 


24 


321 < BS <= 376 


56 


49759 < BS <= 58255 


25 


376 < BS <= 440 


57 


58255 < BS <= 68201 


26 


440<BS<=515 


58 


68201 < BS <= 79846 


27 


515<BS<=603 


59 


79846 < BS <= 93479 


28 


603 < BS <= 706 


60 


93479 <BS<= 109439 


29 


706 < BS <= 826 


61 


1 09439 <BS<= 128125 


30 


826 < BS <= 967 


62 


128125 <BS<= 150000 


31 


967<BS<= 1132 


63 


BS> 150000 



[TS 36.321 clause 6.2.1] 



Table 6.2.1-2: Values of LCID for UL-SCH 



Index 


LCID values 


00000 


CCCH 


00001-01010 


Identity of the logical channel 


01011-11001 


Reserved 


11010 


Power Headroom Report 


11011 


C-RNTI 


11100 


Truncated BSR 


11101 


Short BSR 


11110 


Long BSR 


11111 


Padding 



[TS 36.323 clause 4.5] 

For the purpose of MAC buffer status reporting, the UE shall consider the following as data available for transmission 
in the PDCP layer: 

For SDUs for which no PDU has been submitted to lower layers: 

the SDU itself, if the SDU has not yet been processed by PDCP, or 

the PDU (control or data) if the SDU has been processed by PDCP. 
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7.1.4.6.3 Test description 

7.1.4.6.3.1 Pre-test conditions 

System Simulator : 

- Cell 1 

RRC Connection Reconfiguration (preamble: Table 4.5.3.3-1, step 8) using parameters as specified in Table 

7.1.4.6.3.3-1 

UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(3,0) is used for step 8 in 4.5.3A.3 according to [18]. 
3 AM DRBS are configured with the following parameters: 

Table 7.1.4.6.3.1-1: Logical Channel Configuration Settings 



Parameter 


Value DRB1 


Value DRB2 


Value DRB3 


LogicalChannel-ldentity 


3 


4 


5 


Priority 


8 


7 


6 


prioritizedBitRate 


OkB/s 


OkB/s 


OkB/s 


logicalChannelGroup 


2 (LCG ID#2) 


2 (LCG ID#2) 


1 (LCGID#1) 
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7.1.4.6.3.2 



Test procedure sequence 

Table 7.1.4.6.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


The SS transmits a MAC PDU containing two 
RLC SDUs of size 1 bytes on LC 3 


<~ 


MAC PDU (2 RLC SDUs on LC 3) 


- 


- 


3 


SS allocates an UL Grant of 32 bits. (Note 1) 


<— 


(UL Grant, 32 bits) 


- 


- 


4 


Check: Does the UE transmit a Short BSR with 
'LCG ID' field set to '2' and 'Buffer size' field 
set to value '6' or bigger? (Note 2) 


-> 


MAC PDU (MAC Short BSR (LCG 
ID='2', Buffer Size='6' or bigger)) 


2,5 


P 


5 


Wait for retxBSR-Tlmer expiry on UE side. 


- 


- 


- 


- 


6 


Check: Does the UE transmit a scheduling 
request? 


-> 


(SR) 


6 


P 


7 


The SS respond to the scheduling request in 
step 6 by an UL Grant of 32 bits. (Note 1 ) 


<— 


(UL Grant, 32 bits) 


- 


- 


8 


Check: Does the UE transmit a Short BSR with 
'LCG ID' field set to '2' and 'Buffer size' field 
set to value '6' or bigger? (Note 2) 


-> 


MAC PDU (MAC Short BSR (LCG 
ID='2', Buffer Size='6' or bigger)) 


4,5 


P 


9 


The SS transmits a MAC PDU containing one 
RLC SDUs of size 1 bytes on LC 4 


<- 


MAC PDU (1 RLC SDUs on LC 4) 


- 


- 


10 


Check: Does the UE transmit a scheduling 
request? 


-> 


(SR) 


6 


P 


11 


The SS respond to the scheduling request in 
step 10 by an UL Grant of 32 bits. (Note 1) 


<— 


(UL Grant, 32 bits) 


- 


- 


12 


Check: Does the UE transmit a Short BSR with 
'LCG ID' field set to '2' and 'Buffer size#1 ' field 
set to value '8' or bigger? (Note 2) 


-> 


MAC PDU (MAC Short BSR (LCG 
ID='2', Buffer Size='8' or bigger)) 


3,5 


P 


13 


The SS transmits a MAC PDU containing two 
RLC SDUs of size 4 bytes on LC 5 


<— 


MAC PDU (2 RLC SDUs on LC 5) 


- 


- 


14 


Check: Does the UE transmit a scheduling 
request? 


-> 


(SR) 


6 


P 


15 


The SS respond to the scheduling request in 
step 14 by one UL Grant of 32 bits. (Note 1) 


<- 


(UL Grant, 32 bits) 


- 


- 


16 


Check: Does the UE transmit a Long BSR with 
'Buffer size#1 ' field set to value '1 ', 'Buffer 
size#2' field set to value '8' or bigger? (Note 3) 


-> 


MAC PDU (MAC Long BSR 
(Buffer size#1 ='1 ' or bigger. Buffer 
size#2='8' or bigger) 


1,5 


P 


17 


Wait for retxBSR-Tlmer expiry on the UE side. 


- 




- 


- 


18 


Check: Does the UE transmit a scheduling 
request? 


-> 


(SR) 


6 


P 


19 


SS allocates an UL Grant of 424 bits. (Note 4) 


<— 


(UL Grant, 424 bits) 


- 


- 


20 


Check: Does the UE transmit a MAC PDU 
including five RLC SDUs and not including any 
BSR? (Note 5) 


-> 


MAC PDU (SDU subheader, AMD 
PDU header and 2 RLC SDUs on 
LC 3, SDU subheader, AMD PDU 
header and 1 RLC SDUs on LC 4, 
SDU subheader, AMD PDU 
header and 2 RLC SDUs on LC 
5) 


7 


P 


Note 1 : 32 bits enables UE to transmit a MAC PDU witli a MAC BSR header and a Short BSR (1 bytes) or a Long 

BSR (3 byte). 
Note 2: UE triggers a Short BSR of type "Regular BSR" to report buffer status for one LCG for that TTI. The UE 

should not send any of the received RLC SDUs (segmented) due to Regular BSR has higher priority than 

U-plane logical channels. 
Note 3: UE triggers and transmit a Long BSR of type "Regular BSR". The UL grant would be enough for UE to 

transmit one RLC SDU as received in step 8, but Regular BSR has higher priority than U-plane logical 

channels. 
Note 4: The UE has 38 bytes of user data (received in steps 2, 9 and 1 3) in the transmission buffer. 424 bits 

enables UE to transmit user data in MAC PDU with 2 bytes SDU subheader for LC 3, 2 bytes SDU 

subheader for LC 4 and 1 byte SDU subheader for LC 5, 24 bytes MAC SDU for LC 3 (2 RLC SDUs, 1 

bytes each and 4 bytes AMD PDU header), 12 bytes MAC SDU for LC 4 (1 RLC SDU, 10 bytes and 2 

bytes AMD PDU header, 12 bytes MAC SDU for LC 5 (2 RLC SDUs, 4 bytes each and 4 bytes AMD PDU 

header)) equals to 424 bits (53 bytes). 
Note 5 The MAC SDUs for the different logical channels may be in any order in the MAC PDU. 
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7.1 .4.6.3.3 Specific Message Contents 

Table 7.1.4.6.3.3-1 : RRCConnectionReconfiguration (preamble: Table 4.5.3.3-1, step 8) 



Derivation path: 36.508 table 4.8.2.1 .5-1 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








RadioResourceConfigDedicated SEQUENCE { 








mac-MainConfig CHOICE { 








Explicit SEQUENCE { 








ul-SCH-Config SEQUENCE { 








maxHARQ-Tx 


n5 






periodicBSR-Timer 


Infinity 






retxBSR-Timer 


sf320 






ttiBundling 


FALSE 






1 








1 








} 








} 








} 








1 








1 








} 









7.1 .4.7 Correct handling of MAC control Information / Buffer Status / UL resources 

are allocated / Padding BSR 



7.1.4.7.1 



(1) 



Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits a MAC PDU and the number of padding bits is equal to or larger than the size 
of a Short BSR plus its subheader but smaller than the size of a Long BSR plus its subheader and the 
UE has available data for transmission from more than one LCG in the TTI where the BSR is 
transmitted } 

then { UE reports a Truncated BSR of the LCG with the highest priority logical channel with data 
available for transmission | 



(2) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits a MAC PDU and the number of padding bits is equal to or larger than the size 
of a Short BSR plus its subheader but smaller than the size of a Long BSR plus its subheader and the 
UE has available data for transmission form only one LCG in the TTI where the BSR is transmitted } 
then { UE reports a Short BSR } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when{ UE transmits a MAC PDU and the number of padding bits is equal to or larger than the size of 
a Long BSR plus its subheader } 

then { UE reports a long BSR } 



7.1.4.7.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.4.3.1, 5.4.5, 
6.1.2,6.1.3.1 and 6.2.1 and in TS 36.323, clause 4.5. 
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[TS 36.321 clause 5.4.3.1] 

For the Logical Channel Prioritization procedure, the UE shall take into account the following relative priority in 
decreasing order: 

- MAC control element for C-RNTl or data from UL-CCCH; 

MAC control element for BSR, with exception of BSR included for padding; 

- MAC control element for PHR; 

data from any Logical Channel, except data from UL-CCCH; 

MAC control element for BSR included for padding. 

[TS 36.321 clause 5.4.5] 

The Buffer Status reporting procedure is used to provide the serving eNB with information about the amount of data 
available for transmission in the UL buffers of the UE. RRC controls BSR reporting by configuring the two timers 
periodicBSR-Timer and retxBSR-Timer and by, for each logical channel, optionally signalling logicalChannelGroup 
which allocates the logical channel to an LCG [8]. 

For the Buffer Status reporting procedure, the UE shall consider all radio bearers which are not suspended and may 
consider radio bearers which are suspended. 

A Buffer Status Report (BSR) shall be triggered if any of the following events occur: 



UL resources are allocated and number of padding bits is equal to or larger than the size of the Buffer Status 
Report MAC control element plus its subheader, in which case the BSR is referred below to as "Padding BSR"; 



For padding BSR: 

if the number of padding bits is equal to or larger than the size of the Short BSR plus its sub header but smaller 
than the size of the Long BSR plus its subheader: 

if more than one LCG has data available for transmission in the TTl where the BSR is transmitted: report 
Truncated BSR of the LCG with the highest priority logical channel with data available for transmission; 

else report Short BSR. 

else if the number of padding bits is equal to or larger than the size of the Long BSR plus its sub header, report 
Long BSR. 

If the Buffer Status reporting procedure determines that at least one BSR has been triggered and not cancelled: 

if the UE has UL resources allocated for new transmission for this TTl: 

instruct the Multiplexing and Assembly procedure to generate a BSR MAC control element; 

start or restart the periodicBSR-Timer except when the BSR is a Truncated BSR; 

start or restart retxBSR-Timer. 
else if a Regular BSR has been triggered: 

a Scheduling Request shall be triggered. 

A MAC PDU shall contain at most one MAC BSR control element, even when multiple events trigger a BSR by the 
time a BSR can be transmitted in which case the Regular BSR and the Periodic BSR shall have precedence over the 
padding BSR. 

The UE shall restart retxBSR-Timer upon indication of a grant for transmission of new data on UL-SCH. 
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All triggered BSRs shall be cancelled in case the UL grant can accommodate all pending data available for transmission 
but is not sufficient to additionally accommodate the BSR MAC control element plus its subheader. All triggered BSRs 
shall be cancelled when a BSR is included in a MAC PDU for transmission. 

[TS 36.321 clause 6.1.2] 

MAC control elements are always placed before any MAC SDU. 

[TS 36.321 clause 6.1.3.1] 

Buffer Status Report (BSR) MAC control elements consist of either: 

Short BSR and Truncated BSR format: one LCG ID field and one corresponding Buffer Size field (figure 
6.1.3.1-1); or 

Long BSR format: four Buffer Size fields, corresponding to LCG IDs #0 through #3 (figure 6.1.3.1-2). 

The BSR formats are identified by MAC PDU sub headers with LCIDs as specified in table 6.2.1.-2. 

The fields LCG ID and Buffer Size are defined as follow: 

LCG ID: The Logical Channel Group ID field identifies the group of logical channel(s) which buffer status is 
being reported. The length of the field is 2 bits; 

Buffer Size: The Buffer Size field identifies the total amount of data available across all logical channels of a 
logical channel group after the MAC PDU has been built. The amount of data is indicated in number of bytes. It 
shall include all data that is available for transmission in the RLC layer and in the PDCP layer; the definition of 
what data shall be considered as available for transmission is specified in [3] and [4] respectively. The size of 
the RLC and MAC headers are not considered in the buffer size computation. The length of this field is 6 bits. 
The values taken by the Buffer Size field are shown in Table 6.1.3.1-1. 



LCG ID 



Buffer Size 



Oct1 



Figure 6.1.3.1-1 : Short BSR and Truncated BSR IVIAC control element 



Buffer Size #0 



Buffer 
Size #1 



Buffer Size #1 Buffer Size #2 

Buffer n, re o- Jio 

„. j,„ Buffer Size #3 
Size #2 



Oct1 
Oct 2 
Oct 3 



[TS 36.321 clause 6.2.1] 



Figure 6.1.3.1-2: Long BSR MAC control element 



Table 6.2.1-2: Values of LCID for UL-SCH 



Index 


LCID values 


00000 


CCCH 


00001-01010 


Identity of tlie logical cliannel 


01011-11001 


Reserved 


11010 


Power Headroom Report 


11011 


C-RNTI 


11100 


Truncated BSR 


11101 


Short BSR 


11110 


Long BSR 


11111 


Padding 



[TS 36.323 clause 4.5] 
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For the purpose of MAC buffer status reporting, the UE shall consider PDCP Control PDUs, as well as the following as 
data available for transmission in the PDCP layer: 

For SDUs for which no PDU has been submitted to lower layers: 

the SDU itself, if the SDU has not yet been processed by PDCP, or 

the PDU (control or data) if the SDU has been processed by PDCP. 
7.1.4.7.3 Test description 

7.1.4.7.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 

RRC Connection Reconfiguration (preamble: Table 4.5.3.3-1, step 8) using parameters as specified in Table 
7.1.4.7.3.3-1 

UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(2,0) is used for step 8 in 4.5.3A.3 according to [18]. 
2 AM DRBS are configured with the parameters specified in table 7.1.4.7.1-1. 

Table 7.1.4.7.1-1: Logical Channel Configuration Settings 



Parameter 


DRB1 


DRB2 


LogicalChannel-ldentity 


3 


4 


Priority 


7 


6 


prioritizedBitRate 


Okbs 


Okbs 


logicalChannelGroup 


2 (LCG ID#2) 


1 (LCG ID#1) 
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7.1.4.7.3.2 



Test procedure sequence 

Table 7.1.4.7.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


- 


EXCEPTION: Step 2 shall be repeated for 2 
times 


- 


- 


- 


- 


2 


The SS transmits a MAC PDU including an 
RLC SDU of size 12 bytes on logical channel 
4. 


<- 


MAC PDU (RLC SDU on LC 4) 






3 


The SS transmits a MAC PDU including an 
RLC SDU of size 12 bytes on logical channel 
3. 


<— 


MAC PDU (RLC SDU on LC 3) 






4 


UE transmits a Scheduling Request on 
PUCCH. 


-> 


(SR) 


- 


- 


5 


The SS sends an uplink grant of size 32 bits. 
(Note 1) 


<— 


(UL grant) 


- 


- 


6 


The UE transmit a Long BSR report 


-> 


MAC PDU (Long BSR header 
(LCID='11110'), Long BSR) 


- 


- 


7 


The SS sends an uplink grant of size 136 bits. 
(Note 2) 


<- 


(UL grant) 


- 


- 


8 


Check: Does UE transmit a MAC PDU 
containing an RLC SDU and a Truncated BSR 
indicating pending data ('Buffer size' field > '0') 
for logicalChannelGroup 1 ('LCG ID' field set to 
'01')? 


-> 


MAC PDU (Truncated BSR 
header (LCID='1 1 1 00'), Truncated 
BSR(LCG ID ='01', Buffer 
size>'0'), RLC SDU) 


1 


P 


9 


Void 


- 


- 


- 


- 


10 


The SS sends an uplink grant of size 136 bits 
(Note 2) 


<— 


(UL grant) 


- 


- 


11 


Check: Does UE transmit a MAC PDU 
containing an RLC SDU and with a Short BSR 
indicating pending data ('Buffer size' field > '0') 
for logicalChannelGroup 2 ('LCG ID' field 
='10')? 


-> 


MAC PDU (Short BSR 
header(LCID='11101'), Short 
BSR(LCG ID ='10',Buffersize>'0'), 
RLC SDU) 


2 


P 


12 


Void 


- 


- 


- 


- 


13 


Void 


- 


- 


- 


- 


14 


The SS sends an uplink grant of size 152 bits. 
(Note 3) 


<— 


(UL grant) 


- 


- 


15 


Check: Does UE transmit a MAC PDU 
containing a RLC SDU and a Long BSR? 


-> 


MAC PDU (Long BSR header 
(LCID='11110'), Long BSR), RLC 
SDU) 


3 


P 


Note 1 : SS transmit an UL grant of 32 bits (Itbs=0, Nprb=2, TS 36.213 Table 7.1 .7.2.1-1) to allow UE to transmit a 
Regular BSR triggered by the new data received logicalChannelGroup 1 and 2 in steps 2 and 3. This to 
enable testing of Padding BSR which has lower priority than Regular BSR. 

Note 2: UL grant of 1 36 bits (/res=9, NpRB=^ , TS 36.21 3 Table 7. 1 .7.2.1 -1 ) is chosen such that the MAC PDU 
padding bits will be equal to or larger than the size of Short/Truncated BSR and smaller than Long BSR. 
RLC SDL) size is 12 bytes, size of AMD PDU header is 2 bytes, size of MAC header is 2 bytes (1 byte for 
MAC SDU sub-header using R/R/E/LCID for last sub header and 1 byte for BSR sub-header) and size of 
Short BSR/Truncated BSR is one byte, i.e. setting UL grant to 17 bytes (136 bits) enable UE to include 
Short/Truncated BSR. 

Note 3: UL grant of 152 bits (/rss=0, A/pflB=6, TS 36.213 Table 7.1.7.2.1-1) is chosen such that the MAC PDU 

padding bits will be equal to or larger than the size of Long BSR. RLC SDU size is 12 bytes, size of AMD 
PDU header is 2 bytes, size of MAC header is 2 bytes (1 byte for MAC SDU sub-header using R/R/E/LCID 
for last sub header and 1 byte for BSR sub-header) and size of Long BSR is 3 bytes, i.e. setting UL grant 
to 19 bytes (152 bits) enable UE to include padding Long BSR. 



7.1.4.7.3.3 
None 



Specific Message Contents 
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7.1 .4.8 Correct handling of MAC control information / Buffer status / Periodic BSR 

timer expires 

7.1.4.8.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { periodicBSR-Timer expires and more than one LCG has buffered data in a TTI } 
then { UE triggers a Periodic BSR and reports Long BSR } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { periodicBSR-Timer expires and one LCG has buffered data in a TTI } 

then { UE triggers a Periodic BSR and reports Short BSR and restarts the periodicBSR-Timer} 
} 

7.1.4.8.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.4.5, 6.1.2, 
6.1.3.1 and 6.2.1; TS 36.323 clause 4.5. 

[TS 36.321 clause 5.4.5] 

The Buffer Status reporting procedure is used to provide the serving eNB with information about the amount of data 
available for transmission in the UL buffers of the UE. RRC controls BSR reporting by configuring the two timers 
periodicBSR-Timer and retxBSR-Timer and by, for each logical channel, optionally signalling logicalChannelGroup 
which allocates the logical channel to an LCG [8]. 

For the Buffer Status reporting procedure, the UE shall consider all radio bearers which are not suspended and may 
consider radio bearers which are suspended. 

A Buffer Status Report (BSR) shall be triggered if any of the following events occur: 



- periodicBSR-Timer expires, in which case the BSR is referred below to as "Periodic BSR". 

For Regular and Periodic BSR: 

if more than one LCG has data available for transmission in the TTI where the BSR is transmitted: report Long 
BSR; 

else report Short BSR. 

If the Buffer Status reporting procedure determines that at least one BSR has been triggered and not cancelled: 

if the UE has UL resources allocated for new transmission for this TTI: 

instruct the Multiplexing and Assembly procedure to generate a BSR MAC control element; 

- start or restart the periodicBSR-Timer except when the BSR is a Truncated BSR; 

start or restart retxBSR-Timer. 

A MAC PDU shall contain at most one MAC BSR control element, even when multiple events trigger a BSR by the 
time a BSR can be transmitted in which case the Regular BSR and the Periodic BSR shall have precedence over the 
padding BSR. 

The UE shall restart retxBSR-Timer upon indication of a grant for transmission of new data on UL-SCH. 
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All triggered BSRs shall be cancelled in case the UL grant can accommodate all pending data available for transmission 
but is not sufficient to additionally accommodate the BSR MAC control element plus its subheader. All triggered BSRs 
shall be cancelled when a BSR is included in a MAC PDU for transmission. 

[TS 36.321 clause 6.1.2] 

MAC control elements are always placed before any MAC SDU. 

[TS 36.321 clause 6.1.3.1] 

Buffer Status Report (BSR) MAC control elements consist of either: 

Short BSR and Truncated BSR format: one LCG ID field and one corresponding Buffer Size field (figure 
6.1.3.1-1); or 

Long BSR format: four Buffer Size fields, corresponding to LCG IDs #0 through #3 (figure 6.1.3.1-2). 

The BSR formats are identified by MAC PDU sub headers with LCIDs as specified in table 6.2.1.-2. 

The fields LCG ID and Buffer Size are defined as follow: 

LCG ID: The Logical Channel Group ID field identifies the group of logical channel(s) which buffer status is 
being reported. The length of the field is 2 bits; 

Buffer Size: The Buffer Size field identifies the total amount of data available across all logical channels of a 
logical channel group after the MAC PDU has been built. The amount of data is indicated in number of bytes. It 
shall include all data that is available for transmission in the RLC layer and in the PDCP layer; the definition of 
what data shall be considered as available for transmission is specified in [3] and [4] respectively. The size of 
the RLC and MAC headers are not considered in the buffer size computation. The length of this field is 6 bits. 
The values taken by the Buffer Size field are shown in Table 6.1.3.1-1. 



LCG ID 



Buffer Size 



Oct1 



Figure 6.1.3.1-1 : Short BSR and Truncated BSR IVIAC control element 



Buffer Size #0 



Buffer 
Size #1 



Buffer Size #1 Buffer Size #2 

Buffer n, re o- Jio 

„. j,„ Buffer Size #3 
Size #2 



Oct1 
Oct 2 
Oct 3 



[TS 36.321 clause 6.2.1] 



Figure 6.1.3.1-2: Long BSR MAC control element 



Table: 6.2.1-2 Values of LCID for UL-SCH 



Index 


LCID values 


00000 


CCCH 


00001-01010 


Identity of tlie logical channel 


01011-11001 


Reserved 


11010 


Power Headroom Report 


11011 


C-RNTI 


11100 


Truncated BSR 


11101 


Short BSR 


11110 


Long BSR 


11111 


Padding 
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[TS 36.323 clause 4.5] 

For the purpose of MAC buffer status reporting, the UE shall consider PDCP Control PDUs, as well as the following as 
data available for transmission : 

For SDUs for which no PDU has been submitted to lower layers: 

the SDU itself, if the SDU has not yet been processed by PDCP, or 

- the PDU if the SDU has been processed by PDCP. 
7.1.4.8.3 Test description 
7.1.4.8.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 

RRC Connection Reconfiguration (preamble: Table 4.5.3.3-1, step 8) using parameters as specified in Table 
7.1.4.8.3.3-1 

UE: 

None. 

Preamble; 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(2,0) is used for step 8 in 4.5.3A.3 according to [18]. 
2 AM DRBS are configured with the parameters specified in table 7.1.4.8.1-1. 

Table 7.1.4.8.1-1: Logical Channel Configuration Settings 



Parameter 


DRB1 


DRB2 


LogicalChannel-ldentity 


3 


4 


priority 


7 


6 


prioritizedBitRate 


Okbs 


Okbs 


logicalChannelGroup 


2 


1 
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7.1.4.8.3.2 



Test procedure sequence 

Table 7.1.4.8.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


The SS transmits a MAG PDU containing an 
RLC PDU on logical channel 4 (LCG ID 1), 
which contains 1 RLC SDU of size 14 bytes. 


<~ 


MAC PDU (RLC PDU) 






3 


The SS is configured for Uplink Grant 
Allocation Type 2. The SS sends an uplink 
grant of size 32 bits. (Note 2) 


<— 


(UL grant) 






4 


The UE transmits a short BSR report and 2 
padding headers at start. (Note 6) 


-> 


MAC PDU ((LCID='11101', LCG 
ID='01 ', Buffer size index > 0) 


- 


- 


- 


EXCEPTION: Steps 5 to 6 shall be repeated 
two times (Note 4) 


- 


- 


- 


- 


5 


Wait for periodicBSR-Timer expiry. 


- 


- 


- 


- 


5A 


The SS sends an uplink grant of size 32 bits 


- 


- 


- 


- 


6 


Check: Does UE transmit a MAC PDU 
containing a Short BSR with 'LCG ID' field set 
to '01' (logicalChannelGroup 1) and Buffer 
Size Index > 0? 


-> 


MAC PDU (LCID='11101', LCG 
ID='01', Buffer Size index > 0) 


2 


P 


7 


Void 










8 


The SS transmits a MAC PDU containing an 
RLC PDU on logical channel 3 (LCG ID 2), 
which contains 1 RLC SDU of size 14 bytes. 


<~ 


MAC PDU (RLC PDU) 






8A 


The SS sends an uplink grant of size 32 bits 
(Note 3) 


<— 


(UL grant) 


- 


- 


SB 


The UE transmits a long BSR report with 
'Buffer size#1' (LCG ID=1) and 'Buffer size#2' 
(LCG ID=2) fields set to value > '0' 


-> 


MAC PDU (( 'Buffer size#1 index' 
> 0, 'Buffer size#2 index=' >0') 






9 


Void 










- 


EXCEPTION: Step 9A to 1 shall be repeated 
twice. (Note 5) 


- 


- 


- 


- 


10 


Check: Does UE transmit a MAC PDU 
containing a Long BSR with 'Buffer size#1' 
(LCG ID=1) and 'Buffer size#2' (LCG ID=2) 
fields set to value > '0'? 


-> 


MAC PDU 


1 


P 


10 
A 


The SS is configured for Uplink Grant 
Allocation Type 3. The SS transmits 1 UL grant 
of size 328 bits to enable the UE to loopback 
RLC SDU on LCG ID = 1 and LCG = 2. (Note 
7) 










11 


The UE transmits MAC PDU containing the 
remaining RLC SDUs as sent by the SS in 
steps 2 and 8. 


-> 


MAC PDU 






Note 1 : Void. 

Note 2: SS transmits an UL grant of 32 bits {/res=0, Nprb=2, TS 36.213 Table 7.1 .7.2.1-1) to allow UE to transmit a 

Regular BSR triggered by the new data received logicalChannelGroup 1 in step 2. 
Note 3: SS transmits an UL grant of 32 bits {Itbs=0, Nprb=2, TS 36.213 Table 7.1 .7.2.1-1) to allow UE to transmit a 

Regular BSR triggered by the new data received logicalChannelGroup 2 in step 8. 
Note 4: One short BSR due to first expiry of periodicBSR-Timer and one short BSR due to second expire of 

periodicBSR- Timer. 
Note 5: One long BSR due to expire of periodicBSR-Timer and one long BSR due to second expiry of 

periodicBSR- Timer 
Note 6: The UE starts periodicBSR-Timer. 
Note 7: SS transmits an UL grant of 328 bits {Itbs=7, A/pne=3, TS 36.213 Table 7.1 .7.2.1-1) to allow UE to transmit 

RLC SDU on LCG =1 (14 bytes) and LOG = 2 (14 bytes) and a minimum MAG header of 3 bytes. 
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7.1 .4.8.3.3 Specific Message Contents 

Table 7.1.4.8.3.3-1 : RRCConnectionReconfiguration (preamble: Table 4.5.3.3-1, step 8) 



Derivation path: 36.508 table 4.8.2.1 .5-1 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








RadioResourceConfigDedicated SEQUENCE { 








mac-MainConfig CHOICE { 








explicit SEQUENCE { 








ul-SCH-Config SEQUENCE { 








maxHARQ-Tx 


n5 






periodicBSR-Timer 


sflO 






retxBSR-Timer 


sf 1 0240 






ttiBundling 


FALSE 






1 








1 








} 








} 








} 








1 








1 








} 









7.1.4.10 

7.1.4.10.1 
(1) 



MAC padding 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is to transmit a MAC PDU with padding exceeding 2 bytes 
then { Padding goes to the end of the MAC PDU } 



(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is to transmit a MAC PDU with single-byte padding and there is a data MAC PDU sub-header 
present } 

then { UE is inserting padding MAC PDU subheader before any other MAC PDU sub-header } 



(3) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is to transmit a MAC PDU with two-byte padding and there is a data MAC PDU sub-header 
then { UE is inserting two padding MAC PDU subheaders before any other MAC PDU sub-header } 



(4) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is to transmit a MAC PDU with single-byte padding and there is no data MAC PDU sub- 
header but a MAC Control element is present } 

then { UE is inserting a padding MAC PDU subheader before any other MAC PDU sub-header } 
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7.1.4.10.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in TS 36.321, clause 6.1.2. 

[TS 36.321 clause 6.1.2] 

Padding occurs at the end of the MAC PDU, except when single-byte or two-byte padding is required. Padding may 
have any value and the UE shall ignore it. When padding is performed at the end of the MAC PDU, zero or more 
padding bytes are allowed. 

When single-byte or two-byte padding is required, one or two MAC PDU subheaders corresponding to padding are 
placed at the beginning of the MAC PDU before any other MAC PDU subheader. 

A maximum of one MAC PDU can be transmitted per TB per UE. 



R/R/E/LCID R/R/E/LCID[/F/L] R/R/E/LCID/F/L R/R/E/LCID/F/L 
sub-header sub-header sub-header sub-header 



R/R/E/LCID/F/L R/R/E/LCID padding 
sub-header sub-header 



MAC header 



MAC Control MAC Control 
element 1 element 2 



MAC SDU 



MAC SDU 



Padding 
(opt) 



■^ MAC payload ► 

Figure 6.1.2-3: Example of IVIAC PDU consisting of IVIAC header, IVIAC control elements, MAC SDUs 

and padding 



Test description 
Pre-test conditions 



7.1.4.10.3 
7.1.4.10.3.1 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
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7.1.4.10.3.2 



Test procedure sequence 

Table 7.1.4.10.3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


The SS transmits a IVIAC PDU with 10 bytes 
MAC SDU. 


<~ 


MAC PDU(AMD PDU) 


- 


- 


3 


The UE transmits a Scheduling Request on 
PUCCH. 


- 


(SR) 


- 


- 


4 


The SS transmits an uplink grant of size 176 
bits. (Note 1) 


<- 


(UL grant) 


- 


- 


5 


Check: Does the UE transmit a MAC PDU with 
a MAC SDU of length 10 bytes and where the 
last MAC sub-header has the Extension field 
'E' set to '0' and the Logical Channel ID field 
'LCID' set to '11111'? 


-> 


MAC PDU (BSR sub-header, MAC 
SDU sub-header. Padding MAC 
sub-header (E='0', 
LCID='1 1111 '),Short BSR, MAC 
SDU, padding) 


1 


P 


6 


The SS transmits a MAC PDU with 13 bytes 
MAC SDU. 


<- 


MAC PDU(AMD PDU) 


- 


- 


7 


The UE transmits a Scheduling Request on 
PUCCH. 


- 


(SR) 


- 


- 


8 


The SS transmits an uplink grant of size 120 
bits. (Note 2) 


<— 


(UL grant) 


- 


- 


9 


Check: Does the UE transmit a MAC PDU with 
a MAC SDU of length 10 bytes and with a 
padding MAC sub-header, with Extension field 
'E' is set to '1 ' and the Logical Channel ID field 
'LCID' is set to '1 1 1 1 1 ', inserted before the 
MAC SDU sub-header? 


-> 


MAC PDU (Padding MAC-sub- 
header(E='1', LCID='11111'), 
MAC SDU sub-header, MAC 
SDU) 


2 


P 


10 


The SS transmits a MAC PDU with 10 bytes 
MAC SDU. 


<- 


MAC PDU (AMD PDU) 


- 


- 


11 


The UE transmits a Scheduling Request on 
PUCCH. 


- 


(SR) 


- 


- 


12 


The SS transmits an uplink grant of size 120 
bits. (Note 3) 


<— 


(UL grant) 


- 


- 


13 


Check: Does the UE transmit a MAC PDU with 
two padding MAC sub-headers, with Extension 
field 'E' is set to '1 ' and the Logical Channel ID 
field 'LCID' is set to '1 1 1 1 1 ', inserted before 
the BSR sub-header and the MAC SDU sub- 
header? 


-> 


MAC PDU (Padding MAC-sub- 
header#1 (E='1', LCID='11111'), 
Padding MAC-sub-header#2 
(E='1', LCID='11111'), BSR sub- 
header, MAC SDU sub-header, 
BSR, MAC-SDU) 


3 


P 


14 


The SS transmits a Timing Advance command 
and does not send any subsequent timing 
alignments. Start Timer_T1 = Time Alignment 
timer value on SS. 


<- 


MAC PDU 

(Timing Advance Command) 






15 


40 to 50 TTI before Timer_T1 expires the SS 
transmits a MAC PDU containing an RLC AMD 
PDU. 


<- 


MAC PDU (AMD PDU) 






16 


The SS ignores scheduling requests and waits 
until the UE transmits a preamble on PRACH. 


-> 


(PRACH preamble) 


- 


- 


17 


The SS transmits a Random Access 
Response, with an UL Grant of 56-bits. (Note 
4) 


<- 


Random Access Response 






18 


The UE transmits a Control sub-header (8-bits) 
and a C-RNTI MAC Control Element (16-bits). 


-> 


MAC PDU (MAC Control sub- 
header. Padding MAC sub-header 
(E='0', LCID='11 111'), C-RNTI 
control element, padding) 






19 


The SS transmits an UL grant of 24 bits. 
(Note 5) 


<- 


(UL grant) 


- 


- 


19 
A 


Check: Does the UE transmit a MAC PDU with 
a padding MAC sub header with Extension 
field 'E' is set to '1 ' and 'LCID' field set to 
'11111' (8-bits) inserted before a BSR sub- 
header (8bits) and a short BSR (8 bits) 


-> 


MAC PDU (Padding MAC-sub- 
header(E='1', LCID='11111'), 
BSR sub-header, short BSR) 


4 


P 


20 


The SS transmits an uplink grant enabling UE 


<— 


(UL grant) 


- 


- 
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to transmit loop back PDU. 










21 


The UE transmits Loop back PDU. 


~> 


MAC PDU(AMD PDU) 


- 


- 


Note 1 : UL grant of 176 bits (Itbs=3, Nprb=3, see TS 36.213 Table 7.1.7.2.1-1) is chosen such that the MAC PDU 
padding will be larger than 2 bytes. RLC SDU size is 8 bytes, size of AMD PDU header is 2 bytes, size of 
MAC header is 4 bytes (2 bytes for MAC SDU sub-header using 7-bit LI, 1 byte for BSR sub-header and 1 
byte for padding MAC sub-header) and size of Short BSR is 1 byte, equals to 120 bits (15 bytes) and 
resulting into 56 bits padding. 

Note 2: UL grant of 120 bits (/res=0, Nprb=5, see TS 36.213 Table 7.1.7.2.1-1) is chosen such that the MAC PDU 
padding will be a single byte. RLC SDU size is 1 1 bytes, size of AMD PDU header is 2 bytes and size of 
MAC header is 1 byte for MAC SDU sub-header, equals to 1 12 bits (14 bytes) and resulting into 1 single 
byte padding. 

Note 3: UL grant of 120 bits (/res=0, Nprb=5, see TS 36.213 Table 7.1.7.2.1-1) is chosen such that the MAC PDU 
padding will be equal to 2 bytes. RLC SDU size is 8 bytes, size of AMD PDU header is 2 bytes, size of 
MAC header is 4 bytes (1 bytes for MAC SDU sub-header, 1 byte for Short BSR sub-header and 2 bytes 
for padding MAC sub-header) and size of Short BSR is 1 byte, equals to 120 bits (15 bytes) and resulting 
no padding at the end of the MAC PDU. 

Note 4: UL grant of 56 bits {Itbs=0, Nprb=3, see TS 36.213 Table 7.1.7.2.1-1) is as 36.321 clause 5.1 .4 states that 
the eNB should not provide a grant smaller than 56 bits in the Random Access Response. 

Note 5: UL grant of 24 bits (ITBS=1 , NPRB=1 , see TS 36.21 3 Table 7.1 .7.2.1 -1 ) is chosen such that the MAC PDU 
padding will be equal to a single byte. 



7.1 .4.1 0.3.3 Specific Message Contents 

None. 

7.1 .4.1 1 Correct HARQ process handling 

7.1.4.11.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established } 
ensure that { 

when { UE receives an UL Grant with toggled NDI and has data available for transmission } 
then { UE transmits a new MAC PDU using redundancy version } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established and having transmitted a MAC PDU less 
than maxHARQ-Tx times } 
ensure that { 

when { UE receives a NACK and no uplink grant is included for the next TTI corresponding to the 
HARQ process } 

then { UE performs non-adaptive retransmission of the MAC PDU with redundancy version toggled by 
one of the last (re) transmission [0,2,3,1 order] } 



(3) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established and having transmitted a MAC PDU less 
than maxHARQ-Tx times } 
ensure that { 

when { UE receives an uplink grant on PDCCH for the next TTI corresponding to the HARQ process 
with old NDI [not toggled] , irrespective of ACK/NACK is received for previous (re) transmission } 

then { UE performs an adaptive retransmission of the MAC PDU with redundancy version as received 
on PDCCH I 



(4) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established and having transmitted a MAC PDU less 
than maxHARQ-Tx times } 
ensure that { 

when { UE receives an ACK and no uplink grant is included for the next TTI corresponding to the 
HARQ process } 

then { UE does not retransmit the MAC PDU } 
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(5) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established and having transmitted a MAC PDU 
maxHARQ-Tx times } 
ensure that { 

when { UE receives an uplink grant on PDCCH for the next TTI corresponding to the HARQ process 
with not toggled NDI } 

then { UE does not retransmit the MAC PDU but transmit a MAC Padding PDU} 

} 

(6) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established and having transmitted a MAC PDU less 
than maxHARQ-Tx times } 
ensure that { 

when { UE receives an uplink grant on PDCCH for the next TTI corresponding to the HARQ process 
with toggled NDI, and data are not available for transmission } 
then { UE transmits any MAC Padding PDU } 
} 

(7) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established and having transmitted a MAC PDU 
maxHARQ-Tx times } 
ensure that { 

when { UE receives a NACK and no uplink grant is included for the next TTI corresponding to the 
HARQ process } 

then { UE does not transmit any MAC PDU } 

} 

7.1 .4.1 1 .2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.4.2.1 & 
5.4.2.2. 

[TS 36.321, clause 5.4.2.1] 

There is one HARQ entity at the UE, which maintains a number of parallel HARQ processes allowing transmissions to 
take place continuously while waiting for the feedback on the successful or unsuccessful reception of previous 
transmissions. 

The number of parallel HARQ processes is specified in [2], clause 8. 

At a given TTI, if an uplink grant is indicated for the TTI, the HARQ entity identifies the HARQ process for which a 
transmission should take place. It also routes the received feedback (ACK/NACK information), MCS and resource, 
relayed by the physical layer, to the appropriate HARQ process. 

If TTI bundling is configured, the parameter TTI_BUNDLE_SIZE provides the number of TTIs of a TTI bundle. TTI 
bundling operation relies on the HARQ entity for invoking the same HARQ process for each transmission that is part of 
the same bundle. Within a bundle HARQ retransmissions are non-adaptive andtrigged without waiting for feedback 
from previous transmissions according to TTI_BUNDLE_SIZE. The feedback for a bundle is only received for the last 
TTI of the bundle (i.e the TTI corresponding to TTI_BUNDLE_SIZE ), regardless of whether a transmission in that TTI 
takes place or not (e.g. when a measurement gap occurs). A retransmission of a TTI bundle is also a TTI bundle. 

For transmission of Msg3 during Random Access (see section 5.1.5) TTI bundling does not apply.For each TTI, the 
HARQ entity shall: 

identify the HARQ process associated with this TTI; 

if an uplink grant has been indicated for this TTI: 

if the received grant was not addressed to a Temporary C-RNTI on PDCCH and if the NDI provided in the 
associated HARQ information has been toggled compared to the value in the previous transmission of this 
HARQ process; or 

if the uplink grant was received on PDCCH for the C-RNTI and the HARQ buffer of the identified process is 
empty; or- if the uplink grant was received in a Random Access Response: 
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if there is a MAC PDU in the Msg3 buffer and the upHnk grant was received in a Random Access 
Response: 

- obtain the MAC PDU to transmit from the Msg3 buffer. 

else: 

obtain the MAC PDU to transmit from the "Muhiplexing and assembly" entity; 

deliver the MAC PDU and the uplink grant and the HARQ information to the identified HARQ process; 

instruct the identified HARQ process to trigger a new transmission. 

else: 

deliver the uplink grant and the HARQ information (redundancy version) to the identified HARQ process; 

instruct the identified HARQ process to generate an adaptive retransmission. 

else, if the HARQ buffer of the HARQ process corresponding to this TTI is not empty: 

instruct the identified HARQ process to generate a non-adaptive retransmission. 

When determining if NDI has been toggled compared to the value in the previous transmission UE shall ignore NDI 
received in all uplink grants on PDCCH for its Temporary C-RNTI. 

[TS 36.321, clause 5.4.2.2] 

Each HARQ process is associated with a HARQ buffer. 

Each HARQ process shall maintain a state variable CURRENT_TX_NB, which indicates the number of transmissions 
that have taken place for the MAC PDU currently in the buffer, and a state variable HARQ_FEEDBACK, which 
indicates the HARQ feedback for the MAC PDU currently in the buffer. When the HARQ process is established, 
CURRENT_TX_NB shall be initiahzed to 0. 

The sequence of redundancy versions is 0, 2, 3, 1. The variable CURRENT_IRV is an index into the sequence of 
redundancy versions. This variable is up-dated modulo 4. 

New transmissions are performed on the resource and with the MCS indicated on PDCCH or Random Access 
Response. Adaptive retransmissions are performed on the resource and, if provided, with the MCS indicated on 
PDCCH.Non-adaptive retransmission is performed on the same resource and with the same MCS as was used for the 
last made transmission attempt. 

The UE is configured with a Maximum number of HARQ transmissions and a Maximum number of Msg3 HARQ 
transmissions by RRC: maxHARQ-Tx and maxHARQ-MsgSTx respectively. For transmissions on all HARQ processes 
and all logical channels except for transmission of a MAC PDU stored in the Msg3 buffer, the maximum number of 
transmissions shall be set to maxHARQ-Tx. For transmission of a MAC PDU stored in the Msg3 buffer, maximum 
number of transmissions shall be set to maxHARQ-MsgJTx. 

When the HARQ feedback is received for this TB, the HARQ process shall: 

- set HARQ_FEEDBACK to the received value. 

If the HARQ entity requests a new transmission, the HARQ process shall: 

- set CURRENT_TX_NB to 0; 

- set CURRENTJRV to 0; 

- store the MAC PDU in the associated HARQ buffer; 
store the uplink grant received from the HARQ entity; 

- set HARQ_FEEDBACK to NACK; 

generate a transmission as described below. 
If the HARQ entity requests a retransmission, the HARQ process shall: 
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- increment CURRENT_TX_NB by 1 ; 

if the HARQ entity requests an adaptive retransmission: 

store the upHnk grant received from the HARQ entity; 

set CURRENT_IRV to the index corresponding to the redundancy version value provided in the HARQ 
information; 

- set HARQ_FEEDBACK to NACK; 

generate a transmission as described below, 
else if the HARQ entity requests a non-adaptive retransmission: 

- if HARQ_FEEDB ACK = NACK: 

generate a transmission as described below. 

NOTE: When receiving a HARQ ACK alone, the UE keeps the data in the HARQ buffer. 

NOTE: When no UL-SCH transmission can be made due to the occurrence of a measurement gap, no HARQ 
feedback can be received and a non-adaptive retransmission follows. 

To generate a transmission, the HARQ process shall: 

if there is no measurement gap at the time of the transmission and, in case of retransmission, the retransmission 
does not collide with a transmission for a MAC PDU obtained from the Msg3 buffer: 

instruct the physical layer to generate a transmission according to the stored uplink grant with the redundancy 
version corresponding to the CURRENT_IRV value; 

- increment CURRENTJRV by 1 ; 

if there is a measurement gap at the time of the HARQ feedback reception for this transmission and if the 
MAC PDU was not obtained from the Msg3 buffer: 

- set HARQ_FEEDB ACK to ACK at the time of the HARQ feedback reception for this transmission. 
After performing above actions, the HARQ process then shall: 

if CURRENT_TX_NB = maximum number of transmissions - 1 : 

- flush the HARQ buffer. 
7.1.4.11.3 Test description 
7.1.4.11.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 

System information takes into account the parameters in table 7.1.2.1 1.3.1-1. 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

The loop back size is set in such a way that one RLC SDU in DL shall result in 1 RLC SDU's in UL. 

No UL Grant is allocated; PUCCH is in synchronised state for sending Scheduling Requests. 
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7.1.4.11.3.2 



Test procedure sequence 

Table 7.1.4.11.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS Transmits a valid MAC PDU 
containing RLC PDU 


<— 


MAC PDU 


- 


- 


2 


Void 


- 


- 


- 


- 


3 


The SS allocates an UL Grant for one HARQ 
process X, sufficient for one RLC SDU to be 
loop backed in a TTI, and NDI indicates new 
transmission 


<— 


Uplink Grant 






4 


Check: Does the UE transmit a MAC PDU 
including one RLC SDU, in HARQ process X, 
redundancy version 0? 


-> 


MAC PDU 


1 


P 


5 


The SS transmits a NACK 


<— 


HARQ NACK 


- 


- 


6 


Check: Does the UE retransmit the MAC PDU 
for HARQ process X, redundancy version 2? 


-> 


MAC PDU 


2 


P 


7 


The SS transmits a NACK 


<- 


HARQ NACK 


- 


- 


8 


Check: Does the UE retransmit the MAC PDU 
for HARQ process X, redundancy version 3? 


-> 


MAC PDU 


2 


P 


9 


The SS transmits a NACK 


<- 


HARQ NACK 


- 


- 


10 


Check: Does the UE retransmit the MAC PDU 
for HARQ process X, redundancy version 1 ? 


-> 


MAC PDU 


2 


P 


11 


The SS transmits a NACK 


<— 


HARQ NACK 


- 


- 


12 


Check: Does the UE retransmit the MAC PDU 
for HARQ process X, redundancy version 0? 


~> 


MAC PDU 


2 


P 


13 


Void 


- 


- 


- 


- 


14 


Void 


- 


- 


- 


- 


15 


The SS transmits an ACK 


<— 


HARQ ACK 


- 


- 


16 


Check: Does the UE retransmit the MAC PDU 
for HARQ process X? 


-> 


MAC PDU 


4 


F 


17 


The SS transmits an UL grant corresponding 
to TTI for HARQ process X, with NDI not 
toggled and redundancy version to be used as 
'1' 


<— 


Uplink Grant 






18 


Check: Does the UE retransmit the MAC PDU 
in for HARQ process X, using redundancy 
version 1 ? 


-> 


MAC PDU 


3 


P 


19 


The SS transmits a NACK 


<— 


HARQ NACK 


- 


- 


20 


The SS transmits an UL grant corresponding 
to next TTI for HARQ process X, with NDI not 
toggled and redundancy version to be used as 
'3' 


<- 


Uplink Grant 






21 


Check: Does the UE retransmit theMAC PDU 
for HARQ process X, using next redundancy 
version 3? 


-> 


MAC PDU 


3 


P 


22 


The SS transmits a NACK 


<- 


HARQ NACK 


- 


- 


23 


Check: Does the UE retransmit the MAC PDU 
in the next TTIs corresponding to HARQ 
process X? 


-> 


MAC PDU 


7 


F 


24 


The SS transmits an UL grant corresponding 
to TTI for HARQ process X, with NDI not 
toggled 


<— 


Uplink Grant 








EXCEPTION: In parallel with step 25, UE 
executes parallel behaviour defined in table 
7.1.4.11.3.2-2 










25 


Check: Does the UE retransmit the MAC PDU 
in the next TTIs corresponding to HARQ 
process X? 


-> 


MAC PDU 


5 


F 


26 


The SS transmits a valid MAC PDU containing 
RLC PDU 


<— 


MAC PDU 


- 


- 


27 


Void 


- 


- 


- 


- 


28 


The SS allocates UL Grant for one HARQ 
process Y, sufficient for one RLC SDU to be 
loop backed in a TTI, and NDI indicates new 


<- 


Uplink Grant 
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transmission 










29 


Checl<: Does the UE transmit a MAC PDU 
including one RLC SDU, in HARQ process Y, 
redundancy version 0? 


-> 


MAC PDU 


1 


P 


30 


The SS allocates UL Grant for one HARQ 
process Y, sufficient for one RLC SDU to be 
loop backed in a TTI, and NDI indicates new 
transmission 


<- 


Uplink Grant 








EXCEPTION: In parallel with step 31 , UE 
executes parallel behaviour defined in table 
7.1.4.11.3.2-2. 










31 


Check: Does the UE retransmit the MAC PDU 
in the next TTIs corresponding to HARQ 
process Y? 


-> 


MAC PDU 


6 


F 



Table 7.1.4.11.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE transmits a MAC Padding PDU 


— > 


MAC PDU 


- 


- 



7.1 .4.1 1 .3.3 Specific message contents 

Table 7.1.4.11.3.3-1: MAC-MainConfig {RRCConnectionReconfiguration (preamble)} 



Derivation path: 36.508 table 4.8.2.1 .5-1 


Information Element 


Value/remark 


Comment 


Condition 


MAC-MainConfig-RBC ::= SEQUENCE { 








ul-SCH-Config SEQUENCE { 








maxHARQ-Tx 


nS 






1 








} 









7.1.4.12 

7.1.4.12.1 
(1) 



MAC reset /UL 

Test Purpose (TP) 



with{UE in E-UTRA RRC_CONNECTED state, with Scheduling Request procedure trig gered) 
ensure that { 

when{ UE MAC is reset, due to handover to a new cell } 
then { UE cancels Scheduling Request procedure } 



(2) 

with { UE in E-UTRA RRC_CONNECTED state ) 
ensure that { 

when{ UE MAC is reset, due to handover to a new cell } 
then { UE flushes UL HARQ buffer } 



(3) 

with {UE in E-UTRA RRC_CONNECTED state ) 
ensure that { 

when{ UE MAC is reset, due to handover to a new cell } 

then { UE Considers the next transmission for each UL HARQ process as very first 



7.1.4.12.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.9. 
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[TS 36.321 clause 5.9] 

If a reset of the MAC entity is requested by upper layers, the UE shall: 

initialize Bj for each logical channel to zero; 

stop (if running) all timers; 

consider timeAlignmenfTimei as expired and perform the corresponding actions in subclause 5.2; 

stop, if any, ongoing RACH procedure; 

discard explicitly signalled ra-Preamblelndex and ra-PRACH-Masklndex, if any; 

- flush Msg3 buffer; 

cancel, if any, triggered Scheduling Request procedure; 
cancel, if any, triggered Buffer Status Reporting procedure; 
cancel, if any, triggered Power Headroom Reporting procedure; 
flush the soft buffers for all DL HARQ processes; 

for each DL HARQ process, consider the next received transmission for a TB as the very first transmission; 
release, if any. Temporary C-RNTl. 
7.1.4.12.3 Test description 

7.1.4.12.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2 
UE: 

None. 
Preamble: 

The UE is in state Loopback Activated (state 4) in Cell 1 according to [18]. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

7.1 .4.1 2.3.2 Test procedure sequence 

Table 7. 1 .4. 12.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while columns marked "Tl" 
is to be applied subsequently. The exact instants on which these values shall be applied are described in the texts in this 
clause. 

Table 7.1.4.12.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 2 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15Khz 


-90 


Off 




T1 


Cell-specific RS EPRE 


dBm/15Khz 


-90 


-80 
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Table 7.1.4.12.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


The SS transmits a IVIAC PDU containing one 
RLC SDU on LC 4 


<- 


MAC PDU (1 RLC SDU of 40 
bytes on DRB) 


- 


- 


3 


The UE transmit a scheduling request 


— > 


(SR) 


- 


- 


4 


Wait for 50ms [Discard timer] to expire at UE. 


- 




- 


- 


5 


The SS changes Cell 2 level according to the 
row "T1" in table 7.1.4.12.3.2-1 


- 


- 


- 


- 


6 


The SS transmits an 

RRCConnectionReconfiguration message to 
order the UE to perform intra frequency 
handover to Cell 2, including explicit Random 
Access Preamble. 


<— 








7 


The UE transmits on cell 2, 
RRCConnectionReconfigurationComplete 


-> 


- 


- 


- 


8 


Check: For 2 seconds, if UE transmits a 
scheduling request? 


-> 


(SR) 


1 


F 


9 


The SS transmits a IVIAC PDU containing RLC 
SDU on LC 4 


<— 


MAC PDU (1 RLC SDU of 40 
bytes on DRB) 


- 


- 


10 


The UE transmit a scheduling request 


— > 


(SR) 


- 


- 


11 


The SS allocate UL Grant sufficient for one 
RLC SDU to be loop backed in a TTI, and NDI 
indicates new transmission 


<— 


Uplink Grant 






12 


The UE transmit a MAC PDU including one 
RLC SDU 


-> 


MAC PDU 


- 


- 


13 


The SS transmits a NACK 


<— 


HARQ NACK 


- 


- 


14 


The SS transmits an 

RRCConnectionReconfiguration message to 
order the UE to perform intra frequency 
handover to Cell 1 


<- 








15 


The UE transmits on cell 1, 
RRCConnectionReconfigurationComplete 


-> 


- 


- 


- 


16 


Check: For 2 seconds, does UE transmit IVIAC 
PDU containing Loop Back PDU? 


-> 


MAC PDU (1 RLC SDU of 40 
bytes on DRB) 


2 


F 


17 


The SS transmits a IVIAC PDU containing RLC 
SDU on LC 4 


<— 


MAC PDU (1 RLC SDU of 40 
bytes on DRB) 


- 


- 


18 


The UE transmit a scheduling request 


— > 


(SR) 


- 


- 


19 


The SS allocate UL Grant sufficient for one 
RLC SDU to be loop backed in a TTI, and NDI 
indicates new transmission 


<— 


Uplink Grant 






20 


Check: Does UE transmit a IVIAC PDU 
including one RLC SDU? 


~> 


MAC PDU 


3 


P 



7.1 .4.12.3.3 Specific Message Contents 

Table 7.1. 4.12.3.3-1: MAC-MainConfiguration {RRCConnectionReconfiguration (preamble)} 



Derivation path: 36.508 table 4.8.2.1 .5-1 


Information Element 


Value/remark 


Comment 


Condition 


MAC-MainConfiguration-RBC ::= SEQUENCE { 








ul-SCH-Configuration SEQUENCE { 








maxHARQ-Tx 


n28 






} 








} 
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Table 7.1. 4.12.3.3-2: PDCP-Configuration-DRB-UM {RRCConnectionReconfiguration (preamble)} 



Derivation Path: 36.508 clause 4.8.2.1.2.1-1 


Information Element 


Value/remark 


Comment 


Condition 


PDCP-Configuration-DRB-UM ::= SEQUENCE { 








discardlimer 


ms50 


Lowest value 




} 









Table 7.1.4.12.3.3-3: SchedulingRequest-Configuration {RRCConnectionReconfiguration (preamble)} 



Derivation Path: 36.508 clause 4.6.3-20 


Information Element 


Value/remark 


Comment 


Condition 


SchedulinqRequest-Configuration::= CHOICE { 








enable SEQUENCE { 








dsr-TranslVlax 


n64 


Max value allowed 




} 








} 









Table 7.1.4.12.3.3-4: RRCConnectionReconfiguration (step 6, table 7.1.4.12.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-6, condition RBC-HO 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








mobilityControllnformation SEQUENCE { 


MobilityControllnformatio 
n-HQ 






targetCellldentity 


PhysicalCellldentity of 
Cell 2 (see 36.508 clause 
4.4.4.2) 






eutra-CarrierPreq 


Not present 






1 








} 








} 








} 








} 









Table 7.1.4.12.3.3-5: RRCConnectionReconfiguration (step 14, table 7.1.4.12.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-6, condition RBC-HO 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








mobilityControllnformation SEQUENCE { 


MobilityControllnformatio 
n-HQ 






targetCellldentity 


PhysicalCellldentity of 
Cell 1 (see 36.508 clause 
4.4.4.2) 






eutra-CarrierPreq 


Not present 






1 








} 








} 








} 








1 









ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 280 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

7.1 .4.13 MAC PDU header handling 

7.1.4.13.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE has a MAC SDU to be transmitted that is less smaller 128 bytes } 
then { UE sets F field to } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE has a MAC SDU to be transmitted that is larger than 128 bytes } 
then { UE sets F field to 1 } 



(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE inserts a R/R/E/LCID field in the MAC header and there is a subsequent R/R/E/LCID field 
to be inserted } 

then { UE sets E field to 1 } 

} 

(4) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE inserts a R/R/E/LCID field in the MAC header and a MAC SDU or a MAC control element 
starts at the next byte } 

then { UE sets E field to } 



(5) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE inserts the last MAC sub-header in the MAC PDU } 

then { UE inserts a MAC sub-header consist solely of the four header fields R/R/E/LCID } 



(6) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE inserts padding at the end of a MAC PDU } 

then { UE inserts the last MAC sub-header as a padding MAC subheader consisting solely of the 
four header fields R/R/E/LCID with LCID set to Padding } 



7.1.4.13.2 Conformance requirements 

References; The conformance requirements covered in the present TC are specified in: 3GPP TS 36.321 clause 6.1.2 
and 6.2.1. 

[TS 36.321, clause 6.1.2] 

A MAC PDU consists of a MAC header, zero or more MAC Service Data Units (MAC SDU), zero, or more MAC 
control elements, and optionally padding; as described in Figure 6.1.2-3. 

Both the MAC header and the MAC SDUs are of variable sizes. 

A MAC PDU header consists of one or more MAC PDU sub-headers; each sub header corresponding to either a MAC 
SDU, a MAC control element or padding. 
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A MAC PDU sub header consists of the six header fields R/R/E/LCID/F/L but for the last sub header in the MAC PDU 
and for fixed sized MAC control elements. The last sub header in the MAC PDU and sub-headers for fixed sized MAC 
control elements consist solely of the four header fields R/R/E/LCID. A MAC PDU subheader corresponding to 
padding consists of the four header fields R/R/E/LCID. 



LCID 



Octi 
Oct 2 



R 


R 


E 


LCID 


F 


L 


L 



Octi 
Oct 2 
Oct 3 



R/R/E/LCID/F/L sub-header with 
7-bits L field 



R/R/E/LCID/F/L sub-header with 
15-bitsL field 



Figure 6.1.2-1 : R/R/E/LCID/F/L lUIAC sub header 



R R E 



LCID 



Octi 



R/R/E/LCID sub-header 

Figure 6.1.2-2: R/R/E/LCID MAC sub header 

MAC PDU sub-headers have the same order as the corresponding MAC SDUs, MAC control elements and padding. 

MAC control elements are always placed before any MAC SDU. 

Padding occurs at the end of the MAC PDU, except when single -byte or two-byte padding is required. Padding may 
have any value and the UE shall ignore it. When padding is performed at the end of the MAC PDU, zero or more 
padding bytes are allowed. 

When single-byte or two-byte padding is required, one or two MAC PDU subheaders corresponding to padding are 
placed at the beginning of the MAC PDU before any other MAC PDU subheader. 

A maximum of one MAC PDU can be transmitted per TB per UE. 



R/R/E/LCID R/R/E/LCID[/F/L] R/R/E/LCID/F/L R/R/E/LCID/F/L 
sub-header sub-header sub-header sub-header 



R/R/E/LCID/F/L R/R/E/LCID padding 
sub-header sub-header 



IVIAC header 



MAC Control IVIAC Control 
element 1 element 2 



IVIAC SDU 



MAC SDU 



Padding 
(opt) 



-MAC payload- 



Figure 6.1.2-3: Example of MAC PDU consisting of MAC header, MAC control elements, MAC SDUs 

and padding 

[TS 36.321, clause 6.2.1] 
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The MAC header is of variable size and consists of the following fields: 

LCID: The Logical Channel ID field identifies the logical channel instance of the corresponding MAC SDU or 
the type of the corresponding MAC control element or padding as described in tables 6.2. 1-1 and 6.2. 1 -2 for the 
DL and UL-SCH respectively. There is one LCID field for each MAC SDU, MAC control element or padding 
included in the MAC PDU. In addition to that, one or two additional LCID fields are included in the MAC PDU, 
when single-byte or two-byte padding is required but cannot be achieved by padding at the end of the MAC 
PDU. The LCID field size is 5 bits; 

L: The Length field indicates the length of the corresponding MAC SDU or MAC control element in bytes. 
There is one L field per MAC PDU sub header except for the last sub header and sub-headers corresponding to 
fixed-sized MAC control elements. The size of the L field is indicated by the F field; 

F: The Format field indicates the size of the Length field as indicated in table 6.2. 1-3. There is one F field per 
MAC PDU sub header except for the last sub header and sub-headers corresponding to fixed-sized MAC control 
elements. The size of the F field is 1 bit. If the size of the MAC SDU or MAC control element is less than 128 
bytes, the UE shall set the value of the F field to 0, otherwise the UE shall set it to 1; 

E: The Extension field is a flag indicating if more fields are present in the MAC header or not. The E field is set 
to "1" to indicate another set of at least R/R/E/LCID fields. The E field is set to "0" to indicate that either a MAC 
SDU, a MAC control element or padding starts at the next byte; 

- R: Reserved bits, set to "0". 

The MAC header and sub-headers are octet aligned. 



Table 6.2.1-2: Values of LCID for UL-SCH 



Index 


LCID values 


00000 


CCCH 


00001-01010 


Identity of the logical channel 


01011-11001 


Reserved 


11010 


Power Headroom Report 


11011 


C-RNTI 


11100 


Truncated BSR 


11101 


Short BSR 


11110 


Long BSR 


11111 


Padding 



Table 6.2.1-3: Values of F field: 



Index 


Size of Length field (in bits) 





7 


1 


15 



Test description 
Pre-test conditions 



7.1.4.13.3 
7.1.4.13.3.1 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(2,0) is used for step 8 in 4.5.3A.3 according to [18]. 
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2 AM DRBs are configured with the parameters specified in table 7.1.4.13.3.1-1. 

Table 7.1.4.13.3.1-1: Logical Channel Configuration Settings 



Parameter 


DRB1 


DRB2 


LogicalChannel-ldentity 


3 


4 


Priority 


7 


6 


priorltlzedBltRate 


Okbs 


Okbs 


logicalChannelGroup 


2 


1 
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7.1.4.13.3.2 



Test procedure sequence 

Table 7.1 .4.13.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


The SS transmits a IVIAC PDU containing a 
MAC SDU of size 127 bytes (RLC SDU of size 
1 25 bytes + AIVID PDU header 2 bytes 
) with the Logical Channel ID field 'LCID' set to 
'00011', and 1 Byte Padding in the associated 
IVIAC SDU sub-header. 


<— 


MAC PDU (MAC sub-header ( 
LCID='00011'),AMDPDU) 






3 


The UE sends Scheduling Request 


— > 


(SR) 


- 


- 


4 


The SS transmits an uplink grant of size 1096 
bits. (Note 1) 


<~ 


(UL grant) 


- 


- 


5 


Check: does the UE transmit a IVIAC PDU with 
a IVIAC SDU sub-header with Logical Channel 
ID field 'LCID' set to '0001 1 ', Format field 'F' 
set to '0' and Length field 'L' set to '1 27'? 


-> 


MAC PDU (MAC sub-header ( 
LC1D='00011', F='0', L='127' 
bytes), AMD PDU) 


1 


P 


5a 


The SS transmits an RLC STATUS PDU to 
acknowledge correctly received data 


<- 


RLC STATUS PDU (ACK_SN=1) 


- 


- 


6 


The SS transmits a IVIAC PDU containing a 
MAC SDU of size 128 bytes (RLC SDU of 126 
bytes -1- AMD PDU header 2 bytes) with the 
Logical Channel ID field 'LCID' set to '0001 1 '. 


<~ 


MAC PDU (MAC sub-header 
(LCID='00011'), AMDPDU) 






7 


The UE send Scheduling Request 


— > 


(SR) 


- 


- 


8 


The SS transmits an uplink grant of size 1096 
bits. (Note 2) 


<~ 


(UL grant) 


- 


- 


9 


Check: Does the UE transmit a MAC PDU 
with a MAC SDU sub-header with Format field 
'F' set to '1 ' and Logical Channel ID field 'LCID' 
set to '00011'? 


~> 


MAC PDU (MAC sub-header 
(LCID='00011', F='1', L=128), 
AMD PDU) 


2 


P 


10 


The SS transmits an RLC STATUS PDU to 
acknowledge correctly received data 


<— 


RLC STATUS PDU (ACK_SN=2) 


- 


- 


11 


The SS transmits a MAC PDU containing two 
MAC SDUs, the first containing a 9 byte RLC 
SDU with LCID set to '0001 1 ' and the second 
containing s 6 byte RLC SDU with LCID set to 
'00100'. 


<- 


MAC PDU (MAC sub-header 
(E='1', LCID='00011', F='0', 
L='1 1 '), MAC sub-header (E='0', 
LCID='00100'), AMD PDU, AMD 
PDU) 






12 


The UE sends Scheduling Request 


— > 


(SR) 


- 


- 


13 


The SS transmits an uplink grant of size 176 
bits. (Note 3) 


<— 


(UL grant) 


- 


- 


14 


Check: Does the UE return a MAC PDU of 
length 176 bits containing two MAC sub- 
headers where the first MAC sub-header have 
the Expansion bit 'E' set to '1 ' and the second 
MAC sub-header has the Expansion bit 'E' set 
to '0' and no length field? (Note 5) 


-> 


MAC PDU (MAC sub-header 
(E='1', (LCID='00011', L='1)or 
(LCID='00100',L='8), MAC sub- 
header (E='0', no Length field 
present), AMD PDU, AMD PDU) 


3,4, 
5 


P 


15 


SS transmits an RLC STATUS PDU to 
acknowledge correctly received 
data(LCID='00011') 


<- 


RLC STATUS PDU (ACK_SN=3) 






16 


SS transmits an RLC STATUS PDU to 
acknowledge correctly received 
data(LCID='00100') 


<— 


RLC STATUS PDU (ACK_SN=1) 






17 


The SS transmits a MAC PDU containing two 
MAC SDUs, the first containing a 8 byte RLC 
SDU with LCID set to '0001 1 ' and the second 
containing a 7 byte RLC SDU with LCID set to 
'00100'. 


<— 


MAC PDU (MAC sub-header 
(E='1', LCID='00011', F='0', 
L='10'), MAC sub-header (E='0', 
LC1D='00100',), AMD PDU, AMD 
PDU) 






18 


The UE sends Scheduling Request 


— > 


(SR) 


- 


- 


19 


The SS transmits an uplink grant of size 256 
bits. (Note 4) 


<— 


(UL grant) 


- 


- 


20 


Check: Does the UE return a MAC PDU of 
length 224 bits containing four MAC sub- 
headers where the first three MAC sub-header 


-> 


MAC PDU (Long BSR MAC sub- 
header (E='1', LCID='11110', 
MAC sub-header (E='1', F='0'), 


3,4, 
6 


P 
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have the Expansion bit 'E' set to '1 ' and the 
last MAC sub-header has the Expansion bit 'E' 
set to '0' and the LCID field set to '1 1 1 1 1 '? 
(Note 5) 




MAC sub-header (E='1', F='0'), 
F='0'), padding MAC sub-header 
(E='0', LCID='11111'), Long BSR, 
AMD PDU, AMD PDU, padding) 






21 


SS transmits an RLC STATUS PDU to 
acknowledge correctly received 
data(LCID='00011') 


<- 


RLC STATUS PDU (ACK_SN=4) 






22 


SS transmits an RLC STATUS PDU to 
acknowledge correctly received 
data(LCID='00100') 


<- 


RLC STATUS PDU (ACK_SN=2) 






Note 1: UL grant of 1096 bits {Itbs=8, Nprb=8, TS 36.213 Table 7.1.7.2.1-1) is chosen to enable UE to transmit a 
IVIAC SDU of size 127 bytes in a MAC PDU (125 bytes RLC SDU size + 2 bytes AMD PDU header + 2 
bytes MAC header (7 bit LI) = 129 bytes = 1032 bits < 1096 bits. 

Note 2: UL grant of 1096 bits {Itbs=8, Nprb=8, TS 36.213 Table 7.1.7.2.1-1) is chosen to enable UE to transmit a 
MAC SDU of size 128 bytes in a MAC PDU (126 bytes RLC SDU size -i- 2 bytes AMD PDU header -i- 3 
bytes MAC header (15 bit LI) = 131 bytes = 1048 bits < 1096 bits. 

Note 3: UL grant of 176 bits (/rss=1 , Nprb=5, TS 36.213 Table 7.1 .7.2.1-1) is chosen to enable UE to transmit two 
MAC SDUs, one of size 1 1 and one of size 8 bytes, in a MAC PDU (9 bytes RLC SDU -i- 2 bytes AMD PDU 
header -i- 6 bytes RLC SDU +2 bytes AMD PDU header + 2 bytes MAC sub-header (7 bit LI) + one byte 
MAC sub-header (R/R/E/LCID) = 22 bytes = 176 bits) 

Note 4: UL grant of 256 bits (Itbs=Q, A/phs=3, TS 36.213 Table 7.1 .7.2.1-1) is chosen to enable UE to transmit two 
MAC SDUs of size 10 and 9 bytes in a MAC PDU (8 bytes RLC SDU -i- 2 bytes AMD PDU header -i- 7 
bytes RLC SDU-i- 2 bytes AMD PDU header) + 3 byte Long BSR-i-4 byte padding -i- one byte BSR header+ 
2x2 bytes MAC sub-header (7 bit LI) + one byte padding MAC sub-header (R/R/E/LCID) = 32bytes = 256 
bits) 

Note 5: MAC SDU for LCID 3 and 4 can come in any order 



7.1.4.13.3.3 

None. 

7.1.4.14 

7.1.4.14.1 
(1) 



Specific Message Contents 

Correct HARQ process handling / TTI bundling 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state with DRB established and TTI bundling configured } 
ensure that { 

when { UE receives an UL Grant with toggled NDI and has data available for transmission } 

then { UE transmits a new MAC PDU and non-adaptive retransmissions for 3 additional consecutive 
UL subframes } 



(2) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established, TTI bundling configured and having 
transmitted a MAC PDU less than maxHARQ-Tx times } 
ensure that { 

when { UE receives a NACK and no uplink grant is included for the next TTI corresponding to the 
bundled HARQ process } 

then { UE performs non-adaptive retransmissions of the MAC PDU for 4 consecutive UL subframes 



(3) 



with { UE in E-UTRA RRC_CONNECTED state with DRB established, TTI bundling configured and having 
transmitted a MAC PDU less than maxHARQ-Tx times } 
ensure that { 

when { UE receives an uplink grant on PDCCH for the next TTI corresponding to the HARQ process 
with old NDI, irrespective of ACK/NACK is received for previous (re) transmission } 

then { UE performs an adaptive retransmission of the MAC PDU with redundancy version as received 
on PDCCH in first UL subframe and non-adaptive retransmissions in 3 additional consecutive UL 
subframes } 
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(4) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established and having transmitted a MAC PDU less 
than maxHARQ-Tx times } 
ensure that { 

when { UE receives an ACK and no uplink grant is included for the next TTI corresponding to the 
HARQ process } 

then { UE does not retransmit the TTI Bundle } 

} 

7.1.4.14.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clause 5.4.2.1, 
5.4.2.2 & 7.5, TS 36.213 clause 8, 8.3, 8.6.1 & 9.1.2. 

[TS 36.321, clause 5.4.2.1] 

There is one HARQ entity at the UE, which maintains a number of parallel HARQ processes allowing transmissions to 
take place continuously while waiting for HARQ the feedback on the successful or unsuccessful reception of previous 
transmissions. 

The number of parallel HARQ processes is specified in [2], clause 8. 

At a given TTI, if an uplink grant is indicated for the TTI, the HARQ entity identifies the HARQ process for which a 
transmission should take place. It also routes the received HARQ feedback (ACK/NACK information), MCS and 
resource, relayed by the physical layer, to the appropriate HARQ process. 

When TTI bundling is configured, the parameter TT1_BUNDLE_S1ZE provides the number of TTls of a TTI bundle. 
TTI bundling operation relies on the HARQ entity for invoking the same HARQ process for each transmission that is 
part of the same bundle. Within a bundle HARQ retransmissions are non-adaptive and triggered without waiting for 
feedback from previous transmissions according to TT1_BUNDLE_S1ZE. The HARQ feedback of a bundle is only 
received for the last TTI of the bundle (i.e the TTI corresponding to TT1_BUNDLE_S1ZE), regardless of whether a 
transmission in that TTI takes place or not (e.g. when a measurement gap occurs). A retransmission of a TTI bundle is 
also a TTI bundle. 

For transmission of Msg3 during Random Access (see section 5.1.5) TTI bundling does not apply. 

For each TTI, the HARQ entity shall: 

identify the HARQ process associated with this TTI; 

if an uplink grant has been indicated for this TTI: 

if the received grant was not addressed to a Temporary C-RNTl on PDCCH and if the NDl provided in the 
associated HARQ information has been toggled compared to the value in the previous transmission of this 
HARQ process; or 

if the uplink grant was received on PDCCH for the C-RNTl and the HARQ buffer of the identified process is 
empty; or 

if the uplink grant was received in a Random Access Response: 

- if there is a MAC PDU in the Msg3 buffer and the uplink grant was received in a Random Access 
Response: 

- obtain the MAC PDU to transmit from the Msg3 buffer. 

else: 

obtain the MAC PDU to transmit from the "Multiplexing and assembly" entity; 

deliver the MAC PDU and the uplink grant and the HARQ information to the identified HARQ process; 

instruct the identified HARQ process to trigger a new transmission. 

else: 
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deliver the uplink grant and the HARQ information (redundancy version) to the identified HARQ 
process; 

instruct the identified HARQ process to generate an adaptive retransmission. 

else, if the HARQ buffer of the HARQ process corresponding to this TTI is not empty: 

instruct the identified HARQ process to generate a non-adaptive retransmission. 

When determining if NDI has been toggled compared to the value in the previous transmission UE shall ignore NDI 
received in all uplink grants on PDCCH for its Temporary C-RNTI. 

[TS 36.321, clause 5.4.2.2] 

Each HARQ process is associated with a HARQ buffer. 

Each HARQ process shall maintain a state variable CURRENT_TX_NB, which indicates the number of transmissions 
that have taken place for the MAC PDU currently in the buffer, and a state variable HARQ_FEEDBACK, which 
indicates the HARQ feedback for the MAC PDU currently in the buffer. When the HARQ process is established, 
CURRENT_TX_NB shall be initialized to 0. 

The sequence of redundancy versions is 0, 2, 3, 1. The variable CURRENT_IRV is an index into the sequence of 
redundancy versions. This variable is up-dated modulo 4. 

New transmissions are performed on the resource and with the MCS indicated on PDCCH or Random Access 
Response. Adaptive retransmissions are performed on the resource and, if provided, with the MCS indicated on 
PDCCH. Non-adaptive retransmission is performed on the same resource and with the same MCS as was used for the 
last made transmission attempt. 

The UE is configured with a Maximum number of HARQ transmissions and a Maximum number of Msg3 HARQ 
transmissions by RRC: maxHARQ-Tx and maxHARQ-MsgJTx respectively. For transmissions on all HARQ processes 
and all logical channels except for transmission of a MAC PDU stored in the Msg3 buffer, the maximum number of 
transmissions shall be set to maxHARQ-Tx. For transmission of a MAC PDU stored in the Msg3 buffer, the maximum 
number of transmissions shall be set to maxHARQ-MsgJTx. 

When the HARQ feedback is received for this TB, the HARQ process shall: 

- set HARQ_FEEDBACK to the received value. 

If the HARQ entity requests a new transmission, the HARQ process shall: 

- set CURRENT_TX_NB to 0; 

- set CURRENTJRV to 0; 

- store the MAC PDU in the associated HARQ buffer; 
store the uplink grant received from the HARQ entity; 

- set HARQ_FEEDBACK to NACK; 
generate a transmission as described below. 

If the HARQ entity requests a retransmission, the HARQ process shall: 

- increment CURRENT_TX_NB by 1 ; 

if the HARQ entity requests an adaptive retransmission: 

store the uplink grant received from the HARQ entity; 

set CURRENT_IRV to the index corresponding to the redundancy version value provided in the HARQ 
information; 

- set HARQ_FEEDBACK to NACK; 

generate a transmission as described below. 
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else if the HARQ entity requests a non-adaptive retransmission: 

- if HARQ_FEEDB ACK = NACK: 

generate a transmission as described below. 

NOTE 1: When receiving a HARQ ACK alone, the UE keeps the data in the HARQ buffer. 

NOTE 2: When no UL-SCH transmission can be made due to the occurrence of a measurement gap, no HARQ 
feedback can be received and a non-adaptive retransmission follows. 

To generate a transmission, the HARQ process shall: 

- if the MAC PDU was obtained from the Msg3 buffer; or 

if there is no measurement gap at the time of the transmission and, in case of retransmission, the retransmission 
does not collide with a transmission for a MAC PDU obtained from the Msg3 buffer in this TTI: 

instruct the physical layer to generate a transmission according to the stored uplink grant with the redundancy 
version corresponding to the CURRENT_IRV value; 

- increment CURRENTJRV by 1 ; 

if there is a measurement gap at the time of the HARQ feedback reception for this transmission and if the 
MAC PDU was not obtained from the Msg3 buffer: 

- set HARQ_FEEDB ACK to ACK at the time of the HARQ feedback reception for this transmission. 

After performing above actions, the HARQ process then shall: 

if CURRENT_TX_NB = maximum number of transmissions - 1 : 

- flush the HARQ buffer; 

[TS 36.321, clause 7.5] 

The parameter TTI_BUNDLE_SIZE is 4. 

[TS 36.213, clause 8] 

For FDD, there shall be 8 HARQ processes in the uplink for non-subframe bundling operation, i.e. normal HARQ 
operation, and 4 HARQ processes in the uplink for subframe bundling operation. The subframe bundling operation is 
configured by the parameter ttiBundling provided by higher layers. 

In case higher layers configure the use of subframe bundling for FDD and TDD, the subframe bundling operation is 
only applied to UL-SCH, such that four consecutive uplink subframes are used. 



For FDD and subframe bundling operation, the UE shall upon detection of a PDCCH with DCI format in subframe n 
intended for the UE, and/or a PHICH transmission in subframe n-5 intended for the UE, adjust the corresponding first 
PUSCH transmission in the bundle in subframe n+4 according to the PDCCH and PHICH information. 



For TDD UL/DL configurations 1 and 6 and subframe bundling operation, the UE shall upon detection of a PDCCH 
with DCI format in subframe n intended for the UE, and/or a PHICH transmission intended for the UE in subframe n-l 
with / given in Table 8-2a, adjust the corresponding first PUSCH transmission in the bundle in subframe n+k, with k 
given in Table 8-2, according to the PDCCH and PHICH information. 



Table 8-2: k\ot TDD configurations 0-6 



TDD UL/DL 
Configuration 



DL subframe number n 



0123456789 
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4 


6 








4 


6 








1 




6 






4 




6 






4 


2 








4 










4 




3 


4 
















4 


4 


4 


















4 


4 


5 


















4 




6 


7 


7 








7 


7 






5 


Table 8-2a: /for TDD configurations 0, 1 and 6 


TDD UL/DL 
Configuration 


DL subframe number n 





1 


2 


3 


4 


5 


6 


7 


8 


9 





9 


6 








9 


6 








1 




2 






3 




2 






3 


6 


5 


5 








6 


6 






8 



[TS 36.213, clause 8.3] 

For Frame Structure type 1, an ACK/NACK received on the PHICH assigned to a UE in subframe / is associated with 
the PUSCH transmission in subframe ;-4. 

For Frame Structure type 2 UL/DL configuration 1-6, an ACK/NACK received on the PHICH assigned to a UE in 
subframe / is associated with the PUSCH transmission in the subframe i-k as indicated by the following table 8.3-1. 



Table 8.3-1 k\or TDD configurations 0-6 



TDD UL/DL 
Configuration 


DL subframe number / 





1 


2 


3 


4 


5 


6 


7 


8 


9 





7 


4 








7 


4 








1 




4 






6 




4 






6 


2 








6 










6 




3 


6 
















6 


6 


4 


















6 


6 


5 


















6 




6 


6 


4 








7 


4 






6 



[TS 36.213, clause 8.6.1] 

ForO < /^cs - 28 , the modulation order ( 2„ ) is determined as follows: 

- If the parameter ttiBundling provided by higher layers is set to TRUE, then the resource allocation size is 
restricted to A^p^g < 3 and the modulation order is set to Q^ = 2 . 

[TS 36.213, clause 9.1.2] 

For scheduled PUSCH transmissions in subframe n, a UE shall determine the corresponding PHICH resource in 
subframe n+ kpfjjcn, where kp^jcH is always 4 for FDD and is given in table 9.1.2-1 for TDD. For subframe bundling 
operation, the corresponding PHICH resource is associated with the last subframe in the bundle. 

Table 9.1 .2-1 : kpHicH for TDD 



TDD UL/DL 
Configuration 


UL subframe index n 





1 


2 


3 


4 


5 


6 


7 


8 


9 









4 


7 


6 






4 


7 


6 


1 






4 


6 








4 


6 
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2 6 6 

3 6~~6~~6 

4 6~~6 

5 6 

6 4 6 6 4 7 



7.1.4.14.3 Test description 

7.1.4.14.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

No UL Grant is allocated; PUCCH is in synchronised state for sending Scheduling Requests. 
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7.1.4.14.3.2 



Test procedure sequence 

Table 7.1.4.14.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS Transmits a valid IVIAC PDU 
containing RLC PDU of size 312 bits on UM 
Bearer. 


<— 


MAC PDU 






2 


The UE transmits a Scheduling Request 


— > 


Scheduling Request 


- 


- 


3 


The SS allocates an UL Grant of 328 bits with 
NDI indicating new transmission (i.e. Nprb=3 
and lmcs=7)(Note 1) 


<- 


Uplink Grant 






4 


Check: Does the UE transmit a MAC PDU 
including one RLC SDU, with redundancy 
version 0, 'k' subframes after step 3? 


-> 


MAC PDU 


1 


P 


5 


Check: Does UE repeat non-adaptive 
retransmission of MAC PDU in step 4, for 3 
consecutive UL subframes with redundancy 
version 2, 3 and 1 respectively? 


-> 


MAC PDU 


1 


P 


6 


The SS transmits a NACK, 'kk' subframes after 
last transmission in step 5. 


<~ 


HARQ NACK 


- 


- 


7 


Check: Does the UE make non-adaptive 
retransmissions of the MAC PDU 'm' 
subframes after NACK in step 6, for 4 
consecutive UL subframes with redundancy 
version 0, 2, 3 and 1 respectively? 


-> 


MAC PDU 


2 


P 


8 


The SS transmits an ACK, 'kk' subframes after 
last transmission in step 7. 


<— 


HARQ ACK 


- 


- 


9 


The SS allocates an UL Grant with NDI 
indicating retransmission, start redundancy 
version =2[i.e. Nprb=3 and lmcs=30], '1' 
subframes after ACK in step 8. 


<- 


Uplink Grant 






10 


Check: Does the UE perform an adaptive 
retransmission of the MAC PDU 'k' subframes 
after grant in step 9, using redundancy version 
2? 


-> 


MAC PDU 


3 


P 


11 


Check: Does UE repeat non-adaptive 
retransmission of MAC PDU in step 10, for 3 
consecutive UL sub-frames with redundancy 
version 3, 1 and respectively? 


-> 


MAC PDU 


3 


P 


12 


The SS transmits an ACK, 'kk' subframes after 
last transmission in step 1 1 . 


<— 


HARQ ACK 


- 


- 


13 


Check: Does the UE make any 
retransmissions of the MAC PDU 'm' 
subframes after ACK in step 12, for 4 
consecutive UL subframes? 


~> 


MAC PDU 


4 


F 


Note 1 : In step3, for TDD, the subframe number of allocating UL grant should be selected from {'1 ', '4', '6', '9'} 

based on TDD default UL/DL configuration 1. 
Note 2: For FDD value of 'k', 'kk' is 4, T is 5 and 'm' is 9. 

For TDD UL/DL configuration 1, values of 'k', T, 'm' and 'kk' are given in table 7.1.4.14.3.2-2. 



Table 7.1.4.14.3.2-2: Values for parameter 'k', 'I', 'm' and 'kk' in Main behavior. 



Parameter 


DL sub-frame number n 





1 


2 


3 


4 


5 


6 


7 


8 


9 


k 




6 






4 




6 






4 


1 




3 






2 




3 






2 


m 




7 






8 




7 






8 


kk 






4 


6 








4 


6 
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7.1 .4.14.3.3 Specific message contents 

Table 7.1.4.14.3.3-1: MAC-MainConfig-RBC in RRCConnectionReconfiguration(preamb\e) 



Derivation Path: 36.508 table 4.8.2.1 .5-1 


Information Element 


Value/remark 


Comment 


Condition 


MAC-MainConfigRBC- ::= SEQUENCE { 








ul-SCH-Configuration SEQUENCE { 








maxHARQ-Tx 


n28 


Max value allowed 




periodicBSR-Timer 


sf20 


Default value 




retxBSR-Tlmer 


sf 1 280 


Default value 




tti Bundling 


TRUE 






} 








} 









7.1 .4.1 5 UE power headroom reporting / Periodic reporting 

7.1.4.15.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established, periodic power headroom reporting 
configured } 
ensure that { 

when { periodicPHR-Timer is configured in RRCConnectionReconf iguration procedre } 
then { UE transmits a MAC PDU contianing Power Headroom MAC Control Element } 



(2) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established, periodic power headroom reporting 
configured } 
ensure that { 

when { periodicPHR-Timer expires and UL resources allocated for new transmission } 
then { UE transmits a MAC PDU contianing Power Headroom MAC Control Element } 



(3) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established } 
ensure that { 

when { power headroom reporting is disabled } 

then { UE stops transmiting Power Headroom MAC Control Element 



7.1.4.15.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.321 clause 5.4.6 and 
6.1.3.6,36.331. 

[TS 36.321, clause 5.4.6] 

The Power Headroom reporting procedure is used to provide the serving eNB with information about the difference 
between the nominal UE maximum transmit power and the estimated power for UL-SCH transmission. The reporting 
period, delay and mapping of Power Headroom are defined in subclause 9. 1 .8 of 3GPP TS 36. 1 33 [9] . RRC controls 
Power Headroom reporting by configuring the two timers periodicPHR-Timer and prohibitPHR-Timer, and by 
signalling dl-PathlossChange which sets the change in measured downlink pathloss to trigger a PHR [8]. 

A Power Headroom Report (PHR) shall be triggered if any of the following events occur: 

the prohibitPHR-Timer expires or has expired and the path loss has changed more than dl-PathlossChange dB 
since the transmission of a PHR when UE has UL resources for new transmission; 

- periodicPHR-Timer expires; 

upon configuration and reconfiguration of the power headroom reporting functionality by upper layers [8], which 
is not used to disable the function. 
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If the UE has UL resources allocated for new transmission for this TTI: 

if it is the first UL resource allocated for a new transmission since the last MAC reset, start periodicPHR-Timer. 

if the Power Headroom reporting procedure determines that at least one PHR has been triggered since the last 
transmission of a PHR r this is the first time that a PHR is triggered, and; 

if the allocated UL resources can accommodate a PHR MAC control element plus its subheader as a result of 
logical channel prioritization: 

obtain the value of the power headroom from the physical layer; 

instruct the Multiplexing and Assembly procedure to generate and transmit a PHR MAC control element 
based on the value reported by the physical layer; 

start or restart periodicPHR-Timer, 

start or restart prohibitPHR-Timer; 

cancel all triggered PHR(s). 

[TS 36.321, clause 6.1.3.6] 

The Power Headroom MAC control element is identified by a MAC PDU sub header with LCID as specified in table 
6.2.1-2. It has a fixed size and consists of a single octet defined as follows (figure 6.1.3.6-1): 

R: reserved bit, set to "0"; 

Power Headroom(PH): this field indicates the power headroom level. The length of the field is 6 bits. The 
reported PH and the corresponding power headroom levels are shown in Table 6.1.3.6-1 below (the 
corresponding measured values in dB can be found in subclause 9.1.8.4 of [19]) 



Power Headroom 



Oct1 



Figure 6.1.3.6-1 : Power l-leadroom lUIAC control element 



Table 6.1.3.6-1 : Power Headroom levels for PHR 



PH 


Power Headroom Level 





POWER_HEADROOM_0 


1 


P0WER_HEADR00M_1 


2 


POWER HEADROOM 2 


3 


POWER HEADROOM 3 






60 


POWER HEADROOM 60 


61 


POWER HEADROOM 61 


62 


POWER HEADROOM 62 


63 


POWER HEADROOM 63 



7.1.4.15.3 
7.1.4.15.3.1 
System Simulator: 
- Cell 1 



Test description 
Pre-test conditions 
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UE: 

None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 
7.1.4.15.3.2 Test procedure sequence 

Table 7.1 .4.15.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits UL grant for the UE at every 
TTI for FDD and only at DL subframes for 
TDD. 


-> 








2 


The SS transmits an 

RRCConnectionReconfiguration message to 
provide Power Headroom parameters 


<- 








3 


Check: does the UE transmit a MAC PDU 
containing Power Headroom MAC Control 
Element? 


-> 


MAC PDU 


1 


P 


4 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of Power 
Headroom parameters. 


-> 








5 


Check: does the UE transmit a MAC PDU 
containing Power Headroom MAC Control 
Element 200ms after step 3? 


-> 


MAC PDU 


2 


P 


6 


The SS transmits an 

RRCConnectionReconfiguration message to 
disable Power Headroom reporting 


<— 








7 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the disabling of Power 
Headroom parameters 


-> 








8 


Check: for 2 seconds, does the UE transmit a 
MAC PDU containing Power Headroom MAC 
Control Element? 


-> 


MAC PDU 


3 


F 


Note: Steps 3 and 4 can happen in 2 MAC PDU's, or may be combined in one MAC PDU. 
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7.1.4.15.3.3 Specific message contents 

Table 7.1 .4.1 5.3.3-1: RRCConnectionReconfiguration (step 2, Table 7.1.4.15.3.2-1) 



Derivation path: 36.508 table 4.6.1-8 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








RadioResourceConfigDedicated SEQUENCE { 








mac-MainConfig CHOICE { 








explicitValue SEQUENCE { 








plir-Confign CHOICE { 








setup SEQUENCE { 








periodicPHR-Timer 


sf200 






prohibitPHR-Timer 


sf 1 0DD 






dl-PathlossChange 


infinity 






1 








1 








} 








} 








} 








1 








1 








} 








} 








Table 7.1.4.15.3.3-2: RRCConnectionReconfiguration (step 6, Table 7.1.4.15.3.2-1) 


Derivation path: 36.508 table 4.6.1-8 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








RadioResourceConfigDedicated SEQUENCE { 








mac-MainConfig CHOICE { 








explicitValue SEQUENCE { 








phr-Config CHOICE { 








release 


NULL 






1 








1 








} 








} 








} 








1 








1 








} 









7.1 .4.1 6 UE power headroom reporting / DL pathless change reporting 

7.1.4.16.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_Connected state with DRB established, Power headroom reporting for 
DL_PAthloss change configured } 
ensure that { 

when { the DL Pathloss changes and prohibitPHR-Timer is running } 

then { UE does not transmits a MAC PDU containing Power Headroom MAC Control Element } 
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(2) 

with { UE in E-UTRA RRC_Connected state with DRB established, Power headroom reporting for 
DL_PAthloss change configured } 
ensure that { 

when { prohibitPHR-Timer expires and power headroom report is triggered due to DL Pathloss change 

} 

then { UE transmits a MAC PDU containing Power Headroom MAC Control Element } 

} 

7.1.4.16.2 Conformance requirements 

References; The conformance requirements covered in the current TC are specified in: TS 36.321 clause 5.4.6 and 
6.1.3.6 

[TS 36.321, clause 5.4.6] 

The Power Headroom reporting procedure is used to provide the serving eNB with information about the difference 
between the nominal UE maximum transmit power and the estimated power for UL-SCH transmission. The reporting 
period, delay and mapping of Power Headroom are defined in subclause 9.1.8 of [9]. RRC controls Power Headroom 
reporting by configuring the two timers periodicPHR-Timer and prohibitPHR-Timer, and by signalling dl- 
PathlossChange which sets the change in measured downlink pathloss to trigger a PHR [8]. 

A Power Headroom Report (PHR) shall be triggered if any of the following events occur: 

- prohibitPHR-Timer expires or has expired and the path loss has changed more than dl-PathlossChange dB since 
the transmission of a PHR when UE has UL resources for new transmission; 

- periodicPHR-Timer expires; 

upon configuration or reconfiguration of the power headroom reporting functionality by upper layers [8], which 
is not used to disable the function. 



If the UE has UL resources allocated for new transmission for this TTl: 

if it is the first UL resource allocated for a new transmission since the last MAC reset, start periodicPHR-Timer, 

if the Power Headroom reporting procedure determines that at least one PHR has been triggered since the last 
transmission of a PHR or this is the first time that a PHR is triggered, and; 

if the allocated UL resources can accommodate a PHR MAC control element plus its subheader as a result of 
logical channel prioritization: 

obtain the value of the power headroom from the physical layer; 

instruct the Multiplexing and Assembly procedure to generate and transmit a PHR MAC control element 
based on the value reported by the physical layer; 

start or restart periodicPHR-Timer, 

start or restart prohibitPHR-Timer, 

cancel all triggered PHR(s). 

[TS 36.321, clause 6.1.3.6] 

The Power Headroom MAC control element is identified by a MAC PDU sub header with LCID as specified in table 
6.2.1-1. It has a fixed size and consists of a single octet defined as follows (figure 6.1.3.6-1): 

- R: reserved bit, set to "0"; 

Power Headroom (PH): this field indicates the power headroom level. The length of the field is 6 bits. The 
reported PH and the corresponding power headroom levels are shown in Table 6.1.3.6.1-1 below (the 
corresponding measured values in dB can be found in subclause 9.1.8.4 of [17]). 
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Power Headroom 



Oct1 



Figure 6.1.3.6-1 : Power Headroom lUIAC control element 



Table 6.1.3.6-1 : Power Headroom levels for PHR 



PH 


Power Headroom Level 





POWER_HEADROOM_0 


1 


P0WER_HEADR00M_1 


2 


POWER HEADROOM 2 


3 


POWER HEADROOM 3 






60 


POWER HEADROOM 60 


61 


POWER HEADROOM 61 


62 


POWER HEADROOM 62 


63 


POWER HEADROOM 63 



7.1.4.16.3 Test description 

7.1.4.16.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 
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7.1.4.16.3.2 



Test procedure sequence 

Table 7.1.4.16.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS is configured to transmit UL grant for UE at 
every TTI for FDD, and only at DL subframes 
for TDD. 










2 


SS transmits an 

RRCConnectionReconfiguration message to 
provide Power Headroom parameters 


<— 


RRCConnectionReconfiguration 






3 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of Power 
Headroom parameters. 


-> 








4 


Wait for T1 = 1 0% of prohibitPHR-Timer. 


- 


- 


- 


- 


5 


Reduce SS power level so as to cause a 
DL Pathless change at UE by 5dB. 


- 


- 


- 


- 


6 


Check : for 80% of prohibitPHR-Timer s\r\ce 
step 3, doesthe UE transmit a MAC PDU 
containing Power Headroom MAC Control 
Element? 


-> 


MAC PDU 


1 


F 


7 


Check: after prohibitPHR-Timer ai\er step 3, 
does the UE transmit a MAC PDU containing 
Power Headroom MAC Control Element? 


~> 


MAC PDU 


2 


P 


8 


Increase SS power level so as to cause a 
DL Pathless change at UE by 5dB. 


- 


- 


- 


- 


9 


Check : for 80% of prohibitPHR-Timer since 
step 7, does the UE transmit a MAC PDU 
containing Power Headroom MAC Control 
Element? 


-> 


MAC PDU 


1 


F 


10 


Check: after prohibitPHR-Timer a^\.er step 7, 
does the UE transmit a MAC PDU containing 
Power Headroom MAC Control Element? 


-> 


MAC PDU 


2 


P 


Note: Steps 3 in main behaviour and step 1 in parallel behaviour can happen in 2 MAC PDU's, or may be 
combined in one MAC PDU. 


Table 7.1.4.16.3.2-2: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE transmit a MAC PDU containing 
Power Headroom MAC Control Element. 


-> 


MAC PDU 


- 


- 
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7.1.4.16.3.3 Specific message contents 

Table 7.1. 4.16.3.3-1: RRCConnectionReconfiguration (step 2, Table 7.1.4.16.3.2-1) 



Derivation path: 36.508 table 4.6.1-8 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








RadioResourceConfigDedicated SEQUENCE { 








mac-MainConfig CHOICE { 








explicit SEQUENCE { 








phr-Configuration CHOICE { 








enable SEQUENCE { 








periodicPHR-Timer 


infinity 






prohibitPHR-Timer 


sf 1 000 






dl-PathlossChange 


dB3 






1 








1 








} 








} 








} 








1 








1 








} 








} 









7.1.5 

7.1.5.1 
7.1.5.1.1 
(1) 



Inter-TTI PUSCH hopping by uplink grant 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state and ' Hopping -mode' is set to ' InterSubFrame ' } 
ensure that { 

when { UE receives for a TTI an uplink grant with 'Hopping flag' set as 1, ' NuL_hop' bits indicating 
Type 1 PUSCH Hopping } 

then { UE transmits UL data on resource blocks as per type 1 PUSCH hopping} 



7.1.5.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.212 clause 
5.3.3.1.1 and 36.213 clause 8.4, 8.4.1 & 8.4,2. 

[TS 36.212, clause 5.3.3.1.1] 

DCI format is used for the scheduling of PUSCH. 

The following information is transmitted by means of the DCI format 0: 

- Flag for formatO/formatl A differentiation - 1 bit, where value indicates format and value 1 indicates format 1 A 

- Hopping flag - 1 bit as defined in section 8.4 of [3] 

- Resource block assignment and hopping resource allocation - | log 2 ( A'rb (^rb + 1) / 2) | bits 

- For PUSCH hopping: 

- NuL_hop MSB bits are used to obtain the value of n^^g (/) as indicated in subclause [8.4] of [3] 
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log2(A^RB (A^RB +l)/2) I - A'uL.hop I bits provide the resource allocation of the first slot in the UL 
subframe 
For non-hopping PUSCH: 



- |log2(A^RB (^RB +l)/2) I bits provide the resource allocation in the UL subframe as defined in section 

8.1 of [3] 

[TS 36.213, clause 8.4] 

The UE shall perform PUSCH frequency hopping if the single bit frequency hopping (FH) field in a corresponding 
PDCCH with DCI format is set to 1 otherwise no PUSCH frequency hopping is performed. 

A UE performing PUSCH frequency hopping shall determine its PUSCH resource allocation (RA) for the first slot of a 

subframe (SI) including the lowest index PRB ( w^^g (n) ) in subframe n from the resource allocation field in the latest 

PDCCH with DCI format for the same transport block. If there is no PDCCH for the same transport block, the UE 
shall determine its hopping type based on 

the hopping information in the most recent semi-persistent scheduling assignment PDCCH, when the initial 
PUSCH for the same transport block is semi-persistently scheduled or 

the random access response grant for the same transport block, when the PUSCH is initiated by the random 
access response grant. 

The resource allocation field in DCI format excludes either 1 or 2 bits used for hopping information as indicated by 
Table 8.4-1 below where the number of PUSCH resource blocks is defined as 



A^ 



PUSCH 
RB 



Kb - N"b - [Kb mod 2) Type 1 PUSCH hopping 



Kb 

K'.-N 



RB 



RB 



Type 2 N^, = 1 PUSCH hopping 
Type 2 N,b > 1 PUSCH hopping 



■,H0 



7 HO 



For type 1 and type 2 PUSCH hopping, N^^ = A^rb +1 if A'r^ is an odd number where N^^ defined in [3]. 

JVrb = ^RB iri other cases. The size of the resource allocation field in DCI format after excluding either 1 or 2 bits 

shall be J = I logj (A^rb (^rb + 1) / 2) | — A^^^ ^ , where Nuijiop = 1 or 2 bits. The number of contiguous RBs 



UL 



_hop 

that can be assigned to a type- 1 hopping user is limited to [2^ / A^Rg J ■ The number of contiguous RBs that can be 

assigned to a type -2 hopping user is limited to . L^"*^ / A^rb J' L^rb ^^sh\ , where the number of sub-bands 
A^jf, is given by higher layers. 

A UE performing PUSCH frequency hopping shall use one of two possible PUSCH frequency hopping types based on 
the hopping information. PUSCH hopping type 1 is described in section 8.4.1 and type 2 is described in section 8.4.2. 

Table 8.4-1 : Number of Hopping Bits NuL_hop vs. System Bandwidth 



System BW 

^^ RB 


#Hopping bits for 
2nd slot RA 

(NuL hop) 


6-49 


1 


50-110 


2 



The parameter Hopping-mode provided by higher layers determines if PUSCH frequency hopping is "inter-subframe" 
or "intra and inter-subframe". 

[TS 36.213, clause 8.4.1] 
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For PUSCH hopping type 1 the hopping bit or bits indicated in Table 8.4-1 determine n^^g (/) as defined in Table 8.4-2. 
The lowest index PRB ( ripl.^ ) of the T' slot RA in subframe / is defined as n^^^ (/) = n^^^ (?) -I- A'^j^g / 2 , where 
^PRB (') ~ ^^ START ' '^^'^ ^^START ^^ obtained from the uplink scheduling grant as in Section 8.4 and Section 8.1. 

The lowest index PRB ( Wp^^ (/) ) of the 2°'' slot RA in subframe / is defined as n^^^ (?) — Up^^g (l) + N^^ 1 2 . 

The set of physical resource blocks to be used for PUSCH transmission are ^crbs contiguously allocated resource 

blocks from PRB index n^^^ for the T' slot, and from PRB index rip^gii) for the 2"'^ slot, respectively, where ic^gs i^ 
obtained from the uplink scheduling grant as in Section 8.4 and Section 8.1. 

If the Hopping-mode is "inter-subframe", the T' slot RA is applied to even CURRENT_TX_NB, and the 2"** slot RA is 
apphed to odd CURRENT_TX_NB, where CURRENT_TX_NB is defined in [8]. 



[TS 36.213, clause 8.4.2] 



Table 8.4-2: PDCCH DCI Format Hopping Bit Definition 



System BW 

'^ RB 


Number of 
Hopping bits 


Information in 
hopping bits 


npRBii) 


6-49 


1 





IN PS /2J +npps(i) modNpp 

V J 


1 


Type 2 PUSCH Hopping 


50-110 


2 


00 


f f,, PUSCH 1 A , ~S\ r\\^^A M PUSCH 

IN PS /4J +nppp(i) modA'sB 
V J 


01 


f-kr"/4j+n^i.(oVodA^;r" 

V J 


10 


( f,,PUSCH /T , ~S1 /-x^^^j i,,PUSCH 

\NpB /2J +nppp(i) moANpB 

V J 


11 


Type 2 PUSCH Hopping 



7.1.5.1.3 Test description 

7.1.5.1.3.1 Pre-test conditions 

System Simulator 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
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7.1.5.1.3.2 



Test procedure sequence 

Table 7.1.5.1.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 




Exception: Steps 2 to 5 are executed as per 
table 7.1.5.1.3.3-2 










2 


SS transmits a MAC PDU including one RLC 
SOU'S 


<- 


MAC PDU 


- 


- 


3 


UE transmits a Scheduling Request 


^ 


(SR) 


- 


- 




Exception: Steps 4 and 5 are repeated such 
that UE sends data in 10([FDD)/4{TDD) 
consecutive UL TTI's. 










4 


SS transmits an UL Grant, allowing the UE to 
return 1 RLC SOU as received in step 2. 
Hopping flag' set as 1 , all bits in 'NuL_hop are 
set as per table 7.1 .5.3.3-2 for various 
execution runs 


<— 


(UL Grant (C-RNTI)) 






5 


Check: Does the UE transmit a MAC PDU 
corresponding to grant in step 4? 


- 


- 


1 


P 



Table 7.1.5.1.3.3-2: Bandwidth dependent parameters 



System BW 


Number of Hopping 
bits 


Execution Counter K 


Information in hopping 
bits 


5 MHz 


1 


1 





10/20 MHz 


2 


1 


00 


2 


01 


3 


10 



7.1.5.1.3.3 
None 

7.1.5.2 
7.1.5.2.1 
(1) 



Specific message contents. 

Predefined intra-TTI PUSCH hopping (N_sb=1) 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state, number of sub bands 'N-sb' is set to 1 and ^Hopping -mode' 
is set to ' intraAndlnterSubFrame ' } 
ensure that { 

when { UE receives for a TTI an uplink grant with 'Hopping flag' set as 1, 'WoLhop' bits all set to 
1 {Type 2 predefined hopping) } 

then { UE transmits data with predefined, intra-TTI PUSCH hopping} 



7.1.5.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.21 1 clause 5.3.4 , 
36.212 clause 5.3.3.1.1 and 36.213 clause 8.4, 8.4.2. 

[TS 36.211, clause 5.3.4] 

If uplink frequency-hopping with predefined hopping pattern is enabled, the set of physical resource blocks to be used 
for transmission in slot n^ is given by the scheduling grant together with a predefined pattern according to 
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«PRB («s ) = (« VRB + /hop ('•) • A^RB + ((a^rb " J" 2(« vRB mod N^s )) ' /„, (o)mod(Af^'j, • N,, ) 
f L"s /2j inter - subframe hopping 



Hj, intra and inter - subframe hopping 



N.^k=i 



J «PRb(«s) 



'VRB 



'VRB 



' VKB 

■kB°/ 



2 1 N,h>l 



where Hvrb i^ obtained from the scheduhng grant as described in Section 8.1 in [4]. The parameter /?msc/i- 
HoppingOjfset, N^^ , is provided by higher layers.. The size N^^ of each sub-band is given by, 



A^^ 



A^, 



UL 



•rb 
•rb "rb 



UVp"r - N^u - N^S mod 2 ]/N. 



sb 



A'sb=l 
A^sb>l 



where the number of sub-bands N^^, is given by higher layers. The function f^ (i) e {0,l} determines whether mirroring 
is used or not. The parameter Hopping-mode provided by higher layers determines if hopping is "inter-subframe" or 
"intra and inter-subframe". 

The hopping function f^^ (i) and the function f^^ (i) are given by 

ilO+9 

( A„. a - 1) + Z '^•(^) X 2'""""" ) mod A^,,, A^.^, = 2 



/hopO')^ 



f iU)+9 



(/wO'-D- 



\k=im+l 



Y,c(k)x 2*-<""+" mod(A^,, - 1) + 1) mod A^ ,, A',, > 2 



/„,(0 = 



/ mod 2 N^i, =1 and intra and inter - subframe hopping 

CURRENT _TX _NB mod 2 N ^^ = 1 and inter - subframe hopping 



c(/-10) 



N^h > 1 



where //,„„(~1) =0 and the pseudo-random sequence c{i) is given by section 7.2 and CURRENT_TX_NB indicates 
the transmission number for the transport block transmitted in slot n^ as defined in [8]. The pseudo-random sequence 
generator shall be initialised with C;^;^ = A'^j^" for FDD and Cj^j; = 2^ • (n^ mod 4) -I- N^q for TDD at the start of 
each frame. 

[TS 36.212, clause 5.3.3.1.1] 

DCI format is used for the scheduling of PUSCH. 
The following information is transmitted by means of the DCI format 0: 

- Flag for formatO/formatlA differentiation - 1 bit, where value indicates format and value 1 indicates format 1 A 

- Hopping flag - 1 bit as defined in section 8.4 of [3] 

- Resource block assignment and hopping resource allocation - | log 2 ( A^rb (A^rb + 1) / 2) | bits 

- For PUSCH hopping: 

- NuLjmp MSB bits are used to obtain the value of ripj^gii) as indicated in subclause [8.4] of [3] 
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log2(A^RB (A^RB +l)/2) I - A'uL.hop I bits provide the resource allocation of the first slot in the UL 
subframe 
For non-hopping PUSCH: 



- |log2(A^RB (^RB +l)/2) I bits provide the resource allocation in the UL subframe as defined in section 

8.1 of [3] 

[TS 36.213, clause 8.4] 

The UE shall perform PUSCH frequency hopping if the single bit frequency hopping (FH) field in a corresponding 
PDCCH with DCI format is set to 1 otherwise no PUSCH frequency hopping is performed. 

A UE performing PUSCH frequency hopping shall determine its PUSCH resource allocation (RA) for the first slot of a 

subframe (SI) including the lowest index PRB ( w^^g (n) ) in subframe n from the resource allocation field in the latest 

PDCCH with DCI format for the same transport block. If there is no PDCCH for the same transport block, the UE 
shall determine its hopping type based on 

the hopping information in the most recent semi-persistent scheduling assignment PDCCH, when the initial 
PUSCH for the same transport block is semi-persistently scheduled or 

the random access response grant for the same transport block, when the PUSCH is initiated by the random 
access response grant. 

The resource allocation field in DCI format excludes either 1 or 2 bits used for hopping information as indicated by 
Table 8.4-1 below where the number of PUSCH resource blocks is defined as 



A^ 



PUSCH 
RB 



Kb - N"b - [Kb mod 2) Type 1 PUSCH hopping 



Kb 

K'.-N 



RB 



RB 



Type 2 N^, = 1 PUSCH hopping 
Type 2 N,b > 1 PUSCH hopping 



■,H0 



7 HO 



For type 1 and type 2 PUSCH hopping, N^^ = A^rb +1 if A'r^ is an odd number where N^^ defined in [3]. 

JVrb = ^RB iri other cases. The size of the resource allocation field in DCI format after excluding either 1 or 2 bits 

shall be J = I logj (A^rb (^rb + 1) / 2) | — A^^^ ^ , where Nuijiop = 1 or 2 bits. The number of contiguous RBs 



UL 



_hop 

that can be assigned to a type- 1 hopping user is limited to [2^ / A^Rg J ■ The number of contiguous RBs that can be 

assigned to a type -2 hopping user is limited to . L^"*^ / A^rb J' L^rb ^^sh\ , where the number of sub-bands 
A^jf, is given by higher layers. 

A UE performing PUSCH frequency hopping shall use one of two possible PUSCH frequency hopping types based on 
the hopping information. PUSCH hopping type 1 is described in section 8.4.1 and type 2 is described in section 8.4.2. 

Table 8.4-1 : Number of Hopping Bits NuL_hop vs. System Bandwidth 



System BW 

^^ RB 


#Hopping bits for 
2nd slot RA 

(NuL hop) 


6-49 


1 


50-110 


2 



The parameter Hopping-mode provided by higher layers determines if PUSCH frequency hopping is "inter-subframe" 
or "intra and inter-subframe". 

[TS 36.213, clause 8.4.2] 
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In PUSCH hopping type 2 the set of physical resource blocks to be used for transmission in slot n^ is given by the 

scheduling grant together with a predefined pattern according to [3] section 5.3.4. If the system frame number is not 
acquired by the UE yet, the UE shall not transmit PUSCH with type-2 hopping and N^b>l for TDD, where Nsb is defined 
in [3]. 

Table 8.4-2: PDCCH DCI Format Hopping Bit Definition 



System BW 

^^ RB 


Number of 
Hopping bits 


Information In 
hopping bits 


npRB(i) 


6-49 


1 





fer"/2j+^^i,(/)lmodA^«T"^ 


1 


Type 2 PUSCH Hopping 


50 - 11 


2 


00 


V J 


01 


f-kr"/4j+n^i.(oVodA^;r" 

V y 


10 


1 ,,tPUSCH ,o , ~S1 /-n 1 . t^tPUSCH 

\Nrb /2J +npRB(0 modA^sB 

V / 


11 


Type 2 PUSCH Hopping 



7.1.5.2.3 Test description 

7.1.5.2.3.1 Pre-test conditions 
System Simulator 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

7.1 .5.2.3.2 Test procedure sequence 

Table 7.1.5.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


SS transmits a MAC PDU including 
10(FDD)/4(TDD) RLC SDU's 


<- 


MAC PDU 


- 


- 


3 


UE transmits a Scheduling Request 


— > 


(SR) 


- 


- 




Exception: Steps 4 and 5 are repeated such 
that UE sends data in 10([FDD)/4{TDD) 
consecutive UL TTI's. 










4 


SS transmits an UL Grant, allowing the UE to 
return 1 RLC SDU as received in step 2. 
Hopping flag' set as 1 , all bits in 'NuL_hop are 
set to 1 . 


<— 


(UL Grant (C-RNTI)) 






5 


Check: Does the UE transmit a MAC PDU 
corresponding to grant in step 4? 


-> 


MAC PDU 


1 


P 


Note 1 : steps 4 and 5 are repeated for 1 times corresponding to 1 sub frames for FDD and 4 for default TDD 

configuration 1 . 
Note 2: The grant allocated in step 4 is such that the loop back PDU is received in 10(FDD)/4(TDD) 
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7.1.5.2.3.3 



Specific message contents. 
Table 7.1 .5.2.3.3-1 : SystemlnformationBlockType2(preamble) 



Derivation Path: 36.508 Table 4.4.3.3-1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= 
SEQUENCE! 








radioResourceConfigCommon SEQUENCE {} 


RadioResourceCo 

nfigCommonSIB- 

DEFAULT-7152 






} 









Table 7.1.5.2.3.3-2: RadioResourceConfigCommonSIB-DEFAULT-7152(Table 7.1.5.2.3.3-1) 



Derivation Path: 36.508 Table 4.6.3-14 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigCommonSIB-DEFAULT-7152 
::= SEQUENCE! 








pusch-Config 


PUSCH-ConfigCommon- 
DEFAULT-7152 






} 









Table 7.1.5.2.3.3-3: PUSCH-ConfigCommon-DEFAULT-7152(Table 7.1.5.2.3.3-2) 



Derivation Path: 36.508 table 4.6.3-10 


Information Element 


Value/remark 


Comment 


Condition 


PUSCH-ConfigCommon-DEFAULT-7152::= 
SEQUENCE! 








pusch-ConfigBasic SEQUENCE { 








n-SB 


1 


Default value 




hopping Mode 


intraAndlnterSubFrame 






pusch-HoppingQffset 


See subclause 
4.6.8[36.5081 


Default value 




1 








} 









7.1.5.3 
7.1.5.3.1 
(1) 



Predefined intra-TTI PUSCH hopping (N_sb=2/3/4) 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state, number of sub bands 'N-sb' is set to 2/3/4 and ^Hopping- 
mode' is set to 'intraAndlnterSubFrame'} 
ensure that { 

when { UE receives for a TTI an uplink grant with 'Hopping flag' set as 1, 'Nm,_hop' bits all set to 
1 {Type 2 predefined hopping) } 

then { UE transmits data with predefined, inter-TTI PUSCH hopping} 



7.1.5.3.2 Conformance requirements 
Same Conformance requirements as in clause 7.1.5.2.2 

7.1.5.3.3 Test description 
7.1.5.3.3.1 Pre-test conditions 
System Simulator 

- Cell 1 
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UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode, Test Mode Activated (State 2A) according to [18]. 
7.1 .5.3.3.2 Test procedure sequence 

Table 7.1.5.3.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 




EXCEPTION: Step 1to 7 are repeated for 
execution counter k=1 to 3 










1 


The UE is brought to state Loopbacl< 
Activated (state 4) according to [18] 


- 


- 


- 


- 


2 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


3 


SS transmits a MAC PDU including a RLC 
SDU 


<- 


MAC PDU 


1 


- 


4 


UE transmits a Scheduling Request 


— > 


(SR) 


- 


- 


5 


SS transmits an UL Grant, allowing the UE to 
return the RLC SDU as received in step 2. 
Hopping flag' set as 1 , 'Nul hop is set to 1 . 


<— 


(UL Grant (C-RNTI)) 






6 


Check: Does the UE transmit a MAC PDU 
corresponding to grant in step 4? 


- 


- 


1 


P 


7 


The SS releases the RRC connection 


- 


- 


- 


- 



7.1.5.3.3.3 



Specific message contents. 
Table 7.1 .5.3.3.3-1 : SystemlnformationBlockType2(preamble) 



Derivation Path: 36.331 clause 6.3.1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= 
SEQUENCE { 








ac-Barringlnfo SEQUENCE {} 


Not present 






radioResourceConfigCommon SEQUENCE {} 


RadioResourceCo 

nfigCommonSIB- 

DEFAULT-7153 






} 









Table 7.1.5.3.3.3-2: RadioResourceConfigCommonSIB-DEFAULT-7153 



Derivation Path: 36.508 Table 4.6.3-14 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigCommonSIB-DEFAULT-7153 
::= SEQUENCE I 








pusch-Config 


PUSCH-ConfigCommon- 
DEFAULT-7153 






} 
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Table 7.1.5.3.3.3-3: PUSCH-ConfigCommon-DEFAULT-7153 



Derivation Path: 36.508 table 4.6.3-10 


Information Element 


Value/remark 


Comment 


Condition 


PUSCH-ConfjgCommon-DEFAULT-7153::= 
SEQUENCE! 








pusch-ConfigBasic SEQUENCE { 








n-SB 


2 




Execution 
counter k =1 


n-SB 


3 




Execution 
counter k =2 


n-SB 


4 




Execution 
counter k =3 


hopping IVIode 


intraAndlnterSubFrame 






pusch-HoppingOffset 


See subclause 4.6.8 


Default value 




enable64QAIVI 


FALSE 


Default value 




1 








} 









7.1.5.4 

7.1.5.4.1 
(1) 



Predefined inter-TTI PUSCH hopping (N_sb=1) 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state, number of sub bands 'N-sb' is set to 1 and ' Hopping-mode' 
is set to ' interSubFrame ' } 
ensure that { 

when { UE receives for a TTI an uplink grant with 'Hopping flag' set as 1, ' Nm,_hop' bits all set to 
1 {Type 2 predefined hopping) } 

then { UE transmits data with predefined, inter-TTI PUSCH hopping} 

} 
with { UE in E-UTRA RRC_CONNECTED state, number of sub bands 'N-sb' is set to 1, 'Hopping-mode' is 
set to 'interSubFrame' has transmitted a transport block with predefined, inter-TTI PUSCH hopping } 
ensure that { 

when { UE has to make a non adaptive retransmission) } 

then { UE transmits data with predefined, inter-TTI PUSCH hopping} 
} 

7.1.5.4.2 Conformance requirements 
Same Conformance requirements as in clause 7.1.5.2.2 

7.1.5.4.3 Test description 
7.1.5.4.3.1 Pre-test conditions 
Same Pre-test conditions as in clause 7.1.5.2.3.1 
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7.1.5.4.3.2 



Test procedure sequence 

Table 7.1.5.2.4.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


SS transmits a MAC PDU including a RLC 
SDU 


<— 


MAC PDU 


1 


- 


3 


UE transmits a Scheduling Request 


— > 


(SR) 


- 


- 


4 


SS transmits an UL Grant, allowing the UE to 
return the RLC SDU as received in step 2. 
Hopping flag' set as 1 , all bits in 'NuL_hop are 
set to 1 . 


<— 


(UL Grant (C-RNTI)) 






5 


Check: Does the UE transmit a MAC PDU 
corresponding to grant in step 4? 


- 


MAC PDU 


1 


P 


6 


The SS transmits a HARQ NACK 


<- 


HARQ NACK 


- 


- 


7 


Check: Does the UE transmit a MAC PDU 
corresponding to grant in step 4, for same 
HARQ process as in step 5? 


-> 


MAC PDU 


2 


P 


8 


The SS transmits a HARQ NACK 


<— 


HARQ NACK 


- 


- 


9 


Check: Does the UE transmit a MAC PDU 
corresponding to grant in step 4, for same 
HARQ process as in step 7? 


-> 


MAC PDU 


2 


P 


10 


The SS transmits a HARQ NACK 


<~ 


HARQ NACK 


- 


- 


11 


Check: Does the UE transmit a MAC PDU 
corresponding to grant in step 4, for same 
HARQ process as in step 9? 


~> 


MAC PDU 


2 


P 


12 


The SS transmits an HARQ ACK 


<- 


HARQ ACK 


- 


- 


Note: 4 HARQ transmissions is selected to be less than MaxHARD-Tx (=5) 



7.1.5.4.3.3 

None 

7.1.5.5 

7.1.5.5.1 

(1) 



Specific message contents. 

Predefined inter-TTI PUSCH hopping (N_sb=2/3/4) 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state, number of sub bands 'N-sb' is set to 2/3/4 and 'Hopping- 
mode' is set to ' interSubFrame' } 
ensure that | 



when { UE receives for a TTI an uplink grant with 'Hopping flag' set as 1, 'Nm 
set to 1 {Type 2 predefined hopping) } 

then { UE transmits data with predefined, inter-TTI PUSCH hopping} 



bits are all 



7.1.5.5.2 Conformance requirements 
Same Conformance requirements as in clause 7.1.5.2.2 

7.1.5.5.3 Test description 

7.1.5.5.3.1 Pre-test conditions 
Same Pre-test conditions as in clause 7.1.5.3.3.1 

7.1 .5.5.3.2 Test procedure sequence 
Same Test procedure sequence as in table 7.1.5.3.3.2-1 
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7.1.5.5.3.3 



Specific message contents. 
Table 7.1 .5.5.3.3-1 : SystemlnformationBlockType2(preamble) 



Derivation Patli: 36.331 clause 6.3.1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= 
SEQUENCE! 








ac-Barringlnfo SEQUENCE {} 


Not present 






radioResourceConfigCommon SEQUENCE {} 


RadioResourceCo 

nfigCommonSIB- 

DEFAULT-7155 






} 









Table 7.1.5.5.3.3-2: RadioResourceConfigCommonSIB-DEFAULT-7155 



Derivation Path: 36.508 Table 4.6.3-14 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigCommonSIB-DEFAULT-7155 
::= SEQUENCE! 








pusch-Config 


PUSCH-ConfigCommon- 
DEFAULT-7155 






} 









Table 7.1.5.5.3.3-3: PUSCH-ConfigCommon-DEFAULT-7155 



Derivation Path: 36.508 table 4.6.3-10 


Information Element 


Value/remark 


Comment 


Condition 


PUSCH-ConfigCommon-DEFAULT-7155::= 
SEQUENCE! 








pusch-ConfigBasic SEQUENCE { 








n-SB 


2 




Execution 
counter k =1 


n-SB 


3 




Execution 
counter k =2 


n-SB 


4 




Execution 
counter k =3 


hopping Mode 


interSubFrame 


Default value 




pusch-HoppingOffset 


See subclause 4.6.8 


Default value 




enable64QAM 


FALSE 


Default value 




1 








} 









7.1.6 DRX operation 

7.1 .6.1 DRX operation / Short cycle not configured / Parameters configured by RRC 

7.1.6.1.1 Test Purpose (IP) 

(1) 

with { UE in CONNECTED mode } 
ensure that { 

when { Long DRX cycle is configured and [ {SFN * 10) + subframe number] modulo {LongDRX-Cycle) = 
drxStartOffset } 

then { UE starts the OnDurationTimer and monitors the PDCCH for OnDurationTimer PDCCH-subf rames 



(2) 

with { UE in CONNECTED mode } 
ensure that { 

when { Long DRX cycle is configured and a new DL transmission is indicated on the PDCCH during 
Active Time | 
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then { UE starts or restarts the Drx-InactivityTimer and monitors the PDCCH for Drx- 
InactivityTimer PDCCH sub- frames starting from the next PDCCH sub- frame of the PDCCH sub- frame where 
the DL new transmission was indicated | 



(3) 

with { UE in CONNECTED mode } 
ensure that { 

when { Long DRX cycle is configured and if a HARQ RTT Timer expires in this subframe and the data 
in the soft buffer of the corresponding HARQ process was not successfully decoded } 

then { UE starts the drx-RetransmissionTimer for the corresponding HARQ process and monitors the 
PDCCH for drx-RetransmissionTimer consecutive PDCCH- subframes } 



(4) 

with { UE in CONNECTED mode } 
ensure that { 

when { Long DRX cycle is configured and an uplink grant for a pending HARQ retransmission can 
occur in this subframe } 

then { UE monitors the PDCCH in this subframe } 



7.1.6.1.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clauses 3.1 and 5.7. 

[TS 36.321, clause 3.1] 

Active Time: Time related to DRX operation, as defined in subclause 5.7, during which the UE monitors the PDCCH 
in PDCCH-subframes. 



DRX Cycle: Specifies the periodic repetition of the On Duration followed by a possible period of inactivity (see figure 
3.1-1 below). 



UE shall monitor 
PDCCH' 



-On Duration-^* Opportunity for DRX ►■ 



-DRX Cycle- 



Figure 3.1-1 : DRX Cycle 



drx-InactivityTimer: Specifies the number of consecutive PDCCH-subframe(s) after successfully decoding a PDCCH 
indicating an initial UL or DL user data transmission for this UE. 

drx-RetransmissionTimer: Specifies the maximum number of consecutive PDCCH-subframe(s) for as soon as a DL 
retransmission is expected by the UE. 

drxShortCycleTimer: Specifies the number of consecutive subframe(s)the UE shall follow the short DRX cycle. 

drxStartOffset: Specifies the subframe where the DRX Cycle starts. 



HARQ RTT Timer: This parameter specifies the minimum amount of subframe(s) before a DL HARQ retransmission 
is expected by the UE. 
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onDurationTimer: Specifies the number of consecutive PDCCH-subframe(s) at the beginning of a DRX Cycle. 

PDCCH-subframe: For FDD UE operation, this represents any subframe; for TDD, only downlink subframes and 
subframes including DwPTS. 

[TS 36.321, clause 5.7] 

The UE may be configured by RRC with a DRX functionality that controls the UE's PDCCH monitoring activity for 
the UE's C-RNTI, TPC-PUCCH-RNTI, TPC-PUSCH-RNTI and Semi-Persistent Scheduling C-RNTI (if configured). 
When in RRC_CONNECTED, if DRX is configured, the UE is allowed to monitor the PDCCH discontinuously using 
the DRX operation specified in this subclause; otherwise the UE monitors the PDCCH continuously. When using DRX 
operation, the UE shall also monitor PDCCH according to requirements found in other subclauses of this specification. 
RRC controls DRX operation by configuring the timers onDurationTimer, drx-InactivityTimer, drx- 
RetransmissionTimer (one per DL HARQ process except for the broadcast process), the longDRX-Cycle, the value of 
the drxStartOjfset and optionally the drxShortCycleTimer and shortDRX-Cycle. A HARQ RTT timer per DL HARQ 
process (except for the broadcast process) is also defined (see subclause 7.7). 

When a DRX cycle is configured, the Active Time includes the time while: 

onDurationTimer or drx-InactivityTimer or drx-RetransmissionTimer or mac-ContentionResolutionTimer (as 
described in subclause 5.1.5) is running; or 

a Scheduling Request sent on PUCCH is pending (as described in subclause 5.4.4); or 

an uplink grant for a pending HARQ retransmission can occur and there is data in the corresponding HARQ 
buffer; or 

a PDCCH indicating a new transmission addressed to the C-RNTI of the UE has not been received after 
successful reception of a Random Access Response for the explicitely signaled preamble (as described in 
subclause 5.1.4). 

When DRX is configured, the UE shall for each subframe: 

If the Short DRX Cycle is used and [(SEN * 10) + subframe number] modulo (shortDRX-Cycle) = 
{drxStartOjfset) modulo (shortDRX-Cycle); or 

if the Long DRX Cycle is used and [(SEN * 10) + subframe number] modulo {LongDRX-Cycle) = 
drxStartOjfset: 

start onDurationTimer. 

if a HARQ RTT Timer expires in this subframe and the data in the soft buffer of the corresponding HARQ 
process was not successfully decoded: 

start the drx-RetransmissionTimer for the corresponding HARQ process, 
if a DRX Command MAC control element is received: 

stop onDurationTimer; 

stop drx-InactivityTimer. 
if drx-InactivityTimer expires or a DRX Command MAC control element is received in this subframe: 

if the short DRX cycle is configured: 
start or restart drxShortCycleTimer; 

- use the Short DRX Cycle. 

else: 

use the Long DRX cycle. 
if drxShortCycleTimer expires in this subframe: 
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use the long DRX cycle. 

during the Active Time, for a PDCCH-subframe if the subframe is not required for uplink transmission for half- 
duplex FDD UE operation and if the subframe is not part of a configured measurement gap: 

- monitor the PDCCH; 

if the PDCCH indicates a DL transmission or if a DL assignment has been configured for this subframe: 

start the HARQ RTT Timer for the corresponding HARQ process; 

stop the drx-RetransmissionTimer for the corresponding HARQ process, 
if the PDCCH indicates a new transmission (DL or UL): 

start or restart drx-InactivityTimer. 

- when not in Active Time, CQI/PMI/RI on PUCCH and SRS shall not be reported. 

Regardless of whether the UE is monitoring PDCCH or not the UE receives and transmits HARQ feedback when such 
is expected. 

NOTE: A UE may optionally choose to not send CQI/PMI/RI reports on PUCCH and/or SRS transmissions for 
up to 4 subframes following a PDCCH indicating a new transmission (UL or DL) received in the last 
subframe of active time. The choice not to send CQI/PMI/RI reports on PUCCH and/or SRS 
transmissions is not applicable for subframes where onDurationTimer is running. 

7.1.6.1.3 Test description 

7.1.6.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 

UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] configured to return no data in UL with the 
exceptions as listed in Table 7.1.6.1.3.3-1. 

7.1 .6.1 .3.2 Test procedure sequence 

For FDD, NormalSF(cunent SFN,current subframe number,y)=y; For TDD, NormalSF{cunent SFN,current subframe 
number, y) counts the minimum number of normal subframes needed to cover y number of PDCCH-subframes until 
next PDCCH-subframe available, starting from current subframe number on current SEN. For example at step 1, 
drxStartOjfset can point to UL or DL subframe for TDD. If it points to a UL subframe, NormalSF(cunent SFN,current 
subframe number,0) counts the number of normal subframes until reach the first DL/special subframe available. If 
drxStartOjfset points to a DL subframe, NormalSFicwnent SFN,current subframe number,0)=0. 

For example at step 13, assuming drxStartOjfset points to subframe number at frame number A, NormalSF(A, 0, 
onDurationTimer-2) is first added, which counts 18 PDCCH-subframes/30 normal subframes in this case. The current 
subframe becomes subframe number at frame number Ah-3. Secondly, HARQ RTT timer is added, which is 11 normal 
subframes. The current subframe becomes subframe number 1 at frame number Ah-4. To further add in NormalSF(A+4, 
1, drx-RetransmissionTimer-1), which is to counts 5 PDCCH-subframes/9 normal subframes, the current subframe is 
subframe number at frame number Ah-5. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



314 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 7.1.6.1.3.2-1: Main Behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


In the first PDCCH sub frame when the 
OnDurationlimer is running, the SS indicates 
the transmission of a DL IVIAC PDU on the 
PDCCH. 

i.e., on the subframe with the subframe 
number = [csfn1 + NormalSF(SFW , csfn1 , 0)] 
modulo 10, and system frame number = SFN1 
+ floor([csfn1 + NormalSF(SFW , csfn1 , 
0)]/10); where [(SFN1 * 10) + csfn1] modulo 
(LongDRX-Cycle) = drxStartOffset 


<- 


MAC PDU 






2 


Check: Does the UE transmit a HARQ ACK for 
the DL MAC PDU in Step 1? 


-> 


HARQ ACK 


1 


P 


3 


At least drx-lnactivitylimer PDCCH-sub 
frames after the transmission of the IVIAC PDU 
in Step 1 has been indicated(This means the 
next DRX cycle or later after Step 1 ) in the last 
PDCCH sub frame while the onDurationTimer 
is still runnin, the SS indicates the transmission 
a DL MAC PDU on the PDDCH. (Note 4). 

i.e., on the subframe with the subframe 
number = [csfn2 + 

/Vof/na/SF(SFN2,csfn2,onDurationTimer-1)] 
modulo 10, and system frame number = SFN2 
+ floor([csfn2 + 

A/or/na/SF(SFN2,csfn2,onDurationTimer- 
1)]/10); where [(SFN2 * 10) + csfn2] modulo 
(LongDRX-Cycle) = drxStartOffset 


<- 


MAC PDU 






4 


Check: Does the UE transmit a HARQ ACK for 
the DL MAC PDU in Step 3? 


-> 


HARQ ACK 


1 


P 


5 


drx-lnactivitylimer PDCCH-subframes after 
the transmission of the MAC PDU transmitted 
in step 3 was indicated on the PDCCH, the SS 
indicates the transmission of a DL MAC PDU 
on the PDCCH. (Note 4) 

i.e. on the subframe with the subframe number 
= [csfn2 -1- 

A/or/na/SF(SFN2,csfn2,onDurationTimer -i- drx- 
lnactivityTimer-1)] modulo 10, and system 
frame number = SFN2 -i- floor([csfn2 -i- 
A/of/na/SF(SFN2,csfn2,onDurationTimer+drx- 
lnactivityTimer-1 )]/1 0) 


<— 


MAC PDU 






6 


Check: Does the UE transmit a HARQ ACK for 
the DL MAC PDU in Step 5? 


-> 


HARQ ACK 


2 


P 


7 


At least drx-lnactivitylimer PDCCH sub frames 
after the transmission of the MAC PDU in Step 
5 has been indicated (This means the next 
DRX cycle or later after Step 3) and 1 PDCCH 
sub-frame before the QnDurationTimer 
expires, the SS indicates the transmission of a 
DL MAC PDU on the PDDCH. The DL MAC 
PDU transmitted is invalid. (Note 1, Note 4) 

i.e., on the subframe with the subframe 
number = [csfn3 -i- A/of/na/SF(SFN3, csfnS, 
onDurationTimer-2)] mod 10, and system 
frame number = SFN3 -i- floor([csfn3 -i- 
NormalSF{SFN3, csfnS, onDurationTimer- 
2)]/10); where [(SFN3 * 10) + csfn3] modulo 
(LongDRX-Cycle) = drxStartQffset 


<— 


Invalid MAC PDU 
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8 


Check: Does the UE transmit a HARQ NACK 
for the DL MAC PDU in Step 7? 


-> 


HARQ NACK 


1 


P 


9 


In the first PDCCH sub frame when the Drx- 
RetransmissionTimer for the IVIAC PDU in Step 
7 is started, the SS indicates the transmission 
of a DL MAC PDU on the PDCCH. 

i.e., on the subframe with the subframe 
number = [csfn4 + NormalSF(SFm, csfn4, 0)] 
modulo 10, and system frame number = SFN4 
+ floor([csfn4 + NormalSF(SFN4, csfn4, 
0)]/10); where csfn4 = [csfnS + 
NormalSF{SFN3, csfn3, onDurationTimer- 
2)+HARQ RTT timer] modulo 10 and 
SFN4=SFN3+floor([csfn3 + A/orma/SF(S FN3, 
csfn3, onDurationTimer-2)+HARQ RTT 
timer]/10) 

For TDD the HARQ RTT timer is the HARQ 
RTT timer for the DL transmission in Step 7. 


<- 


MAC PDU 






10 


Check: Does the UE transmit a HARQ ACK for 
the DL MAC PDU in Step 9? 


-> 


HARQ ACK 


3 


P 


11 


At least drx-lnactivityTimer PDCCH sub frames 
after the transmission of the DL MAC PDU in 
Step 9 has been indicated (This means the 
next DRX cycle or later after Step 9) and 1 
PDCCH sub-frame before the 
QnDurationTimer expires, the SS indicates the 
transmission of DL MAC PDU on the PDCCH. 
The DL MAC PDU transmitted is invalid(Note 
1 , Note 4) 

i.e., on the subframe with the subframe 
number = [csfnS + NormalSF{SFN5, csfnS, 
onDurationTimer-2)] modulo 10 and system 
frame number=SFN5-i-floor([csfn5 + 
NormalSF(SfN5, csfnS, onDurationTimer- 
2)]/10) ; where [(SFN5 * 10) + csfnS] modulo 
(LongDRX-Cycle) = drxStartQffset 


<— 


Invalid MAC PDU 






12 


Check: Does the UE transmit a HARQ NACK 
for the DL MAC PDU in Step 1 1 ? 


-> 


HARQ NACK 


1 


P 


13 


In the last PDCCH sub frame when the drx- 
RetransmissionTimer for MAC PDU in Step 1 1 
is still running, the SS indicates the 
transmission of a DL MAC PDU on the 
PDCCH. 

i.e. on the subframe with subframe number = 
[csfn6 + A/of/na/SF(SFN6,csfn6,drx- 
RetransmissionTimer-1)] modulo 10 and the 
system frame number=SFN6+floor([csfn6 + 
A/0A-/na/SF(SFN6,csfn6,drx- 
RetransmissionTimer -1 )]/1 0); where the csfn6 
= [csfnS + A/orma/SF(SFN5, csfnS, 
onDurationTimer-2)+HARQ RTT timer] modulo 
10 and SFN6=SFN5+floor([csfn5 + 
NormalSF(SfN5, csfnS, onDurationTimer- 
2)+HARQRTTtimer]/10); 

For TDD the HARQ RTT timer is the HARQ 
RTT timer for the DL transmission in Step 1 1 . 


<— 


MAC PDU 






14 


Check: Does the UE transmit a HARQ ACK for 
the DL MAC PDU in Step 13? 


~> 


HARQ ACK 


3 


P 


15 


At least drx-lnactivityTimer PDCCH sub frames 
after the transmission of the DL MAC PDU in 
Step 13 has been indicated in the last sub- 
frame when the onDuratiopnTimer is still 


<- 


UL grant on PDCCH 
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running (This means the next DRX cycle or 
later after Step 7), the SS indicates an UL 
grant to the UE on the PDCCH. (Note 4) 

i.e., on the subframe with the subframe 
number = [csfn7 -i- NormalSF{SFN7 , csfn7, 
onDurationTimer-1)] modulo 10 and system 
frame number=SFN7 -i- floor([csfn7 -i- 
NormalSF(SfN7 , csfn7, onDurationTimer- 
1)]/10); where [(SFN7 * 10) -h csfn7] modulo 
(LongDRX-Cycle) = drxStartOffset 










16 


Check: Does the UE transmit a Buffer Status 
Report on the UL indicating an empty buffer? 


-> 


Buffer Status Report MAC control 
element 


- 


- 


17 


X sub frames after the sub frame in which the 
UL grant was indicated on the PDCCH for the 
UL MAC PDU sent in the previous step the SS 
indicates the transmission of a DL MAC PDU 
on the PDCCH. 

X is the number of sub frames required to do a 
retransmission oftlie UL MAC PDU 
transmitted in tlie previous Step maxlHARQ-Tx 
-1 times (for FDD this is 8x maxHARQ-Tx sub 
frames, for TDD this is lOx maxl-IARQ-Tx sub 
frames considering the default configuration 
1.). 


<~ 


MAC PDU 






18 


Check: Does the UE transmit a HARQ ACK for 
the DL MAC PDU in Step 17? 


-> 


HARQ ACK 


4 


P 


Note 1 : Invalid MAC PDU is a IVIAC PDU that fails the CRC check. 

Note 2: All the DL MAC PDU are transmitted with the NDI set on the PDCCH. 

Note 3: Timer tolerances for the MAC DRX related timers measured in subframes or PDCCH subframes is 0. These 

timers are: drx-lnactivityTimer, drx-RetransmissionTimer, HARQ RTT Timer. 
Note 4: The drx-lnactivityTimer is started in the next PDCCH sub-frame of the PDCCH sub-frame where DL new 

transmission is indicated. 



7.1 .6.1 .3.3 Specific message contents 

Table 7.1.6.1.3.3-1 : specific Parameters in RRCConnectionReconfiguration in the preamble 



Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


MAC-MainConfig-RBC ::= SEQUENCE { 








ul-SCH-Config SEQUENCE { 








maxHARQ-Tx 


n5 






retxBSR-Timer 


sf 1 0240 






ttlBundling 


FALSE 






} 








drx-Config CHQICE { 








setup SEQUENCE { 








onDurationTimer 


psf20 






drx-lnactivityTimer 


psf6 






drx-RetransmissionTimer 


psf6 






longDRX-CycleStartQffset CHQICE { 








sf640 


1 






1 








shortDRX 


Not present 






} 








} 








timeAlignmentTimerDedicated 


infinity 






phr-Config CHQICE { 








release 


NULL 






} 








} 
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7.1 .6.2 DRX Operation / Short cycle not configured / DRX command MAC control 

element reception 

7.1.6.2.1 Test Purpose (TP) 

(1) 

with { UE in CONNECTED mode } 
ensure that { 

when { long DRX cycle is configured and a DRX Command MAC control element is received } 
then { UE successfully decodes the MAC control PDU } 
} 

(2) 

with { UE in CONNECTED mode } 
ensure that { 

when { long DRX cycle is configured and the HARQ RTT Timer is running and a DRX Command MAC 
control element is received } 

then { UE continues running the HARQ RTT timer } 



(3) 

with { UE in CONNECTED mode } 
ensure that { 

when { long DRX cycle is configured and the drx-RetransmissionTimer is running and a DRX Command 
MAC control element is received } 

then { UE continues running the drx-RetransmissionTimer and monitors the PDCCH } 



7.1.6.2.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.321, clauses 3.1 and 5.7. 

[TS 36.321, clause 3.1] 

Active Time: Time related to DRX operation, as defined in subclause 5.7, during which the UE monitors the PDCCH 
in PDCCH-subframes. 



DRX Cycle: Specifies the periodic repetition of the On Duration followed by a possible period of inactivity (see figure 
3.1-1 below). 



UE shall monitor 
PDCCH' 



-On Duration-*-* Opportunity for DRX ► 



-DRX Cycle- 



Figure 3.1-1 : DRX Cycle 



drx-InactivityTimer: Specifies the number of consecutive PDCCH-subframe(s) after successfully decoding a PDCCH 
indicating an initial UL or DL user data transmission for this UE. 

drx-RetransmissionTimer: Specifies the maximum number of consecutive PDCCH-subframe(s) for as soon as a DL 
retransmission is expected by the UE. 

drxShortCycleTimer: Specifies the number of consecutive subframe(s)the UE shall follow the short DRX cycle. 
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drxStartOffset: Specifies the subframe where the DRX Cycle starts. 



HARQ RTT Timer: This parameter specifies the minimum amount of subframe(s) before a DL HARQ retransmission 
is expected by the UE. 



onDurationTimer: Specifies the number of consecutive PDCCH-subframe(s) at the beginning of a DRX Cycle. 

PDCCH-subframe: For FDD UE operation, this represents any subframe; for TDD, only downlink subframes and 
subframes including DwPTS. 

[TS 36.321, clause 5.7] 

if a HARQ RTT Timer expires in this subframe and the data in the soft buffer of the corresponding HARQ 
process was not successfully decoded: 

start the drx-RetransmissioiiTimer for the corresponding HARQ process, 
if a DRX Command MAC control element is received: 

stop onDurationTimer; 

stop drx-InactivityTimer. 
if drx-InactivityTimer expires or a DRX Command MAC control element is received in this subframe: 

if the short DRX cycle is configured: 
start or restart drxShortCycleTimer; 

- use the Short DRX Cycle. 

else: 

use the Long DRX cycle. 
if drxShortCycleTimer expires in this subframe: 

use the long DRX cycle. 

during the Active Time, for a PDCCH-subframe except if the subframe is required for uplink transmission for 
half-duplex FDD UE operation and except if the subframe is part of a configured measurement gap: 

- monitor the PDCCH; 

if the PDCCH indicates a DL transmission or if a DL assignment has been configured for this subframe: 

start the HARQ RTT Timer for the corresponding HARQ process; 

stop the drx-RetransmissionTimer for the corresponding HARQ process. 

if the PDCCH indicates a new transmission (DL or UL): 

start or restart drx-InactivityTimer. 

- when not in Active Time, CQI/PMI/RI on PUCCH and SRS shall not be reported. 

Regardless of whether the UE is monitoring PDCCH or not the UE receives and transmits HARQ feedback when such 
is expected. 
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7.1.6.2.3 Test description 

7.1.6.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 

UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] configured to return no data in UL with the 
exceptions as listed in Table 7.1.6.2.3.3-1. 

7.1 .6.2.3.2 Test procedure sequence 

The definition of Normals F(cunent SFN,current subframe number,y) can be found in clause 7.1.6.1.3.2. 
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Table 7.1.6.2.3.2-1: Main Behavior 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


In a PDCCH sub frame which is X PDCCH sub 
frames before the PDCCH sub-frame in which 
the onDurationTimer expires, 
with drx-lnactivityTimer< X < the number of 
PDCCH subframes encapsulated by HARQ 
RTT timer, the SS indicates the transmission 
of a DL MAC PDU on the PDCCH. The SS 
transmits an invalid MAC PDU. (Note 1) 

i.e., on the subframe with the subframe 
number csfn2 = [csfn1 +A/orma/SF(SFN1 , 
csfn1, onDurationTimer-1-X)] modulo 10, and 
the system frame number SFN2 = 
SFN1+floor([csfn1+A/orma/SF(SFN1,csfn1, 
onDurationTimer-1-X)]/10); and [(SFN1 * 10) + 
csfnl] modulo (Long DRX Cycle) = 
drxStartOffset. 


<- 


MAC PDU 






2 


Check: Does the UE transmit a HARQ NACK 
for the DL MAC PDU in Step 1? 


-> 


HARQ NACK 


1 


P 


3 


In a PDCCH sub frames before the 
onDurationTimer expires, the SS indicates the 
transmission of a DL MAC PDU on the 
PDCCH. The SS transmits a DL MAC PDU 
with DRX MAC Control element. 
UE successfully decodes the MAC PDU. 

i.e., on the subframe with the subframe 
number csfnS = [csfnl +A/orma/SF(SFN1 , 
csfnl, onDurationTimer-1-X+Y)] modulo 10, 
and the system frame number SFN3 = 
SFN1+floor([csfn1+A/orma/SF(SFN1, csfnl, 
onDurationTimer-1-X+Y)]/10); and 0<Y<X) 


<— 


MAC PDU(DRX MAC Control 
element) 






4 


Check: Does the UE transmit a HARQ ACK for 
the DL MAC PDU in Step 3? 


-> 


HARQ ACK 


1 


P 


5 


In the PDCCH sub frame when the drx- 
RetransmissionTimer for the MAC PDU 
indicated in Step 1 on the PDCCH is started 
the SS indicates the transmission of a DL MAC 
PDU. The SS transmits an invalid MAC 
PDU. (Note 1) 

i.e., on the subframe with the subframe 
number csfn5 = [csfn4+A/orma/SF(SFN4, 
csfn4, 0)] modulo 10, and the system frame 
number SFN5 = 

SFN4+floor([csfn4+A/orma/SF(SFN4, csfn4, 
0)]/10); where csfn4 = [csfn2+HARQ RTT 
Timer] modulo 10, and the SFN4 = 
SFN2+floor([csfn2+HARQRTTTimer]/10); 

For TDD the HARQ RTT timer is the HARQ 
RTT timer for the DL transmission in Step 1 


<~ 


MAC PDU 






6 


Check: Does the UE transmit a HARQ NACK 
for the DL MAC PDU in Step 5? 


-> 


HARQ NACK 


2,3 


P 


7 


Z PDCCH sub frames, 
where Z>drx-lnactivity Timer, before the 
PDCCH sub-frame in which the drx- 
RetransmissionTimer for the DL MAC PDU in 
Step 5 expires, the SS indicates the 
transmission of a DL MAC PDU. The SS 
transmits a DL MAC PDU with DRX MAC 
Control element. 


<- 


MAC PDU(DRX MAC Control 
element) 
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i.e., on the subframe with the subframe 
number = [csfn6+A/orma/SF(SFN6, csfn6, drx- 
RetransmissionTimer -Z)] modulo 10, and the 
system frame number = 
SFN6+floor([csfn6+A/orma/SF(SFN6, csfnO, 
drx-RetransmissionTimer -Z)]/1 0); where 
csfn6 = [csfnS-i-HARQ RTT Timer] modulo 10, 
and the SFN6 = SFN5-Hfloor([csfn5+HARQ 
RTTTimer]/10); 

For TDD the HARQ RTT timer is the HARQ 
RTT timer for the DL transmission in Step 5. 










8 


Check: Does the UE transmit a HARQ ACK for 
the DL MAC PDU in Step 7? 


-> 


HARQ ACK 


2,3, 

1 


P 


9 


In the last sub frame when the Drx- 
RetransmissionTimer for the DL MAC PDU 
indicated on the PDCCH in Step 5 is still 
running, the SS indicates the transmission of a 
DL MAC PDU. 

i.e., on the subframe with the subframe 
number = [csfn6-i-A/orma/SF(SFN6, csfn6, drx- 
RetransmissionTimer -1)] modulo 10, and the 
system frame number = 
SFN6-^floor([csfn6-i-A/orma/SF(SFN6, csfn6, 
drx-RetransmissionTimer -1 )]/1 0); 


<— 


MAC PDU 






10 


Check: Does the UE transmit a HARQ ACK for 
the DL MAC PDU in Step 9? 


-> 


HARQ ACK 


2,3 


P 


Note 1 : Invalid MAC PDU is a IVIAC PDU that fails the CRC check. 

Note 2: All DL MAC PDUs are transmitted with the NDI set on the PDCCH. 

Note 3: Timer tolerances for the MAC DRX related timers measured in subframes or PDCCH subframes is 0. These 

timers are: drx-lnactivity Timer, drx-RetransmissionTimer, HARQ RTT Timer. 



7.1 .6.2.3.3 Specific message contents 

Table 7.1.6.2.3.3-1 : specific Parameters in RRCConnectionReconfiguration in the preamble 



Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


MAC-MainConfig-RBC ::= SEQUENCE { 








ul-SCH-Config SEQUENCE { 








maxHARQ-Tx 


n5 






retxBSR-Timer 


sf 1 0240 






ttlBundling 


FALSE 






} 








drx-Config CHQICE { 








setup SEQUENCE { 








onDurationTimer 


psf20 






drx-lnactivityTimer 


psf6 






drx-RetransmissionTimer 


psf6 






longDRX-CycleStartQffset CHQICE { 








sf640 









1 








shortDRX 


Not present 






} 








} 








timeAlignmentTimerDedicated 


infinity 






phr-Config CHQICE { 








release 


NULL 






} 








} 
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7.1 .7 Transport block size selection 
7.1 .7.0 Specific configurations 

The configurations defined in table 7.1.7.0-1 is used after step 7 of table 4.5.3.3-1 [18] in the preamble and in all steps 
in the main behaviour of the test cases in clause 7. 1 .7. 

Table 7.1.7.0-1 : Power allocation for OFDM symbols and reference signals, single 88 Tx antenna 



Physical Channel 


EPRE Ratio 


Comment 


PBCH 


PBCH RA = OdB 




PBCH RB = OdB 




PSS 


PSS RA = OdB 




SSS 


SSS RA = OdB 




PCFICH 


PCFICH RB = OdB 




PDCCH 


PDCCH RA = OdB 




PDCCH RB = OdB 




PDSCH 


PDSCH RA = OdB 




PDSCH RB = OdB 




PHICH 


PHICH RB = OdB 





The configurations defined in table 7.1.7.0-2 is used in step 8 of table 4.5.3.3-1 [18] in the preamble of the test cases in 
clause 7.1.7. 

Table 7.1.7.0-2: PD8CH-ConfigDedicated-DEFAULT 



Derivation Path: 36.508 Table 4.6.3-6 


Information Element 


Value/remark 


Comment 


Condition 


PDSCH-ConfigDedicated-DEFAULT ;:= SEQUENCE 

{ 








p-a 


dBO 




1TX 




dB-3 




2TX 


} 









7.1.7.1 
7.1.7.1.1 

7.1.7.1.1.1 
(1) 



DL-SCH transport block size selection 

DL-SCH transport block size selection / DCI format 1 / RA type 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE on PDCCH receives DCI format 1 indicating Resource Allocation Type 0, a resource block 

assignment correspondent to Np^^ physical resource blocks and a modulation and coding scheme Ij^cs 
} 

then { UE decodes the received transport block of size correspondent to the read A^pj^g and Ij^q^ 
and forwards it to higher layers } 



7.1.7.1.1.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.212, clause 5.3.3.1.2; TS 
36.213, clauses 7.1.6.1, 7.1.7, 7.1.7.1, 7.1.7.2 and 7.1.7.2.1; and TS 36.306 clause 4.1. 

[TS 36.212 clause 5.3.3.1.2] 

DCI format 1 is used for the scheduling of one PDSCH codeword. 

The following information is transmitted by means of the DCI format 1 : 

- Resource allocation header (resource allocation type / type 1) - 1 bit as defined in section 7.1.6 of [3] 
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If downlink bandwidth is less than or equal to 10 PRBs, there is no resource allocation header and resource 
allocation type is assumed. 

Resource block assignment: 

- For resource allocation type as defined in section 7.1.6.1 of [3]: 



-U 



DL 



^RB ^ P I bits provide the resource allocation 



where the value of P depends on the number of DL resource blocks as indicated in section 7.1. 6 of [3] 

- Modulation and coding scheme - 5 bits as defined in section 7.1.7 of [3] 

If the number of information bits in format 1 is equal to that for format 0/1 A, one bit of value zero shall be appended to 
format 1. 

If the number of information bits in format 1 belongs to one of the sizes in Table 5.3.3.1.2-1, one or more zero bit(s) 
shall be appended to format 1 until the payload size of format 1 does not belong to one of the sizes in Table 5.3.3. 1 .2-1 
and not equal to that of format 0/1 A. 

Table 5.3.3.1.2-1 : Ambiguous Sizes of Information Bits 



{12, 14, 16 ,20, 24, 26, 32, 40, 44, 56} 



[TS 36.213 clause 7.1.6.1] 

In resource allocations of type 0, resource block assignment information includes a bitmap indicating the resource block 
groups (RBGs) that are allocated to the scheduled UE where a RBG is a set of consecutive physical resource blocks 
(PRBs). Resource block group size (P) is a function of the system bandwidth as shown in Table 7. 1 .6. 1 - 1 . The total 

number of RBGs ( A^^gG ) ^'^^ downlink system bandwidth of A^^g PRBs is given by Nk^q = \ N^^ IP \ where 

[a^rb / p\ of the RBGs are of size P and if A^^g mod P > then one of the RBGs is of size N^^ - P ■ \_N^^ I p\. The 

bitmap is of size N^-qq bits with one bitmap bit per RBG such that each RBG is addressable. The RBGs shall be 

indexed in the order of increasing frequency and non-increasing RBG sizes starting at the lowest frequency. The order 

of RBG to bitmap bit mapping is in such way that RBG to RBG N ^^q — 1 are mapped to MSB to LSB of the bitmap. 

The RBG is allocated to the UE if the corresponding bit value in the bitmap is 1, the RBG is not allocated to the UE 
otherwise. 

Table 7.1.6.1-1 : Type Resource Allocation RBG Size vs. Downlink System Bandwidth 



System Bandwidth 


RBG Size 


A^R°B^ 


(P) 


<10 


1 


11-26 


2 


27-63 


3 


64 - 1 1 


4 



[TS 36.213 clause 7.1.7] 

To determine the modulation order and transport block size(s) in the physical downlink shared channel, the UE shall 
first 

- read the 5-bit "modulation and coding scheme" field ( I^^,^ ) in the DCI 

and second if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI then 



else 
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- set the Table 7.1.7.2.1-1 column indicator Np^^ to the total number of allocated PRBs based on the procedure 
defined in Section 7. 1 .6. 

if the transport block is transmitted in DwPTS of the special subframe in frame structure type 2, then 
set the Table 7.1.7.2.1-1 column indicator Npj^^ =max| Np^^xQJS \, l\ , 



else, set the Table 7.1.7.2.1-1 column indicator A'^. 



^A^;. 



The UE may skip decoding a transport block in an initial transmission if the effective channel code rate is higher than 
0.930, where the effective channel code rate is defined as the number of downlink information bits (including CRC bits) 
divided by the number of physical channel bits on PDSCH. If the UE skips decoding, the physical layer indicates to 
higher layer that the transport block is not successfully decoded. For the special subframe configurations and 5 with 
normal CP or configurations and 4 with extended CP, shown in table 4.2-1 [3], there shall be no PDSCH transmission 
in DwPTS of the special subframe. 

[TS 36.213 clause 7.1.7.1] 

The UE shall use g„ = 2 if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI, otherwise, the UE shall 
use /^j,g and Table 7.1.7.1-1 to determine the modulation order (Q^) used in the physical downlink shared channel. 

Table 7.1 .7.1-1 : Modulation and TBS index table for PDSCH 



MCS Index 

'mcs 


Modulation Order 


TBS Index 

-'tbs 





2 





1 


2 


1 


2 


2 


2 


3 


2 


3 


4 


2 


4 


5 


2 


5 


6 


2 


6 


7 


2 


7 


8 


2 


8 


9 


2 


9 


10 


4 


9 


11 


4 


10 


12 


4 


11 


13 


4 


12 


14 


4 


13 


15 


4 


14 


16 


4 


15 


17 


6 


15 


18 


6 


16 


19 


6 


17 


20 


6 


18 


21 


6 


19 


22 


6 


20 


23 


6 


21 


24 


6 


22 


25 


6 


23 


26 


6 


24 


27 


6 


25 


28 


6 


26 


29 


2 


reserved 


30 


4 


31 


6 



[TS 36.213 clause 7.1.7.2] 

If the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI then 
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- for DCI format lA: 

the UE shall set the TBS index ( /^gj ) equal to I^^^^ and determine its TBS by the procedure in Section 
7.1.7.2.1. 



else 

forO < I^^^ < 28 , the UE shall first determine the TBS index ( /^gj ) using I,^^^ and Table 7.1.7.1-1 except if the 

transport block is disabled in DCI formats 2 and 2A as specified below. For a transport block that is not mapped 
to two-layer spatial multiplexing, the TBS is determined by the procedure in Section 7.1.7.2.1. For a transport 
block that is mapped to two-layer spatial multiplexing, the TBS is determined by the procedure in Section 

7.1.7.2.2. 

for 29 < /^j|^5 ^31, the TBS is assumed to be as determined from DCI transported in the latest PDCCH for the 
same transport block using < /^cs ^ 28 . If there is no latest PDCCH for the same transport block 
using < /^(,s < 28 , and if the initial PDSCH for the same transport block is semi -persistently scheduled, the 
TBS shall be determined from the most recent semi-persistent scheduling assignment PDCCH. 

In DCI formats 2 and 2A a transport block is disabled if I,^^^ = and if rv^x = 1 otherwise the transport block is 
enabled. 

The NDl and HARQ process ID, as signalled on PDCCH, and the TBS, as determined above, shall be delivered to 
higher layers. 

[TS 36.213 clause 7.1.7.2.1] 

For 1 < A^pRB < 1 10 , the TBS is given by the ( I^^^ , A^p^g ) entry of Table 7.1.7.2.1-1. 
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Table 7.1.7.2.1-1: Transport block size table (dimension 27x110) 



^TBS 


N 

"PRB 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 





16 


32 


56 


88 


120 


152 


176 


208 


224 


256 


1 


24 


56 


88 


144 


176 


208 


224 


256 


328 


344 


2 


32 


72 


144 


176 


208 


256 


296 


328 


376 


424 


3 


40 


104 


176 


208 


256 


328 


392 


440 


504 


568 


4 


56 


120 


208 


256 


328 


408 


488 


552 


632 


696 


5 


72 


144 


224 


328 


424 


504 


600 


680 


776 


872 


6 


328 


176 


256 


392 


504 


600 


712 


808 


936 


1032 


7 


104 


224 


328 


472 


584 


712 


840 


968 


1096 


1224 


8 


120 


256 


392 


536 


680 


808 


968 


1096 


1256 


1384 


9 


136 


296 


456 


616 


776 


936 


1096 


1256 


1416 


1544 


10 


144 


328 


504 


680 


872 


1032 


1224 


1384 


1544 


1736 


11 


176 


376 


584 


776 


1000 


1192 


1384 


1608 


1800 


2024 


12 


208 


440 


680 


904 


1128 


1352 


1608 


1800 


2024 


2280 


13 


224 


488 


744 


1000 


1256 


1544 


1800 


2024 


2280 


2536 


14 


256 


552 


840 


1128 


1416 


1736 


1992 


2280 


2600 


2856 


15 


280 


600 


904 


1224 


1544 


1800 


2152 


2472 


2728 


3112 


16 


328 


632 


968 


1288 


1608 


1928 


2280 


2600 


2984 


3240 


17 


336 


696 


1064 


1416 


1800 


2152 


2536 


2856 


3240 


3624 


18 


376 


776 


1160 


1544 


1992 


2344 


2792 


3112 


3624 


4008 


19 


408 


840 


1288 


1736 


2152 


2600 


2984 


3496 


3880 


4264 


20 


440 


904 


1384 


1864 


2344 


2792 


3240 


3752 


4136 


4584 


21 


488 


1000 


1480 


1992 


2472 


2984 


3496 


4008 


4584 


4968 


22 


520 


1064 


1608 


2152 


2664 


3240 


3752 


4264 


4776 


5352 


23 


552 


1128 


1736 


2280 


2856 


3496 


4008 


4584 


5160 


5736 


24 


584 


1192 
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15840 


16416 


12 


16416 


16416 


16416 


16992 


16992 


17568 


17568 


17568 


18336 


18336 


13 


18336 


18336 


19080 


19080 


19080 


19848 


19848 


19848 


20616 


20616 


14 


20616 


20616 


20616 


21384 


21384 


22152 


22152 


22152 


22920 


22920 


15 


22152 


22152 


22152 


22920 


22920 


23688 


23688 


23688 


24496 


24496 


16 


22920 


23688 


23688 


24496 


24496 


24496 


25456 


25456 


25456 


26416 


17 


25456 


26416 


26416 


26416 


27376 


27376 


27376 


28336 


28336 


29296 


18 


28336 


28336 


29296 


29296 


29296 


30576 


30576 


30576 


31704 


31704 


19 


30576 


30576 


31704 


31704 


32856 


32856 


32856 


34008 


34008 


34008 


20 


32856 


34008 


34008 


34008 


35160 


35160 


35160 


36696 


36696 


36696 


21 


35160 


36696 


36696 


36696 


37888 


37888 


39232 


39232 


39232 


40576 


22 


37888 


39232 


39232 


40576 


40576 


40576 


42368 


42368 


42368 


43816 


23 


40576 


40576 


42368 


42368 


43816 


43816 


43816 


45352 


45352 


45352 


24 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


46888 


48936 


48936 


25 


45352 


45352 


46888 


46888 


46888 


48936 


48936 


48936 


51024 


51024 


26 


52752 


52752 


55056 


55056 


55056 


55056 


57336 


57336 


57336 


59256 


-'tbs 


^PRB 


81 


82 


83 


84 


85 


86 


87 


88 


89 


90 





2280 


2280 


2280 


2344 


2344 


2408 


2408 


2472 


2472 


2536 


1 


2984 


2984 


2984 


3112 


3112 


3112 


3240 


3240 


3240 


3240 


2 


3624 


3624 


3752 


3752 


3880 


3880 


3880 


4008 


4008 


4008 


3 


4776 


4776 


4776 


4968 


4968 


4968 


5160 


5160 


5160 


5352 


4 


5736 


5992 


5992 


5992 


5992 


6200 


6200 


6200 


6456 


6456 


5 


7224 


7224 


7224 


7480 


7480 


7480 


7736 


7736 


7736 


7992 


6 


8504 


8504 


8760 


8760 


8760 


9144 


9144 


9144 


9144 


9528 


7 


9912 


9912 


10296 


10296 


10296 


10680 


10680 


10680 


11064 


11064 


8 


11448 


11448 


11448 


11832 


11832 


12216 


12216 


12216 


12576 


12576 


9 


12960 


12960 


12960 


13536 


13536 


13536 


13536 


14112 


14112 


14112 


10 


14112 


14688 


14688 


14688 


14688 


15264 


15264 


15264 


15840 


15840 


11 


16416 


16416 


16992 


16992 


16992 


17568 


17568 


17568 


18336 


18336 


12 


18336 


19080 


19080 


19080 


19080 


19848 


19848 


19848 


20616 


20616 


13 


20616 


21384 


21384 


21384 


22152 


22152 


22152 


22920 


22920 


22920 


14 


22920 


23688 


23688 


24496 


24496 


24496 


25456 


25456 


25456 


25456 


15 


24496 


25456 


25456 


25456 


26416 


26416 


26416 


27376 


27376 


27376 


16 


26416 


26416 


27376 


27376 


27376 


28336 


28336 


28336 


29296 


29296 


17 


29296 


29296 


30576 


30576 


30576 


30576 


31704 


31704 


31704 


32856 


18 


31704 


32856 


32856 


32856 


34008 


34008 


34008 


35160 


35160 


35160 


19 


35160 


35160 


35160 


36696 


36696 


36696 


37888 


37888 


37888 


39232 
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20 


37888 


37888 


39232 


39232 


39232 


40576 


40576 


40576 


42368 


42368 


21 


40576 


40576 


42368 


42368 


42368 


43816 


43816 


43816 


45352 


45352 


22 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


46888 


48936 


48936 


23 


46888 


46888 


46888 


48936 


48936 


48936 


51024 


51024 


51024 


51024 


24 


48936 


51024 


51024 


51024 


52752 


52752 


52752 


52752 


55056 


55056 


25 


51024 


52752 


52752 


52752 


55056 


55056 


55056 


55056 


57336 


57336 


26 


59256 


59256 


61664 


61664 


61664 


63776 


63776 


63776 


66592 


66592 


-"IBS 


^PRB 


91 


92 


93 


94 


95 


96 


97 


98 


99 


100 





2536 


2536 


2600 


2600 


2664 


2664 


2728 


2728 


2728 


2792 


1 


3368 


3368 


3368 


3496 


3496 


3496 


3496 


3624 


3624 


3624 


2 


4136 


4136 


4136 


4264 


4264 


4264 


4392 


4392 


4392 


4584 


3 


5352 


5352 


5352 


5544 


5544 


5544 


5736 


5736 


5736 


5736 


4 


6456 


6456 


6712 


6712 


6712 


6968 


6968 


6968 


6968 


7224 


5 


7992 


7992 


8248 


8248 


8248 


8504 


8504 


8760 


8760 


8760 


6 


9528 


9528 


9528 


9912 


9912 


9912 


10296 


10296 


10296 


10296 


7 


11064 


11448 


11448 


11448 


11448 


11832 


11832 


11832 


12216 


12216 


8 


12576 


12960 


12960 


12960 


13536 


13536 


13536 


13536 


14112 


14112 


9 


14112 


14688 


14688 


14688 


15264 


15264 


15264 


15264 


15840 


15840 


10 


15840 


16416 


16416 


16416 


16992 


16992 


16992 


16992 


17568 


17568 


11 


18336 


18336 


19080 


19080 


19080 


19080 


19848 


19848 


19848 


19848 


12 


20616 


21384 


21384 


21384 


21384 


22152 


22152 


22152 


22920 


22920 


13 


23688 


23688 


23688 


24496 


24496 


24496 


25456 


25456 


25456 


25456 


14 


26416 


26416 


26416 


27376 


27376 


27376 


28336 


28336 


28336 


28336 


15 


28336 


28336 


28336 


29296 


29296 


29296 


29296 


30576 


30576 


30576 


16 


29296 


30576 


30576 


30576 


30576 


31704 


31704 


31704 


31704 


32856 


17 


32856 


32856 


34008 


34008 


34008 


35160 


35160 


35160 


35160 


36696 


18 


36696 


36696 


36696 


37888 


37888 


37888 


37888 


39232 


39232 


39232 


19 


39232 


39232 


40576 


40576 


40576 


40576 


42368 


42368 


42368 


43816 


20 


42368 


42368 


43816 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


21 


45352 


46888 


46888 


46888 


46888 


48936 


48936 


48936 


48936 


51024 


22 


48936 


48936 


51024 


51024 


51024 


51024 


52752 


52752 


52752 


55056 


23 


52752 


52752 


52752 


55056 


55056 


55056 


55056 


57336 


57336 


57336 


24 


55056 


57336 


57336 


57336 


57336 


59256 


59256 


59256 


61664 


61664 


25 


57336 


59256 


59256 


59256 


61664 


61664 


61664 


61664 


63776 


63776 


26 


66592 


68808 


68808 


68808 


71112 


71112 


71112 


73712 


73712 


75376 


^TBS 


^PRB 


101 


102 


103 


104 


105 


106 


107 


108 


109 


110 





2792 


2856 


2856 


2856 


2984 


2984 


2984 


2984 


2984 


3112 


1 


3752 


3752 


3752 


3752 


3880 


3880 


3880 


4008 


4008 


4008 


2 


4584 


4584 


4584 


4584 


4776 


4776 


4776 


4776 


4968 


4968 


3 


5992 


5992 


5992 


5992 


6200 


6200 


6200 


6200 


6456 


6456 


4 


7224 


7224 


7480 


7480 


7480 


7480 


7736 


7736 


7736 


7992 


5 


8760 


9144 


9144 


9144 


9144 


9528 


9528 


9528 


9528 


9528 


6 


10680 


10680 


10680 


10680 


11064 


11064 


11064 


11448 


11448 


11448 


7 


12216 


12576 


12576 


12576 


12960 


12960 


12960 


12960 


13536 


13536 


8 


14112 


14112 


14688 


14688 


14688 


14688 


15264 


15264 


15264 


15264 


9 


15840 


16416 


16416 


16416 


16416 


16992 


16992 


16992 


16992 


17568 


10 


17568 


18336 


18336 


18336 


18336 


18336 


19080 


19080 


19080 


19080 


11 


20616 


20616 


20616 


21384 


21384 


21384 


21384 


22152 


22152 


22152 


12 


22920 


23688 


23688 


23688 


23688 


24496 


24496 


24496 


24496 


25456 


13 


26416 


26416 


26416 


26416 


27376 


27376 


27376 


27376 


28336 


28336 


14 


29296 


29296 


29296 


29296 


30576 


30576 


30576 


30576 


31704 


31704 


15 


30576 


31704 


31704 


31704 


31704 


32856 


32856 


32856 


34008 


34008 


16 


32856 


32856 


34008 


34008 


34008 


34008 


35160 


35160 


35160 


35160 


17 


36696 


36696 


36696 


37888 


37888 


37888 


39232 


39232 


39232 


39232 


18 


40576 


40576 


40576 


40576 


42368 


42368 


42368 


42368 


43816 


43816 


19 


43816 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


46888 


46888 


20 


46888 


46888 


48936 


48936 


48936 


48936 


48936 


51024 


51024 


51024 


21 


51024 


51024 


51024 


52752 


52752 


52752 


52752 


55056 


55056 


55056 


22 


55056 


55056 


55056 


57336 


57336 


57336 


57336 


59256 


59256 


59256 


23 


57336 


59256 


59256 


59256 


59256 


61664 


61664 


61664 


61664 


63776 


24 


61664 


61664 


63776 


63776 


63776 


63776 


66592 


66592 


66592 


66592 


25 


63776 


63776 


66592 


66592 


66592 


66592 


68808 


68808 


68808 


71112 
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26 



75376 75376 75376 75376 75376 75376 75376 75376 75376 75376 



[TS 36.306 clause 4.1] 

The field ue-Category defines a combined uplink and downlink capability. The parameters set by the UE Category are 
defined in subclause 4.2. Tables 4.1-1 and 4.1-2 define the downlink and, respectively, uplink physical layer parameter 
values for each UE Category. 

Table 4.1-1 : Downlink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

DL-SCH transport 

block bits received 

within a TTI 


lUlaximum number 
of bits of a DL- 
SCH transport 
block received 
within a 1 II 


Total number of 
soft channel bits 


Maximum number 

of supported 

layers for spatial 

multiplexing in DL 


Category 1 


10296 


10296 


250368 


1 


Category 2 


51024 


51024 


1237248 


2 


Category 3 


102048 


75376 


1237248 


2 


Category 4 


150752 


75376 


1827072 


2 


Category 5 


299552 


149776 


3667200 


4 



Table 4.1-2: Uplink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

bits of an UL-SCH 

transport block 

transmitted within a 

TTI 


Support for 
64QAM in UL 


Category 1 


5160 


No 


Category 2 


25456 


No 


Category 3 


51024 


No 


Category 4 


51024 


No 


Category 5 


75376 


Yes 



7.1.7.1.1.3 Test description 

7.1.7.1.1.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 

Uplink and downlink bandwidth set to the maximum bandwidth for the E-UTRA Band under test as specified in 
Table 5.6.1-1 in [31] (to enable testing of N^^^ up to maximum value). 

UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
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7.1.7.1.1.3.2 



Test procedure sequence 
Table 7.1 .7.1 .1 .3.2-1 : Maximum TBgize tor different UE categories 



UE Category 


Maximum number of 
bits of a DL-SCH 
transport block 

received within a TTI 


Category 1 


10296 


Category 2 


51024 


Category 3 


75376 


Category 4 


75376 


Category 5 


149776 



Table 7.1.7.1.1.3.2-2: Number of downlink PDCP SDUs and PDCP SDU size used as test data 



TBsize 

[bits] 


Number of 
PDCP SDUs 


PDCP SDU Size 

[bits] 

See note 1 


72 <r5,,,^< 12056 

note 2 


1 


8*FLOOR((TBsize-56)/8) 


12057 <r5^,^^< 24088 


2 


8*FLOOR((TBsize-88)/16)) 


24089 <r5^i,^< 36 112 


3 


8*FLOOR((TBsize-112)/24)) 


361 13 <r5,i,,< 48144 


4 


8*FLOOR((TBsize-144)/32)) 


48145 <r5,,,^< 60168 


5 


8*FL00R((TBsize - 1 68)/40)) 


60169 <r5^i,^< 72200 


6 


8*FLOOR((TBsize-200)/48)) 


TB^^^>111Q\ 


7 


8*FL00R((TBsize- 224)/56)) 


Note 1 . Each PDCP SDU is limited to 1 500 octets (to l<eep below maximum SDU size of ESM as specified in TS 
24.301 clause 9.9.4.12). 

The PDCP SDU size of each PDCP SDU is 

PDCP SDU size = (TBsize - N*PDCP header size - AIVID PDU header size - MAC header size - Size of 
Timing Advance) / N, where 

PDCP header size is 1 6 bits for the RLC AM and 1 2-bit SN case; 

AMD PDU header size is CIEL[(16+(N-1)*12)/8] bytes which includes 16 standard AM header and (N-1) 

Length indicators; and 

MAC header size = R/R/E/LCID MAC subheader (8 bits for Timing Advance) + R/R/E/LCID MAC 

subheader (8 bits for MAC SDU) = 8 + 8 bits 

Size of Timing Advance MAC CE is 8 bits (if no Timing Advance needs to be sent, padding will occur 

instead) 

This gives: 

PDCP SDU size = 8*FL00R((TBsize- N*16- 8*CIEL((16+(N-1)*12)/8) - 24)/(8*N)) bits 
Note 2: According to TS 36.213 Table 7.1.7.2.1-1 and the final PDCP SDU size formula in Note 1, the smallest 
TBsize that can be tested is 72 bits. 
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Table 7.1.7.1.1 .3.2-2a: Bandwidth Dependent Parameters 



lUlax Bandwidth 


IVIax A^pRB 


Allowed A^pRB Values 


10Mhz 


50 


2,3,5, 6,8,9, 11, 12, 14, 15, 17, 18,20,21,23,24,26, 
27, 29, 30, 32, 33, 35, 36, 38, 39, 41 , 42, 44, 45, 47, 48, 
50 


15Mhz 


75 


3,4,7,8, 11, 12, 15, 16, 19,20,23,24,27,28, 31,32, 
35, 36, 39, 40, 43, 44 ,47, 48, 51 , 52, 55, 56, 59, 60, 63, 
64,67,68,71,72,75 


20Mhz 


100 


4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 60, 64, 
68,72,76,80,84,88,92,96, 100 


Note : Maximum bandwidth for EUTRA bands is 1 0/1 5/20 Mhz. 



Table 7.1.7.1.1.3.2-2b: Ambiguous Sizes of Information Bits 

I {1 2, 1 4, 1 6 ,20, 24, 26, 32, 40, 44, 56} | 



Table 7.1.7.1.1.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 






EXCEPTION: Steps 1 to 4 are 
repeated for allowed values of 

A^PRB as portable 7.1. 7.1. 1.3.2- 
2a and /^cs from to 28. 










1 


SS looks up /tbs in table 7.1. 7.1- 
1 in TS 36.213 based on the value 
of /^4cs ■ SS looks up TBsize in 
table 7.1.7.2.1-1 in TS 36.213 
based on values of A^p^B ^"d 

^TBS ■ 












EXCEPTION: Steps 2 to 4 are 
performed if TBsize is less than or 
equal to UE capability "IVIaximum 
number of DL-SCH transport 
block bits received within a TTI" 
as specified in Table 7.1 .7.1 .1 .3.2- 
1 and larger than or equal to 72 
bits as specified in Table 
7.1 .7.1 .1 .3.2-2, and the effective 
channel code rate, as defined in 
TS 36.213 clause 7.1.7, is lower 
than or equal to 0.930. 










2 


SS creates one or more PDCP 
SDUs, depending on TBsize, in 
accordance with Table 
7.1.7.1.1.3.2-2. 










3 


SS transmits the PDCP SDUs 
concatenated into a MAC PDU 
and indicates on PDCCH DCI 
Format 1 with RA type and a 
resource block assignment (RBA) 

correspondent to A^p^g as 

specified in 7.1.6.1 in TS 36.213 
and modulation and coding 

scheme I^q^ ■ 

If the number of information bits in 
format 1 is equal to that for format 
0/1 A, one bit of value zero shall 


<— 


MAC PDU (NxPDCP 

SDUs) 

DCI: (DCI Format 1, RA 

typeO, RBA(A?prb), /^^s ) 
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be appended to format 1 by the 
SS. 

If the number of information bits in 
format 1 belongs to one of the 
sizes in Table 7.1 .7.1 .1 .3.2-2b, 
one or more zero bit(s) shall be 
appended to format 1 by the SS 
until the payload size of format 1 
does not belong to one of the 
sizes in Table 7.1 .7.1 .1 .3.2-2b 
and not equal to that of format 
0/1 A. 










3A 


At the reception of scheduling 
request the SS transmits UL Grant 
for transmitting loop back PDCP 
SDUs. 


<— 


(UL Grant) 






4 


CHECK: Does UE return the 
same number of PDCP SDUs with 
same content as transmitted by 
the SS in step 3? 


— > 


(NxPDCPSDUs) 


1 


P 



7.1 .7.1 .1 .3.3 Specific Message Contents 

Table 7.1.7.1.1.3.3.1: MAC-MainConfig-RBC (preamble Table 4.5.3.3-1 [18]: Step 8) 



Derivation Path: 36.508 Table 4.8.2.1 .5-1 


Information Element 


Value/remark 


Comment 


Condition 


retxBSR-Timer 


sf320 







7.1 .7.1 .2 DL-SCH transport block size selection / DCI format 1 / RA type 1 

7.1.7.1.2.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE on PDCCH receives DCI format 1 indicating Resource Allocation Type 1, a resource block 

assignment correspondent to A^pj^g physical resource blocks and a modulation and coding scheme Ij^q^ 

} 

then { UE decodes the received transport block of size correspondent to the read A^pi^g and Ij^iq^ 

and forwards it to higher layers } 



7.1.7.1.2.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.212, clause 5.3.3.1.2; TS 
36.213, clauses 7.1.6.2, 7.1.7, 7.1.7.1, 7.1.7.2 and 7.1.7.2.1; and TS 36.306 clause 4.1. 

[TS 36.212 clause 5.3.3.1.2] 

DCI format 1 is used for the scheduling of one PDSCH codeword. 

The following information is transmitted by means of the DCI format 1 : 

- Resource allocation header (resource allocation type / type 1) - 1 bit as defined in section 7.1.6 of [3] 

If downlink bandwidth is less than or equal to 10 PRBs, there is no resource allocation header and resource 
allocation type is assumed. 

- Resource block assignment: 
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- For resource allocation type 1 as defined in section 7.1.6.2 of [3]: 

- I log2 (P) I bits of this field are used as a header specific to this resource allocation type to indicate the 
selected resource blocks subset 

- 1 bit indicates a shift of the resource allocation span 

- '\N^g / P\- [log 2 [pj] - 1 j bits provide the resource allocation 

where the value of P depends on the number of DL resource blocks as indicated in section 7.1. 6 of [3] 

- Modulation and coding scheme - 5 bits as defined in section 7.1.7 of [3] 

If the number of information bits in format 1 is equal to that for format 0/1 A, one bit of value zero shall be appended to 
format 1. 

If the number of information bits in format 1 belongs to one of the sizes in Table 5.3.3.1.2-1, one or more zero bit(s) 
shall be appended to format 1 until the payload size of format 1 does not belong to one of the sizes in Table 5.3.3.1.2-1 
and not equal to that of format 0/1 A. 

Table 5.3.3.1.2-1 : Ambiguous Sizes of Information Bits 



I {1 2, 1 4, 1 6 ,20, 24. 26, 32, 40, 44, 56} | 

[TS 36.213 clause 7.1.6.2] 

In resource allocations of type 1, a resource block assignment information of size N^^q indicates to a scheduled UE 
the PRBs from the set of PRBs from one of P RBG subsets. Also P is the RBG size associated with the system 
bandwidth as shown in Table 7.1.6.1-1. A RBG subset p , where < p < P , consists of every P th RBG starting 
from RBG p . The resource block assignment information consists of three fields [4]. 

The first field with | log2(P) | bits is used to indicate the selected RBG subset among P RBG subsets. 

The second field with one bit is used to indicate a shift of the resource allocation span within a subset. A bit value of 1 
indicates shift is triggered. Shift is not triggered otherwise. 

The third field includes a bitmap, where each bit of the bitmap addresses a single PRB in the selected RBG subset in 
such a way that MSB to LSB of the bitmap are mapped to the PRBs in the increasing frequency order. The PRB is 
allocated to the UE if the corresponding bit value in the bit field is 1, the PRB is not allocated to the UE otherwise. The 

portion of the bitmap used to address PRBs in a selected RBG subset has size A^rb™ ^ri'^ i^ defined as 



Nir' =\N^ii / p] -\log,(P)^ 



The addressable PRB numbers of a selected RBG subset start from an offset, A^^^^^ (p) to the smallest PRB number 

within the selected RBG subset, which is mapped to the MSB of the bitmap. The offset is in terms of the number of 
PRBs and is done within the selected RBG subset. If the value of the bit in the second field for shift of the resource 

allocation span is set to 0, the offset for RBG subset p is given by A^^^^^ (p) = . Otherwise, the offset for RBG 

subset p is given by A^^^^^^ (p) — ^rb " "^ (p)~ ^rb ' where the LSB of the bitmap is justified with the highest 

PRB number within the selected RBG subset. A^rb " "^ (p) is the number of PRBs in RBG subset p and can be 
calculated by the following equation. 
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a^rT"'"(;?) = 



A^R^B^ - 


-1 


p2 




A^R^B^ - 


-1 


p2 




''^RB 


-1 


p2 





p + p 



P + (Kb -l)modP + l 



,P< 



,P> 



k:; - 


-1 


p 




Kl; - 


-1 


p 




■'^RB 


-1 


P 





modP 



modP 



modP 



Consequently, when RBG subset p is indicated, bit / for i = 0,l,---,N^^ -1 in the bitmap field indicates PRB 
number. 



,^ RBG subset / ^\ 
«PRB (P) 



i + ^.uft(P) 



P' + p-P + {i + A^^^(p))modP 



[TS 36.213 clause 7.1.7] 

To determine the modulation order and transport block size(s) in the physical downlink shared channel, the UE shall 
first 

- read the 5-bit "modulation and coding scheme" field ( I^^^ ) in the DCI 

and second if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI then 



else 

- set the Table 7.1.7.2.1-1 column indicator Np^^ to the total number of allocated PRBs based on the procedure 
defined in Section 7. 1 .6. 

if the transport block is transmitted in DwPTS of the special subframe in frame structure type 2, then 
set the Table 7.1.7.2.1-1 column indicator Npj^^ =max| A^^pj^gXO.TS , l[, 

else, set the Table 7.1.7.2.1-1 column indicator Np/^g = N pj^g . 

The UE may skip decoding a transport block in an initial transmission if the effective channel code rate is higher than 
0.930, where the effective channel code rate is defined as the number of downlink information bits (including CRC bits) 
divided by the number of physical channel bits on PDSCH. If the UE skips decoding, the physical layer indicates to 
higher layer that the transport block is not successfully decoded. For the special subframe configurations and 5 with 
normal CP or configurations and 4 with extended CP, shown in table 4.2-1 [3], there shall be no PDSCH transmission 
in DwPTS of the special subframe. 

[TS 36.213 clause 7.1.7.1] 

The UE shall use g„ = 2 if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI, otherwise, the UE shall 
use ly^^^ and Table 7.1.7.1-1 to determine the modulation order ( 2„ ) used in the physical downlink shared channel. 
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Table 7.1.7.1-1 : Modulation and TBS index table for PDSCH 



lUICS Index 

^MCS 


Modulation Order 


TBS Index 





2 





1 


2 


1 


2 


2 


2 


3 


2 


3 


4 


2 


4 


5 


2 


5 


6 


2 


6 


7 


2 


7 


8 


2 


8 


9 


2 


9 


10 


4 


9 


11 


4 


10 


12 


4 


11 


13 


4 


12 


14 


4 


13 


15 


4 


14 


16 


4 


15 


17 


6 


15 


18 


6 


16 


19 


6 


17 


20 


6 


18 


21 


6 


19 


22 


6 


20 


23 


6 


21 


24 


6 


22 


25 


6 


23 


26 


6 


24 


27 


6 


25 


28 


6 


26 


29 


2 


reserved 


30 


4 


31 


6 



[TS 36.213 clause 7.1.7.2] 

If the DCI CRC is scrambled by P-RNTl, RA-RNTl, or Sl-RNTl then 
- for DCI format 1 A: 

o the UE shall set the TBS index ( /^g^ ) equal to ly^^^ and determine its TBS by the procedure in 
Section 7.1.7.2.1. 



else 



- for < ly^Q^ < 28 , the UE shall first determine the TBS index ( /-pgj ) using /jy,^,^ and Table 7.1.7.1-1 except if 
the transport block is disabled in DCI formats 2 and 2A as specified below. For a transport block that is not 
mapped to two-layer spatial multiplexing, the TBS is determined by the procedure in Section 7.1.7.2.1. For a 
transport block that is mapped to two-layer spatial multiplexing, the TBS is determined by the procedure in 
Section 7.1.7.2.2. 

- for 29 < /^^cs - 31 , the TBS is assumed to be as determined from DCI transported in the latest PDCCH for the 
same transport block using < I^^^ < 28 . If there is no latest PDCCH for the same transport block 

using < /,y[j,g < 28 , and if the initial PDSCH for the same transport block is semi-persistently scheduled, the 
TBS shall be determined from the most recent semi-persistent scheduling assignment PDCCH. 
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- In DCI formats 2 and 2A a transport block is disabled if I^^.^ = and if rv,vfe = 1 otherwise the transport block 
is enabled. 

The NDI and HARQ process ID, as signalled on PDCCH, and the TBS, as determined above, shall be delivered to 
higher layers. 

[TS 36.213 clause 7.1.7.2.1] 

Fori < //pRB < 110, the TBS is given by the ( /^gs , A^pRg ) entry of Table 7.1.7.2.1-1. 
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Table 7.1.7.2.1-1: Transport block size table (dimension 27x110) 



^TBS 


"PRB 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 





16 


32 


56 


88 


120 


152 


176 


208 


224 


256 


1 


24 


56 


88 


144 


176 


208 


224 


256 


328 


344 


2 


32 


72 


144 


176 


208 


256 


296 


328 


376 


424 


3 


40 


104 


176 


208 


256 


328 


392 


440 


504 


568 


4 


56 


120 


208 


256 


328 


408 


488 


552 


632 


696 


5 


72 


144 


224 


328 


424 


504 


600 


680 


776 


872 


6 


328 


176 


256 


392 


504 


600 


712 


808 


936 


1032 


7 


104 


224 


328 


472 


584 


712 


840 


968 


1096 


1224 


8 


120 


256 


392 


536 


680 


808 


968 


1096 


1256 


1384 


9 


136 


296 


456 


616 


776 


936 


1096 


1256 


1416 


1544 


10 


144 


328 


504 


680 


872 


1032 


1224 


1384 


1544 


1736 


11 


176 


376 


584 


776 


1000 


1192 


1384 


1608 


1800 


2024 


12 


208 


440 


680 


904 


1128 


1352 


1608 


1800 


2024 


2280 


13 


224 


488 


744 


1000 


1256 


1544 


1800 


2024 


2280 


2536 


14 


256 


552 


840 


1128 


1416 


1736 


1992 


2280 


2600 


2856 


15 


280 


600 


904 


1224 


1544 


1800 


2152 


2472 


2728 


3112 


16 


328 


632 


968 


1288 


1608 


1928 


2280 


2600 


2984 


3240 


17 


336 


696 


1064 


1416 


1800 


2152 


2536 


2856 


3240 


3624 


18 


376 


776 


1160 


1544 


1992 


2344 


2792 


3112 


3624 


4008 


19 


408 


840 


1288 


1736 


2152 


2600 


2984 


3496 


3880 


4264 


20 


440 


904 


1384 


1864 


2344 


2792 


3240 


3752 


4136 


4584 


21 


488 


1000 


1480 


1992 


2472 


2984 


3496 


4008 


4584 


4968 


22 


520 


1064 


1608 


2152 


2664 


3240 


3752 


4264 


4776 


5352 


23 


552 


1128 


1736 


2280 


2856 


3496 


4008 


4584 


5160 


5736 


24 


584 


1192 


1800 


2408 


2984 


3624 


4264 


4968 


5544 


5992 


25 


616 


1256 


1864 


2536 


3112 


3752 


4392 


5160 


5736 


6200 


26 


712 


1480 


2216 


2984 


3752 


4392 


5160 


5992 


6712 


7480 


^TBS 


-''^PRB 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 





288 


328 


344 


376 


392 


424 


456 


488 


504 


536 


1 


376 


424 


456 


488 


520 


568 


600 


632 


680 


712 


2 


472 


520 


568 


616 


648 


696 


744 


776 


840 


872 


3 


616 


680 


744 


808 


872 


904 


968 


1032 


1096 


1160 


4 


776 


840 


904 


1000 


1064 


1128 


1192 


1288 


1352 


1416 


5 


968 


1032 


1128 


1224 


1320 


1384 


1480 


1544 


1672 


1736 


6 


1128 


1224 


1352 


1480 


1544 


1672 


1736 


1864 


1992 


2088 


7 


1320 


1480 


1608 


1672 


1800 


1928 


2088 


2216 


2344 


2472 


8 


1544 


1672 


1800 


1928 


2088 


2216 


2344 


2536 


2664 


2792 


9 


1736 


1864 


2024 


2216 


2344 


2536 


2664 


2856 


2984 


3112 


10 


1928 


2088 


2280 


2472 


2664 


2792 


2984 


3112 


3368 


3496 


11 


2216 


2408 


2600 


2792 


2984 


3240 


3496 


3624 


3880 


4008 


12 


2472 


2728 


2984 


3240 


3368 


3624 


3880 


4136 


4392 


4584 


13 


2856 


3112 


3368 


3624 


3880 


4136 


4392 


4584 


4968 


5160 


14 


3112 


3496 


3752 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


15 


3368 


3624 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


6200 


16 


3624 


3880 


4264 


4584 


4968 


5160 


5544 


5992 


6200 


6456 


17 


4008 


4392 


4776 


5160 


5352 


5736 


6200 


6456 


6712 


7224 


18 


4392 


4776 


5160 


5544 


5992 


6200 


6712 


7224 


7480 


7992 


19 


4776 


5160 


5544 


5992 


6456 


6968 


7224 


7736 


8248 


8504 


20 


5160 


5544 


5992 


6456 


6968 


7480 


7992 


8248 


8760 


9144 


21 


5544 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


9912 


22 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


10296 


10680 


23 


6200 


6968 


7480 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


24 


6712 


7224 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


12216 


25 


6968 


7480 


8248 


8760 


9528 


10296 


10680 


11448 


12216 


12576 


26 


8248 


8760 


9528 


10296 


11064 


11832 


12576 


13536 


14112 


14688 


^TBS 


-'^PRB 


21 


22 


23 


24 


25 


26 


27 


28 


29 


30 
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568 


600 


616 


648 


680 


712 


744 


776 


776 


808 


1 


744 


776 


808 


872 


904 


936 


968 


1000 


1032 


1064 


2 


936 


968 


1000 


1064 


1096 


1160 


1192 


1256 


1288 


1320 


3 


1224 


1256 


1320 


1384 


1416 


1480 


1544 


1608 


1672 


1736 


4 


1480 


1544 


1608 


1736 


1800 


1864 


1928 


1992 


2088 


2152 


5 


1864 


1928 


2024 


2088 


2216 


2280 


2344 


2472 


2536 


2664 


6 


2216 


2280 


2408 


2472 


2600 


2728 


2792 


2984 


2984 


3112 


7 


2536 


2664 


2792 


2984 


3112 


3240 


3368 


3368 


3496 


3624 


8 


2984 


3112 


3240 


3368 


3496 


3624 


3752 


3880 


4008 


4264 


9 


3368 


3496 


3624 


3752 


4008 


4136 


4264 


4392 


4584 


4776 


10 


3752 


3880 


4008 


4264 


4392 


4584 


4776 


4968 


5160 


5352 


11 


4264 


4392 


4584 


4776 


4968 


5352 


5544 


5736 


5992 


5992 


12 


4776 


4968 


5352 


5544 


5736 


5992 


6200 


6456 


6712 


6712 


13 


5352 


5736 


5992 


6200 


6456 


6712 


6968 


7224 


7480 


7736 


14 


5992 


6200 


6456 


6968 


7224 


7480 


7736 


7992 


8248 


8504 


15 


6456 


6712 


6968 


7224 


7736 


7992 


8248 


8504 


8760 


9144 


16 


6712 


7224 


7480 


7736 


7992 


8504 


8760 


9144 


9528 


9912 


17 


7480 


7992 


8248 


8760 


9144 


9528 


9912 


10296 


10296 


10680 


18 


8248 


8760 


9144 


9528 


9912 


10296 


10680 


11064 


11448 


11832 


19 


9144 


9528 


9912 


10296 


10680 


11064 


11448 


12216 


12576 


12960 


20 


9912 


10296 


10680 


11064 


11448 


12216 


12576 


12960 


13536 


14112 


21 


10680 


11064 


11448 


12216 


12576 


12960 


13536 


14112 


14688 


15264 


22 


11448 


11832 


12576 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


23 


12216 


12576 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


24 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


17568 


18336 


25 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


17568 


18336 


19080 


26 


15264 


16416 


16992 


17568 


18336 


19080 


19848 


20616 


21384 


22152 


^TBS 


N 

"PRB 


31 


32 


33 


34 


35 


36 


37 


38 


39 


40 





840 


872 


904 


936 


968 


1000 


1032 


1032 


1064 


1096 


1 


1128 


1160 


1192 


1224 


1256 


1288 


1352 


1384 


1416 


1416 


2 


1384 


1416 


1480 


1544 


1544 


1608 


1672 


1672 


1736 


1800 


3 


1800 


1864 


1928 


1992 


2024 


2088 


2152 


2216 


2280 


2344 


4 


2216 


2280 


2344 


2408 


2472 


2600 


2664 


2728 


2792 


2856 


5 


2728 


2792 


2856 


2984 


3112 


3112 


3240 


3368 


3496 


3496 


6 


3240 


3368 


3496 


3496 


3624 


3752 


3880 


4008 


4136 


4136 


7 


3752 


3880 


4008 


4136 


4264 


4392 


4584 


4584 


4776 


4968 


8 


4392 


4584 


4584 


4776 


4968 


4968 


5160 


5352 


5544 


5544 


9 


4968 


5160 


5160 


5352 


5544 


5736 


5736 


5992 


6200 


6200 


10 


5544 


5736 


5736 


5992 


6200 


6200 


6456 


6712 


6712 


6968 


11 


6200 


6456 


6712 


6968 


6968 


7224 


7480 


7736 


7736 


7992 


12 


6968 


7224 


7480 


7736 


7992 


8248 


8504 


8760 


8760 


9144 


13 


7992 


8248 


8504 


8760 


9144 


9144 


9528 


9912 


9912 


10296 


14 


8760 


9144 


9528 


9912 


9912 


10296 


10680 


11064 


11064 


11448 


15 


9528 


9912 


10296 


10296 


10680 


11064 


11448 


11832 


11832 


12216 


16 


9912 


10296 


10680 


11064 


11448 


11832 


12216 


12216 


12576 


12960 


17 


11064 


11448 


11832 


12216 


12576 


12960 


13536 


13536 


14112 


14688 


18 


12216 


12576 


12960 


13536 


14112 


14112 


14688 


15264 


15264 


15840 


19 


13536 


13536 


14112 


14688 


15264 


15264 


15840 


16416 


16992 


16992 


20 


14688 


14688 


15264 


15840 


16416 


16992 


16992 


17568 


18336 


18336 


21 


15840 


15840 


16416 


16992 


17568 


18336 


18336 


19080 


19848 


19848 


22 


16992 


16992 


17568 


18336 


19080 


19080 


19848 


20616 


21384 


21384 


23 


17568 


18336 


19080 


19848 


19848 


20616 


21384 


22152 


22152 


22920 


24 


19080 


19848 


19848 


20616 


21384 


22152 


22920 


22920 


23688 


24496 


25 


19848 


20616 


20616 


21384 


22152 


22920 


23688 


24496 


24496 


25456 


26 


22920 


23688 


24496 


25456 


25456 


26416 


27376 


28336 


29296 


29296 


^TBS 


N 

"PRB 


41 


42 


43 


44 


45 


46 


47 


48 


49 


50 





1128 


1160 


1192 


1224 


1256 


1256 


1288 


1320 


1352 


1384 


1 


1480 


1544 


1544 


1608 


1608 


1672 


1736 


1736 


1800 


1800 


2 


1800 


1864 


1928 


1992 


2024 


2088 


2088 


2152 


2216 


2216 


3 


2408 


2472 


2536 


2536 


2600 


2664 


2728 


2792 


2856 


2856 


4 


2984 


2984 


3112 


3112 


3240 


3240 


3368 


3496 


3496 


3624 
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5 


3624 


3752 


3752 


3880 


4008 


4008 


4136 


4264 


4392 


4392 


6 


4264 


4392 


4584 


4584 


4776 


4776 


4968 


4968 


5160 


5160 


7 


4968 


5160 


5352 


5352 


5544 


5736 


5736 


5992 


5992 


6200 


8 


5736 


5992 


5992 


6200 


6200 


6456 


6456 


6712 


6968 


6968 


9 


6456 


6712 


6712 


6968 


6968 


7224 


7480 


7480 


7736 


7992 


10 


7224 


7480 


7480 


7736 


7992 


7992 


8248 


8504 


8504 


8760 


11 


8248 


8504 


8760 


8760 


9144 


9144 


9528 


9528 


9912 


9912 


12 


9528 


9528 


9912 


9912 


10296 


10680 


10680 


11064 


11064 


11448 


13 


10680 


10680 


11064 


11448 


11448 


11832 


12216 


12216 


12576 


12960 


14 


11832 


12216 


12216 


12576 


12960 


12960 


13536 


13536 


14112 


14112 


15 


12576 


12960 


12960 


13536 


13536 


14112 


14688 


14688 


15264 


15264 


16 


13536 


13536 


14112 


14112 


14688 


14688 


15264 


15840 


15840 


16416 


17 


14688 


15264 


15264 


15840 


16416 


16416 


16992 


17568 


17568 


18336 


18 


16416 


16416 


16992 


17568 


17568 


18336 


18336 


19080 


19080 


19848 


19 


17568 


18336 


18336 


19080 


19080 


19848 


20616 


20616 


21384 


21384 


20 


19080 


19848 


19848 


20616 


20616 


21384 


22152 


22152 


22920 


22920 


21 


20616 


21384 


21384 


22152 


22920 


22920 


23688 


24496 


24496 


25456 


22 


22152 


22920 


22920 


23688 


24496 


24496 


25456 


25456 
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[TS 36.306 clause 4.1] 

The field ue-Category parameter defines a combined uplink and downlink capability. The parameters set by the UE 
Category are defined in subclause 4.2. Tables 4.1-1 and 4.1-2 define the downlink and, respectively, uplink physical 
layer parameter values for each UE Category. 

Table 4.1-1 : Downlink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

DL-SCH transport 

block bits received 

within a TTI 


Maximum number 
of bits of a DL- 
SCH transport 
block received 
within a 1 II 


Total number of 
soft channel bits 


Maximum number 

of supported 

layers for spatial 

multiplexing in DL 


Category 1 


10296 


10296 


250368 


1 


Category 2 


51024 


51024 


1237248 


2 


Category 3 


102048 


75376 


1237248 


2 


Category 4 


150752 


75376 


1827072 


2 


Category 5 


299552 


149776 


3667200 


4 



Table 4.1-2: Uplink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

bits of an UL-SCH 

transport block 

transmitted within a 

TTI 


Support for 
64QAM in UL 


Category 1 


5160 


No 


Category 2 


25456 


No 


Category 3 


51024 


No 


Category 4 


51024 


No 


Category 5 


75376 


Yes 



7.1.7.1.2.3 Test description 

7.1.7.1.2.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 

Uplink and downlink bandwidth set to the maximum bandwidth for the E-UTRA Band under test as specified in 
Table 5.6.1-1 in [31] (to enable testing of N^^^ up to maximum value). 

UE: 

None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
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7.1.7.1.2.3.2 



Test procedure sequence 
Table 7.1 .7.1 .2.3.2-1 : Maximum TBgize tor different UE categories 



UE Category 


Maximum number of 
bits of a DL-SCH 
transport block 

received within a TTI 


Category 1 


10296 


Category 2 


51024 


Category 3 


75376 


Category 4 


75376 


Category 5 


149776 



Table 7.1.7.1.2.3.2-2: Number of downlink PDCP SDUs and PDCP SDU size used as test data 



TBsize 

[bits] 


Number of 
PDCP SDUs 


PDCP SDU Size 

[bits] 

See note 1 


72 <r5,,,^< 12056 

note 2 


1 


8*FLOOR((TBsize-56)/8) 


12057 <r5^,^^< 24088 


2 


8*FLOOR((TBsize-88)/16)) 


24089 <r5^i,^< 36 112 


3 


8*FLOOR((TBsize-112)/24)) 


361 13 <r5,i,,< 48144 


4 


8*FLOOR((TBsize-144)/32)) 


48145 <r5,,,^< 60168 


5 


8*FL00R((TBsize - 1 68)/40)) 


60169 <r5^i^^< 72200 


6 


8*FLOOR((TBsize-200)/48)) 


r5,^,> 72201 


7 


8*FL00R((TBsize- 224)/56)) 


Note 1 : Each PDCP SDU is limited to 1 500 octets (to l<eep below maximum SDU size of ESIVI as specified in TS 
24.301 clause 9.9.4.12). 

The PDCP SDU size of each PDCP SDU is 

PDCP SDU size = (TBsize - N*PDCP header size - AIVID PDU header size - MAC header size - Size of 
Timing Advance) / N, where 

PDCP header size is 1 6 bits for the RLC AM and 1 2-bit SN case; 

AMD PDU header size is CIEL[(16+(N-1)*12)/8] bytes which includes 16 standard AM header and (N-1) 

Length indicators; and 

MAC header size = R/R/E/LCID MAC subheader (8 bits for Timing Advance) + R/R/E/LCID MAC 

subheader (8 bits for MAC SDU) = 8 + 8 bits 

Size of Timing Advance MAC CE is 8 bits (if no Timing Advance needs to be sent, padding will occur 

instead) 

This gives: 

PDCP SDU size = 8*FL00R((TBsize - N*1 6- 8*CIEL((1 6+(N-1 )*1 2)/8) - 24)/(8*N)) bits 
Note 2: According to TS 36.213 Table 7.1.7.2.1-1 and the final PDCP SDU size formula in Note 1, the smallest 
TBsize that can be tested is 72 bits. 



Table 7.1.7.1.2.3.2-2a: Bandwidth Dependent Parameters 



Max Bandwidth 


Max Np^j, 


^TYPEl 


10Mhz 


50 


14 


15Mhz 


75 


16 


20Mhz 


100 


22 


Note : Maximum bandwidth for EUTRA bands is 10/15/20 Mhz. 
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Table 7.1.7.1.2.3.2-2b: Ambiguous Sizes of Information Bits 

I {1 2, 1 4. 1 6 .20, 24. 26, 32, 40, 44, 56} | 



Table 7.1.7.1.2.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Steps 1 to 4 are 
repeated for values of A^p^g from 

1 to A'rb™' as per table 
7.1.7.1.2.3.2-23 and /^cs from 
to 28. 










1 


SS looks up /^Bs in table 7.1. 7.1- 
1 in TS 36.213 based on the value 
of /^jcs ■ SS looks up TBsize in 
table 7.1.7.2.1-1 in TS 36.213 
based on values of A^pj^, and 

^TBS ■ 












EXCEPTION: Steps 2 to 4 are 
performed if TBsize is less than or 
equal to UE capability "IVIaximum 
number of DL-SCH transport 
block bits received within a TTI" 
as specified in Table 7.1 .7.1 .2.3.2- 
1 and larger than or equal to 72 
bits as specified in Table 
7.1 .7.1 .2.3.2-2, and the effective 
channel code rate, as defined in 
TS 36.213 clause 7.1.7, is lower 
than or equal to 0.930. 










2 


SS creates one or more PDCP 
SDUs. depending on TBsize, in 
accordance with Table 
7.1.7.1.2.3.2-2. 










3 


SS transmits the PDCP SDUs 
concatenated into a MAC PDU 
and indicates on PDCCH DCI 
Format 1 with RA type 1 and a 
resource block assignment (RBA) 

correspondent to Np^j^ as 

specified in 7.1.6.2 in TS 36.213 
and modulation and coding 

scheme I^^ics ■ 

If the number of information bits in 
format 1 is equal to that for format 
0/1 A, one bit of value zero shall 
be appended to format 1 by the 
SS. 

If the number of information bits in 
format 1 belongs to one of the 
sizes in Table 7.1 .7.1 .2.3.2-2b, 
one or more zero bit(s) shall be 
appended to format 1 by the SS 
until the payload size of format 1 
does not belong to one of the 
sizes in Table 7.1 .7.1 .2.3.2-2b 
and not equal to that of format 
0/1 A. 


<— 


MAC PDU (NxPDCP 

SDUs) 

DCI: (DCI Format 1. RA 

type1,RBA(A?PRB), /^^s ) 
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3A 


At the reception of scheduling 
request the SS transmits UL Grant 
for transmitting loop back PDCP 
SDUs. 


<— 


(UL Grant) 






4 


CHECK: Does UE return the 
same number of PDCP SDUs with 
same content as transmitted by 
the SS in step 3? 


— > 


(NxPDCP SDUs) 


1 


P 



7.1.7.1.2.3.3 



Specific Message Contents 



Table 7.1.7.1.2.3.3.1 : MAC-MainConfig-RBC (preamble Table 4.5.3.3-1 [18]: Step 8) 



Derivation Path: 36.508 Table 4.8.2.1 .5-1 


Information Element 


Value/remark 


Comment 


Condition 


retxBSR-Timer 


sf320 







7.1.7.1.3 

7.1.7.1.3.1 
(1) 



DL-SCH transport block size selection / DCI format 1 A / RA type 2 / Localised 
VRB 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE on PDCCH receives DCI format lA indicating Resource Allocation Type 2 with Localized 

VRB, a resource block assignment correspondent to A^p^g physical resource blocks and a modulation 

and coding scheme Ij^q^ } 

then { UE decodes the received transport block of size correspondent to the read A^p^g and I^^q^ 
and forwards it to higher layers } 



7.1.7.1.3.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.212, clauses 5.3.3.1.2 and 
5.3.3.1.3; TS 36.213, clauses 7.1.6.3, 7.1.7, 7.1.7.1, 7.1.7.2 and 7.1.7.2.1; and TS 36.306 clause 4.1. 

[TS 36.212 clause 5.3.3.1.2] 



Table 5.3.3.1.2-1 : Ambiguous Sizes of Information Bits 

I {1 2, 1 4. 1 6 .20, 24, 26, 32, 40, 44, 56} | 

[TS 36.212 clause 5.3.3.1.3] 

DCI format 1 A is used for the compact scheduling of one PDSCH codeword and random access procedure initiated by a 
PDCCH order. 

The following information is transmitted by means of the DCI format lA: 

- Flag for formatO/formatl A differentiation - 1 bit, where value indicates format and value 1 indicates format 1 A 



Otherwise, 

- Localized/Distributed VRB assignment flag - 1 bit as defined in 7.1.6.3 of [3] 
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- Resource block assignment - |log2(A'RB (-^rb +1)/2) | bits as defined in section 7.1.6.3 of [3]: 

- For localized VRB: 

I logjCA'^RB (-^RB + 1)/2) I bits provide the resource allocation 

- For distributed VRB: 

- If A^°B < 50 or if the format 1 A CRC is scrambled by RA-RNTI, P-RNTI, or SI-RNTI 

- |log2(A'^RB (A^RB +l)/2) I bits provide the resource allocation 

- Else 

- 1 bit, the MSB indicates the sap value, where value indicates N „..„ = N „..„, and value 1 indicates 

' o J- ' gap gtiPjA 

N = N ^ 

gap gap,2 

- (jlogjCA^RB (A^RB +l)/2) I —1) bits provide the resource allocation 

- Modulation and coding scheme - 5bits as defined in section 7. 1 .7 of [3] 

If the number of information bits in format 1 A is less than that of format 0, zeros shall be appended to format 1 A until 
the payload size equals that of format 0. 

If the number of information bits in format lA belongs to one of the sizes in Table 5.3.3.1.2-1, one zero bit shall be 
appended to format lA. 



[TS 36.213 clause 7.1.6.3] 

In resource allocations of type 2, the resource block assignment information indicates to a scheduled UE a set of 
contiguously allocated localized virtual resource blocks or distributed virtual resource blocks. In case of resource 
allocation signalled with PDCCH DCI format 1 A, IB or ID, one bit flag indicates whether localized virtual resource 
blocks or distributed virtual resource blocks are assigned (value indicates Localized and value 1 indicates Distributed 
VRB assignment) while distributed virtual resource blocks are always assigned in case of resource allocation signalled 
with PDCCH DCI format IC. Localized VRB allocations for a UE vary from a single VRB up to a maximum number 
of VRBs spanning the system bandwidth. For DCI format 1 A the distributed VRB allocations for a UE vary from a 
single VRB up to Ny^^ VRBs, where N^^^ is defined in [3], if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or 

SI-RNTI. With PDCCH DCI format IB, ID, or lA with a CRC scrambled with C-RNTI, distributed VRB allocations 
for a UE vary from a single VRB up to A^^i^g VRBs if N^^^ is 6-49 and vary from a single VRB up to 16 if Nl^^ is 50- 

1 10. With PDCCH DCI format IC, distributed VRB allocations for a UE vary from N'^^ VRB(s) up to 

N^t^ I NtS' ■ Nt'S' VRBs with an increment step of N^^^ , where Nl'l^ value is determined depending on the downlink 

L VRB RB J RB RB RB 

system bandwidth as shown in Table 7.1.6.3-1. 

Table 7.1.6.3-1: n''^^ values vs. Downlink System Bandwidth 



System BW 

(<B^) 


N^^ 


DCI format 1C 


6-49 


2 


50-110 


4 



For PDCCH DCI format 1 A, IB or ID, a type 2 resource allocation field consists of a resource indication value (RIV) 
corresponding to a starting resource block ( RB^,^„ ) and a length in terms of virtually contiguously allocated resource 

blocks L^g^j . The resource indication value is defined by 
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if(L,,,,,-l)<L<,V2j then 



i?/y = A^^,^(L,,,.,-l) + i?5, 



else 
RIV = N^,^ (N^,' - L,,,, + 1) + ( A^^,^ - 1 - 7?5,,, ) 



where L^^^^ > 1 and shall not exceed Nyj^g — RB^^^^^ . 



For PDCCH DCI format IC, a type 2 resource block assignment field consists of a resource indication value {RIV) 
corresponding to a starting resource block ( RB^,^„ = , N^^ , 2N"^^ ,■■■, ([a^vrb ^ ■^rb'' J~ 1)'^rb'' ^ ^^^ ^ length in terms 
of virtually contiguously allocated resource blocks ( L^r,R, = Af^'^p , 2A'i;'?,---, IN^^tu / N^^ l-Nl't^)- The resource 

t? -' k^ixDA RB RB ^ VRB RB J RB 

indication value is defined by 
if(4,,,-l)<[A^X/2j then 

RIV^NZiLc,s.-'^) + RBL. 
else 

RIV = iV;^^ «^^ - 4,,, + 1) + ( A^X - 1 - RBl„ ) 

where 4,,., = L,,,, / A^^J , i?5l, = i?5_ / A^^ and A^;^^ = [<« / A^«7 J- Here, 

L'cRBs ^ 1 and shall not exceed Ny^g -RB'„^„ . 
[TS 36.213 clause 7.1.7] 

To determine the modulation order and transport block size(s) in the physical downlink shared channel, the UE shall 
first 

- read the 5-bit "modulation and coding scheme" field ( /jy,^,^ ) in the DCI 

and second if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI then 



else 



- set the Table 7.1.7.2.1-1 column indicator A^p^g to the total number of allocated PRBs based on the procedure 
defined in Section 7.1.6. 

if the transport block is transmitted in DwPTS of the special subframe in frame structure type 2, then 
set the Table 7.1.7.2.1-1 column indicator Npj^^ =max| A'^p^gXO.TS , l[, 

else, set the Table 7.1.7.2.1-1 column indicator Np/^g = Npi^j^ . 

The UE may skip decoding a transport block in an initial transmission if the effective channel code rate is higher than 
0.930, where the effective channel code rate is defined as the number of downlink information bits (including CRC bits) 
divided by the number of physical channel bits on PDSCH. If the UE skips decoding, the physical layer indicates to 
higher layer that the transport block is not successfully decoded. For the special subframe configurations and 5 with 
normal CP or configurations and 4 with extended CP, shown in table 4.2-1 [3], there shall be no PDSCH transmission 
in DwPTS of the special subframe. 

[TS 36.213 clause 7.1.7.1] 
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The UE shall use g =2 if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI, otherwise, the UE shall 
use I^(.g and Table 7.1.7.1-1 to determine the modulation order (Q„) used in the physical downlink shared channel. 

Table 7.1 .7.1-1 : Modulation and TBS index table for PDSCH 



MCS Index 

^MCS 


Modulation Order 


TBS Index 

-'tbs 





2 





1 


2 


1 


2 


2 


2 


3 


2 


3 


4 


2 


4 


5 


2 


5 


6 


2 


6 


7 


2 


7 


8 


2 


8 


9 


2 


9 


10 


4 


9 


11 


4 


10 


12 


4 


11 


13 


4 


12 


14 


4 


13 


15 


4 


14 


16 


4 


15 


17 


6 


15 


18 


6 


16 


19 


6 


17 


20 


6 


18 


21 


6 


19 


22 


6 


20 


23 


6 


21 


24 


6 


22 


25 


6 


23 


26 


6 


24 


27 


6 


25 


28 


6 


26 


29 


2 


reserved 


30 


4 


31 


6 



[TS 36.213 clause 7.1.7.2] 

If the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI then 
- for DCI format lA: 

the UE shall set the TBS index ( Ij^^ ) equal to I,^^^ and determine its TBS by the procedure in Section 

7.1.7.2.1. 



else 



- forO < If^^g < 28 , the UE shall first determine the TBS index ( /^gj ) using /^j,^ and Table 7.1.7.1-1 except if 

the transport block is disabled in DCI formats 2 and 2A as specified below. For a transport block that is not 
mapped to two-layer spatial multiplexing, the TBS is determined by the procedure in Section 7.1.7.2.1. For a 
transport block that is mapped to two-layer spatial multiplexing, the TBS is determined by the procedure in 
Section 7.1.7.2.2. 

- for 29 < /^£,g ^ 31 , the TBS is assumed to be as determined from DCI transported in the latest PDCCH for the 
same transport block using < I^^^^ < 28 . If there is no latest PDCCH for the same transport block 
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using < /,^j(,g < 28 , and if the initial PDSCH for the same transport block is semi-persistently scheduled, the 
TBS shall be determined from the most recent semi-persistent scheduling assignment PDCCH. 

— In DCI formats 2 and 2A a transport block is disabled if 1^,^^ = and if rv,vfc = 1 otherwise the transport block 
is enabled. 

The NDI and HARQ process ID, as signalled on PDCCH, and the TBS, as determined above, shall be delivered to 
higher layers. 

[TS 36.213 clause 7.1.7.2.1] 

Fori < Npj^ < 110, the TBS is given by the ( /^bj. , A^p^^ ) entry of Table 7.1.7.2.1-1. 
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Table 7.1.7.2.1-1: Transport block size table (dimension 27x110) 



^TBS 


N 

"PRB 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 





16 


32 


56 


88 


120 


152 


176 


208 


224 


256 


1 


24 


56 


88 


144 


176 


208 


224 


256 


328 


344 


2 


32 


72 


144 


176 


208 


256 


296 


328 


376 


424 


3 


40 


104 


176 


208 


256 


328 


392 


440 


504 


568 


4 


56 


120 


208 


256 


328 


408 


488 


552 


632 


696 


5 


72 


144 


224 


328 


424 


504 


600 


680 


776 


872 


6 


328 


176 


256 


392 


504 


600 


712 


808 


936 


1032 


7 


104 


224 


328 


472 


584 


712 


840 


968 


1096 


1224 


8 


120 


256 


392 


536 


680 


808 


968 


1096 


1256 


1384 


9 


136 


296 


456 


616 


776 


936 


1096 


1256 


1416 


1544 


10 


144 


328 


504 


680 


872 


1032 


1224 


1384 


1544 


1736 


11 


176 


376 


584 


776 


1000 


1192 


1384 


1608 


1800 


2024 


12 


208 


440 


680 


904 


1128 


1352 


1608 


1800 


2024 


2280 


13 


224 


488 


744 


1000 


1256 


1544 


1800 


2024 


2280 


2536 


14 


256 


552 


840 


1128 


1416 


1736 


1992 


2280 


2600 


2856 


15 


280 


600 


904 


1224 


1544 


1800 


2152 


2472 


2728 


3112 


16 


328 


632 


968 


1288 


1608 


1928 


2280 


2600 


2984 


3240 


17 


336 


696 


1064 


1416 


1800 


2152 


2536 


2856 


3240 


3624 


18 


376 


776 


1160 


1544 


1992 


2344 


2792 


3112 


3624 


4008 


19 


408 


840 


1288 


1736 


2152 


2600 


2984 


3496 


3880 


4264 


20 


440 


904 


1384 


1864 


2344 


2792 


3240 


3752 


4136 


4584 


21 


488 


1000 


1480 


1992 


2472 


2984 


3496 


4008 


4584 


4968 


22 


520 


1064 


1608 


2152 


2664 


3240 


3752 


4264 


4776 


5352 


23 


552 


1128 


1736 


2280 


2856 


3496 


4008 


4584 


5160 


5736 


24 


584 


1192 


1800 


2408 


2984 


3624 


4264 


4968 


5544 


5992 


25 


616 


1256 


1864 


2536 


3112 


3752 


4392 


5160 


5736 


6200 


26 


712 


1480 


2216 


2984 


3752 


4392 


5160 


5992 


6712 


7480 


^TBS 


-'^PRB 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 





288 


328 


344 


376 


392 


424 


456 


488 


504 


536 


1 


376 


424 


456 


488 


520 


568 


600 


632 


680 


712 


2 


472 


520 


568 


616 


648 


696 


744 


776 


840 


872 


3 


616 


680 


744 


808 


872 


904 


968 


1032 


1096 


1160 


4 


776 


840 


904 


1000 


1064 


1128 


1192 


1288 


1352 


1416 


5 


968 


1032 


1128 


1224 


1320 


1384 


1480 


1544 


1672 


1736 


6 


1128 


1224 


1352 


1480 


1544 


1672 


1736 


1864 


1992 


2088 


7 


1320 


1480 


1608 


1672 


1800 


1928 


2088 


2216 


2344 


2472 


8 


1544 


1672 


1800 


1928 


2088 


2216 


2344 


2536 


2664 


2792 


9 


1736 


1864 


2024 


2216 


2344 


2536 


2664 


2856 


2984 


3112 


10 


1928 


2088 


2280 


2472 


2664 


2792 


2984 


3112 


3368 


3496 


11 


2216 


2408 


2600 


2792 


2984 


3240 


3496 


3624 


3880 


4008 


12 


2472 


2728 


2984 


3240 


3368 


3624 


3880 


4136 


4392 


4584 


13 


2856 


3112 


3368 


3624 


3880 


4136 


4392 


4584 


4968 


5160 


14 


3112 


3496 


3752 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


15 


3368 


3624 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


6200 


16 


3624 


3880 


4264 


4584 


4968 


5160 


5544 


5992 


6200 


6456 


17 


4008 


4392 


4776 


5160 


5352 


5736 


6200 


6456 


6712 


7224 


18 


4392 


4776 


5160 


5544 


5992 


6200 


6712 


7224 


7480 


7992 


19 


4776 


5160 


5544 


5992 


6456 


6968 


7224 


7736 


8248 


8504 


20 


5160 


5544 


5992 


6456 


6968 


7480 


7992 


8248 


8760 


9144 


21 


5544 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


9912 


22 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


10296 


10680 


23 


6200 


6968 


7480 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


24 


6712 


7224 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


12216 


25 


6968 


7480 


8248 


8760 


9528 


10296 


10680 


11448 


12216 


12576 


26 


8248 


8760 


9528 


10296 


11064 


11832 


12576 


13536 


14112 


14688 


^TBS 


-''^PRB 


21 


22 


23 


24 


25 


26 


27 


28 


29 


30 
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568 


600 


616 


648 


680 


712 


744 


776 


776 


808 


1 


744 


776 


808 


872 


904 


936 


968 


1000 


1032 


1064 


2 


936 


968 


1000 


1064 


1096 


1160 


1192 


1256 


1288 


1320 


3 


1224 
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29296 


30576 


30576 


30576 


30576 


31704 


31704 


31704 


32856 


18 


31704 


32856 


32856 


32856 


34008 


34008 


34008 


35160 


35160 


35160 


19 


35160 


35160 


35160 


36696 


36696 


36696 


37888 


37888 


37888 


39232 


20 


37888 


37888 


39232 


39232 


39232 


40576 


40576 


40576 


42368 


42368 


21 


40576 


40576 


42368 


42368 


42368 


43816 


43816 


43816 


45352 


45352 


22 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


46888 


48936 


48936 


23 


46888 


46888 


46888 


48936 


48936 


48936 


51024 


51024 


51024 


51024 


24 


48936 


51024 


51024 


51024 


52752 


52752 


52752 


52752 


55056 


55056 


25 


51024 


52752 


52752 


52752 


55056 


55056 


55056 


55056 


57336 


57336 


26 


59256 


59256 


61664 


61664 


61664 


63776 


63776 


63776 


66592 


66592 


^TBS 


N 

"PRB 


91 


92 


93 


94 


95 


96 


97 


98 


99 


100 





2536 


2536 


2600 


2600 


2664 


2664 


2728 


2728 


2728 


2792 


1 


3368 


3368 


3368 


3496 


3496 


3496 


3496 


3624 


3624 


3624 


2 


4136 


4136 


4136 


4264 


4264 


4264 


4392 


4392 


4392 


4584 


3 


5352 


5352 


5352 


5544 


5544 


5544 


5736 


5736 


5736 


5736 


4 


6456 


6456 


6712 


6712 


6712 


6968 


6968 


6968 


6968 


7224 


5 


7992 


7992 


8248 


8248 


8248 


8504 


8504 


8760 


8760 


8760 


6 


9528 


9528 


9528 


9912 


9912 


9912 


10296 


10296 


10296 


10296 


7 


11064 


11448 


11448 


11448 


11448 


11832 


11832 


11832 


12216 


12216 


8 


12576 


12960 


12960 


12960 


13536 


13536 


13536 


13536 


14112 


14112 


9 


14112 


14688 


14688 


14688 


15264 


15264 


15264 


15264 


15840 


15840 


10 


15840 


16416 


16416 


16416 


16992 


16992 


16992 


16992 


17568 


17568 


11 


18336 


18336 


19080 


19080 


19080 


19080 


19848 


19848 


19848 


19848 


12 


20616 


21384 


21384 


21384 


21384 


22152 


22152 


22152 


22920 


22920 


13 


23688 


23688 


23688 


24496 


24496 


24496 


25456 


25456 


25456 


25456 


14 


26416 


26416 


26416 


27376 


27376 


27376 


28336 


28336 


28336 


28336 


15 


28336 


28336 


28336 


29296 


29296 


29296 


29296 


30576 


30576 


30576 


16 


29296 


30576 


30576 


30576 


30576 


31704 


31704 


31704 


31704 


32856 


17 


32856 


32856 


34008 


34008 


34008 


35160 


35160 


35160 


35160 


36696 


18 


36696 


36696 


36696 


37888 


37888 


37888 


37888 


39232 


39232 


39232 


19 


39232 


39232 


40576 


40576 


40576 


40576 


42368 


42368 


42368 


43816 


20 


42368 


42368 


43816 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


21 


45352 


46888 


46888 


46888 


46888 


48936 


48936 


48936 


48936 


51024 


22 


48936 


48936 


51024 


51024 


51024 


51024 


52752 


52752 


52752 


55056 


23 


52752 


52752 


52752 


55056 


55056 


55056 


55056 


57336 


57336 


57336 


24 


55056 


57336 


57336 


57336 


57336 


59256 


59256 


59256 


61664 


61664 


25 


57336 


59256 


59256 


59256 


61664 


61664 


61664 


61664 


63776 


63776 


26 


66592 


68808 


68808 


68808 


71112 


71112 


71112 


73712 


73712 


75376 


-'tbs 


-'^PRB 


101 


102 


103 


104 


105 


106 


107 


108 


109 


110 





2792 


2856 


2856 


2856 


2984 


2984 


2984 


2984 


2984 


3112 


1 


3752 


3752 


3752 


3752 


3880 


3880 


3880 


4008 


4008 


4008 


2 


4584 


4584 


4584 


4584 


4776 


4776 


4776 


4776 


4968 


4968 


3 


5992 


5992 


5992 


5992 


6200 


6200 


6200 


6200 


6456 


6456 


4 


7224 


7224 


7480 


7480 


7480 


7480 


7736 


7736 


7736 


7992 


5 


8760 


9144 


9144 


9144 


9144 


9528 


9528 


9528 


9528 


9528 


6 


10680 


10680 


10680 


10680 


11064 


11064 


11064 


11448 


11448 


11448 


7 


12216 


12576 


12576 


12576 


12960 


12960 


12960 


12960 


13536 


13536 


8 


14112 


14112 


14688 


14688 


14688 


14688 


15264 


15264 


15264 


15264 


9 


15840 


16416 


16416 


16416 


16416 


16992 


16992 


16992 


16992 


17568 


10 


17568 


18336 


18336 


18336 


18336 


18336 


19080 


19080 


19080 


19080 


11 


20616 


20616 


20616 


21384 


21384 


21384 


21384 


22152 


22152 


22152 


12 


22920 


23688 


23688 


23688 


23688 


24496 


24496 


24496 


24496 


25456 


13 


26416 


26416 


26416 


26416 


27376 


27376 


27376 


27376 


28336 


28336 


14 


29296 


29296 


29296 


29296 


30576 


30576 


30576 


30576 


31704 


31704 


15 


30576 


31704 


31704 


31704 


31704 


32856 


32856 


32856 


34008 


34008 


16 


32856 


32856 


34008 


34008 


34008 


34008 


35160 


35160 


35160 


35160 


17 


36696 


36696 


36696 


37888 


37888 


37888 


39232 


39232 


39232 


39232 


18 


40576 


40576 


40576 


40576 


42368 


42368 


42368 


42368 


43816 


43816 


19 


43816 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


46888 


46888 
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20 


46888 


46888 


48936 


48936 


48936 


48936 


48936 


51024 


51024 


51024 


21 


51024 


51024 


51024 


52752 


52752 


52752 


52752 


55056 


55056 


55056 


22 


55056 


55056 


55056 


57336 


57336 


57336 


57336 


59256 


59256 


59256 


23 


57336 


59256 


59256 


59256 


59256 


61664 


61664 


61664 


61664 


63776 


24 


61664 


61664 


63776 


63776 


63776 


63776 


66592 


66592 


66592 


66592 


25 


63776 


63776 


66592 


66592 


66592 


66592 


68808 


68808 


68808 


71112 


26 


75376 


75376 


75376 


75376 


75376 


75376 


75376 


75376 


75376 


75376 



[TS 36.306 clause 4.1] 

The field ue-Category defines a combined uplink and downlink capability. The parameters set by the UE Category are 
defined in subclause 4.2. Tables 4. 1-1 and 4. 1-2 define the downlink and, respectively, uplink physical layer parameter 
values for each UE Category. 

Table 4.1-1 : Downlink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

DL-SCH transport 

block bits received 

within a TTI 


Maximum number 
of bits of a DL- 
SCH transport 
block received 
within a 1 II 


Total number of 
soft channel bits 


Maximum number 

of supported 

layers for spatial 

multiplexing in DL 


Category 1 


10296 


10296 


250368 


1 


Category 2 


51024 


51024 


1237248 


2 


Category 3 


102048 


75376 


1237248 


2 


Category 4 


150752 


75376 


1827072 


2 


Category 5 


299552 


149776 


3667200 


4 



Table 4.1-2: Uplink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

bits of an UL-SCH 

transport block 

transmitted within a 

TTI 


Support for 
64QAM in UL 


Category 1 


5160 


No 


Category 2 


25456 


No 


Category 3 


51024 


No 


Category 4 


51024 


No 


Category 5 


75376 


Yes 



7.1.7.1.3.3 Test description 

7.1.7.1.3.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 

Uplink and downlink bandwidth set to the maximum bandwidth for the E-UTRA Band under test as specified in 
Table 5.6.1-1 in [31] (to enable testing of N^^^ up to maximum value). 

UE: 

None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
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7.1.7.1.3.3.2 



Test procedure sequence 
Table 7.1 .7.1 .3.3.2-1 : Maximum TBgize tor different UE categories 



UE Category 


Maximum number of 
bits of a DL-SCH 
transport block 

received within a TTI 


Category 1 


10296 


Category 2 


51024 


Category 3 


75376 


Category 4 


75376 


Category 5 


149776 



Table 7.1.7.1.3.3.2-2: Number of downlink PDCP SDUs and PDCP SDU size used as test data 



TBsize 

[bits] 


Number of 
PDCP SDUs 


PDCP SDU Size 

[bits] 

See note 1 


72 <r5,i,^< 12056 

note 2 


1 


8*FLOOR((TBsize-56)/8) 


12057 <r5^,^^< 24088 


2 


8*FLOOR((TBsize-88)/16)) 


24089 <r5^i,^< 36 112 


3 


8*FLOOR((TBsize-112)/24)) 


361 13 <r5,i,,< 48144 


4 


8*FLOOR((TBsize-144)/32)) 


48145 <r5,,,^< 60168 


5 


8*FL00R((TBsize - 1 68)/40)) 


60169 <r5^i,^< 72200 


6 


8*FLOOR((TBsize-200)/48)) 


r5,,,,> 72201 


7 


8*FL00R((TBsize- 224)/56)) 


Note 1 : Each PDCP SDU is limited to 1 500 octets (to l<eep below maximum SDU size of ESIVI as specified in TS 
24.301 clause 9.9.4.12). 

The PDCP SDU size of each PDCP SDU is 

PDCP SDU size = (TBsize - N*PDCP header size -AMD PDU header size - IVIAC header size - Size of 
Timing Advance) / N, where 

PDCP header size is 1 6 bits for the RLC AM and 1 2-bit SN case; 

AMD PDU header size is CIEL[(16-h(N-1)*12)/8] bytes which includes 16 standard AM header and (N-1) 

Length indicators; and 

MAC header size = R/R/E/LCID MAC subheader (8 bits for Timing Advance) + R/R/E/LCID MAC 

subheader (8 bits for MAC SDU) = 8 + 8 bits 

Size of Timing Advance MAC CE is 8 bits (if no Timing Advance needs to be sent, padding will occur 

instead) 

This gives: 

PDCP SDU size = 8*FL00R((TBsize- N*16- 8*CIEL((16+(N-1)*12)/8) - 24)/(8*N)) bits. 
Note 2: According to TS 36.213 Table 7.1.7.2.1-1 and the final PDCP SDU size formula in Note 1, the smallest 
TBsize that can be tested is 72 bits. 



Table 7.1.7.1.3.3.2-2a: Bandwidth Dependent Parameters 



lUlax Bandwidth 


Max A^pRg 


lOMhz 


50 


15Mhz 


75 


20Mhz 


100 


Note : Maximum bandwidth for EUTRA bands is 10/15/20 Mhz. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



359 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 7.1.7.1.3.3.2-2b: Ambiguous Sizes of Information Bits 

I {1 2, 1 4. 1 6 .20, 24. 26, 32, 40, 44, 56} | 



Table 7.1.7.1.3.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Steps 1 to 4 are 
repeated for values of A^p^g from 

1 to Max A^pug as per table 

7.1.7.1.3.3.2-2aand /^cs from 
to 28. 










1 


SS looks up /^Bs in table 7.1. 7.1- 
1 in TS 36.213 based on the value 
of /^cs ■ SS looks up TBsize in 
table 7.1.7.2.1-1 in TS 36.213 
based on values of A^pj^, and 

^TBS ■ 












EXCEPTION: Steps 2 to 4 are 
performed if TBsize is less than or 
equal to UE capability "IVIaximum 
number of DL-SCH transport 
block bits received within a TTI" 
as specified in Table 7.1 .7.1 .3.3.2- 
1 and larger than or equal to 72 
bits as specified in Table 
7.1 .7.1 .3.3.2-2, and the effective 
channel code rate, as defined in 
TS 36.213 clause 7.1.7, is lower 
than or equal to 0.930. 










2 


SS creates one or more PDCP 
SDUs. depending on TBsize, in 
accordance with Table 
7.1.7.1.3.3.2-2. 










3 


SS transmits the PDCP SDUs 
concatenated into a MAC PDU 
and indicates on PDCCH DCI 
Format 1 A with RA type 2 using 
Localized VRB and a resource 
block assignment (RBA) 

correspondent to A^p^g as 

specified in 7.1 .6.3 in TS 36.21 3 
and modulation and coding 

scheme If^c^ ■ 

If the number of information bits in 
format 1A is less than that of 
format 0. zeros shall be appended 
by the SS to format 1A until the 
payload size equals that of format 
0. 

If the number of information bits in 
format 1 A belongs to one of the 
sizes in Table 7.1 .7.1 .3.3.2-2b, 
one zero bit shall be appended by 
the SS to format 1 A. 


<— 


MAC PDU (NxPDCP 

SDUs) 

DCI: (DC! Format 1 A. RA 

type 2. 

Localized/Distributed VRB 

assignment flag ='0', 

RBA(A^p,J, /^cs) 






3A 


At the reception of scheduling 
request the SS transmits UL 
Grantfor transmitting loop back 


<- 


(UL Grant) 
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PDCP SDUs. 










4 


CHECK: Does UE return the 
same number of PDCP SDUs with 
same content as transmitted by 
the SS in step 3? 


— > 


(NxPDCP SDUs) 


1 


P 



7.1 .7.1 .3.3.3 Specific Message Contents 

Table 7.1.7.1.3.3.3.1: MAC-MainConfig-RBC (preamble Table 4.5.3.3-1 [18]: Step 8) 



Derivation Path: 36.508 Table 4.8.2.1 .5-1 


Information Element 


Value/remark 


Comment 


Condition 


retxBSR-Timer 


sf320 







7.1.7.1.4 DL-SCH transport block size selection / DCI format 1 A / RA type 2 / Distributed 

VRB 



7.1.7.1.4.1 
(1) 



Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE on PDCCH receives DCI format lA indicating Resource Allocation Type 2 with Distributed 

VRB, a resource block assignment correspondent to A^p^g physical resource blocks and a modulation 

and coding scheme lyics } 

then { UE decodes the received transport block of size correspondent to the read A^pj^g and Ij^q^ 
and forwards it to higher layers } 



7.1.7.1.4.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.212, clauses 5.3.3.1.2 and 
5.3.3.1.3; TS 36.213, clauses 7.1.6.3, 7.1.7, 7.1.7.1, 7.1.7.2 and 7.1.7.2.1; and TS 36.306 clause 4.1. 

[TS 36.212 clause 5.3.3.1.2] 



Table 5.3.3.1.2-1 : Ambiguous Sizes of Information Bits 

I {1 2, 1 4. 1 6 .20, 24. 26, 32, 40, 44, 56} | 

[TS 36.212 clause 5.3.3.1.3] 

DCI format 1 A is used for the compact scheduling of one PDSCH codeword and random access procedure initiated by a 
PDCCH order. 

The following information is transmitted by means of the DCI format 1 A: 

- Flag for formatO/formatlA differentiation - 1 bit, where value indicates format and value 1 indicates format 1 A 



Otherwise, 

- Localized/Distributed VRB assignment flag - 1 bit as defined in 7.1.6.3 of [3] 



■ Resource block assignment - |log2(A'RB (-^rb +1)^2) | bits as defined in section 7.1.6.3 of [3]: 
- For localized VRB: 
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I logjCA^RB (-^RB + 1)/2) I bits provide the resource allocation 
- For distributed VRB: 

- If A^°g < 50 or if the format 1 A CRC is scrambled by RA-RNTI, P-RNTI, or SI-RNTI 

- jlogjCA^RB (A^RB +l)/2) I bits provide the resource allocation 

- Else 

- 1 bit, the MSB indicates the gap value, where value indicates A^gap = N „^„i and value 1 indicates 

N = N ^ 

gap gap,2 

- (|log2(A^RB (■'Vrb +1)/2) I —1) bits provide the resource allocation 
- Modulation and coding scheme - 5bits as defined in section 7.1.7 of [3] 

If the number of information bits in format 1 A is less than that of format 0, zeros shall be appended to format 1 A until 
the payload size equals that of format 0. 

If the number of information bits in format lA belongs to one of the sizes in Table 5.3.3.1.2-1, one zero bit shall be 
appended to format lA. 



[TS 36.213 clause 7.1.6.3] 

In resource allocations of type 2, the resource block assignment information indicates to a scheduled UE a set of 
contiguously allocated localized virtual resource blocks or distributed virtual resource blocks. In case of resource 
allocation signalled with PDCCH DCI format 1 A, IB or ID, one bit flag indicates whether localized virtual resource 
blocks or distributed virtual resource blocks are assigned (value indicates Localized and value 1 indicates Distributed 
VRB assignment) while distributed virtual resource blocks are always assigned in case of resource allocation signalled 
with PDCCH DCI format IC. Localized VRB allocations for a UE vary from a single VRB up to a maximum number 
of VRBs spanning the system bandwidth. For DCI format 1 A the distributed VRB allocations for a UE vary from a 
single VRB up to N°^^ VRBs, where N^^^ ^^ defined in [3], if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or 

SI-RNTI. With PDCCH DCI format IB, ID, or lA with a CRC scrambled with C-RNTI, distributed VRB allocations 
for a UE vary from a single VRB up to A^^^g VRBs if N°l^ is 6-49 and vary from a single VRB up to 16 if N°l^ is 50- 

1 10. With PDCCH DCI format IC, distributed VRB allocations for a UE vary from iV^^ VRB(s) up to 

N^t, / Nf!'!F ■ Nf!?F VRBs with an increment step of Nl't^ , where Nl't^ value is determined depending on the downlink 

L VRB RB J RB -'- RB RB -■- '-^ 

system bandwidth as shown in Table 7.1.6.3-1. 

Table 7.1.6.3-1: n''!F values vs. Downlink System Bandwidth 



System BW 

(<B^) 


K^ 


DCI format 1C 


6-49 


2 


50-110 


4 



For PDCCH DCI format 1 A, IB or ID, a type 2 resource allocation field consists of a resource indication value (RIV) 
corresponding to a starting resource block ( RB^,^i., ) and a length in terms of virtually contiguously allocated resource 

blocks Lfjj^g^ . The resource indication value is defined by 



if(L,,,.,-l)<L<,V2j then 



i?/y = <,^(L,,,.,-l) + 7?5.,, 
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else 
RIV = N'^;; {N'^j; - L,,,^ + 1) + ( A^^,^ - 1 - RB,^, ) 

where L^^^^ > 1 and shall not exceed Nyj^g — RB^^^^^f . 

For PDCCH DCI format IC, a type 2 resource block assignment field consists of a resource indication value {RIV) 
corresponding to a starting resource block ( RB^,^„ = , N^^ , 2N'l^ ,■■■, ([a^vrb ^ ■^rb'' J~ ViN'^^ ) and a length in terms 
of virtually contiguously allocated resource blocks ( -Lpg^j = N^^l^ , 2N^j^'^ ,■■■, I iVvRB ^ ■'^rb'' J' ■'^rb'' -*■ ^^^ resource 
indication value is defined by 

if(4,,.,-l)<[A^;^,V2j then 

else 
RIV = <^^ «^^ - 4,,, + 1) + «^^ - 1 - i?5l„ ) 

where 4,,, = L,,,, / NT/ , i?5.1. = i?5.„„„ / A^^ and A^;^^ = [a^^ / NT/ J- Here, 

L'cRBs ^ 1 and shall not exceed Ny^g -RB[,^^, . 
[TS 36.213 clause 7.1.7] 

To determine the modulation order and transport block size(s) in the physical downlink shared channel, the UE shall 
first 

- read the 5-bit "modulation and coding scheme" field ( ly^^^ ) in the DCI 

and second if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI then 



else 



- set the Table 7.1.7.2.1-1 column indicator A^p^g to the total number of allocated PRBs based on the procedure 
defined in Section 7. 1 .6. 

if the transport block is transmitted in DwPTS of the special subframe in frame structure type 2, then 
set the Table 7.1.7.2.1-1 column indicator N pj^g =max| A'^p^gXO.TS , l[, 

else, set the Table 7.1.7.2.1-1 column indicator A^^^^ = N pj^g . 

The UE may skip decoding a transport block in an initial transmission if the effective channel code rate is higher than 
0.930, where the effective channel code rate is defined as the number of downlink information bits (including CRC bits) 
divided by the number of physical channel bits on PDSCH. If the UE skips decoding, the physical layer indicates to 
higher layer that the transport block is not successfully decoded. For the special subframe configurations and 5 with 
normal CP or configurations and 4 with extended CP, shown in table 4.2-1 [3], there shall be no PDSCH transmission 
in DwPTS of the special subframe. 

[TS 36.213 clause 7.1.7.1] 

The UE shall use g„ = 2 if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI, otherwise, the UE shall 
use ly^^^ and Table 1 A.l .\-\ to determine the modulation order ( 2„ ) used in the physical downlink shared channel. 
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Table 7.1.7.1-1 : Modulation and TBS index table for PDSCH 



lUICS Index 

^MCS 


Modulation Order 


TBS Index 





2 





1 


2 


1 


2 


2 


2 


3 


2 


3 


4 


2 


4 


5 


2 


5 


6 


2 


6 


7 


2 


7 


8 


2 


8 


9 


2 


9 


10 


4 


9 


11 


4 


10 


12 


4 


11 


13 


4 


12 


14 


4 


13 


15 


4 


14 


16 


4 


15 


17 


6 


15 


18 


6 


16 


19 


6 


17 


20 


6 


18 


21 


6 


19 


22 


6 


20 


23 


6 


21 


24 


6 


22 


25 


6 


23 


26 


6 


24 


27 


6 


25 


28 


6 


26 


29 


2 


reserved 


30 


4 


31 


6 



[TS 36.213 clause 7.1.7.2] 

If the DCI CRC is scrambled by P-RNTl, RA-RNTl, or Sl-RNTl then 
- for DCI format lA: 

the UE shall set the TBS index ( /^gj ) equal to I^^^ and determine its TBS by the procedure in Section 
7.1.7.2.1. 



else 

forO < /,^j(,g < 28 , the UE shall first determine the TBS index ( /^g^ ) using I^^^ and Table 7.1.7.1-1 except if the 

transport block is disabled in DCI formats 2 and 2A as specified below. For a transport block that is not mapped 
to two-layer spatial multiplexing, the TBS is determined by the procedure in Section 7.1.7.2.1. For a transport 
block that is mapped to two-layer spatial multiplexing, the TBS is determined by the procedure in Section 

7.1.7.2.2. 

for 29 < If^^^ ^31, the TBS is assumed to be as determined from DCI transported in the latest PDCCH for the 
same transport block using < I,^^^ < 28 . If there is no latest PDCCH for the same transport block 
using < /^j,5 < 28 , and if the initial PDSCH for the same transport block is semi-persistently scheduled, the 
TBS shall be determined from the most recent semi-persistent scheduling assignment PDCCH. 
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In DCI formats 2 and 2A a transport block is disabled if I,^^^ = and if rv^ji = 1 otherwise the transport block is 
enabled. 

The NDI and HARQ process ID, as signalled on PDCCH, and the TBS, as determined above, shall be delivered to 
higher layers. 

[TS 36.213 clause 7.1.7.2.1] 

Fori < A^pRB < 110, the TBS is given by the ( /^gs , A^pRg ) entry of Table 7.1.7.2.1-1. 
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Table 7.1.7.2.1-1: Transport block size table (dimension 27x110) 



^TBS 


"PRB 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 





16 


32 


56 


88 


120 


152 


176 


208 


224 


256 


1 


24 


56 


88 


144 


176 


208 


224 


256 


328 


344 


2 


32 


72 


144 


176 


208 


256 


296 


328 


376 


424 


3 


40 


104 


176 


208 


256 


328 


392 


440 


504 


568 


4 


56 


120 


208 


256 


328 


408 


488 


552 


632 


696 


5 


72 


144 


224 


328 


424 


504 


600 


680 


776 


872 


6 


328 


176 


256 


392 


504 


600 


712 


808 


936 


1032 


7 


104 


224 


328 


472 


584 


712 


840 


968 


1096 


1224 


8 


120 


256 


392 


536 


680 


808 


968 


1096 


1256 


1384 


9 


136 


296 


456 


616 


776 


936 


1096 


1256 


1416 


1544 


10 


144 


328 


504 


680 


872 


1032 


1224 


1384 


1544 


1736 


11 


176 


376 


584 


776 


1000 


1192 


1384 


1608 


1800 


2024 


12 


208 


440 


680 


904 


1128 


1352 


1608 


1800 


2024 


2280 


13 


224 


488 


744 


1000 


1256 


1544 


1800 


2024 


2280 


2536 


14 


256 


552 


840 


1128 


1416 


1736 


1992 


2280 


2600 


2856 


15 


280 


600 


904 


1224 


1544 


1800 


2152 


2472 


2728 


3112 


16 


328 


632 


968 


1288 


1608 


1928 


2280 


2600 


2984 


3240 


17 


336 


696 


1064 


1416 


1800 


2152 


2536 


2856 


3240 


3624 


18 


376 


776 


1160 


1544 


1992 


2344 


2792 


3112 


3624 


4008 


19 


408 


840 


1288 


1736 


2152 


2600 


2984 


3496 


3880 


4264 


20 


440 


904 


1384 


1864 


2344 


2792 


3240 


3752 


4136 


4584 


21 


488 


1000 


1480 


1992 


2472 


2984 


3496 


4008 


4584 


4968 


22 


520 


1064 


1608 


2152 


2664 


3240 


3752 


4264 


4776 


5352 


23 


552 


1128 


1736 


2280 


2856 


3496 


4008 


4584 


5160 


5736 


24 


584 


1192 


1800 


2408 


2984 


3624 


4264 


4968 


5544 


5992 


25 


616 


1256 


1864 


2536 


3112 


3752 


4392 


5160 


5736 


6200 


26 


712 


1480 


2216 


2984 


3752 


4392 


5160 


5992 


6712 


7480 


^TBS 


-''^PRB 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 





288 


328 


344 


376 


392 


424 


456 


488 


504 


536 


1 


376 


424 


456 


488 


520 


568 


600 


632 


680 


712 


2 


472 


520 


568 


616 


648 


696 


744 


776 


840 


872 


3 


616 


680 


744 


808 


872 


904 


968 


1032 


1096 


1160 


4 


776 


840 


904 


1000 


1064 


1128 


1192 


1288 


1352 


1416 


5 


968 


1032 


1128 


1224 


1320 


1384 


1480 


1544 


1672 


1736 


6 


1128 


1224 


1352 


1480 


1544 


1672 


1736 


1864 


1992 


2088 


7 


1320 


1480 


1608 


1672 


1800 


1928 


2088 


2216 


2344 


2472 


8 


1544 


1672 


1800 


1928 


2088 


2216 


2344 


2536 


2664 


2792 


9 


1736 


1864 


2024 


2216 


2344 


2536 


2664 


2856 


2984 


3112 


10 


1928 


2088 


2280 


2472 


2664 


2792 


2984 


3112 


3368 


3496 


11 


2216 


2408 


2600 


2792 


2984 


3240 


3496 


3624 


3880 


4008 


12 


2472 


2728 


2984 


3240 


3368 


3624 


3880 


4136 


4392 


4584 


13 


2856 


3112 


3368 


3624 


3880 


4136 


4392 


4584 


4968 


5160 


14 


3112 


3496 


3752 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


15 


3368 


3624 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


6200 


16 


3624 


3880 


4264 


4584 


4968 


5160 


5544 


5992 


6200 


6456 


17 


4008 


4392 


4776 


5160 


5352 


5736 


6200 


6456 


6712 


7224 


18 


4392 


4776 


5160 


5544 


5992 


6200 


6712 


7224 


7480 


7992 


19 


4776 


5160 


5544 


5992 


6456 


6968 


7224 


7736 


8248 


8504 


20 


5160 


5544 


5992 


6456 


6968 


7480 


7992 


8248 


8760 


9144 


21 


5544 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


9912 


22 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


10296 


10680 


23 


6200 


6968 


7480 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


24 


6712 


7224 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


12216 


25 


6968 


7480 


8248 


8760 


9528 


10296 


10680 


11448 


12216 


12576 


26 


8248 


8760 


9528 


10296 


11064 


11832 


12576 


13536 


14112 


14688 


^TBS 


-'^PRB 


21 


22 


23 


24 


25 


26 


27 


28 


29 


30 
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568 


600 


616 


648 


680 


712 


744 


776 


776 


808 


1 


744 


776 


808 


872 


904 


936 


968 


1000 


1032 


1064 


2 


936 


968 


1000 


1064 


1096 


1160 


1192 


1256 


1288 


1320 


3 


1224 


1256 


1320 


1384 


1416 


1480 


1544 


1608 


1672 


1736 


4 


1480 


1544 


1608 


1736 


1800 


1864 


1928 


1992 


2088 


2152 


5 


1864 


1928 


2024 


2088 


2216 


2280 


2344 


2472 


2536 


2664 


6 


2216 


2280 


2408 


2472 


2600 


2728 


2792 


2984 


2984 


3112 


7 


2536 


2664 


2792 


2984 


3112 


3240 


3368 


3368 


3496 


3624 


8 


2984 


3112 


3240 


3368 


3496 


3624 


3752 


3880 


4008 


4264 


9 


3368 


3496 


3624 


3752 


4008 


4136 


4264 


4392 


4584 


4776 


10 


3752 


3880 


4008 


4264 


4392 


4584 


4776 


4968 


5160 


5352 


11 


4264 


4392 


4584 


4776 


4968 


5352 


5544 


5736 


5992 


5992 


12 


4776 


4968 


5352 


5544 


5736 


5992 


6200 


6456 


6712 


6712 


13 


5352 


5736 


5992 


6200 


6456 


6712 


6968 


7224 


7480 


7736 


14 


5992 


6200 


6456 


6968 


7224 


7480 


7736 


7992 


8248 


8504 


15 


6456 


6712 


6968 


7224 


7736 


7992 


8248 


8504 


8760 


9144 


16 


6712 


7224 


7480 


7736 


7992 


8504 


8760 


9144 


9528 


9912 


17 


7480 


7992 


8248 


8760 


9144 


9528 


9912 


10296 


10296 


10680 


18 


8248 


8760 


9144 


9528 


9912 


10296 


10680 


11064 


11448 


11832 


19 


9144 


9528 


9912 


10296 


10680 


11064 


11448 


12216 


12576 


12960 


20 


9912 


10296 


10680 


11064 


11448 


12216 


12576 


12960 


13536 


14112 


21 


10680 


11064 


11448 


12216 


12576 


12960 


13536 


14112 


14688 


15264 


22 


11448 


11832 


12576 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


23 


12216 


12576 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


24 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


17568 


18336 


25 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


17568 


18336 


19080 


26 


15264 


16416 


16992 


17568 


18336 


19080 


19848 


20616 


21384 


22152 


^TBS 


N 

"PRB 


31 


32 


33 


34 


35 


36 


37 


38 


39 


40 





840 


872 


904 


936 


968 


1000 


1032 


1032 


1064 


1096 


1 


1128 


1160 


1192 


1224 


1256 


1288 


1352 


1384 


1416 


1416 


2 


1384 


1416 


1480 


1544 


1544 


1608 


1672 


1672 


1736 


1800 


3 


1800 


1864 


1928 


1992 


2024 


2088 


2152 


2216 


2280 


2344 


4 


2216 


2280 


2344 


2408 


2472 


2600 


2664 


2728 


2792 


2856 


5 


2728 


2792 


2856 


2984 


3112 


3112 


3240 


3368 


3496 


3496 


6 


3240 


3368 


3496 


3496 


3624 


3752 


3880 


4008 


4136 


4136 


7 


3752 


3880 


4008 


4136 


4264 


4392 


4584 


4584 


4776 


4968 


8 


4392 


4584 


4584 


4776 


4968 


4968 


5160 


5352 


5544 


5544 


9 


4968 


5160 


5160 


5352 


5544 


5736 


5736 


5992 


6200 


6200 


10 


5544 


5736 


5736 


5992 


6200 


6200 


6456 


6712 


6712 


6968 


11 


6200 


6456 


6712 


6968 


6968 


7224 


7480 


7736 


7736 


7992 


12 


6968 


7224 


7480 


7736 


7992 


8248 


8504 


8760 


8760 


9144 


13 


7992 


8248 


8504 


8760 


9144 


9144 


9528 


9912 


9912 


10296 


14 


8760 


9144 


9528 


9912 


9912 


10296 


10680 


11064 


11064 


11448 


15 


9528 


9912 


10296 


10296 


10680 


11064 


11448 


11832 


11832 


12216 


16 


9912 


10296 


10680 


11064 


11448 


11832 


12216 


12216 


12576 


12960 


17 


11064 


11448 


11832 


12216 


12576 


12960 


13536 


13536 


14112 


14688 


18 


12216 


12576 


12960 


13536 


14112 


14112 


14688 


15264 


15264 


15840 


19 


13536 


13536 


14112 


14688 


15264 


15264 


15840 


16416 


16992 


16992 


20 


14688 


14688 


15264 


15840 


16416 


16992 


16992 


17568 


18336 


18336 


21 


15840 


15840 


16416 


16992 


17568 


18336 


18336 


19080 


19848 


19848 


22 


16992 


16992 


17568 


18336 


19080 


19080 


19848 


20616 


21384 


21384 


23 


17568 


18336 


19080 


19848 


19848 


20616 


21384 


22152 


22152 


22920 


24 


19080 


19848 


19848 


20616 


21384 


22152 


22920 


22920 


23688 


24496 


25 


19848 


20616 


20616 


21384 


22152 


22920 


23688 


24496 


24496 


25456 


26 


22920 


23688 


24496 


25456 


25456 


26416 


27376 


28336 


29296 


29296 


^TBS 


N 

"PRB 


41 


42 


43 


44 


45 


46 


47 


48 


49 


50 





1128 


1160 


1192 


1224 


1256 


1256 


1288 


1320 


1352 


1384 


1 


1480 


1544 


1544 


1608 


1608 


1672 


1736 


1736 


1800 


1800 


2 


1800 


1864 


1928 


1992 


2024 


2088 


2088 


2152 


2216 


2216 


3 


2408 


2472 


2536 


2536 


2600 


2664 


2728 


2792 


2856 


2856 


4 


2984 


2984 


3112 


3112 


3240 


3240 


3368 


3496 


3496 


3624 
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5 


3624 


3752 


3752 


3880 


4008 


4008 


4136 


4264 


4392 


4392 


6 


4264 


4392 


4584 


4584 


4776 


4776 


4968 


4968 


5160 


5160 


7 


4968 


5160 


5352 


5352 


5544 


5736 


5736 


5992 


5992 


6200 


8 


5736 


5992 


5992 


6200 


6200 


6456 


6456 


6712 


6968 


6968 


9 


6456 


6712 


6712 


6968 


6968 


7224 


7480 


7480 


7736 


7992 


10 


7224 


7480 


7480 


7736 


7992 


7992 


8248 


8504 


8504 


8760 


11 


8248 


8504 


8760 


8760 


9144 


9144 


9528 


9528 


9912 


9912 


12 


9528 


9528 


9912 


9912 


10296 


10680 


10680 


11064 


11064 


11448 


13 


10680 


10680 


11064 


11448 


11448 


11832 


12216 


12216 


12576 


12960 


14 


11832 


12216 


12216 


12576 


12960 


12960 


13536 


13536 


14112 


14112 


15 


12576 


12960 


12960 


13536 


13536 


14112 


14688 


14688 


15264 


15264 


16 


13536 


13536 


14112 


14112 


14688 


14688 


15264 


15840 


15840 


16416 


17 


14688 


15264 


15264 


15840 


16416 


16416 


16992 


17568 


17568 


18336 


18 


16416 


16416 


16992 


17568 


17568 


18336 


18336 


19080 


19080 


19848 


19 


17568 


18336 


18336 


19080 


19080 


19848 


20616 


20616 


21384 


21384 


20 


19080 


19848 


19848 


20616 


20616 


21384 


22152 


22152 


22920 


22920 


21 


20616 


21384 


21384 


22152 


22920 


22920 


23688 


24496 


24496 


25456 


22 


22152 


22920 


22920 


23688 


24496 


24496 


25456 


25456 


26416 


27376 


23 


23688 


24496 


24496 


25456 


25456 


26416 


27376 


27376 


28336 


28336 


24 


25456 


25456 


26416 


26416 


27376 


28336 


28336 


29296 


29296 


30576 


25 


26416 


26416 


27376 


28336 


28336 


29296 


29296 


30576 


31704 


31704 


26 


30576 


30576 


31704 


32856 


32856 


34008 


35160 


35160 


36696 


36696 


^TBS 


N 

"PRB 


51 


52 


53 


54 


55 


56 


57 


58 


59 


60 





1416 


1416 


1480 


1480 


1544 


1544 


1608 


1608 


1608 


1672 


1 


1864 


1864 


1928 


1992 


1992 


2024 


2088 


2088 


2152 


2152 


2 


2280 


2344 


2344 


2408 


2472 


2536 


2536 


2600 


2664 


2664 


3 


2984 


2984 


3112 


3112 


3240 


3240 


3368 


3368 


3496 


3496 


4 


3624 


3752 


3752 


3880 


4008 


4008 


4136 


4136 


4264 


4264 


5 


4584 


4584 


4776 


4776 


4776 


4968 


4968 


5160 


5160 


5352 


6 


5352 


5352 


5544 


5736 


5736 


5992 


5992 


5992 


6200 


6200 


7 


6200 


6456 


6456 


6712 


6712 


6712 


6968 


6968 


7224 


7224 


8 


7224 


7224 


7480 


7480 


7736 


7736 


7992 


7992 


8248 


8504 


9 


7992 


8248 


8248 


8504 


8760 


8760 


9144 


9144 


9144 


9528 


10 


9144 


9144 


9144 


9528 


9528 


9912 


9912 


10296 


10296 


10680 


11 


10296 


10680 


10680 


11064 


11064 


11448 


11448 


11832 


11832 


12216 


12 


11832 


11832 


12216 


12216 


12576 


12576 


12960 


12960 


13536 


13536 


13 


12960 


13536 


13536 


14112 


14112 


14688 


14688 


14688 


15264 


15264 


14 


14688 


14688 


15264 


15264 


15840 


15840 


16416 


16416 


16992 


16992 


15 


15840 


15840 


16416 


16416 


16992 


16992 


17568 


17568 


18336 


18336 


16 


16416 


16992 


16992 


17568 


17568 


18336 


18336 


19080 


19080 


19848 


17 


18336 


19080 


19080 


19848 


19848 


20616 


20616 


20616 


21384 


21384 


18 


19848 


20616 


21384 


21384 


22152 


22152 


22920 


22920 


23688 


23688 


19 


22152 


22152 


22920 


22920 


23688 


24496 


24496 


25456 


25456 


25456 


20 


23688 


24496 


24496 


25456 


25456 


26416 


26416 


27376 


27376 


28336 


21 


25456 


26416 


26416 


27376 


27376 


28336 


28336 


29296 


29296 


30576 


22 


27376 


28336 


28336 


29296 


29296 


30576 


30576 


31704 


31704 


32856 


23 


29296 


29296 


30576 


30576 


31704 


31704 


32856 


32856 


34008 


34008 


24 


31704 


31704 


32856 


32856 


34008 


34008 


35160 


35160 


36696 


36696 


25 


32856 


32856 


34008 


34008 


35160 


35160 


36696 


36696 


37888 


37888 


26 


37888 


37888 


39232 


40576 


40576 


40576 


42368 


42368 


43816 


43816 


^TBS 


^PRB 


61 


62 


63 


64 


65 


66 


67 


68 


69 


70 





1672 


1736 


1736 


1800 


1800 


1800 


1864 


1864 


1928 


1928 


1 


2216 


2280 


2280 


2344 


2344 


2408 


2472 


2472 


2536 


2536 


2 


2728 


2792 


2856 


2856 


2856 


2984 


2984 


3112 


3112 


3112 


3 


3624 


3624 


3624 


3752 


3752 


3880 


3880 


4008 


4008 


4136 


4 


4392 


4392 


4584 


4584 


4584 


4776 


4776 


4968 


4968 


4968 


5 


5352 


5544 


5544 


5736 


5736 


5736 


5992 


5992 


5992 


6200 


6 


6456 


6456 


6456 


6712 


6712 


6968 


6968 


6968 


7224 


7224 


7 


7480 


7480 


7736 


7736 


7992 


7992 


8248 


8248 


8504 


8504 


8 


8504 


8760 


8760 


9144 


9144 


9144 


9528 


9528 


9528 


9912 


9 


9528 


9912 


9912 


10296 


10296 


10296 


10680 


10680 


11064 


11064 
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10 


10680 


11064 


11064 


11448 


11448 


11448 


11832 


11832 


12216 


12216 


11 


12216 


12576 


12576 


12960 


12960 


13536 


13536 


13536 


14112 


14112 


12 


14112 


14112 


14112 


14688 


14688 


15264 


15264 


15264 


15840 


15840 


13 


15840 


15840 


16416 


16416 


16992 


16992 


16992 


17568 


17568 


18336 


14 


17568 


17568 


18336 


18336 


18336 


19080 


19080 


19848 


19848 


19848 


15 


18336 


19080 


19080 


19848 


19848 


20616 


20616 


20616 


21384 


21384 


16 


19848 


19848 


20616 


20616 


21384 


21384 


22152 


22152 


22152 


22920 


17 


22152 


22152 


22920 


22920 


23688 


23688 


24496 


24496 


24496 


25456 


18 


24496 


24496 


24496 


25456 


25456 


26416 


26416 


27376 


27376 


27376 


19 


26416 


26416 


27376 


27376 


28336 


28336 


29296 


29296 


29296 


30576 


20 


28336 


29296 


29296 


29296 


30576 


30576 


31704 


31704 


31704 


32856 


21 


30576 


31704 


31704 


31704 


32856 


32856 


34008 


34008 


35160 


35160 


22 


32856 


34008 


34008 


34008 


35160 


35160 


36696 


36696 


36696 


37888 


23 


35160 


35160 


36696 


36696 


37888 


37888 


37888 


39232 


39232 


40576 


24 


36696 


37888 


37888 


39232 


39232 


40576 


40576 


42368 


42368 


42368 


25 


39232 


39232 


40576 


40576 


40576 


42368 


42368 


43816 


43816 


43816 


26 


45352 


45352 


46888 


46888 


48936 


48936 


48936 


51024 


51024 


52752 


^TBS 


N 

"PRB 


71 


72 


73 


74 


75 


76 


77 


78 


79 


80 





1992 


1992 


2024 


2088 


2088 


2088 


2152 


2152 


2216 


2216 


1 


2600 


2600 


2664 


2728 


2728 


2792 


2792 


2856 


2856 


2856 


2 


3240 


3240 


3240 


3368 


3368 


3368 


3496 


3496 


3496 


3624 


3 


4136 


4264 


4264 


4392 


4392 


4392 


4584 


4584 


4584 


4776 


4 


5160 


5160 


5160 


5352 


5352 


5544 


5544 


5544 


5736 


5736 


5 


6200 


6200 


6456 


6456 


6712 


6712 


6712 


6968 


6968 


6968 


6 


7480 


7480 


7736 


7736 


7736 


7992 


7992 


8248 


8248 


8248 


7 


8760 


8760 


8760 


9144 


9144 


9144 


9528 


9528 


9528 


9912 


8 


9912 


9912 


10296 


10296 


10680 


10680 


10680 


11064 


11064 


11064 


9 


11064 


11448 


11448 


11832 


11832 


11832 


12216 


12216 


12576 


12576 


10 


12576 


12576 


12960 


12960 


12960 


13536 


13536 


13536 


14112 


14112 


11 


14112 


14688 


14688 


14688 


15264 


15264 


15840 


15840 


15840 


16416 


12 


16416 


16416 


16416 


16992 


16992 


17568 


17568 


17568 


18336 


18336 


13 


18336 


18336 


19080 


19080 


19080 


19848 


19848 


19848 


20616 


20616 


14 


20616 


20616 


20616 


21384 


21384 


22152 


22152 


22152 


22920 


22920 


15 


22152 


22152 


22152 


22920 


22920 


23688 


23688 


23688 


24496 


24496 


16 


22920 


23688 


23688 


24496 


24496 


24496 


25456 


25456 


25456 


26416 


17 


25456 


26416 


26416 


26416 


27376 


27376 


27376 


28336 


28336 


29296 


18 


28336 


28336 


29296 


29296 


29296 


30576 


30576 


30576 


31704 


31704 


19 


30576 


30576 


31704 


31704 


32856 


32856 


32856 


34008 


34008 


34008 


20 


32856 


34008 


34008 


34008 


35160 


35160 


35160 


36696 


36696 


36696 


21 


35160 


36696 


36696 


36696 


37888 


37888 


39232 


39232 


39232 


40576 


22 


37888 


39232 


39232 


40576 


40576 


40576 


42368 


42368 


42368 


43816 


23 


40576 


40576 


42368 


42368 


43816 


43816 


43816 


45352 


45352 


45352 


24 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


46888 


48936 


48936 


25 


45352 


45352 


46888 


46888 


46888 


48936 


48936 


48936 


51024 


51024 


26 


52752 


52752 


55056 


55056 


55056 


55056 


57336 


57336 


57336 


59256 


^TBS 


"PRE 


81 


82 


83 


84 


85 


86 


87 


88 


89 


90 





2280 


2280 


2280 


2344 


2344 


2408 


2408 


2472 


2472 


2536 


1 


2984 


2984 


2984 


3112 


3112 


3112 


3240 


3240 


3240 


3240 


2 


3624 


3624 


3752 


3752 


3880 


3880 


3880 


4008 


4008 


4008 


3 


4776 


4776 


4776 


4968 


4968 


4968 


5160 


5160 


5160 


5352 


4 


5736 


5992 


5992 


5992 


5992 


6200 


6200 


6200 


6456 


6456 


5 


7224 


7224 


7224 


7480 


7480 


7480 


7736 


7736 


7736 


7992 


6 


8504 


8504 


8760 


8760 


8760 


9144 


9144 


9144 


9144 


9528 


7 


9912 


9912 


10296 


10296 


10296 


10680 


10680 


10680 


11064 


11064 


8 


11448 


11448 


11448 


11832 


11832 


12216 


12216 


12216 


12576 


12576 


9 


12960 


12960 


12960 


13536 


13536 


13536 


13536 


14112 


14112 


14112 


10 


14112 


14688 


14688 


14688 


14688 


15264 


15264 


15264 


15840 


15840 


11 


16416 


16416 


16992 


16992 


16992 


17568 


17568 


17568 


18336 


18336 


12 


18336 


19080 


19080 


19080 


19080 


19848 


19848 


19848 


20616 


20616 


13 


20616 


21384 


21384 


21384 


22152 


22152 


22152 


22920 


22920 


22920 


14 


22920 


23688 


23688 


24496 


24496 


24496 


25456 


25456 


25456 


25456 
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15 


24496 


25456 


25456 


25456 


26416 


26416 


26416 


27376 


27376 


27376 


16 


26416 


26416 


27376 


27376 


27376 


28336 


28336 


28336 


29296 


29296 


17 


29296 


29296 


30576 


30576 


30576 


30576 


31704 


31704 


31704 


32856 


18 


31704 


32856 


32856 


32856 


34008 


34008 


34008 


35160 


35160 


35160 


19 


35160 


35160 


35160 


36696 


36696 


36696 


37888 


37888 


37888 


39232 


20 


37888 


37888 


39232 


39232 


39232 


40576 


40576 


40576 


42368 


42368 


21 


40576 


40576 


42368 


42368 


42368 


43816 


43816 


43816 


45352 


45352 


22 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


46888 


48936 


48936 


23 


46888 


46888 


46888 


48936 


48936 


48936 


51024 


51024 


51024 


51024 


24 


48936 


51024 


51024 


51024 


52752 


52752 


52752 


52752 


55056 


55056 


25 


51024 


52752 


52752 


52752 


55056 


55056 


55056 


55056 


57336 


57336 


26 


59256 


59256 


61664 


61664 


61664 


63776 


63776 


63776 


66592 


66592 


^TBS 


N 

"PRB 


91 


92 


93 


94 


95 


96 


97 


98 


99 


100 





2536 


2536 


2600 


2600 


2664 


2664 


2728 


2728 


2728 


2792 


1 


3368 


3368 


3368 


3496 


3496 


3496 


3496 


3624 


3624 


3624 


2 


4136 


4136 


4136 


4264 


4264 


4264 


4392 


4392 


4392 


4584 


3 


5352 


5352 


5352 


5544 


5544 


5544 


5736 


5736 


5736 


5736 


4 


6456 


6456 


6712 


6712 


6712 


6968 


6968 


6968 


6968 


7224 


5 


7992 


7992 


8248 


8248 


8248 


8504 


8504 


8760 


8760 


8760 


6 


9528 


9528 


9528 


9912 


9912 


9912 


10296 


10296 


10296 


10296 


7 


11064 


11448 


11448 


11448 


11448 


11832 


11832 


11832 


12216 


12216 


8 


12576 


12960 


12960 


12960 


13536 


13536 


13536 


13536 


14112 


14112 


9 


14112 


14688 


14688 


14688 


15264 


15264 


15264 


15264 


15840 


15840 


10 


15840 


16416 


16416 


16416 


16992 


16992 


16992 


16992 


17568 


17568 


11 


18336 


18336 


19080 


19080 


19080 


19080 


19848 


19848 


19848 


19848 


12 


20616 


21384 


21384 


21384 


21384 


22152 


22152 


22152 


22920 


22920 


13 


23688 


23688 


23688 


24496 


24496 


24496 


25456 


25456 


25456 


25456 


14 


26416 


26416 


26416 


27376 


27376 


27376 


28336 


28336 


28336 


28336 


15 


28336 


28336 


28336 


29296 


29296 


29296 


29296 


30576 


30576 


30576 


16 


29296 


30576 


30576 


30576 


30576 


31704 


31704 


31704 


31704 


32856 


17 


32856 


32856 


34008 


34008 


34008 


35160 


35160 


35160 


35160 


36696 


18 


36696 


36696 


36696 


37888 


37888 


37888 


37888 


39232 


39232 


39232 


19 


39232 


39232 


40576 


40576 


40576 


40576 


42368 


42368 


42368 


43816 


20 


42368 


42368 


43816 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


21 


45352 


46888 


46888 


46888 


46888 


48936 


48936 


48936 


48936 


51024 


22 


48936 


48936 


51024 


51024 


51024 


51024 


52752 


52752 


52752 


55056 


23 


52752 


52752 


52752 


55056 


55056 


55056 


55056 


57336 


57336 


57336 


24 


55056 


57336 


57336 


57336 


57336 


59256 


59256 


59256 


61664 


61664 


25 


57336 


59256 


59256 


59256 


61664 


61664 


61664 


61664 


63776 


63776 


26 


66592 


68808 


68808 


68808 


71112 


71112 


71112 


73712 


73712 


75376 


-'tbs 


-''^PRB 


101 


102 


103 


104 


105 


106 


107 


108 


109 


110 





2792 


2856 


2856 


2856 


2984 


2984 


2984 


2984 


2984 


3112 


1 


3752 


3752 


3752 


3752 


3880 


3880 


3880 


4008 


4008 


4008 


2 


4584 


4584 


4584 


4584 


4776 


4776 


4776 


4776 


4968 


4968 


3 


5992 


5992 


5992 


5992 


6200 


6200 


6200 


6200 


6456 


6456 


4 


7224 


7224 


7480 


7480 


7480 


7480 


7736 


7736 


7736 


7992 


5 


8760 


9144 


9144 


9144 


9144 


9528 


9528 


9528 


9528 


9528 


6 


10680 


10680 


10680 


10680 


11064 


11064 


11064 


11448 


11448 


11448 


7 


12216 


12576 


12576 


12576 


12960 


12960 


12960 


12960 


13536 


13536 


8 


14112 


14112 


14688 


14688 


14688 


14688 


15264 


15264 


15264 


15264 


9 


15840 


16416 


16416 


16416 


16416 


16992 


16992 


16992 


16992 


17568 


10 


17568 


18336 


18336 


18336 


18336 


18336 


19080 


19080 


19080 


19080 


11 


20616 


20616 


20616 


21384 


21384 


21384 


21384 


22152 


22152 


22152 


12 


22920 


23688 


23688 


23688 


23688 


24496 


24496 


24496 


24496 


25456 


13 


26416 


26416 


26416 


26416 


27376 


27376 


27376 


27376 


28336 


28336 


14 


29296 


29296 


29296 


29296 


30576 


30576 


30576 


30576 


31704 


31704 


15 


30576 


31704 


31704 


31704 


31704 


32856 


32856 


32856 


34008 


34008 


16 


32856 


32856 


34008 


34008 


34008 


34008 


35160 


35160 


35160 


35160 


17 


36696 


36696 


36696 


37888 


37888 


37888 


39232 


39232 


39232 


39232 


18 


40576 


40576 


40576 


40576 


42368 


42368 


42368 


42368 


43816 


43816 


19 


43816 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


46888 


46888 
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20 


46888 


46888 


48936 


48936 


48936 


48936 


48936 


51024 


51024 


51024 


21 


51024 


51024 


51024 


52752 


52752 


52752 


52752 


55056 


55056 


55056 


22 


55056 


55056 


55056 


57336 


57336 


57336 


57336 


59256 


59256 


59256 


23 


57336 


59256 


59256 


59256 


59256 


61664 


61664 


61664 


61664 


63776 


24 


61664 


61664 


63776 


63776 


63776 


63776 


66592 


66592 


66592 


66592 


25 


63776 


63776 


66592 


66592 


66592 


66592 


68808 


68808 


68808 


71112 


26 


75376 


75376 


75376 


75376 


75376 


75376 


75376 


75376 


75376 


75376 



[TS 36.306 clause 4.1] 

The field ue-Category defines a combined uplink and downlink capability. The parameters set by the UE Category are 
defined in subclause 4.2. Tables 4.1-1 and 4.1-2 define the downlink and, respectively, uplink physical layer parameter 
values for each UE Category. 

Table 4.1-1 : Downlink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

DL-SCH transport 

block bits received 

within a TTI 


Maximum number 
of bits of a DL- 
SCH transport 
block received 
within a 1 II 


Total number of 
soft channel bits 


Maximum number 

of supported 

layers for spatial 

multiplexing in DL 


Category 1 


10296 


10296 


250368 


1 


Category 2 


51024 


51024 


1237248 


2 


Category 3 


102048 


75376 


1237248 


2 


Category 4 


150752 


75376 


1827072 


2 


Category 5 


299552 


149776 


3667200 


4 



Table 4.1-2: Uplink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

bits of an UL-SCH 

transport block 

transmitted within a 

TTI 


Support for 
64QAM in UL 


Category 1 


5160 


No 


Category 2 


25456 


No 


Category 3 


51024 


No 


Category 4 


51024 


No 


Category 5 


75376 


Yes 



Test description 
Pre-test conditions 



7.1.7.1.4.3 
7.1.7.1.4.3.1 
System Simulator: 

- Cell 1. 

Uplink and downlink bandwidth set to the maximum bandwidth for the E-UTRA Band under test as specified in 
Table 5.6.1-1 in [31] (to enable testing of N^^^ up to maximum value). 

- DCI format IC shall be used for BCCH, PCH and RAR (note). 
UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

NOTE: To maximize resources for DL-SCH TB size testing for DCI format 1 A/RA type 2/Distributed VRB then 
the SS need to use DCI Format IC for BCCH, PCH and RAR 
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7.1.7.1.4.3.2 



Test procedure sequence 
Table 7.1 .7.1 .4.3.2-1 : Maximum TBgize tor different UE categories 



UE Category 


Maximum number of 
bits of a DL-SCH 
transport block 

received within a TTI 


Category 1 


10296 


Category 2 


51024 


Category 3 


75376 


Category 4 


75376 


Category 5 


149776 



Table 7.1.7.1.4.3.2-2: Number of downlink PDCP SDUs and PDCP SDU size used as test data 



TBsize 

[bits] 


Number of 
PDCP SDUs 


PDCP SDU Size 

[bits] 

See note 1 


72 <r5,,,^< 12056 

note 2 


1 


8*FLOOR((TBsize-56)/8) 


12057 <r5^,^^< 24088 


2 


8*FLOOR((TBsize-88)/16)) 


24089 <r5^,^^< 36 112 


3 


8*FLOOR((TBsize-112)/24)) 


361 13 <r5,i,,< 48144 


4 


8*FLOOR((TBsize-144)/32)) 


48145 <r5,,,^< 60168 


5 


8*FL00R((TBsize - 1 68)/40)) 


60169 <r5^i^^< 72200 


6 


8*FLOOR((TBsize-200)/48)) 


r5,^,> 72201 


7 


8*FL00R((TBsize- 224)/56)) 


Note 1 : Each PDCP SDU is limited to 1 500 octets (to l<eep below maximum SDU size of ESIVI as specified in TS 
24.301 clause 9.9.4.12). 

The PDCP SDU size of each PDCP SDU is 

PDCP SDU size = (TBsize - N*PDCP header size - AMD PDU header size - MAC header size - 
Size of Timing Advance) / N, where 

PDCP header size is 1 6 bits for the RLC AM and 1 2-bit SN case; 

AMD PDU header size is CIEL[(16+{N-1)*12)/8] bytes which includes 16 standard AM header 

and (N-1) Length indicators; and 

MAC header size = R/R/E/LCID MAC subheader (8 bits for Timing Advance) + R/R/E/LCID 

MAC subheader (8 bits for MAC SDU) = 8 + 8 bits 

Size of Timing Advance MAC CE is 8 bits (if no Timing Advance needs to be sent, padding will 

occur instead) 

This gives: 

PDCP SDU size = 8*FL00R((TBsize- N*16- 8*CIEL((16+(N-1)*12)/8) - 24)/(8*N)) bits. 
Note 2: According to TS 36.213 Table 7.1.7.2.1-1 and the final PDCP SDU size formula in Note 1, the smallest 
TBsize that can be tested is 72 bits. 



Table 7.1.7.1.4.3.2-2a: Bandwidth Dependent Parameters 



Max Bandwidth 


Max A^pRg 


MAX VRB 


10 Mhz 


50 


16 


15Mhz 


75 


16 


20 Mhz 


100 


16 


Note : Maximum bandwidth for EUTRA bands is 10/15/20 Mhz. 
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Table 7.1.7.1.4.3.2-2b: Ambiguous Sizes of Information Bits 

I {1 2, 1 4. 1 6 .20, 24. 26, 32, 40, 44, 56} | 



Table 7.1.7.1.4.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Steps 1 to 4 are 
repeated for values of A^p^g from 

1 to 16[MAX VRB] and /^cs from 
to 28. 










1 


SS looks up /^Bs in table 7.1. 7.1- 
1 in TS 36.213 based on the value 
of /^jcs ■ SS looks up TBsize in 
table 7.1.7.2.1-1 in TS 36.213 
based on values of //p^ and 

^TBS ■ 












EXCEPTION: steps 2 to 4 are 
performed if TBsize is less than or 
equal to UE capability "IVIaximum 
number of DL-SCH transport 
block bits received within a TTI" 
as specified in Table 7.1 .7.1 .4.3.2- 
1 and larger than or equal to 72 
bits as specified in Table 
7.1 .7.1 .4.3.2-2, and the effective 
channel code rate, as defined in 
TS 36.21 3 clause 7.1 .7 is lower 
than or equal to 0.930. 










2 


SS creates one or more PDCP 
SDUs. depending on TBsize, in 
accordance with Table 
7.1.7.1.4.3.2-2. 










3 


SS transmits the PDCP SDUs 
concatenated into a MAC PDU 
and indicates on PDCCH DCI 
Format 1 A with RA type 2 using 
Distributed VRB and a resource 
block assignment (RBA) 

correspondent to A'pRg as 

specified in 7.1.6.3 in TS 36.213 
and modulation and coding 

scheme I^jics ■ 

If the number of information bits in 
format 1A is less than that of 
format 0. zeros shall be appended 
by the SS to format 1A until the 
payload size equals that of format 
0. 

If the number of information bits in 
format 1 A belongs to one of the 
sizes in Table 7.1 .7.1 .4.3.2-2b, 
one zero bit shall be appended by 
the SS to format 1 A. 


<— 


MAC PDU (NxPDCP 

SDUs) 

DCI: (DCI Format 1 A. RA 

type 2. 

Localized/Distributed VRB 

assignment flag ='1', 

RBA(A?prb), /^cs) 






3A 


At the reception of scheduling 
request the SS transmits UL Grant 
for transmitting loop back PDCP 
SDUs. 


<— 


(UL Grant) 






4 


CHECK: Does UE return the 


-> 


(NxPDCP SDUs) 


1 


P 
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same number of PDCP SDUs with 
same content as transmitted by 
the SS in step 3? 











7.1 .7.1 .4.3.3 Specific Message Contents 

Table 7.1.7.1.4.3.3.1: MAC-MainConfig-RBC (preamble Table 4.5.3.3-1 [18]: Step 8) 



Derivation Path: 36.508 Table 4.8.2.1 .5-1 


Information Element 


Value/remark 


Comment 


Condition 


retxBSR-Timer 


sf320 







DL-SCH transport block size selection / DCI format 2A / RA type / Two 
transport blocks enabled / Transport block to codeword swap flag value set to '0' 

Test Purpose (TP) 



7.1.7.1.5 

7.1.7.1.5.1 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE has two transport blocks enabled and on PDCCH receives DCI format 2A indicating Resource 

Allocation Type 0, a resource block assignment correspondent to A'pj^g physical resource blocks, the 

Transport block to codeword swap flag value set to '0' and a modulation and coding scheme /j^(,g f or 
two transport blocks } 

then { UE decodes the received transport blocks of sizes correspondent to the read A'pi^g and 

^MCS ^°^ transport block 1 and Ij^cs ^°^ transport block 2 and forwards it to higher layers } 



7.1.7.1.5.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.212, clauses 5.3.3.1.2, 
5.3.3.1.5 and 5.3.3. 1.5A; TS 36.213, clauses 7.1.6.1, 7.1.7, 7.1.7.1, 7.1.7.2 and 7.1.7.2.1; and TS 36.306 clause 4.1. 

[TS 36.212 clause 5.3.3.1.2] 



Table 5.3.3.1.2-1 : Ambiguous Sizes of Information Bits 

I {1 2, 1 4. 1 6 .20, 24, 26, 32, 40, 44, 56} | 



[TS 36.212 clause 5.3.3.1.5] 



Table 5.3.3.1.5-1 : Transport block to codeword mapping 
(two transport blocks enabled) 



transport block 

to codeword 
swap flag value 


codeword 
(enabled) 


codeword 1 
(enabled) 





transport blocl< 1 


transport blocl< 2 


1 


transport blocl< 2 


transport blocl< 1 
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Table 5.3.3.1.5-2: Transport block to codeword mapping 
(one transport block enabled) 



Transport block 1 


transport block 2 


codeword 
(enabled) 


codeword 1 
(disabled) 


enabled 


disabled 


transport 
block 1 


- 


disabled 


enabled 


transport 
block 2 


- 



[TS 36.212 clause 5.3.3. 1.5A] 

The following information is transmitted by means of the DCl format 2A: 

- Resource allocation header (resource allocation type / type 1) - 1 bit as defined in section 7.1.6 of [3] 

If downlink bandwidth is less than or equal to 10 PRBs, there is no resource allocation header and resource 
allocation type is assumed. 

- Resource block assignment: 

- For resource allocation type as defined in section 7.1.6.1 of [3] 



-[^ 



DL 



^RB / P I tiits provide the resource allocation 



where the value of P depends on the number of DL resource blocks as indicated in subclause [7.1.6.1] of [3] 

- Transport block to codeword swap flag - 1 bit 
In addition, for transport block 1 : 

- Modulation and coding scheme - 5 bits as defined in section 7.1.7 of [3] 

- New data indicator - 1 bit 

- Redundancy version - 2 bits 
In addition, for transport block 2: 

- Modulation and coding scheme - 5 bits as defined in section 7.1.7 of [3] 

- New data indicator - 1 bit 

- Redundancy version - 2 bits 

Precoding information - number of bits as specified in Table 5.3.3.1.5A-1 

If both transport blocks are enabled, the transport block to codeword mapping is specified according to Table 
5.3.3.1.5-1. 

In case one of the transport blocks is disabled, the transport block to codeword swap flag is reserved and the transport 
block to codeword mapping is specified according to Table 5.3.3.1.5-2. 

The precoding information field is defined according to Table 5.3.3.1.5A-2. For a single enabled codeword, index 1 in 
Table 5.3.3.1 .5A-2 is only supported for retransmission of the corresponding transport block if that transport block has 
previously been transmitted using two layers with open-loop spatial multiplexing. 

For transmission with 2 antenna ports, the precoding information field is not present. The number of transmission layers 
is equal to 2 if both codewords are enabled; transmit diversity is used if codeword is enabled while codeword 1 is 
disabled. 
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If the number of information bits in format 2A belongs to one of the sizes in Table 5.3.3.1.2-1, one zero bit shall be 
appended to format 2 A. 

Table 5.3.3. 1.5A-1 : Number of bits for precoding information 



Number of antenna ports at eNodeB 


Number of bits for precoding information 


2 





4 


2 



Table 5.3.3. 1.5A-2: Content of precoding information field for 4 antenna ports 



One codeword: 
Codeword enabled, 
Codeword 1 disabled 


Two codewords: 
Codeword enabled, 
Codeword 1 enabled 


Bit field 

mapped to 

index 


Message 


Bit field 
mapped 
to index 


IVIessage 





4 layers: Transmit 
diversity 





2 layers: precoder 

cycling with large delay 

CDD 


1 


2 layers: precoder 

cycling with large delay 

CDD 


1 


3 layers: precoder 

cycling with large delay 

CDD 


2 


reserved 


2 


4 layers: precoder 

cycling with large delay 

CDD 


3 


reserved 


3 


reserved 



[TS 36.213 clause 7.1.6.1] 

In resource allocations of type 0, resource block assignment information includes a bitmap indicating the resource block 
groups (RBGs) that are allocated to the scheduled UE where a RBG is a set of consecutive physical resource blocks 
(PRBs). Resource block group size (P) is a function of the system bandwidth as shown in Table 7. 1 .6. 1 - 1 . The total 



number of RBGs ( A'rbg ) ^'^^ downlink system bandwidth of N^^ PRBs is given by Nk^q 



T<B^/^1 



tDL 



N^t / P of the RBGs are of size P and if A^„„ mod P > then one of the RBGs is of size A^ 



DL 



where 



rDL 



P- N"^/P . The 



bitmap is of size N^^q bits with one bitmap bit per RBG such that each RBG is addressable. The RBGs shall be 

indexed in the order of increasing frequency and non-increasing RBG sizes starting at the lowest frequency. The order 

of RBG to bitmap bit mapping is in such way that RBG to RBG N^^gQ — 1 are mapped to MSB to LSB of the bitmap. 

The RBG is allocated to the UE if the corresponding bit value in the bitmap is 1, the RBG is not allocated to the UE 
otherwise. 

Table 7.1.6.1-1 : Type Resource Allocation RBG Size vs. Downlink System Bandwidth 



System Bandwidth 


RBG Size 

(P) 


<10 


1 


11-26 


2 


27-63 


3 


64 - 11 


4 



[TS 36.213 clause 7.1.7] 

To determine the modulation order and transport block size(s) in the physical downhnk shared channel, the UE shall 
first 

- read the 5-bit "modulation and coding scheme" field ( I^^^.^ ) in the DCI 
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and second if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI then 

else 

- set the Table 7.1.7.2.1-1 column indicator Np^^ to the total number of allocated PRBs based on the procedure 
defined in Section 7.1.6. 

if the transport block is transmitted in DwPTS of the special subframe in frame structure type 2, then 
set the Table 7.1.7.2.1-1 column indicator Npj^^ =max| A'^p^gXO.TS , l[, 

else, set the Table 7.1.7.2.1-1 column indicator A^p^^ — A^^^^ • 

The UE may skip decoding a transport block in an initial transmission if the effective channel code rate is higher than 
0.930, where the effective channel code rate is defined as the number of downlink information bits (including CRC bits) 
divided by the number of physical channel bits on PDSCH. If the UE skips decoding, the physical layer indicates to 
higher layer that the transport block is not successfully decoded. For the special subframe configurations and 5 with 
normal CP or configurations and 4 with extended CP, shown in table 4.2-1 [3], there shall be no PDSCH transmission 
in DwPTS of the special subframe. 

[TS 36.213 clause 7.1.7.1] 

The UE shall use Q =2 if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI, otherwise, the UE shall 
use /,y,(,5 and Table 7.1.7.1-1 to determine the modulation order {Q„) used in the physical downlink shared channel. 
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Table 7.1.7.1-1 : Modulation and TBS index table for PDSCH 



lUICS Index 

^MCS 


Modulation Order 


TBS Index 





2 





1 


2 


1 


2 


2 


2 


3 


2 


3 


4 


2 


4 


5 


2 


5 


6 


2 


6 


7 


2 


7 


8 


2 


8 


9 


2 


9 


10 


4 


9 


11 


4 


10 


12 


4 


11 


13 


4 


12 


14 


4 


13 


15 


4 


14 


16 


4 


15 


17 


6 


15 


18 


6 


16 


19 


6 


17 


20 


6 


18 


21 


6 


19 


22 


6 


20 


23 


6 


21 


24 


6 


22 


25 


6 


23 


26 


6 


24 


27 


6 


25 


28 


6 


26 


29 


2 


reserved 


30 


4 


31 


6 



[TS 36.213 clause 7.1.7.2] 

If the DCI CRC is scrambled by P-RNTI, RA-RNTI, or Sl-RNTl then 
- for DCI format lA: 

the UE shall set the TBS index ( I^^^ ) equal to I^^,^ and determine its TBS by the procedure in Section 

7.1.7.2.1. 



else 

forO < /,y[(,g < 28 , the UE shall first determine the TBS index ( /.pg^ ) using I^^,^ and Table 7.1.7.1-1 except if the 

transport block is disabled in DCI formats 2 and 2A as specified below. For a transport block that is not mapped 
to two-layer spatial multiplexing, the TBS is determined by the procedure in Section 7.1.7.2.1. For a transport 
block that is mapped to two-layer spatial multiplexing, the TBS is determined by the procedure in Section 

7.1.7.2.2. 

for 29 < I^(,^ ^31, the TBS is assumed to be as determined from DCI transported in the latest PDCCH for the 
same transport block using < I^,;,^ < 28 . If there is no latest PDCCH for the same transport block 
using < /^j,5 < 28 , and if the initial PDSCH for the same transport block is semi-persistently scheduled, the 
TBS shall be determined from the most recent semi-persistent scheduling assignment PDCCH. 
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In DCI formats 2 and 2A a transport block is disabled if I,^^^ = and if rv^x = 1 otherwise the transport block is 
enabled. 

The NDI and HARQ process ID, as signalled on PDCCH, and the TBS, as determined above, shall be delivered to 
higher layers. 

[TS 36.213 clause 7.1.7.2.1] 

Fori < A^pRB < 110, the TBS is given by the ( /^gs , A^pRg ) entry of Table 7.1.7.2.1-1. 
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Table 7.1.7.2.1-1: Transport block size table (dimension 27x110) 



^TBS 


N 

"PRB 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 





16 


32 


56 


88 


120 


152 


176 


208 


224 


256 


1 


24 


56 


88 


144 


176 


208 


224 


256 


328 


344 


2 


32 


72 


144 


176 


208 


256 


296 


328 


376 


424 


3 


40 


104 


176 


208 


256 


328 


392 


440 


504 


568 


4 


56 


120 


208 


256 


328 


408 


488 


552 


632 


696 


5 


72 


144 


224 


328 


424 


504 


600 


680 


776 


872 


6 


328 


176 


256 


392 


504 


600 


712 


808 


936 


1032 


7 


104 


224 


328 


472 


584 


712 


840 


968 


1096 


1224 


8 


120 


256 


392 


536 


680 


808 


968 


1096 


1256 


1384 


9 


136 


296 


456 


616 


776 


936 


1096 


1256 


1416 


1544 


10 


144 


328 


504 


680 


872 


1032 


1224 


1384 


1544 


1736 


11 


176 


376 


584 


776 


1000 


1192 


1384 


1608 


1800 


2024 


12 


208 


440 


680 


904 


1128 


1352 


1608 


1800 


2024 


2280 


13 


224 


488 


744 


1000 


1256 


1544 


1800 


2024 


2280 


2536 


14 


256 


552 


840 


1128 


1416 


1736 


1992 


2280 


2600 


2856 


15 


280 


600 


904 


1224 


1544 


1800 


2152 


2472 


2728 


3112 


16 


328 


632 


968 


1288 


1608 


1928 


2280 


2600 


2984 


3240 


17 


336 


696 


1064 


1416 


1800 


2152 


2536 


2856 


3240 


3624 


18 


376 


776 


1160 


1544 


1992 


2344 


2792 


3112 


3624 


4008 


19 


408 


840 


1288 


1736 


2152 


2600 


2984 


3496 


3880 


4264 


20 


440 


904 


1384 


1864 


2344 


2792 


3240 


3752 


4136 


4584 


21 


488 


1000 


1480 


1992 


2472 


2984 


3496 


4008 


4584 


4968 


22 


520 


1064 


1608 


2152 


2664 


3240 


3752 


4264 


4776 


5352 


23 


552 


1128 


1736 


2280 


2856 


3496 


4008 


4584 


5160 


5736 


24 


584 


1192 


1800 


2408 


2984 


3624 


4264 


4968 


5544 


5992 


25 


616 


1256 


1864 


2536 


3112 


3752 


4392 


5160 


5736 


6200 


26 


712 


1480 


2216 


2984 


3752 


4392 


5160 


5992 


6712 


7480 


-"IBS 


-''^PRB 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 





288 


328 


344 


376 


392 


424 


456 


488 


504 


536 


1 


376 


424 


456 


488 


520 


568 


600 


632 


680 


712 


2 


472 


520 


568 


616 


648 


696 


744 


776 


840 


872 


3 


616 


680 


744 


808 


872 


904 


968 


1032 


1096 


1160 


4 


776 


840 


904 


1000 


1064 


1128 


1192 


1288 


1352 


1416 


5 


968 


1032 


1128 


1224 


1320 


1384 


1480 


1544 


1672 


1736 


6 


1128 


1224 


1352 


1480 


1544 


1672 


1736 


1864 


1992 


2088 


7 


1320 


1480 


1608 


1672 


1800 


1928 


2088 


2216 


2344 


2472 


8 


1544 


1672 


1800 


1928 


2088 


2216 


2344 


2536 


2664 


2792 


9 


1736 


1864 


2024 


2216 


2344 


2536 


2664 


2856 


2984 


3112 


10 


1928 


2088 


2280 


2472 


2664 


2792 


2984 


3112 


3368 


3496 


11 


2216 


2408 


2600 


2792 


2984 


3240 


3496 


3624 


3880 


4008 


12 


2472 


2728 


2984 


3240 


3368 


3624 


3880 


4136 


4392 


4584 


13 


2856 


3112 


3368 


3624 


3880 


4136 


4392 


4584 


4968 


5160 


14 


3112 


3496 


3752 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


15 


3368 


3624 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


6200 


16 


3624 


3880 


4264 


4584 


4968 


5160 


5544 


5992 


6200 


6456 


17 


4008 


4392 


4776 


5160 


5352 


5736 


6200 


6456 


6712 


7224 


18 


4392 


4776 


5160 


5544 


5992 


6200 


6712 


7224 


7480 


7992 


19 


4776 


5160 


5544 


5992 


6456 


6968 


7224 


7736 


8248 


8504 


20 


5160 


5544 


5992 


6456 


6968 


7480 


7992 


8248 


8760 


9144 


21 


5544 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


9912 


22 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


10296 


10680 


23 


6200 


6968 


7480 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


24 


6712 


7224 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


12216 


25 


6968 


7480 


8248 


8760 


9528 


10296 


10680 


11448 


12216 


12576 


26 


8248 


8760 


9528 


10296 


11064 


11832 


12576 


13536 


14112 


14688 


-'tbs 


^PRB 


21 


22 


23 


24 


25 


26 


27 


28 


29 


30 





568 


600 


616 


648 


680 


712 


744 


776 


776 


808 


1 


744 


776 


808 


872 


904 


936 


968 


1000 


1032 


1064 
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2 


936 


968 


1000 


1064 


1096 


1160 


1192 


1256 


1288 


1320 


3 


1224 


1256 


1320 


1384 


1416 


1480 


1544 


1608 


1672 


1736 


4 


1480 


1544 


1608 


1736 


1800 


1864 


1928 


1992 


2088 


2152 


5 


1864 


1928 


2024 


2088 


2216 


2280 


2344 


2472 


2536 


2664 


6 


2216 


2280 


2408 


2472 


2600 


2728 


2792 


2984 


2984 


3112 


7 


2536 


2664 


2792 


2984 


3112 


3240 


3368 


3368 


3496 


3624 


8 


2984 


3112 


3240 


3368 


3496 


3624 


3752 


3880 


4008 


4264 


9 


3368 


3496 


3624 


3752 


4008 


4136 


4264 


4392 


4584 


4776 


10 


3752 


3880 


4008 


4264 


4392 


4584 


4776 


4968 


5160 


5352 


11 


4264 


4392 


4584 


4776 


4968 


5352 


5544 


5736 


5992 


5992 


12 


4776 


4968 


5352 


5544 


5736 


5992 


6200 


6456 


6712 


6712 


13 


5352 


5736 


5992 


6200 


6456 


6712 


6968 


7224 


7480 


7736 


14 


5992 


6200 


6456 


6968 


7224 


7480 


7736 


7992 


8248 


8504 


15 


6456 


6712 


6968 


7224 


7736 


7992 


8248 


8504 


8760 


9144 


16 


6712 


7224 


7480 


7736 


7992 


8504 


8760 


9144 


9528 


9912 


17 


7480 


7992 


8248 


8760 


9144 


9528 


9912 


10296 


10296 


10680 


18 


8248 


8760 


9144 


9528 


9912 


10296 


10680 


11064 


11448 


11832 


19 


9144 


9528 


9912 


10296 


10680 


11064 


11448 


12216 


12576 


12960 


20 


9912 


10296 


10680 


11064 


11448 


12216 


12576 


12960 


13536 


14112 


21 


10680 


11064 


11448 


12216 


12576 


12960 


13536 


14112 


14688 


15264 


22 


11448 


11832 


12576 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


23 


12216 


12576 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


24 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


17568 


18336 


25 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


17568 


18336 


19080 


26 


15264 


16416 


16992 


17568 


18336 


19080 


19848 


20616 


21384 


22152 


-'tbs 


"PRB 


31 


32 


33 


34 


35 


36 


37 


38 


39 


40 





840 


872 


904 


936 


968 


1000 


1032 


1032 


1064 


1096 


1 


1128 


1160 


1192 


1224 


1256 


1288 


1352 


1384 


1416 


1416 


2 


1384 


1416 


1480 


1544 


1544 


1608 


1672 


1672 


1736 


1800 


3 


1800 


1864 


1928 


1992 


2024 


2088 


2152 


2216 


2280 


2344 


4 


2216 


2280 


2344 


2408 
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37888 


37888 


37888 


37888 


39232 


39232 


39232 


19 


39232 


39232 


40576 


40576 


40576 


40576 


42368 


42368 


42368 


43816 


20 


42368 


42368 


43816 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


21 


45352 


46888 


46888 


46888 


46888 


48936 


48936 


48936 


48936 


51024 


22 


48936 


48936 


51024 


51024 


51024 


51024 


52752 


52752 


52752 


55056 


23 


52752 


52752 


52752 


55056 


55056 


55056 


55056 


57336 


57336 


57336 


24 


55056 


57336 


57336 


57336 


57336 


59256 


59256 


59256 


61664 


61664 


25 


57336 


59256 


59256 


59256 


61664 


61664 


61664 


61664 


63776 


63776 


26 


66592 


68808 


68808 


68808 


71112 


71112 


71112 


73712 


73712 


75376 


^TBS 


^PRB 


101 


102 


103 


104 


105 


106 


107 


108 


109 


110 





2792 


2856 


2856 


2856 


2984 


2984 


2984 


2984 


2984 


3112 


1 


3752 


3752 


3752 


3752 


3880 


3880 


3880 


4008 


4008 


4008 


2 


4584 


4584 


4584 


4584 


4776 


4776 


4776 


4776 


4968 


4968 


3 


5992 


5992 


5992 


5992 


6200 


6200 


6200 


6200 


6456 


6456 


4 


7224 


7224 


7480 


7480 


7480 


7480 


7736 


7736 


7736 


7992 


5 


8760 


9144 


9144 


9144 


9144 


9528 


9528 


9528 


9528 


9528 


6 


10680 


10680 


10680 


10680 


11064 


11064 


11064 


11448 


11448 


11448 


7 


12216 


12576 


12576 


12576 


12960 


12960 


12960 


12960 


13536 


13536 


8 


14112 


14112 


14688 


14688 


14688 


14688 


15264 


15264 


15264 


15264 


9 


15840 


16416 


16416 


16416 


16416 


16992 


16992 


16992 


16992 


17568 


10 


17568 


18336 


18336 


18336 


18336 


18336 


19080 


19080 


19080 


19080 


11 


20616 


20616 


20616 


21384 


21384 


21384 


21384 


22152 


22152 


22152 


12 


22920 


23688 


23688 


23688 


23688 


24496 


24496 


24496 


24496 


25456 


13 


26416 


26416 


26416 


26416 


27376 


27376 


27376 


27376 


28336 


28336 


14 


29296 


29296 


29296 


29296 


30576 


30576 


30576 


30576 


31704 


31704 


15 


30576 


31704 


31704 


31704 


31704 


32856 


32856 


32856 


34008 


34008 


16 


32856 


32856 


34008 


34008 


34008 


34008 


35160 


35160 


35160 


35160 


17 


36696 


36696 


36696 


37888 


37888 


37888 


39232 


39232 


39232 


39232 


18 


40576 


40576 


40576 


40576 


42368 


42368 


42368 


42368 


43816 


43816 


19 


43816 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


46888 


46888 


20 


46888 


46888 


48936 


48936 


48936 


48936 


48936 


51024 


51024 


51024 


21 


51024 


51024 


51024 


52752 


52752 


52752 


52752 


55056 


55056 


55056 


22 


55056 


55056 


55056 


57336 


57336 


57336 


57336 


59256 


59256 


59256 


23 


57336 


59256 


59256 


59256 


59256 


61664 


61664 


61664 


61664 


63776 


24 


61664 


61664 


63776 


63776 


63776 


63776 


66592 


66592 


66592 


66592 


25 


63776 


63776 


66592 


66592 


66592 


66592 


68808 


68808 


68808 


71112 
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26 



75376 75376 75376 75376 75376 75376 75376 75376 75376 75376 



[TS 36.306 clause 4.1] 

The field ue-Category defines a combined uplink and downlink capability. The parameters set by the UE Category are 
defined in subclause 4.2. Tables 4.1-1 and 4.1-2 define the downlink and, respectively, uplink physical layer parameter 
values for each UE Category. 

Table 4.1-1 : Downlink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

DL-SCH transport 

block bits received 

within a TTI 


lUlaximum number 
of bits of a DL- 
SCH transport 
block received 
within a 1 II 


Total number of 
soft channel bits 


Maximum number 

of supported 

layers for spatial 

multiplexing in DL 


Category 1 


10296 


10296 


250368 


1 


Category 2 


51024 


51024 


1237248 


2 


Category 3 


102048 


75376 


1237248 


2 


Category 4 


150752 


75376 


1827072 


2 


Category 5 


299552 


149776 


3667200 


4 



Table 4.1-2: Uplink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

bits of an UL-SCH 

transport block 

transmitted within a 

TTI 


Support for 
64QAM in UL 


Category 1 


5160 


No 


Category 2 


25456 


No 


Category 3 


51024 


No 


Category 4 


51024 


No 


Category 5 


75376 


Yes 



7.1.7.1.5.3 Test description 

7.1.7.1.5.3.1 Pre-test conditions 

System Simulator 

- Cell 1. 

Uplink and downlink bandwidth set to the maximum bandwidth for the E-UTRA Band under test as specified in 
Table 5.6.1-1 in [31] (to enable testing of A^prb W '^o maximum value). 

UE: 

None. 
Preamble 

The UE is in state Loopback Activated (state 4) according to [18] condition 2TX to configure MIMO. 
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7.1.7.1.5.3.2 



Test procedure sequence 
Table 7.1 .7.1 .5.3.2-1 : Maximum TBgize tor different UE categories 



UE Category 


Maximum number of 
bits of a DL-SCH 
transport block 

received within a TTI 


Category 1 


10296 


Category 2 


51024 


Category 3 


75376 


Category 4 


75376 


Category 5 


149776 



Table 7.1.7.1.5.3.2-2: Number of downlink PDCP SDUs and PDCP SDU size used as test data for each 

MIMO flow 



TBsize 

[bits] 


Number of 

PDCP SDUs 

per lUIIMO 

flow 


PDCP SDU Size 

[bits] 

See note 1 


72 <r5,,,^< 12056 

note 2 


1 


8*FL00R((TBsize - 56)/8) 


12057 <r5^,^^< 24088 


2 


8*FLOOR((TBsize-88)/16)) 


24089 <r5^,,^< 36 112 


3 


8''FL00R((TBsize- 112)724)) 


361 13 <r5,,,^< 48144 


4 


8*FL00R((TBsize- 144)732)) 


48145 <r5,,,,< 60168 


5 


8*FL00R((TBsize- 168)740)) 


60169 <r5^,,^< 72200 


6 


8*FL00R((TBsize- 200)748)) 


r5^,,^> 72201 


7 


8*FL00R((TBsize- 224)756)) 


Note 1 . Each PDCP SDU is limited to 1 500 octets (to l<eep below maximum SDU size of ESIVI as specified in TS 
24.301 clause 9.9.4.12). 

The PDCP SDU size of each PDCP SDU is 

PDCP SDU size = (TBsize - Number of IVIIMO flows*N*PDCP header size - AMD PDU header size - MAC 
header size - Size of Timing Advance) / (Number of MIMO flows *N), where 

PDCP header size is 16 bits for the RLC AM and 12-bit SN case; 

AMD PDU header size is CEIL[(16+(N-1)*12)/8] bytes which includes 16 standard AM header and (N-1) 

Length indicators; and 

MAC header size = R/R/E/LCID MAC subheader (8 bits for Timing Advance) + R/R/E/LCID MAC 

subheader (8 bits for MAC SDU) = 8 + 8 bits 

Size of Timing Advance MAC CE is 8 bits (if no Timing Advance needs to be sent, padding will occur 

instead) 

This gives: 

PDCP SDU size = 8*FL00R((TBsize - N"! 6- 8*CEIL((1 6+(N-1 )*1 2)/8) - 24)/(8*N)) bits 
Note2: According to TS 36.213 Table 7.1.7.2.1-1 and the final PDCP SDU size formula in Note 1, the smallest TBsize 
that can be tested is 72 bits. 
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Table 7.1.7.1.5.3.2-2a: Bandwidth Dependent Parameters 



Max Bandwidth 


Max A^pRB 


Allowed A^pRB Values 


10Mhz 


50 


2,3,5, 6,8,9, 11, 12, 14, 15, 17, 18,20,21,23,24,26, 
27, 29, 30, 32, 33, 35, 36, 38, 39, 41 , 42, 44, 45, 47, 48, 
50 


15Mhz 


75 


3,4,7,8, 11, 12, 15, 16, 19,20,23,24,27,28, 31,32, 
35, 36, 39, 40, 43, 44 ,47, 48, 51 , 52, 55, 56, 59, 60, 63, 
64,67,68,71,72,75 


20Mhz 


100 


4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 60, 64, 
68,72,76,80,84,88,92,96, 100 


Note : Maximum bandwidth for EUTRA bands is 1 0/1 5/20 Mhz. 



Table 7.1.7.1.5.3.2-2b: Ambiguous Sizes of Information Bits 

I {1 2, 1 4, 1 6 ,20, 24, 26, 32, 40, 44, 56} | 



Table 7.1. 7.1. 5.3.2-2C: 



'^MCS*! 3"^ 



^Mcs#2 *®st points for transport block 1 and transport block 2 for 
different UE Categories 



MCS test 
point index 


MCS Index 

transport 

block 1 

'mcs#i 


MCS Index transport block 2, /mcs#2 
(Note1) 


UE 
Category 1 


UE 
Category 2 


UE 
Category 3 


UE 
Category 4 


UE 
Category 5 








FFS 


FFS 


FFS 


FFS 


FFS 


1 


1 


FFS 


FFS 


FFS 


FFS 


FFS 


2 


2 


FFS 


FFS 


FFS 


FFS 


FFS 


3 


3 


FFS 


FFS 


FFS 


FFS 


FFS 


4 


4 


FFS 


FFS 


FFS 


FFS 


FFS 


5 


5 


FFS 


FFS 


FFS 


FFS 


FFS 


6 


6 


FFS 


FFS 


FFS 


FFS 


FFS 


7 


7 


FFS 


FFS 


FFS 


FFS 


FFS 


8 


8 


FFS 


FFS 


FFS 


FFS 


FFS 


9 


9 


FFS 


FFS 


FFS 


FFS 


FFS 


10 


10 


FFS 


FFS 


FFS 


FFS 


FFS 


11 


11 


FFS 


FFS 


FFS 


FFS 


FFS 


12 


12 


FFS 


FFS 


FFS 


FFS 


FFS 


13 


13 


FFS 


FFS 


FFS 


FFS 


FFS 


14 


14 


FFS 


FFS 


FFS 


FFS 


FFS 


15 


15 


FFS 


FFS 


FFS 


FFS 


FFS 


16 


16 


FFS 


FFS 


FFS 


FFS 


FFS 


17 


17 


FFS 


FFS 


FFS 


FFS 


FFS 


18 


18 


FFS 


FFS 


FFS 


FFS 


FFS 


19 


19 


FFS 


FFS 


FFS 


FFS 


FFS 


20 


20 


FFS 


FFS 


FFS 


FFS 


FFS 


21 


21 


FFS 


FFS 


FFS 


FFS 


FFS 


22 


22 


FFS 


FFS 


FFS 


FFS 


FFS 


23 


23 


FFS 


FFS 


FFS 


FFS 


FFS 


24 


24 


FFS 


FFS 


FFS 


FFS 


FFS 


25 


25 


FFS 


FFS 


FFS 


FFS 


FFS 


26 


26 


FFS 


FFS 


FFS 


FFS 


FFS 


27 


27 


FFS 


FFS 


FFS 


FFS 


FFS 


28 


28 


FFS 


FFS 


FFS 


FFS 


FFS 


Note 1 : The IVICS index for transport blocl< 2 has been selected to avoid limitations due to UE 
capabilities for the different UE Categories. 



Table 7.1.7.1.5.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP Verdict 


U-S 


Message 


- 


EXCEPTION: Steps 1 to 4 are 


- 


- 


- 1 
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repeated for allowed values of 
A^PRB as portable 7.1. 7.1. 5.3.2- 

2a and for each /|yics#i and 

■^Mcs#2 value for MCS test points 
to 28 as portable 7.1. 7.1. 5.3.2- 
2c. 










1 


SS looks up /jBs#i for transport 

block 1 and in table 7.1.7.1-1 in 
TS 36.213 based on the value of 

/mcs#i ■ SS looks up TBsize#i in 
table 7.1.7.2.1-1 in TS 36.213 
based on values of A^p^g and 

'tbs#i ■ 

SS looks up /jBs#2 f°'' transport 
block 2 and in table 7.1.7.1-1 in 
TS 36.213 based on the value of 

/mcs#2 ■ SS looks up TBsize#2 in 
table 7.1.7.2.1-1 in TS 36.213 
based on values of Np^^ and 

■' TBS#2 ■ 












EXCEPTION: Steps 2 to 4 are 
performed if the sum of the sizes 
of TBsize#i and TBsize#2 is less than 
or equal to UE capability 
"Maximum number of DL-SCH 
transport block bits received within 
a TTI" as specified in Table 
7.1 .7.1 .5.3.2-1 and larger than or 
equal to 72 bits as specified in 
Table 7.1.7.1.5.3.2-2, and the 
effective channel code rate, as 
defined in TS 36.21 3 clause 7.1 .7, 
is lower than or equal to 0.930. 










2 


SS creates one or more PDCP 
SDUs for transport block 1 
depending on TBsize#i, in 
accordance with Table 
7.1.7.1.5.3.2-2. 

SS creates one or more PDCP 
SDUs for transport block 2 
depending on TBsize#2, in 
accordance with Table 
7.1.7.1.5.3.2-2. 










3 


SS transmits the PDCP SDUs for 
transport block 1 and 2 
concatenated into a MAC PDU 
per transport block and indicates 
on PDCCH DCI Format 2A with 
RA type and a resource block 
assignment (RBA) correspondent 

to A^pRB as specified in 7.1.6.1 in 
TS 36.213 and modulation and 
coding scheme /mcs#i ^°^ 

transport block 1 and /Mcs#2f°'' 
transport block 2. 


<— 


Transport block 1 : 

MAC PDU (Ni X PDCP 

SDUs) 

Transport block 2: 

MAC PDU (N2 X PDCP 

SDUs) 

DCI: (DCI Format 2A, RA 

typeO, RBA(A?prb), 

' MCS#1 ' ' MCS#2 ) 
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3a 


SS transmits one or more UL 
Grants sufficient for transmitting 
loop bacl< PDCP SDUs. 


<— 


(UL Grant) 






4 


CHECK: Does UE return tlie 
same number of PDCP SDUs with 
same content as transmitted by 
the SS in step 3? 


— > 


(Nix PDCP SDUs, 
N2X PDCP SDUs) 


1 


P 



7.1.7.1.5.3.3 


None 


7.1.7.1.6 


7.1.7.1.6.1 


(1) 



Specific Message Contents 



DL-SCH Transport Block Size selection / DCI format 2A / RA type 1 / Two 
transport blocks enabled / Transport block to codeword swap flag value set to '1 ' 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE has two transport blocks enabled and on PDCCH receives DCI format 2A indicating Resource 

Allocation Type 1, a resource block assignment correspondent to A^pj^g physical resource blocks, the 

Transport block to codeword swap flag value set to '1' and a modulation and coding scheme Ij^f^^for 
two transport blocks } 

then { UE decodes the two transport blocks of sizes correspondent to the read A^p^g and Ij^q^ ^°^ 
transport block 1 and Ij^q^ for transport block 2 and forwards it to higher layers } 



7.1.7.1.6.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.212, clauses 5.3.3.1.2, 
5.3.3.1.5 and 5.3.3.1.5A; TS 36.213, clauses 7.1.6.1, 7.1.7, 7.1.7.1, 7.1.7.2 and 7.1.7.2.1; and TS 36.306 clause 4.1. 

[TS 36.212 clause 5.3.3.1.2] 



Table 5.3.3.1.2-1 : Ambiguous Sizes of Information Bits 

I {1 2, 1 4, 1 6 .20, 24, 26, 32, 40, 44, 56} | 



[TS 36.212 clause 5.3.3.1.5] 



Table 5.3.3.1.5-1 : Transport block to codeword mapping 
(two transport blocks enabled) 



transport block 

to codeword 
swap flag value 


codeword 
(enabled) 


codeword 1 
(enabled) 





transport blocl< 1 


transport blocl< 2 


1 


transport blocl< 2 


transport blocl< 1 



[TS 36.212 clause 5.3. 3.1.5A] 

The following information is transmitted by means of the DCI format 2A: 

- Resource allocation header (resource allocation type / type 1) - 1 bit as defined in section 7.1.6 of [3] 

If downlink bandwidth is less than or equal to 10 PRBs, there is no resource allocation header and resource 
allocation type is assumed. 
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- Resource block assignment: 

- For resource allocation type 1 as defined in section 7.1.6.2 of [3] 

- [log 2 [P) I bits of this field are used as a header specific to this resource allocation type to indicate the 
selected resource blocks subset 

- 1 bit indicates a shift of the resource allocation span 

- (JA^^g //■ |-[log2(i^)]-lj bits provide the resource allocation 

where the value of P depends on the number of DL resource blocks as indicated in subclause [7. 1 .6. 1 ] of [3] 

- Transport block to codeword swap flag - 1 bit 
In addition, for transport block 1 : 

- Modulation and coding scheme - 5 bits as defined in section 7.1.7 of [3] 

- New data indicator - 1 bit 

- Redundancy version - 2 bits 
In addition, for transport block 2: 

- Modulation and coding scheme - 5 bits as defined in section 7.1.7 of [3] 

- New data indicator - 1 bit 

- Redundancy version - 2 bits 



If both transport blocks are enabled, the transport block to codeword mapping is specified according to Table 
5.3.3.1.5-1. 



If the number of information bits in format 2A belongs to one of the sizes in Table 5.3.3.1.2-1, one zero bit shall be 
appended to format 2 A. 

[TS 36.213 clause 7.1.6.1] 

In resource allocations of type 0, resource block assignment information includes a bitmap indicating the resource block 
groups (RBGs) that are allocated to the scheduled UE where a RBG is a set of consecutive physical resource blocks 
(PRBs). Resource block group size (P) is a function of the system bandwidth as shown in Table 7. 1 .6. 1 - 1 . The total 

number of RBGs ( A^^bg ) ^'^^ downlink system bandwidth of N^^^ PRBs is given by Nj^^q = \ A^^g IP \ where 

[Nrb I P\ of the RBGs are of size P and if A^^g mod P > then one of the RBGs is of size N^^ - P ■ \_N^^ I p\. The 

bitmap is of size N-^-qq bits with one bitmap bit per RBG such that each RBG is addressable. The RBGs shall be 
indexed in the order of increasing frequency and non-increasing RBG sizes starting at the lowest frequency. The order 
of RBG to bitmap bit mapping is in such way that RBG to RBG N ^^q — 1 are mapped to MSB to LSB of the bitmap. 

The RBG is allocated to the UE if the corresponding bit value in the bitmap is 1, the RBG is not allocated to the UE 
otherwise. 
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Table 7.1.6.1-1 : Type Resource Allocation RBG Size vs. Downlink System Bandwidth 



System Bandwidth 


RBG Size 


<10 


1 


11-26 


2 


27-63 


3 


64 - 11 


4 



[TS 36.213 clause 7.1.7] 

To determine the modulation order and transport block size(s) in the physical downlink shared channel, the UE shall 
first 

- read the 5-bit "modulation and coding scheme" field ( I^^^ ) in the DCI 

and second if the DCI CRC is scrambled by P-RNTl, RA-RNTl, or SI-RNTI then 



else 

- set the Table 7.1.7.2.1-1 column indicator Np^^ to the total number of allocated PRBs based on the procedure 
defined in Section 7. 1 .6. 

if the transport block is transmitted in DwPTS of the special subframe in frame structure type 2, then 
set the Table 7.1.7.2.1-1 column indicator A^p^^ = maxjl A^p^g XO.75 I, l| , 

else, set the Table 7.1.7.2.1-1 column indicator Np/^/j = Npi^g . 

The UE may skip decoding a transport block in an initial transmission if the effective channel code rate is higher than 
0.930, where the effective channel code rate is defined as the number of downlink information bits (including CRC bits) 
divided by the number of physical channel bits on PDSCH. If the UE skips decoding, the physical layer indicates to 
higher layer that the transport block is not successfully decoded. For the special subframe configurations and 5 with 
normal CP or configurations and 4 with extended CP, shown in table 4.2-1 [3], there shall be no PDSCH transmission 
in DwPTS of the special subframe. 

[TS 36.213 clause 7.1.7.1] 

The UE shall use e„ = 2 if the DCI CRC is scrambled by P-RNTI, RA-RNTI, or SI-RNTI, otherwise, the UE shall 
use /^j,g and Table 7.1.7.1-1 to determine the modulation order ( 2„ ) used in the physical downlink shared channel. 
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Table 7.1.7.1-1 : Modulation and TBS index table for PDSCH 



lUICS Index 

^MCS 


Modulation Order 


TBS Index 

-"IBS 





2 





1 


2 


1 


2 


2 


2 


3 


2 


3 


4 


2 


4 


5 


2 


5 


6 


2 


6 


7 


2 


7 


8 


2 


8 


9 


2 


9 


10 


4 


9 


11 


4 


10 


12 


4 


11 


13 


4 


12 


14 


4 


13 


15 


4 


14 


16 


4 


15 


17 


6 


15 


18 


6 


16 


19 


6 


17 


20 


6 


18 


21 


6 


19 


22 


6 


20 


23 


6 


21 


24 


6 


22 


25 


6 


23 


26 


6 


24 


27 


6 


25 


28 


6 


26 


29 


2 


reserved 


30 


4 


31 


6 



[TS 36.213 clause 7.1.7.2] 

If the DCI CRC is scrambled by P-RNTl, RA-RNTl, or Sl-RNTl then 
- for DCI format lA: 

the UE shall set the TBS index ( /^g^ ) equal to I^^^^ and determine its TBS by the procedure in Section 
7.1.7.2.1. 



else 

forO < /^j|^5 < 28 , the UE shall first determine the TBS index ( /^g^ ) using /^i^j and Table 7.1.7.1-1 except if the 

transport block is disabled in DCI formats 2 and 2A as specified below. For a transport block that is not mapped 
to two-layer spatial multiplexing, the TBS is determined by the procedure in Section 7.1.7.2.1. For a transport 
block that is mapped to two-layer spatial multiplexing, the TBS is determined by the procedure in Section 

7.1.7.2.2. 

for 29 < /^j|^5 ^31, the TBS is assumed to be as determined from DCI transported in the latest PDCCH for the 
same transport block using < I^^,^^ < 28 . If there is no latest PDCCH for the same transport block 
using < /^j,5 < 28 , and if the initial PDSCH for the same transport block is semi -persistently scheduled, the 
TBS shall be determined from the most recent semi-persistent scheduling assignment PDCCH. 
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In DCI formats 2 and 2A a transport block is disabled if I,^^^ = and if rv^x = 1 otherwise the transport block is 
enabled. 

The NDI and HARQ process ID, as signalled on PDCCH, and the TBS, as determined above, shall be delivered to 
higher layers. 

[TS 36.213 clause 7.1.7.2.1] 

Fori < A^pRB < 110, the TBS is given by the ( /^gs , A^pRg ) entry of Table 7.1.7.2.1-1. 
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Table 7.1.7.2.1-1: Transport block size table (dimension 27x110) 



^TBS 


N 

"PRB 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 





16 


32 


56 


88 


120 


152 


176 


208 


224 


256 


1 


24 


56 


88 


144 


176 


208 


224 


256 


328 


344 


2 


32 


72 


144 


176 


208 


256 


296 


328 


376 


424 


3 


40 


104 


176 


208 


256 


328 


392 


440 


504 


568 


4 


56 


120 


208 


256 


328 


408 


488 


552 


632 


696 


5 


72 


144 


224 


328 


424 


504 


600 


680 


776 


872 


6 


328 


176 


256 


392 


504 


600 


712 


808 


936 


1032 


7 


104 


224 


328 


472 


584 


712 


840 


968 


1096 


1224 


8 


120 


256 


392 


536 


680 


808 


968 


1096 


1256 


1384 


9 


136 


296 


456 


616 


776 


936 


1096 


1256 


1416 


1544 


10 


144 


328 


504 


680 


872 


1032 


1224 


1384 


1544 


1736 


11 


176 


376 


584 


776 


1000 


1192 


1384 


1608 


1800 


2024 


12 


208 


440 


680 


904 


1128 


1352 


1608 


1800 


2024 


2280 


13 


224 


488 


744 


1000 


1256 


1544 


1800 


2024 


2280 


2536 


14 


256 


552 


840 


1128 


1416 


1736 


1992 


2280 


2600 


2856 


15 


280 


600 


904 


1224 


1544 


1800 


2152 


2472 


2728 


3112 


16 


328 


632 


968 


1288 


1608 


1928 


2280 


2600 


2984 


3240 


17 


336 


696 


1064 


1416 


1800 


2152 


2536 


2856 


3240 


3624 


18 


376 


776 


1160 


1544 


1992 


2344 


2792 


3112 


3624 


4008 


19 


408 


840 


1288 


1736 


2152 


2600 


2984 


3496 


3880 


4264 


20 


440 


904 


1384 


1864 


2344 


2792 


3240 


3752 


4136 


4584 


21 


488 


1000 


1480 


1992 


2472 


2984 


3496 


4008 


4584 


4968 


22 


520 


1064 


1608 


2152 


2664 


3240 


3752 


4264 


4776 


5352 


23 


552 


1128 


1736 


2280 


2856 


3496 


4008 


4584 


5160 


5736 


24 


584 


1192 


1800 


2408 


2984 


3624 


4264 


4968 


5544 


5992 


25 


616 


1256 


1864 


2536 


3112 


3752 


4392 


5160 


5736 


6200 


26 


712 


1480 


2216 


2984 


3752 


4392 


5160 


5992 


6712 


7480 


-"IBS 


-''^PRB 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 





288 


328 


344 


376 


392 


424 


456 


488 


504 


536 


1 


376 


424 


456 


488 


520 


568 


600 


632 


680 


712 


2 


472 


520 


568 


616 


648 


696 


744 


776 


840 


872 


3 


616 


680 


744 


808 


872 


904 


968 


1032 


1096 


1160 


4 


776 


840 


904 


1000 


1064 


1128 


1192 


1288 


1352 


1416 


5 


968 


1032 


1128 


1224 


1320 


1384 


1480 


1544 


1672 


1736 


6 


1128 


1224 


1352 


1480 


1544 


1672 


1736 


1864 


1992 


2088 


7 


1320 


1480 


1608 


1672 


1800 


1928 


2088 


2216 


2344 


2472 


8 


1544 


1672 


1800 


1928 


2088 


2216 


2344 


2536 


2664 


2792 


9 


1736 


1864 


2024 


2216 


2344 


2536 


2664 


2856 


2984 


3112 


10 


1928 


2088 


2280 


2472 


2664 


2792 


2984 


3112 


3368 


3496 


11 


2216 


2408 


2600 


2792 


2984 


3240 


3496 


3624 


3880 


4008 


12 


2472 


2728 


2984 


3240 


3368 


3624 


3880 


4136 


4392 


4584 


13 


2856 


3112 


3368 


3624 


3880 


4136 


4392 


4584 


4968 


5160 


14 


3112 


3496 


3752 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


15 


3368 


3624 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


6200 


16 


3624 


3880 


4264 


4584 


4968 


5160 


5544 


5992 


6200 


6456 


17 


4008 


4392 


4776 


5160 


5352 


5736 


6200 


6456 


6712 


7224 


18 


4392 


4776 


5160 


5544 


5992 


6200 


6712 


7224 


7480 


7992 


19 


4776 


5160 


5544 


5992 


6456 


6968 


7224 


7736 


8248 


8504 


20 


5160 


5544 


5992 


6456 


6968 


7480 


7992 


8248 


8760 


9144 


21 


5544 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


9912 


22 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


10296 


10680 


23 


6200 


6968 


7480 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


24 


6712 


7224 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


12216 


25 


6968 


7480 


8248 


8760 


9528 


10296 


10680 


11448 


12216 


12576 


26 


8248 


8760 


9528 


10296 


11064 


11832 


12576 


13536 


14112 


14688 


-'tbs 


^PRB 


21 


22 


23 


24 


25 


26 


27 


28 


29 


30 





568 


600 


616 


648 


680 


712 


744 


776 


776 


808 


1 


744 


776 


808 


872 


904 


936 


968 


1000 


1032 


1064 
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2 


936 


968 


1000 


1064 


1096 


1160 


1192 


1256 


1288 


1320 


3 


1224 


1256 


1320 


1384 


1416 


1480 


1544 


1608 


1672 


1736 


4 


1480 


1544 


1608 


1736 


1800 


1864 


1928 


1992 


2088 


2152 


5 


1864 


1928 


2024 


2088 


2216 


2280 


2344 


2472 


2536 


2664 


6 


2216 


2280 


2408 


2472 


2600 


2728 


2792 


2984 


2984 


3112 


7 


2536 


2664 


2792 


2984 


3112 


3240 


3368 


3368 


3496 


3624 


8 


2984 


3112 


3240 


3368 


3496 


3624 


3752 


3880 


4008 


4264 


9 


3368 


3496 


3624 


3752 


4008 


4136 


4264 


4392 


4584 


4776 


10 


3752 


3880 


4008 


4264 


4392 


4584 


4776 


4968 


5160 


5352 


11 


4264 


4392 


4584 


4776 


4968 


5352 


5544 


5736 


5992 


5992 


12 


4776 


4968 


5352 


5544 


5736 


5992 


6200 


6456 


6712 


6712 


13 


5352 


5736 


5992 


6200 


6456 


6712 


6968 


7224 


7480 


7736 


14 


5992 


6200 


6456 


6968 


7224 


7480 


7736 


7992 


8248 


8504 


15 


6456 


6712 


6968 


7224 


7736 


7992 


8248 


8504 


8760 


9144 


16 


6712 


7224 


7480 


7736 


7992 


8504 


8760 


9144 


9528 


9912 


17 


7480 


7992 


8248 


8760 


9144 


9528 


9912 


10296 


10296 


10680 


18 


8248 


8760 


9144 


9528 


9912 


10296 


10680 


11064 


11448 


11832 


19 


9144 


9528 


9912 


10296 


10680 


11064 


11448 


12216 


12576 


12960 


20 


9912 


10296 


10680 


11064 


11448 


12216 


12576 


12960 


13536 


14112 


21 


10680 


11064 


11448 


12216 


12576 


12960 


13536 


14112 


14688 


15264 


22 


11448 


11832 


12576 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


23 


12216 


12576 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


24 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


17568 


18336 


25 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


17568 


18336 


19080 


26 


15264 


16416 


16992 


17568 


18336 


19080 


19848 


20616 


21384 


22152 


-'tbs 


"PRB 


31 


32 


33 


34 


35 


36 


37 


38 


39 


40 





840 


872 


904 


936 


968 


1000 


1032 


1032 


1064 


1096 


1 


1128 


1160 


1192 


1224 


1256 


1288 


1352 


1384 


1416 


1416 


2 


1384 


1416 


1480 


1544 


1544 


1608 


1672 


1672 


1736 


1800 


3 


1800 


1864 


1928 


1992 


2024 


2088 


2152 


2216 


2280 


2344 


4 


2216 


2280 


2344 


2408 


2472 


2600 


2664 


2728 


2792 


2856 


5 


2728 


2792 


2856 


2984 


3112 


3112 


3240 


3368 


3496 


3496 


6 


3240 


3368 


3496 


3496 


3624 


3752 


3880 


4008 


4136 


4136 


7 


3752 


3880 


4008 


4136 


4264 


4392 


4584 


4584 


4776 


4968 


8 


4392 


4584 


4584 


4776 


4968 


4968 


5160 


5352 


5544 


5544 


9 


4968 


5160 


5160 


5352 


5544 


5736 


5736 


5992 


6200 


6200 


10 


5544 


5736 


5736 


5992 


6200 


6200 


6456 


6712 


6712 


6968 


11 


6200 


6456 


6712 


6968 


6968 


7224 


7480 


7736 


7736 


7992 


12 


6968 


7224 


7480 


7736 


7992 


8248 


8504 


8760 


8760 


9144 


13 


7992 


8248 


8504 


8760 


9144 


9144 


9528 


9912 


9912 


10296 


14 


8760 


9144 


9528 


9912 


9912 


10296 


10680 


11064 


11064 


11448 


15 


9528 


9912 


10296 


10296 


10680 


11064 


11448 


11832 


11832 


12216 


16 


9912 


10296 


10680 


11064 


11448 


11832 


12216 


12216 


12576 


12960 


17 


11064 


11448 


11832 


12216 


12576 


12960 


13536 


13536 


14112 


14688 


18 


12216 


12576 


12960 


13536 


14112 


14112 


14688 


15264 


15264 


15840 


19 


13536 


13536 


14112 


14688 


15264 


15264 


15840 


16416 


16992 


16992 


20 


14688 


14688 


15264 


15840 


16416 


16992 


16992 


17568 


18336 


18336 


21 


15840 


15840 


16416 


16992 


17568 


18336 


18336 


19080 


19848 


19848 


22 


16992 


16992 


17568 


18336 


19080 


19080 


19848 


20616 


21384 


21384 


23 


17568 


18336 


19080 


19848 


19848 


20616 


21384 


22152 


22152 


22920 


24 


19080 


19848 


19848 


20616 


21384 


22152 


22920 


22920 


23688 


24496 


25 


19848 


20616 


20616 


21384 


22152 


22920 


23688 


24496 


24496 


25456 


26 


22920 


23688 


24496 


25456 


25456 


26416 


27376 


28336 


29296 


29296 


^TBS 


^PRB 


41 


42 


43 


44 


45 


46 


47 


48 


49 


50 





1128 


1160 


1192 


1224 


1256 


1256 


1288 


1320 


1352 


1384 


1 


1480 


1544 


1544 


1608 


1608 


1672 


1736 


1736 


1800 


1800 


2 


1800 


1864 


1928 


1992 


2024 


2088 


2088 


2152 


2216 


2216 


3 


2408 


2472 


2536 


2536 


2600 


2664 


2728 


2792 


2856 


2856 


4 


2984 


2984 


3112 


3112 


3240 


3240 


3368 


3496 


3496 


3624 


5 


3624 


3752 


3752 


3880 


4008 


4008 


4136 


4264 


4392 


4392 


6 


4264 


4392 


4584 


4584 


4776 


4776 


4968 


4968 


5160 


5160 


7 


4968 


5160 


5352 


5352 


5544 


5736 


5736 


5992 


5992 


6200 
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8 


5736 


5992 


5992 


6200 


6200 


6456 


6456 


6712 


6968 


6968 


9 


6456 


6712 


6712 


6968 


6968 


7224 


7480 


7480 


7736 


7992 


10 


7224 


7480 


7480 


7736 


7992 


7992 


8248 


8504 


8504 


8760 


11 


8248 


8504 


8760 


8760 


9144 


9144 


9528 


9528 


9912 


9912 


12 


9528 


9528 


9912 


9912 


10296 


10680 


10680 


11064 


11064 


11448 


13 


10680 


10680 


11064 


11448 


11448 


11832 


12216 


12216 


12576 


12960 


14 


11832 


12216 


12216 


12576 


12960 


12960 


13536 


13536 


14112 


14112 


15 


12576 


12960 


12960 


13536 


13536 


14112 


14688 


14688 


15264 


15264 


16 


13536 


13536 


14112 


14112 


14688 


14688 


15264 


15840 


15840 


16416 


17 


14688 


15264 


15264 


15840 


16416 


16416 


16992 


17568 


17568 


18336 


18 


16416 


16416 


16992 


17568 


17568 


18336 


18336 


19080 


19080 


19848 


19 


17568 


18336 


18336 


19080 


19080 


19848 


20616 


20616 


21384 


21384 


20 


19080 


19848 


19848 


20616 


20616 


21384 


22152 


22152 


22920 


22920 


21 


20616 


21384 


21384 


22152 


22920 


22920 


23688 


24496 


24496 


25456 


22 


22152 


22920 


22920 


23688 


24496 


24496 


25456 


25456 


26416 


27376 


23 


23688 


24496 


24496 


25456 


25456 


26416 


27376 


27376 


28336 


28336 


24 


25456 


25456 


26416 


26416 


27376 


28336 


28336 


29296 


29296 


30576 


25 


26416 


26416 


27376 


28336 


28336 


29296 


29296 


30576 


31704 


31704 


26 


30576 


30576 


31704 


32856 


32856 


34008 


35160 


35160 


36696 


36696 


^TBS 


^PRB 


51 


52 


53 


54 


55 


56 


57 


58 


59 


60 





1416 


1416 


1480 


1480 


1544 


1544 


1608 


1608 


1608 


1672 


1 


1864 


1864 


1928 


1992 


1992 


2024 


2088 


2088 


2152 


2152 


2 


2280 


2344 


2344 


2408 


2472 


2536 


2536 


2600 


2664 


2664 


3 


2984 


2984 


3112 


3112 


3240 


3240 


3368 


3368 


3496 


3496 


4 


3624 


3752 


3752 


3880 


4008 


4008 


4136 


4136 


4264 


4264 


5 


4584 


4584 


4776 


4776 


4776 


4968 


4968 


5160 


5160 


5352 


6 


5352 


5352 


5544 


5736 


5736 


5992 


5992 


5992 


6200 


6200 


7 


6200 


6456 


6456 


6712 


6712 


6712 


6968 


6968 


7224 


7224 


8 


7224 


7224 


7480 


7480 


7736 


7736 


7992 


7992 


8248 


8504 


9 


7992 


8248 


8248 


8504 


8760 


8760 


9144 


9144 


9144 


9528 


10 


9144 


9144 


9144 


9528 


9528 


9912 


9912 


10296 


10296 


10680 


11 


10296 


10680 


10680 


11064 


11064 


11448 


11448 


11832 


11832 


12216 


12 


11832 


11832 


12216 


12216 


12576 


12576 


12960 


12960 


13536 


13536 


13 


12960 


13536 


13536 


14112 


14112 


14688 


14688 


14688 


15264 


15264 


14 


14688 


14688 


15264 


15264 


15840 


15840 


16416 


16416 


16992 


16992 


15 


15840 


15840 


16416 


16416 


16992 


16992 


17568 


17568 


18336 


18336 


16 


16416 


16992 


16992 


17568 


17568 


18336 


18336 


19080 


19080 


19848 


17 


18336 


19080 


19080 


19848 


19848 


20616 


20616 


20616 


21384 


21384 


18 


19848 


20616 


21384 


21384 


22152 


22152 


22920 


22920 


23688 


23688 


19 


22152 


22152 


22920 


22920 


23688 


24496 


24496 


25456 


25456 


25456 


20 


23688 


24496 


24496 


25456 


25456 


26416 


26416 


27376 


27376 


28336 


21 


25456 


26416 


26416 


27376 


27376 


28336 


28336 


29296 


29296 


30576 


22 


27376 


28336 


28336 


29296 


29296 


30576 


30576 


31704 


31704 


32856 


23 


29296 


29296 


30576 


30576 


31704 


31704 


32856 


32856 


34008 


34008 


24 


31704 


31704 


32856 


32856 


34008 


34008 


35160 


35160 


36696 


36696 


25 


32856 


32856 


34008 


34008 


35160 


35160 


36696 


36696 


37888 


37888 


26 


37888 


37888 


39232 


40576 


40576 


40576 


42368 


42368 


43816 


43816 


^TBS 


N 


61 


62 


63 


64 


65 


66 


67 


68 


69 


70 





1672 


1736 


1736 


1800 


1800 


1800 


1864 


1864 


1928 


1928 


1 


2216 


2280 


2280 


2344 


2344 


2408 


2472 


2472 


2536 


2536 


2 


2728 


2792 


2856 


2856 


2856 


2984 


2984 


3112 


3112 


3112 


3 


3624 


3624 


3624 


3752 


3752 


3880 


3880 


4008 


4008 


4136 


4 


4392 


4392 


4584 


4584 


4584 


4776 


4776 


4968 


4968 


4968 


5 


5352 


5544 


5544 


5736 


5736 


5736 


5992 


5992 


5992 


6200 


6 


6456 


6456 


6456 


6712 


6712 


6968 


6968 


6968 


7224 


7224 


7 


7480 


7480 


7736 


7736 


7992 


7992 


8248 


8248 


8504 


8504 


8 


8504 


8760 


8760 


9144 


9144 


9144 


9528 


9528 


9528 


9912 


9 
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26 



75376 75376 75376 75376 75376 75376 75376 75376 75376 75376 



[TS 36.306 clause 4.1] 

The field ue-Category defines a combined uplink and downlink capability. The parameters set by the UE Category are 
defined in subclause 4.2. Tables 4.1-1 and 4.1-2 define the downlink and, respectively, uplink physical layer parameter 
values for each UE Category. 

Table 4.1-1 : Downlink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

DL-SCH transport 

block bits received 

within a TTI 


lUlaximum number 
of bits of a DL- 
SCH transport 
block received 
within a 1 II 


Total number of 
soft channel bits 


Maximum number 

of supported 

layers for spatial 

multiplexing in DL 


Category 1 


10296 


10296 


250368 


1 


Category 2 


51024 


51024 


1237248 


2 


Category 3 


102048 


75376 


1237248 


2 


Category 4 


150752 


75376 


1827072 


2 


Category 5 


299552 


149776 


3667200 


4 



Table 4.1-2: Uplink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

bits of an UL-SCH 

transport block 

transmitted within a 

TTI 


Support for 
64QAM in UL 


Category 1 


5160 


No 


Category 2 


25456 


No 


Category 3 


51024 


No 


Category 4 


51024 


No 


Category 5 


75376 


Yes 



7.1.7.1.6.3 Test description 

7.1.7.1.6.3.1 Pre-test conditions 

System Simulator 

- Cell 1. 

Uplink and downlink bandwidth set to the maximum bandwidth for the E-UTRA Band under test as specified in 
Table 5.6.1-1 in [31] (to enable testing of A^prb '^P ^o maximum value). 

UE: 

None. 

Preamble 

The UE is in state Loopback Activated (state 4) according to [18] condition 2TX to configure MIMO. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



399 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



7.1.7.1.6.3.2 



Test procedure sequence 
Table 7.1 .7.1 .6.3.2-1 : Maximum TBgize tor different UE categories 



UE Category 


Maximum number of 
bits of a DL-SCH 
transport block 

received within a TTI 


Category 1 


10296 


Category 2 


51024 


Category 3 


75376 


Category 4 


75376 


Category 5 


149776 



Table 7.1.7.1.6.3.2-2: Number of downlink PDCP SDUs and PDCP SDU size used as test data for each 

MIMO flow 



TBsize 

[bits] 


Number of 

PDCP SDUs 

per lUIIMO 

flow 


PDCP SDU Size 

[bits] 

See note 1 


72 <r5,,,^< 12056 

note 2 


1 


8*FL00R((TBsize - 56)/8) 


12057 <r5^,^^< 24088 


2 


8*FLOOR((TBsize-88)/16)) 


24089 <r5^,,^< 36 112 


3 


8''FL00R((TBsize- 112)724)) 


361 13 <r5,,,^< 48144 


4 


8*FL00R((TBsize- 144)732)) 


48145 <r5,,,,< 60168 


5 


8*FL00R((TBsize- 168)740)) 


60169 <r5^,,^< 72200 


6 


8*FL00R((TBsize- 200)748)) 


r5^,,^> 72201 


7 


8*FL00R((TBsize- 224)756)) 


Note 1 . Each PDCP SDU is limited to 1 500 octets (to l<eep below maximum SDU size of ESIVI as specified in TS 
24.301 clause 9.9.4.12). 

The PDCP SDU size of each PDCP SDU is 

PDCP SDU size = (TBsize - Number of IVIIMO flows*N*PDCP header size - AMD PDU header size - MAC 
header size - Size of Timing Advance) / (Number of MIMO flows *N), where 

PDCP header size is 16 bits for the RLC AM and 12-bit SN case; 

AMD PDU header size is CEIL[(16+(N-1)*12)/8] bytes which includes 16 standard AM header and (N-1) 

Length indicators; and 

MAC header size = R/R/E/LCID MAC subheader (8 bits for Timing Advance) + R/R/E/LCID MAC 

subheader (8 bits for MAC SDU) = 8 + 8 bits 

Size of Timing Advance MAC CE is 8 bits (if no Timing Advance needs to be sent, padding will occur 

instead) 

This gives: 

PDCP SDU size = 8*FL00R((TBsize - N"! 6- 8*CEIL((1 6+(N-1 )*1 2)/8) - 24)/(8*N)) bits 
Note2: According to TS 36.213 Table 7.1.7.2.1-1 and the final PDCP SDU size formula in Note 1, the smallest TBsize 
that can be tested is 72 bits. 
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Table 7.1.7.1.6.3.2-2a: Bandwidth Dependent Parameters 



Max Bandwidth 


Max A^pRB 


Allowed A^pRB Values 


10Mhz 


50 


2,3,5, 6,8,9, 11, 12, 14, 15, 17, 18,20,21,23,24,26, 
27, 29, 30, 32, 33, 35, 36, 38, 39, 41 , 42, 44, 45, 47, 48, 
50 


15Mhz 


75 


3,4,7,8, 11, 12, 15, 16, 19,20,23,24,27,28, 31,32, 
35, 36, 39, 40, 43, 44 ,47, 48, 51 , 52, 55, 56, 59, 60, 63, 
64,67,68,71,72,75 


20Mhz 


100 


4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 60, 64, 
68,72,76,80,84,88,92,96, 100 


Note: Maximum bandwidth for EUTRA bands is 1 0/1 5/20 IVIhz. 



Table 7.1.7.1.6.3.2-2b: Ambiguous Sizes of Information Bits 

I {1 2, 1 4, 1 6 ,20, 24, 26, 32, 40, 44, 56} | 



Table 7.1. 7.1. 6.3.2-2C: 



'^MCS*! 3"^ 



^Mcs#2 *®st points for transport block 1 and transport block 2 for 
different UE Categories 



MCS test 
point index 


MCS Index 

transport 

block 1 

'mcs#i 


MCS Index transport block 2, /mcs#2 
(Note1) 


UE 
Category 1 


UE 
Category 2 


UE 
Category 3 


UE 
Category 4 


UE 
Category 5 








FFS 


FFS 


FFS 


FFS 


FFS 


1 


1 


FFS 


FFS 


FFS 


FFS 


FFS 


2 


2 


FFS 


FFS 


FFS 


FFS 


FFS 


3 


3 


FFS 


FFS 


FFS 


FFS 


FFS 


4 


4 


FFS 


FFS 


FFS 


FFS 


FFS 


5 


5 


FFS 


FFS 


FFS 


FFS 


FFS 


6 


6 


FFS 


FFS 


FFS 


FFS 


FFS 


7 


7 


FFS 


FFS 


FFS 


FFS 


FFS 


8 


8 


FFS 


FFS 


FFS 


FFS 


FFS 


9 


9 


FFS 


FFS 


FFS 


FFS 


FFS 


10 


10 


FFS 


FFS 


FFS 


FFS 


FFS 


11 


11 


FFS 


FFS 


FFS 


FFS 


FFS 


12 


12 


FFS 


FFS 


FFS 


FFS 


FFS 


13 


13 


FFS 


FFS 


FFS 


FFS 


FFS 


14 


14 


FFS 


FFS 


FFS 


FFS 


FFS 


15 


15 


FFS 


FFS 


FFS 


FFS 


FFS 


16 


16 


FFS 


FFS 


FFS 


FFS 


FFS 


17 


17 


FFS 


FFS 


FFS 


FFS 


FFS 


18 


18 


FFS 


FFS 


FFS 


FFS 


FFS 


19 


19 


FFS 


FFS 


FFS 


FFS 


FFS 


20 


20 


FFS 


FFS 


FFS 


FFS 


FFS 


21 


21 


FFS 


FFS 


FFS 


FFS 


FFS 


22 


22 


FFS 


FFS 


FFS 


FFS 


FFS 


23 


23 


FFS 


FFS 


FFS 


FFS 


FFS 


24 


24 


FFS 


FFS 


FFS 


FFS 


FFS 


25 


25 


FFS 


FFS 


FFS 


FFS 


FFS 


26 


26 


FFS 


FFS 


FFS 


FFS 


FFS 


27 


27 


FFS 


FFS 


FFS 


FFS 


FFS 


28 


28 


FFS 


FFS 


FFS 


FFS 


FFS 


Note 1 : The IVICS index for transport blocl< 2 has been selected to avoid limitations due to UE 
capabilities for the different UE Categories. 



Table 7.1.7.1.6.3.2-3: Main behaviour 



St 


Procedure 


Message Sequence 


TP Verdict 


U-S 


Message 


- 


EXCEPTION: Steps 1 to 4 are 


- 


- 


- 1 
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repeated for allowed values of 
A^PRB as portable 7.1. 7.1. 6.3.2- 

2a and for each /|yics#i and 

■^Mcs#2 value for MCS test points 
to 28 as portable 7.1. 7.1. 6.3.2- 
2c. 










1 


SS looks up /jBs#i for transport 

block 1 and in table 7.1.7.1-1 in 
TS 36.213 based on the value of 

/mcs#i ■ SS looks up TBsize#i in 
table 7.1.7.2.1-1 in TS 36.213 
based on values of A^p^g and 

'tbs#i ■ 

SS looks up /jBs#2 f°'' transport 
block 2 and in table 7.1.7.1-1 in 
TS 36.213 based on the value of 

/mcs#2 ■ SS looks up TBsize#2 in 
table 7.1.7.2.1-1 in TS 36.213 
based on values of A^p^jj and 

■' TBS#2 ■ 












EXCEPTION: Steps 2 to 4 are 
performed if the sum of the sizes 
of TBsize#i and TBsize#2 is less than 
or equal to UE capability 
"IVIaximum number of DL-SCH 
transport block bits received within 
all!" as specified in Table 
7.1 .7.1 .6.3.2-1 and larger than or 
equal to 72 bits as specified in 
Table 7.1.7.1.6.3.2-2, and the 
effective channel code rate, as 
defined in TS 36.21 3 clause 7.1 .7, 
is lower than or equal to 0.930. 










2 


SS creates one or more PDCP 
SDUs for transport block 1 
depending on TBsize#i, in 
accordance with Table 
7.1.7.1.6.3.2-2. 

SS creates one or more PDCP 
SDUs for transport block 2 
depending on TBsize#2, in 
accordance with Table 
7.1.7.1.6.3.2-2. 










3 


SS transmits the PDCP SDUs for 
transport block 1 and 2 
concatenated into a MAC PDU 
per transport block and indicates 
on PDCCH DCI Format 2A with 
RA type 1 and a resource block 
assignment (RBA) correspondent 

to A^pRB as specified in 7.1.6.1 in 

TS 36.21 3, transport block to 
codeword swap flag value set to 
'1' and modulation and coding 

scheme /mcs#i f°'' transport block 


<— 


Transport block 1 : 

MACPDU (Ni xPDCP 

SDUs) 

Transport block 2: 

MACPDU (NaxPDCP 

SDUs) 

DCI: (DCI Format 2A, RA 

type1,RBA(A?PRB), 
Transport block to 
codeword swap flag value 

setto='r, I^csm' 







ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



402 



ETSI TS 136 523-1 V9.1.1 (2010-07) 





1 and /,^cs#2f°''*''3'^sport block 
2. 




' MCS#2 ) 






3a 


SS transmits one or more UL 
Grants sufficient for transmitting 
loop back PDCP SDUs. 


<— 


(UL Grant) 






4 


CHECK: Does UE return the 
same number of PDCP SDUs with 
same content as transmitted by 
the SS in step 3? 


— > 


(Nix PDCP SDUs, 
Nax PDCP SDUs) 


1 


P 



Specific Message Contents 

UL-SCH transport block size support 

UL-SCH transport block size selection / DCI format 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE has pending data for transmission and receives a Resource Block Assignment correspondent 

to A^pRg physical resource blocks and a modulation and coding scheme lyics f°^ PUSCH scheduling } 
then { UE transmits MAC PDU on PUSCH on the granted resources using a transport block size 

correspondent to the read A^prb and lyiQ^ } 



7.1.7.1.6.3.3 


None 


7.1.7.2 


7.1.7.2.1 


7.1.7.2.1.1 


(1) 



7.1.7.2.1.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.212, clause 5.3.3.1.1; TS 
36.213, clauses 8.1, 8.6, 8.6.1, 8.6.2 and 7.1.7.2.1; TS 36.211, clause 5.3.3; and TS 36.306 clause 4.1. 

[TS 36.212 clause 5.3.3.1.1] 

DCI format is used for the scheduling of PUSCH. 

The following information is transmitted by means of the DCI format 0: 

Flag for formatO/formatl A differentiation - 1 bit, where value indicates format and value 1 indicates format 
lA 

Hopping flag - 1 bit as defined in section 8.4 of [3] 

Resource block assignment and hopping resource allocation - |log2(A^RB (^rb +1)^2) | bits 

- For PUSCH hopping: 

- NuL_hop MSB bits are used to obtain the value of ripj^gii) as indicated in subclause [8.4] of [3] 

subframe 

For non-hopping PUSCH: 



log2(A^RB (-^RB +l)/2) I - A^uL hop I ^its providc the resource allocation of the first slot in the UL 
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I log2 (A^RB (-^RB + 1) / 2) I bits provide the resource allocation in the UL subframe as defined in 

section 8.1 of [3] 

Modulation and coding scheme and redundancy version - 5 bits as defined in section 8.6 of [3] 

[TS 36.213 clause 8.1] 

The resource allocation information indicates to a scheduled UE a set of contiguously allocated virtual resource block 
indices denoted by WyRB ■ ^ resource allocation field in the scheduling grant consists of a resource indication value 
(RIV) corresponding to a starting resource block ( /^Bstart ) '^^'^ ^ length in terms of contiguously allocated resource 
blocks ( Lqrbs - !)■ The resource indication value is defined by 

if (Lcrbs-D^Urb/zJ then 

RIV = Nji^B (icRBs - 1) + ^^START 

else 

RIV = N^^ (N^^ - LcRBs + 1) + (A^RB - 1 - ^^START ) 

A UE shall discard PUSCH resource allocation in the corresponding PDCCH with DCI format if consistent control 
information is not detected. 

[TS 36.213 clause 8.6] 

To determine the modulation order, redundancy version and transport block size for the physical uplink shared channel, 
the UE shall first 

read the 5-bit "modulation and coding scheme and redundancy version" field ( I,^^^ ) in the DCI, and 
check the "CQI request" bit in DCI, and 

compute the total number of allocated PRBs ( A^pRg ) based on the procedure defined in Section 8.1, and 
compute the number of coded symbols for control information.. 
[TS 36.213 clause 8.6.1] 

ForO < /^jcs - 28 , the modulation order (Q„) is determined as follows: 

- If the UE is capable of supporting 64QAM in PUSCH and has not been configured by higher layers to transmit 
only QPSK and 16QAM, the modulation order is given by 2,„ in Table 8.6.1-1. 

- If the UE is not capable of supporting 64QAM in PUSCH or has been configured by higher layers to transmit 
only QPSK and 16QAM, 2^^ is first read from Table 8.6.1-1. The modulation order is set to 2^ = min(4,2^) . 

- If the parameter ttiBundling provided by higher layers is set to TRUE, then the resource allocation size is 
restricted to A^pRg ^ 3 and the modulation order is set to 2„ = 2 . 

For 29 < /^jcs - 31 , If ^mcs = 29 , the "CQI request" bit in DCI format is set to 1 and N-p-g^ < 4 , the modulation order 
is set to 2^ = 2 . Otherwise, the modulation order shall be determined from the DCI transported in the latest PDCCH 
with DCI format for the same transport block using < I^^^ < 28 . If there is no PDCCH with DCI format for the 
same transport block using < If^^^ < 28 , the modulation order shall be determined from 

- the most recent semi-persistent scheduling assignment PDCCH, when the initial PUSCH for the same transport 
block is semi-persistently scheduled, or. 
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the random access response grant for the same transport block, when the PUSCH is initiated by the random access 
response grant. 

The UE shall use If^^^ and Table 8.6.1-1 to determine the redundancy version (rv,vii) to use in the physical uplink shared 



channel. 



Table 8.6.1-1 : Modulation, TBS index and redundancy version table for PUSCH 



MCS Index 

^MCS 


IVIodulation Order 


TBS Index 

-"IBS 


Redundancy 

Version 

rvidx 





2 








1 


2 


1 





2 


2 


2 





3 


2 


3 





4 


2 


4 





5 


2 


5 





6 


2 


6 





7 


2 


7 





8 


2 


8 





9 


2 


9 





10 


2 


10 





11 


4 


10 





12 


4 


11 





13 


4 


12 





14 


4 


13 





15 


4 


14 





16 


4 


15 





17 


4 


16 





18 


4 


17 





19 


4 


18 





20 


4 


19 





21 


6 


19 





22 


6 


20 





23 


6 


21 





24 


6 


22 





25 


6 


23 





26 


6 


24 





27 


6 


25 





28 


6 


26 





29 


reserved 


1 


30 


2 


31 






3 



[TS 36.213 clause 8.6.2] 

ForO < If^^^ < 28 , the UE shall first determine the TBS index ( /^g^ ) using If^^^ and Table 8.6.1-1. The UE shall then 
follow the procedure in Section 7.1.7.2.1 to determine the transport block size. 



For29</Mcs^3L 



If/. 



29 , the "CQI request" bit in DCI format is set to 1 and Np^^ < 4 , then there is no 



transport block for the UL-SCH and only the control information feedback for the current PUSCH reporting mode is 
transmitted by the UE. Otherwise, the transport block size shall be determined from the initial PDCCH for the same 
transport block using < /^j^s ^ 28 • If there is no initial PDCCH with DCI format for the same transport block using 

< If^^g < 28 , the transport block size shall be determined from 

- the most recent semi-persistent scheduling assignment PDCCH, when the initial PUSCH for the same transport 
block is semi-persistently scheduled, or, 

- the random access response grant for the same transport block, when the PUSCH is initiated by the random 
access response grant. 

[TS 36.213 clause 7.1.7.2.1] 
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For 1 < A^pRB < 1 10 , the TBS is given by the ( /^gg , A^p^g ) entry of Table 7. 1.7.2.1-1. 
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Table 7.1.7.2.1-1: Transport block size table (dimension 27x110) 



-"TBS 


N 

"PRB 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 





16 


32 


56 


88 


120 


152 


176 


208 


224 


256 


1 


24 


56 


88 


144 


176 


208 


224 


256 


328 


344 


2 


32 


72 


144 


176 


208 


256 


296 


328 


376 


424 


3 


40 


104 


176 


208 


256 


328 


392 


440 


504 


568 


4 


56 


120 


208 


256 


328 


408 


488 


552 


632 


696 


5 


72 


144 


224 


328 


424 


504 


600 


680 


776 


872 


6 


328 


176 


256 


392 


504 


600 


712 


808 


936 


1032 


7 


104 


224 


328 


472 


584 


712 


840 


968 


1096 


1224 


8 


120 


256 


392 


536 


680 


808 


968 


1096 


1256 


1384 


9 


136 


296 


456 


616 


776 


936 


1096 


1256 


1416 


1544 


10 


144 


328 


504 


680 


872 


1032 


1224 


1384 


1544 


1736 


11 


176 


376 


584 


776 


1000 


1192 


1384 


1608 


1800 


2024 


12 


208 


440 


680 


904 


1128 


1352 


1608 


1800 


2024 


2280 


13 


224 


488 


744 


1000 


1256 


1544 


1800 


2024 


2280 


2536 


14 


256 


552 


840 


1128 


1416 


1736 


1992 


2280 


2600 


2856 


15 


280 


600 


904 


1224 


1544 


1800 


2152 


2472 


2728 


3112 


16 


328 


632 


968 


1288 


1608 


1928 


2280 


2600 


2984 


3240 


17 


336 


696 


1064 


1416 


1800 


2152 


2536 


2856 


3240 


3624 


18 


376 


776 


1160 


1544 


1992 


2344 


2792 


3112 


3624 


4008 


19 


408 


840 


1288 


1736 


2152 


2600 


2984 


3496 


3880 


4264 


20 


440 


904 


1384 


1864 


2344 


2792 


3240 


3752 


4136 


4584 


21 


488 


1000 


1480 


1992 


2472 


2984 


3496 


4008 


4584 


4968 


22 


520 


1064 


1608 


2152 


2664 


3240 


3752 


4264 


4776 


5352 


23 


552 


1128 


1736 


2280 


2856 


3496 


4008 


4584 


5160 


5736 


24 


584 


1192 


1800 


2408 


2984 


3624 


4264 


4968 


5544 


5992 


25 


616 


1256 


1864 


2536 


3112 


3752 


4392 


5160 


5736 


6200 


26 


712 


1480 


2216 


2984 


3752 


4392 


5160 


5992 


6712 


7480 


^TBS 


-''^PRB 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 





288 


328 


344 


376 


392 


424 


456 


488 


504 


536 


1 


376 


424 


456 


488 


520 


568 


600 


632 


680 


712 


2 


472 


520 


568 


616 


648 


696 


744 


776 


840 


872 


3 


616 


680 


744 


808 


872 


904 


968 


1032 


1096 


1160 


4 


776 


840 


904 


1000 


1064 


1128 


1192 


1288 


1352 


1416 


5 


968 


1032 


1128 


1224 


1320 


1384 


1480 


1544 


1672 


1736 


6 


1128 


1224 


1352 


1480 


1544 


1672 


1736 


1864 


1992 


2088 


7 


1320 


1480 


1608 


1672 


1800 


1928 


2088 


2216 


2344 


2472 


8 


1544 


1672 


1800 


1928 


2088 


2216 


2344 


2536 


2664 


2792 


9 


1736 


1864 


2024 


2216 


2344 


2536 


2664 


2856 


2984 


3112 


10 


1928 


2088 


2280 


2472 


2664 


2792 


2984 


3112 


3368 


3496 


11 


2216 


2408 


2600 


2792 


2984 


3240 


3496 


3624 


3880 


4008 


12 


2472 


2728 


2984 


3240 


3368 


3624 


3880 


4136 


4392 


4584 


13 


2856 


3112 


3368 


3624 


3880 


4136 


4392 


4584 


4968 


5160 


14 


3112 


3496 


3752 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


15 


3368 


3624 


4008 


4264 


4584 


4968 


5160 


5544 


5736 


6200 


16 


3624 


3880 


4264 


4584 


4968 


5160 


5544 


5992 


6200 


6456 


17 


4008 


4392 


4776 


5160 


5352 


5736 


6200 


6456 


6712 


7224 


18 


4392 


4776 


5160 


5544 


5992 


6200 


6712 


7224 


7480 


7992 


19 


4776 


5160 


5544 


5992 


6456 


6968 


7224 


7736 


8248 


8504 


20 


5160 


5544 


5992 


6456 


6968 


7480 


7992 


8248 


8760 


9144 


21 


5544 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


9912 


22 


5992 


6456 


6968 


7480 


7992 


8504 


9144 


9528 


10296 


10680 


23 


6200 


6968 


7480 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


24 


6712 


7224 


7992 


8504 


9144 


9912 


10296 


11064 


11448 


12216 


25 


6968 


7480 


8248 


8760 


9528 


10296 


10680 


11448 


12216 


12576 


26 


8248 


8760 


9528 


10296 


11064 


11832 


12576 


13536 


14112 


14688 


-'tbs 


-''^PRB 


21 


22 


23 


24 


25 


26 


27 


28 


29 


30 
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568 


600 


616 


648 


680 


712 


744 


776 


776 


808 


1 


744 


776 


808 


872 


904 


936 


968 


1000 


1032 


1064 


2 


936 


968 


1000 


1064 


1096 


1160 


1192 


1256 


1288 


1320 


3 


1224 


1256 


1320 


1384 


1416 


1480 


1544 


1608 


1672 


1736 


4 


1480 


1544 


1608 


1736 


1800 


1864 


1928 


1992 


2088 


2152 


5 


1864 


1928 


2024 


2088 


2216 


2280 


2344 


2472 


2536 


2664 


6 


2216 


2280 


2408 


2472 


2600 


2728 


2792 


2984 


2984 


3112 


7 


2536 


2664 


2792 


2984 


3112 


3240 


3368 


3368 


3496 


3624 


8 


2984 


3112 


3240 


3368 


3496 


3624 


3752 


3880 


4008 


4264 


9 


3368 


3496 


3624 


3752 


4008 


4136 


4264 


4392 


4584 


4776 


10 


3752 


3880 


4008 


4264 


4392 


4584 


4776 


4968 


5160 


5352 


11 


4264 


4392 


4584 


4776 


4968 


5352 


5544 


5736 


5992 


5992 


12 


4776 


4968 


5352 


5544 


5736 


5992 


6200 


6456 


6712 


6712 


13 


5352 


5736 


5992 


6200 


6456 


6712 


6968 


7224 


7480 


7736 


14 


5992 


6200 


6456 


6968 


7224 


7480 


7736 


7992 


8248 


8504 


15 


6456 


6712 


6968 


7224 


7736 


7992 


8248 


8504 


8760 


9144 


16 


6712 


7224 


7480 


7736 


7992 


8504 


8760 


9144 


9528 


9912 


17 


7480 


7992 


8248 


8760 


9144 


9528 


9912 


10296 


10296 


10680 


18 


8248 


8760 


9144 


9528 


9912 


10296 


10680 


11064 


11448 


11832 


19 


9144 


9528 


9912 


10296 


10680 


11064 


11448 


12216 


12576 


12960 


20 


9912 


10296 


10680 


11064 


11448 


12216 


12576 


12960 


13536 


14112 


21 


10680 


11064 


11448 


12216 


12576 


12960 


13536 


14112 


14688 


15264 


22 


11448 


11832 


12576 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


23 


12216 


12576 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


24 


12960 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


17568 


18336 


25 


13536 


14112 


14688 


15264 


15840 


16416 


16992 


17568 


18336 


19080 


26 


15264 


16416 


16992 


17568 


18336 


19080 


19848 


20616 


21384 


22152 


-'tbs 


N 


31 


32 


33 


34 


35 


36 


37 


38 


39 


40 





840 


872 


904 


936 


968 


1000 


1032 


1032 


1064 


1096 


1 


1128 


1160 


1192 


1224 


1256 


1288 


1352 


1384 


1416 


1416 


2 


1384 


1416 


1480 


1544 


1544 


1608 


1672 


1672 


1736 


1800 


3 


1800 


1864 


1928 


1992 


2024 


2088 


2152 


2216 


2280 


2344 


4 


2216 


2280 


2344 


2408 


2472 


2600 


2664 


2728 


2792 


2856 


5 


2728 


2792 


2856 


2984 


3112 


3112 


3240 


3368 


3496 


3496 


6 


3240 


3368 


3496 


3496 


3624 


3752 


3880 


4008 


4136 


4136 


7 


3752 


3880 


4008 


4136 


4264 


4392 


4584 


4584 


4776 


4968 


8 


4392 


4584 


4584 


4776 


4968 


4968 


5160 


5352 


5544 


5544 


9 


4968 


5160 


5160 


5352 


5544 


5736 


5736 


5992 


6200 


6200 


10 


5544 


5736 


5736 


5992 


6200 


6200 


6456 


6712 


6712 


6968 


11 


6200 


6456 


6712 


6968 


6968 


7224 
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61664 


61664 


61664 


61664 


63776 


63776 


26 


66592 


68808 


68808 


68808 


71112 


71112 


71112 


73712 


73712 


75376 


-'tbs 


-''^PRB 


101 


102 


103 


104 


105 


106 


107 


108 


109 


110 





2792 


2856 


2856 


2856 


2984 


2984 


2984 


2984 


2984 


3112 


1 


3752 


3752 


3752 


3752 


3880 


3880 


3880 


4008 


4008 


4008 


2 


4584 


4584 


4584 


4584 


4776 


4776 


4776 


4776 


4968 


4968 


3 


5992 


5992 


5992 


5992 


6200 


6200 


6200 


6200 


6456 


6456 


4 


7224 


7224 


7480 


7480 


7480 


7480 


7736 


7736 


7736 


7992 


5 


8760 


9144 


9144 


9144 


9144 


9528 


9528 


9528 


9528 


9528 


6 


10680 


10680 


10680 


10680 


11064 


11064 


11064 


11448 


11448 


11448 


7 


12216 


12576 


12576 


12576 


12960 


12960 


12960 


12960 


13536 


13536 


8 


14112 


14112 


14688 


14688 


14688 


14688 


15264 


15264 


15264 


15264 


9 


15840 


16416 


16416 


16416 


16416 


16992 


16992 


16992 


16992 


17568 


10 


17568 


18336 


18336 


18336 


18336 


18336 


19080 


19080 


19080 


19080 


11 


20616 


20616 


20616 


21384 


21384 


21384 


21384 


22152 


22152 


22152 


12 


22920 


23688 


23688 


23688 


23688 


24496 


24496 


24496 


24496 


25456 


13 


26416 


26416 


26416 


26416 


27376 


27376 


27376 


27376 


28336 


28336 


14 


29296 


29296 


29296 


29296 


30576 


30576 


30576 


30576 


31704 


31704 


15 


30576 


31704 


31704 


31704 


31704 


32856 


32856 


32856 


34008 


34008 


16 


32856 


32856 


34008 


34008 


34008 


34008 


35160 


35160 


35160 


35160 


17 


36696 


36696 


36696 


37888 


37888 


37888 


39232 


39232 


39232 


39232 


18 


40576 


40576 


40576 


40576 


42368 


42368 


42368 


42368 


43816 


43816 


19 


43816 


43816 


43816 


45352 


45352 


45352 


46888 


46888 


46888 


46888 
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20 


46888 


46888 


48936 


48936 


48936 


48936 


48936 


51024 


51024 


51024 


21 


51024 


51024 


51024 


52752 


52752 


52752 


52752 


55056 


55056 


55056 


22 


55056 


55056 


55056 


57336 


57336 


57336 


57336 


59256 


59256 


59256 


23 


57336 


59256 


59256 


59256 


59256 


61664 


61664 


61664 


61664 


63776 


24 


61664 


61664 


63776 


63776 


63776 


63776 


66592 


66592 


66592 


66592 


25 


63776 


63776 


66592 


66592 


66592 


66592 


68808 


68808 


68808 


71112 


26 


75376 


75376 


75376 


75376 


75376 


75376 


75376 


75376 


75376 


75376 



[TS 36.211 clause 5.3.3] 



, PUSCH 



The block of complex-valued symbols d(0),...,diM ^J-l) is divided into M ^^/M^^ sets, each corresponding 

to one SC-FDMA symbol. Transform precoding shall be applied according to 



Z(/-M™^™+/t): 



1 



^[^l 



PUSCH 



X"" ,/, ,^ PUSCH , -N 

r > dil-M^^ +i)e 



2mk 

^•^ ,, PUSCH 



!=0 



fe = 0,...,M™^'^"-l 



/ = 0,...,M,,„b/<c"'^"-l 



resulting in a block of complex-valued symbols z(0),..., z{M^^^^, - 1) . The variable M™^*^" = M^^'^^ ■ Nf^ , where 
Mj^B represents the bandwidth of the PUSCH in terms of resource blocks, and shall fulfil 



M 



PUSCH _ offo Q«i «'^' 



RB 



2"2 •3"3 .5"5 <^ 



UL 
RB 



where a2,0!2,cc^ is a set of non-negative integers. 

[TS 36.306 clause 4.1] 

The field ue-Category defines a combined uplink and downlink capability. The parameters set by the UE Category are 
defined in subclause 4.2. Tables 4. 1-1 and 4. 1-2 define the downlink and, respectively, uplink physical layer parameter 
values for each UE Category. 

Table 4.1-1 : Downlink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

DL-SCH transport 

block bits received 

within a TTI 


lUlaximum number 
of bits of a DL- 
SCH transport 
block received 
within a 1 II 


Total number of 
soft channel bits 


Maximum number 

of supported 

layers for spatial 

multiplexing in DL 


Category 1 


10296 


10296 


250368 


1 


Category 2 


51024 


51024 


1237248 


2 


Category 3 


102048 


75376 


1237248 


2 


Category 4 


150752 


75376 


1827072 


2 


Category 5 


299552 


149776 


3667200 


4 



Table 4.1-2: Uplink physical layer parameter values set by the field ue-Category 



UE Category 


Maximum number of 

bits of an UL-SCH 

transport block 

transmitted within a 

TTI 


Support for 
64QAM in UL 


Category 1 


5160 


No 


Category 2 


25456 


No 


Category 3 


51024 


No 


Category 4 


51024 


No 


Category 5 


75376 


Yes 
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7.1.7.2.1.3 Test description 

7.1.7.2.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1. 

Uplink and downlink bandwidth set to the maximum bandwidth for the E-UTRA Band under test as specified in 
Table 5.6.1-1 in [31](to enable testing of A^pRg up to maximum value). 

UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

7.1 .7.2.1 .3.2 Test procedure sequence 

Table 7.1.7.2.1.3.2-1 : Maximum TBsize tor different UE categories 



UE Category 


Maximum number of 

bits of an UL-SCH 

transport block 

transmitted within a 

TTI 


Category 1 


5160 


Category 2 


25456 


Category 3 


51024 


Category 4 


51024 


Category 5 


75376 
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Table 7.1.7.2.1.3.2-2: Number of downlink PDCP SDUs and PDCP SDU size used as test data 



TBsize 

[bits] 


Number of 
PDCP SDUs, 

NsDUs 


PDCP SDU Size 

[bits] 

See note 1 


56 <r5,,,^< 12040 

note 2 


1 


8*FLOOR((TBsize-40)/8) 


12041 <r5^i^^< 24096 


2 


8*FLOOR((TBsize-96)/16)) 


24097 <r5,i,^< 36152 


3 


8*FLOOR((TBsize-152)/24)) 


36153 <r5,,,^< 48208 


4 


8*FL00R((TBsize- 208)/32)) 


48209 < TB^^^ < 60264 


5 


8*FLOOR((TBsize-264)/40)) 


60265 < TB^^^ < ll^lQ 


6 


8*FL00R((TBsize- 320)/48)) 


TB^^^> 11311 


7 


8*FL00R((TBsize- 376)/56)) 


Note 1 : Each PDCP SDU is limited to 1 500 octets (to l<eep below maximum SDU size of ESIVI as specified in TS 
24.301 clause 9.9.4.12). 

N PDCP SDUs are transmitted in N AIVID PDUs concatenated into a MAC PDU. The PDCP SDU size of 
each PDCP SDU is 

PDCP SDU size = (TBsize - N*PDCP header size - N*AMD PDU header size - MAC header size) / N, 
where 

PDCP header size is 1 6 bits for the RLC AM and 1 2-bit SN case; 

AMD PDU header size is 1 6 bits; 

MAC header size = (N-1)*R/R/E/LCID/F/L MAC subheader with 15-bit L field (24 bits) + R/R/E/LCID MAC 

subheader (8 bits) = (N-1)*24 -i- 8 bits 

This gives: 

PDCP SDU size = 8''FL00R((TBsize - N*32 - (N-1 )*24 - 8)/(8*N)) bits. 
Note 2: According to TS 36.213 Table 7.1.7.2.1-1 and the final PDCP SDU size formula in Note 1, the smallest 
TBsize that can be tested is 56 bits. 



Table 7.1 .7.2.1 .3.2-2a: Bandwidth Dependent Parameters 



Max Bandwidth 


Max A^pj^B 


lOMhz 


50 


15Mhz 


75 


20Mhz 


100 


Note: Maximum bandwidth for EUTRA bands is 1 0/1 5/20 Mhz. 



Table 7.1.7.2.1.3.2-3: IVIain behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS ignores scheduling 
requests and does not allocate 
any uplink grant. 












EXCEPTION: Steps 2 to 7 are 
repeated for values of A^p^g from 

1 to Max A'^pRB and /^j^s from 

to 28, where ^pRb satisfies 
values equal to 
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where ^2 '^3 '^5 is a set of non- 
negative integers. 










2 


SSIool<sup /tbs in table 8.6.1-1 
in TS 36.213 based on the value 
of /^jcs ■ SS looks up TBsize in 
table 7.1.7.2.1-1 in TS 36.213 
based on values of A^p^g and 

^TBS ■ 












EXCEPTION: Steps 3 to 7 are 
performed if TBsize is less than or 
equal to UE capability "IVIaximum 
number of UL-SCH transport 
block bits received within a TTI" 
as specified in Table 7.1 .7.2.1 .3.2- 
1 and larger than or equal to 56 
bits as specified in Table 
7.1.7.2.1.3.2-2. 










3 


SS creates one or more PDCP 
SDUs, depending on TBsize, in 
accordance with Table 
7.1.7.2.1.3.2-2. 










4 


SS transmits all PDCP SDUs 
(NsDUs) as created in step 3 in a 
MAC PDU. 


<— 


MAC PDU (NsDUsX PDCP 
SDU) 






5 


The SS responds to any 
scheduling requests by a PUSCH 
scheduling indicating DCI Format 
with a RVI correspondent to 

A^PRB as specified in 8.1 in TS 

36.213 and modulation and 

coding scheme If^^s as specified 

in Table 8.6.1-1 in TS 36.213. 


<— 


(UL Grant) 

DCI: (DCI Format 0, RVI 

(" PRB )' ^MCS ) 






6 


The SS ignores scheduling 
requests and does not allocate 
any uplink grant. 










7 


CHECK: Does UE return the 
same number of PDCP SDUs with 
same content as transmitted by 
the SS in step 4 using the 
Resource Block Assignment and 
modulation and coding scheme as 
configured by the SS in step 5? 


-> 


MAC PDU (NsDUsXPDCP 
SDU) 


1 


P 



7.1.7.2.1.3.3 
None. 



Specific Message Contents 
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7.2 RLC 

7.2.1 General 

For UM tests, the UM test DRB is set up using the Generic Procedure described in clause 4.5 of [18], with the 
parameters described in clause 4.8.2.1.3.1 of [18], except for the tests that explicitly specify a different DRB 
configuration. 

For AM tests, the AM test DRB is set up using the Generic Procedure described in clause 4.5 of [18], with the 
parameters described in clause 4.8.2.1.3.2 of [18], except for the tests that explicitly specify a different DRB 
configuration. 

Unless specified otherwise in the test procedure sequence, the data field of each RLC PDU transmitted by the SS 
contains a complete RLC SDU. 

7.2.2 Unacknowledged mode 

7.2.2.1 UM RLC / Segmentation and reassembly / 5-bit SN / Framing info field 

7.2.2.1.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a 5 bit SN configured UMD PDU containing a FI field set to 00 } 
then { UE correctly decodes the received UMD PDU } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a 5 bit SN configured UMD PDU containing a FI field set to 01 } 
then { UE correctly decodes the received UMD PDU } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a 5 bit SN configured UMD PDU containing a FI field set to 11 } 
then { UE correctly decodes the received UMD PDU } 
} 

(4) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a 5 bit SN configured UMD PDU containing a FI field set to 10 } 
then { UE correctly decodes the received UMD PDU } 



7.2.2.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.322, clause 6.2.1.3 and 
6.2.2.6. 

[TS 36.322, clause 6.2.1.3] 



An UM RLC entity is configured by RRC to use either a 5 bit SN or a 10 bit SN. When the 5 bit SN is configured, the 
length of the fixed part of the UMD PDU header is one byte. When the 10 bit SN is configured, the fixed part of the 
UMD PDU header is identical to the fixed part of the AMD PDU header, except for D/C, RF and P fields all being 
replaced with Rl fields. The extension part of the UMD PDU header is identical to the extension part of the AMD PDU 
header (regardless of the configured SN size). 
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[TS 36.322, clause 6.2.2.6] 

Length: 2 bits. 

The FI field indicates whether a RLC SDU is segmented at the beginning and/or at the end of the Data field. 
Specifically, the FI field indicates whether the first byte of the Data field corresponds to the first byte of a RLC SDU, 
and whether the last byte of the Data field corresponds to the last byte of a RLC SDU. The interpretation of the FI field 
is provided in Table 6.2.2.6- L 

Table 6.2.2.6-1 : FI field interpretation 



Value 


Description 


00 


First byte of the Data field corresponds to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


01 


First byte of the Data field corresponds to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 


10 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


11 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 



7.2.2.1.3 
7.2.2.1.3.1 
System Simulator: 

- Cell 1. 
UE: 
None. 
Preamble: 



Test description 
Pre-test conditions 



The UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.2.1.3.1-1 
applicable for the configured UM DRB. 

The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

Table 7.2.2.1.3.1-1: RLC parameters 



Uplink RLC 

sn-FieldLength 


sizes 


Downlink RLC 
sn-FieldLength 


sizes 
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7.2.2.1.3.2 



Test procedure sequence 

Table 7.2.2.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits UMD PDU#1 containing a 
complete RLC SDU#1 (Fl field = 00). 


<— 


UMD PDU#1 


- 


- 


2 


Check: Does the UE transmit RLC SDU#1 ? 


— > 


(RLCSDU#1) 


1 


P 


3 


The SS transmits UMD PDU#2 containing the 
first segment of RLC SDU#2 (Fl field = 01 ). 


<— 


UMD PDU#2 


- 


- 


4 


The SS transmits UIVID PDU#3 containing the 
second segment of RLC SDU#2 (Fl field = 11). 


<— 


UMD PDU#3 


- 


- 


5 


The SS transmits UIVID PDU#4 containing the 
last segment of RLC SDU#2 (Fl field = 1 0). 


<— 


UMD PDU#4 


- 


- 


6 


Check: Does the UE transmit RLC SDU#2? 


-> 


(RLC SDU#2) 


2,3, 
4 


P 



7.2.2.1.3.3 
None. 
7.2.2.2 
7.2.2.2.1 
(1) 



Specific message contents 

DM RLC / Segmentation and reassembly / 1 0-bit SN / Framing info field 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a 10 bit SN configured UMD PDU containing a Fl field set to 00 
then { UE correctly decodes the received UMD PDU } 



(2) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a 10 bit SN configured UMD PDU containing a Fl field set to 01 } 
then { UE correctly decodes the received UMD PDU } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a 10 bit SN configured UMD PDU containing a Fl field set to 11 } 
then { UE correctly decodes the received UMD PDU } 
} 

(4) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a 10 bit SN configured UMD PDU containing a Fl field set to 10 } 
then { UE correctly decodes the received UMD PDU } 



7.2.2.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.322, clause 6.2.1.3 and 
6.2.2.6. 

[TS 36.322, clause 6.2.1.3] 



An UM RLC entity is configured by RRC to use either a 5 bit SN or a 10 bit SN. When the 5 bit SN is configured, the 
length of the fixed part of the UMD PDU header is one byte. When the 10 bit SN is configured, the fixed part of the 
UMD PDU header is identical to the fixed part of the AMD PDU header, except for D/C, RF and P fields all being 
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replaced with Rl fields. The extension part of the UMD PDU header is identical to the extension part of the AMD PDU 
header (regardless of the configured SN size). 



[TS 36.322, clause 6.2.2.6] 

Length: 2 bits. 

The FI field indicates whether a RLC SDU is segmented at the beginning and/or at the end of the Data field. 
Specifically, the FI field indicates whether the first byte of the Data field corresponds to the first byte of a RLC SDU, 
and whether the last byte of the Data field corresponds to the last byte of a RLC SDU. The interpretation of the FI field 
is provided in Table 6.2.2.6-1. 

Table 6.2.2.6-1 : FI field interpretation 



Value 


Description 


00 


First byte of the Data field corresponds to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


01 


First byte of the Data field corresponds to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 


10 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


11 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 



7.2.2.2.3 Test description 

7.2.2.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1. 
UE: 

None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

7.2.2.2.3.2 Test procedure sequence 

Table 7.2.2.2.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits UIVID PDU#1 containing a 
complete RLC SDU#1 (FI field = 00). 


<- 


UMD PDU#1 


- 


- 


2 


Check: Does the UE transmit RLC SDU#1 ? 


— > 


(RLCSDU#1) 


1 


P 


3 


The SS transmits UMD PDU#2 containing the 
first segment of RLC SDU#2 (FI field = 01 ). 


<— 


UMD PDU#2 


- 


- 


4 


The SS transmits UIVID PDU#3 containing the 
second segment of RLC SDU#2 (FI field = 11). 


<- 


UMD PDU#3 


- 


- 


5 


The SS transmits UIVID PDU#4 containing the 
last segment of RLC SDU#2 (FI field = 1 0). 


<- 


UMD PDU#4 


- 


- 


6 


Check: Does the UE transmit RLC SDU#2? 


-> 


(RLC SDU#2) 


2,3, 
4 


P 



7.2.2.2.3.3 
None. 



Specific message contents 
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7.2.2.3 

7.2.2.3.1 
(1) 



DM RLC / Reassembly / 5-bit SN / LI value > PDU size 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a 5 bit SN configured RLC PDU with Length Indicator value larger than RLC PDU 
size } 

then { UE discards the RLC PDU } 



7.2.2.3.2 Conformance requirements 

See TS 36.322 clauses 6.2.2.5 and 5.5.1 

References: The conformance requirements covered in the present TC are specified in: TS 36.322, clause 5.5.1 and 
6.2.2.5. 

[TS 36.322, clause 5.5.1] 

When an RLC entity receives an RLC PDU that contains reserved or invalid values, the RLC entity shall: 

discard the received PDU. 

[TS 36.322, clause 6.2.2.5] 

Length: 1 1 bits. 

The LI field indicates the length in bytes of the corresponding Data field element present in the RLC data PDU 
delivered/received by an UM or an AM RLC entity. The first LI present in the RLC data PDU header corresponds to the 
first Data field element present in the Data field of the RLC data PDU, the second LI present in the RLC data PDU 
header corresponds to the second Data field element present in the Data field of the RLC data PDU, and so on. The 
value is reserved. 



Test description 
Pre-test conditions 



7.2.2.3.3 
7.2.2.3.3.1 
System Simulator: 

- Cell 1. 
UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.2.3.3. 1-1 
applicable for the configured UM DRB. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

Table 7.2.2.3.3.1-1 : RLC parameters 



Uplink RLC 

sn-FieldLength 


sizes 


Downlink RLC 
sn-FieldLength 


sizes 
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7.2.2.3.3.2 



Test procedure sequence 

Table 7.2.2.3.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: the behaviour described in table 
7.2.2.3.3.2-2 runs in parallel with steps 1 to 5 
below. 










1 


The SS transmits UIVID PDU#1 containing first 
segment of RLCSDU#1. 


<— 


UMD PDU#1 (SN=0) 


- 


- 


2 


The SS transmits UMD PDU#2 containing last 
segment of RLC SDU#1 and first segment of 
RLC SDU#2. 


<— 


UMDPDU#2(SN=1) 






3 


The SS transmits UMD PDU#3 containing last 
segment of RLC SDU#2, first segment of RLC 
SDU#3 and with Length Indicator that points 
beyond the end of the UMD PDU#3. 


<- 


UMD PDU#3 (SN=2) 






4 


The SS transmits UMD PDU#4 containing last 
segment of RLC SDU#3. 


<— 


UMD PDU#4 (SN=3) 


- 


- 


5 


The SS transmits UMD PDU#5 containing RLC 
SDU#4. 


<— 


UMD PDU#5 (SN=4) 


- 


- 


Table 7.2.2.3.3.2-2: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The UE transmits RLC SDU#1 . 


— > 


(RLCSDU#1) 


- 


- 


2 


Check: Does the UE transmit RLC SDU#2? 


-> 


(RLC SDU#2) 


1 


F 


3 


Check: Does the UE transmit RLC SDU#3? 


-> 


(RLC SDU#3) 


1 


F 


4 


The UE transmits RLC SDU#4. 


— > 


(RLC SDU#4) 


- 


- 



7.2.2.3.3.3 
None. 
7.2.2.4 
7.2.2.4.1 

(1) 



Specific message contents 

UM RLC / Reassembly / 1 0-bit SN / LI value > PDU size 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an RLC PDU with Length Indicator value larger than RLC PDU size 
then { UE discards the RLC PDU } 



7.2.2.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.322, clause 5.5.1. 
[TS 36.322, clause 5.5.1] 

When an RLC entity receives an RLC PDU that contains reserved or invalid values, the RLC entity shall: 
discard the received PDU. 

7.2.2.4.3 Test description 
7.2.2.4.3.1 Pre-test conditions 
System Simulator: 

- Cell 1. 
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UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 
7.2.2.4.3.2 Test procedure sequence 

Table 7.2.2.4.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: The behaviour described in table 
7.2.2.4.3.2-2 runs in parallel with steps 1 to 5 
below. 










1 


The SS transmits UIVID PDU#1 containing first 
segment of RLCSDU#1. 


<- 


UMD PDU#1 (SN=0) 


- 


- 


2 


The SS transmits UMD PDU#2 containing last 
segment of RLC SDU#1 and first segment of 
RLC SDU#2. 


<- 


UMDPDU#2(SN=1) 






3 


The SS transmits UMD PDU#3 containing last 
segment of RLC SDU#2, first segment of RLC 
SDU#3 and with Length Indicator that points 
beyond the end of the RLC PDU#3. 


<— 


UMD PDU#3 (SN=2) 






4 


The SS transmits UMD PDU#4 containing last 
segment of RLC SDU#3. 


<- 


UMD PDU#4 (SN=3) 


- 


- 


5 


The SS transmits UMD PDU#5 containing RLC 
SDU#4. 


<- 


UMD PDU#5 (SN=4) 


- 


- 


Table 7.2.2.4.3.2-2: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Check: Does the UE transmit RLC SDU#1 ? 


— > 


(RLCSDU#1) 


1 


P 


2 


Check: Does the UE transmit RLC SDU#2? 


-> 


(RLC SDU#2) 


1 


F 


3 


Check: Does the UE transmit RLC SDU#3? 


-> 


(RLC SDU#3) 


1 


F 


4 


Check: Does the UE transmit RLC SDU#4? 


— > 


(RLC SDU#4) 


1 


P 



7.2.2.4.3.3 
None. 

7.2.2.5 
7.2.2.5.1 
7.2.2.5.1.1 
(1) 



Specific message contents 

UM RLC / Correct use of sequence numbering 

DM RLC / 5-bit SN / Correct use of sequence numbering 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits the first PDU } 

then { UE sets the sequence Number field equal to 



(2) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits subsequent PDUs } 

then { SN incremented by 1 for each PDU transmitted 
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(3) 

with { UE in E-UTRA RRC_CONNECTED state and an UM RLC DRB is configured using 5 bit SN } 
ensure that { 

when { UE transmits more than 32 PDUs } 

then { UE wraps the Sequence Number after transmitting the 32 PDU } 
} 

(4) 

with { UE in E-UTRA RRC_CONNECTED state and an UM RLC DRB is configured using 5 bit SN } 
ensure that { 

when { more than 32 PDUs are sent to UE } 

then { UE accepts PDUs with SNs that wrap around every 32 PDU } 
} 

7.2.2.5.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322, clause 
5.1.2.1.1, 5.1.2.2, 6.2.1.3, 6.2.2.3 and 7.1. 

[TS 36.322, clause 5.1.2.1.1] 

When delivering a new UMD PDU to lower layer, the transmitting UM RLC entity shall: 

- set the SN of the UMD PDU to VT(US), and then increment VT(US) by one. 
[TS 36.322, clause 5.1.2.2] 

The receiving UM RLC entity shall maintain a reordering window according to state variable VR(UH) as follows: 

- a SN falls within the reordering window if (VR(UH) - UM_Window_Size) <= SN < VR(UH); 
a SN falls outside of the reordering window otherwise. 

When receiving an UMD PDU from lower layer, the receiving UM RLC entity shall: 

either discard the received UMD PDU or place it in the reception buffer (see sub clause 5.1.2.2.2); 

if the received UMD PDU was placed in the reception buffer: 

update state variables, reassemble and deliver RLC SDUs to upper layer and start/stop t-Reordering as 
needed (see sub clause 5.1.2.2.3); 

When an UMD PDU with SN = x is received from lower layer, the receiving UM RLC entity shall: 

- if VR(UR) < X < VR(UH) and the UMD PDU with SN = x has been received before; or 

- if (VR(UH) - UM_Window_Size) <= x < VR(UR): 

- discard the received UMD PDU; 
else: 

place the received UMD PDU in the reception buffer. 

When an UMD PDU with SN = x is placed in the reception buffer, the receiving UM RLC entity shall: 
if X falls outside of the reordering window: 

- update VR(UH) to x+1; 

reassemble RLC SDUs from any UMD PDUs with SN that falls outside of the reordering window, remove 
RLC headers when doing so and deliver the reassembled RLC SDUs to upper layer in ascending order of the 
RLC SN if not delivered before; 

if VR(UR) falls outside of the reordering window: 
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- set VR(UR) to (VR(UH) - UM_Window_Size); 

- if the reception buffer contains an UMD PDU with SN = VR(UR): 

- update VR(UR) to the SN of the first UMD PDU with SN > current VR(UR) that has not been received; 

reassemble RLC SDUs from any UMD PDUs with SN < updated VR(UR), remove RLC headers when doing 
so and deliver the reassembled RLC SDUs to upper layer in ascending order of the RLC SN if not delivered 
before; 

[TS 36.322, clause 6.2.1.3] 



An UM RLC entity is configured by RRC to use either a 5 bit SN or a 10 bit SN. When the 5 bit SN is configured, the 
length of the fixed part of the UMD PDU header is one byte. When the 10 bit SN is configured, the fixed part of the 
UMD PDU header is identical to the fixed part of the AMD PDU header, except for D/C, RF and P fields all being 
replaced with Rl fields. The extension part of the UMD PDU header is identical to the extension part of the AMD PDU 
header (regardless of the configured SN size). 



[TS 36.322, clause 6.2.2.3] 



The SN field indicates the sequence number of the corresponding UMD... The sequence number is incremented by one 
for every UMD... 

[TS 36.322, clause 7.1] 



All state variables and all counters are non-negative integers. 



All state variables related to UM data transfer can take values from to p''""^'^"^^"*""^ - 1]. All arithmetic operations 
contained in the present document on state variables related to UM data transfer are affected by the UM modulus (i.e. 
final value = [value from arithmetic operation] modulo 2''""^"''"'^''"'?'''l. 



When performing arithmetic comparisons of state variables or SN values, a modulus base shall be used. 



VR(UH) - UM_Window_Size shall be assumed as the modulus base at the receiving side of an UM RLC entity. This 
modulus base is subtracted from all the values involved, and then an absolute comparison is performed (e.g. (VR(UH) - 
UM_Window_Size) <= SN < VR(UH) is evaluated as [(VR(UH) - UM_Window_Size) - (VR(UH) - 
UM_Window_Size)] modulo 2^^"'''""''^''"''"'^ <= [SN - (VR(UH) - UM_Window_Size)] modulo 2['"-^"'"^''"*"'l < [VR(UH) 
- (VR(UH) - UM_Window_Size)] modulo 2f'"-^"'"^''"'^""l). 



Each transmitting UM RLC entity shall maintain the following state variables: 

a) VT(US) 

This state variable holds the value of the SN to be assigned for the next newly generated UMD PDU. It is initially set to 
0, and is updated whenever the UM RLC entity delivers an UMD PDU with SN = VT(US). 

Each receiving UM RLC entity shall maintain the following state variables: 

a) VR(UR) - UM receive state variable 
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This state variable holds the value of the SN of the earliest UMD PDU that is still considered for reordering. It is 
initially set to 0. 

b) VR(UX) - UM t-Reordering state variable 

This state variable holds the value of the SN following the SN of the UMD PDU which triggered t-Reordering. 

c) VR(UH) - UM highest received state variable 

This state variable holds the value of the SN following the SN of the UMD PDU with the highest SN among received 
UMD PDUs, and it serves as the higher edge of the reordering window. It is initially set to 0. 



Test description 
Pre-test conditions 



7.2.2.5.1.3 
7.2.2.5.1.3.1 
System Simulator: 

- Cell 1. 
UE: 

None. 

Preamble: 

UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.2.5.1.3.1-1 
applicable for the configured UM DRB. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

Table 7.2.2.5.1.3.1-1: RLC parameters 



Uplink RLC 

sn-FieldLength 


sizes 


Downlink RLC 
sn-FieldLength 


sizes 



7.2.2.5.1.3.2 



Test procedure sequence 

Table 7.2.2.5.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message/PDU/SDU 


- 


EXCEPTION: Step 3 to 4 is executed 31 times. 


- 


- 


- 


- 


1 


The SS transmits an UIVID PDU. SN equals 0. 


<— 


UMD PDU 


- 


- 


2 


Check: Does the UE transmit an UIVID PDU 
with SN = 0? 


~> 


UMD PDU 


1 


P 


3 


The SS transmits an UIVID PDU. SN equals 1 
and is incremented for each PDU transmitted. 


<— 


UMD PDU 


- 


- 


4 


Check: Does the UE transmit an UIVID PDU 
with SN increased by 1 compared with the 
previous one? 


~> 


UMD PDU 


2 


P 


5 


The SS transmits an UIVID PDU. SN equals 0. 


<— 


UMD PDU 


- 


- 


6 


Check: Does the UE transmit an UIVID PDU 
with SN=0? 


-> 


UMD PDU 


3,4 


P 



7.2.2.5.1.3.3 
None. 



Specific message contents 
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7.2.2.5.2 UM RLC / 1 0-bit SN / Correct use of Sequence numbering 

7.2.2.5.2.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits the first PDU } 

then { UE sets the Sequence Number field equal to } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits subsequent PDUs } 

then { SN incremented by 1 for each PDU transmitted } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state and an UM RLC DRB is configured using 10 bit SN } 
ensure that { 

when { UE transmits more than 1024 PDUs } 

then { UE wraps the Sequence Number after transmitting the 1024 PDU } 
} 

(4) 

with { UE in E-UTRA RRC_CONNECTED state and an UM RLC DRB is configured using 10 bit SN } 
ensure that { 

when { more than 1024 PDUs are sent to UE } 

then { UE accepts PDUs with SNs that wrap around every 1024 PDU } 
} 

7.2.2.5.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322, clause 
5.1.2.1.1, 5.1.2.2, 6.2.1.3, 6.2.2.3 and 7.1. 

[TS 36.322, clause 5.1.2.1.1] 

When delivering a new UMD PDU to lower layer, the transmitting UM RLC entity shall: 

- set the SN of the UMD PDU to VT(US), and then increment VT(US) by one. 
[TS 36.322, clause 5.1.2.2] 

The receiving UM RLC entity shall maintain a reordering window according to state variable VR(UH) as follows: 

- a SN falls within the reordering window if (VR(UH) - UM_Window_Size) <= SN < VR(UH); 
a SN falls outside of the reordering window otherwise. 

When receiving an UMD PDU from lower layer, the receiving UM RLC entity shall: 

either discard the received UMD PDU or place it in the reception buffer (see sub clause 5.1.2.2.2); 

if the received UMD PDU was placed in the reception buffer: 

update state variables, reassemble and deliver RLC SDUs to upper layer and start/stop t-Rreordering as 
needed (see sub clause 5.1.2.2.3); 

When an UMD PDU with SN = x is received from lower layer, the receiving UM RLC entity shall: 

- if VR(UR) < X < VR(UH) and the UMD PDU with SN = x has been received before; or 

- if (VR(UH) - UM_Window_Size) <= x < VR(UR): 
- discard the received UMD PDU; 
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- else: 

place the received UMD PDU in the reception buffer. 

When an UMD PDU with SN = x is placed in the reception buffer, the receiving UM RLC entity shall: 
if X falls outside of the reordering window: 

- update VR(UH) to x+ 1; 

reassemble RLC SDUs from any UMD PDUs with SN that falls outside of the reordering window, remove 
RLC headers when doing so and deliver the reassembled RLC SDUs to upper layer in ascending order of the 
RLC SN if not delivered before; 

if VR(UR) falls outside of the reordering window: 

- set VR(UR) to (VR(UH) - UM_Window_Size); 

- if the reception buffer contains an UMD PDU with SN = VR(UR): 

- update VR(UR) to the SN of the first UMD PDU with SN > current VR(UR) that has not been received; 

reassemble RLC SDUs from any UMD PDUs with SN < updated VR(UR), remove RLC headers when doing 
so and deliver the reassembled RLC SDUs to upper layer in ascending order of the RLC SN if not delivered 
before; 

[TS 36.322, clause 6.2.1.3] 



An UM RLC entity is configured by RRC to use either a 5 bit SN or a 10 bit SN. When the 5 bit SN is configured, the 
length of the fixed part of the UMD PDU header is one byte. When the 10 bit SN is configured, the fixed part of the 
UMD PDU header is identical to the fixed part of the AMD PDU header, except for D/C, RF and P fields all being 
replaced with Rl fields. The extension part of the UMD PDU header is identical to the extension part of the AMD PDU 
header (regardless of the configured SN size). 



[TS 36.322, clause 6.2.2.3] 



The SN field indicates the sequence number of the corresponding UMD. . .The sequence number is incremented by one 
for every UMD... 

[TS 36.322, clause 7.1] 



All state variables and all counters are non-negative integers. 



All state variables related to UM data transfer can take values from to [2'™"'^'^''^"'^' ^-1]. All arithmetic operations 
contained in the present document on state variables related to UM data transfer are affected by the UM modulus (i.e. 
final value = [value from arithmetic operation] modulo 2'™"^"' ^"«*l). 



When performing arithmetic comparisons of state variables or SN values, a modulus base shall be used. 
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VR(UH) - UM_Window_Size shall be assumed as the modulus base at the receiving side of an UM RLC entity. This 
modulus base is subtracted from all the values involved, and then an absolute comparison is performed (e.g. (VR(UH) - 
UM_Window_Size) <= SN < VR(UH) is evaluated as [(VR(UH) - UM_Window_Size) - (VR(UH) - 
UM_Window_Size)] modulo 2^'^"-''''"'^'"'"'^ <= [SN - (VR(UH) - UM_Window_Size)] modulo 2['"-^"'"^''"«"'l < [VR(UH) 
- (VR(UH) - UM_Window_Size)] modulo 2['"-^"'"^''"s""]). 



Each transmitting UM RLC entity shall maintain the following state variables: 

a) VT(US) 

This state variable holds the value of the SN to be assigned for the next newly generated UMD PDU. It is initially 
set to 0, and is updated whenever the UM RLC entity delivers an UMD PDU with SN = VT(US). 

Each receiving UM RLC entity shall maintain the following state variables: 

a) VR(UR) - UM receive state variable 

This state variable holds the value of the SN of the earliest UMD PDU that is still considered for reordering. It is 
initially set to 0. 

b) VR(UX) - UM f-/?eordering state variable 

This state variable holds the value of the SN following the SN of the UMD PDU which triggered t-Reordering. 

c) VR(UH) - UM highest received state variable 

This state variable holds the value of the SN following the SN of the UMD PDU with the highest SN among received 
UMD PDUs, and it serves as the higher edge of the reordering window. It is initially set to 0. 

7.2.2.5.2.3 Test description 

7.2.2.5.2.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 
UE: 

None. 
Preamble: 

UE is in state Loopback Activated (state 4) according to [18] with PDCP Data PDUs using 7 bit SN length. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 
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7.2.2.5.2.3.2 



Test procedure sequence 

Table 7.2.2.5.2.3.2-1 : Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


Message/PDU/SDU 


- 


EXCEPTION: Steps 3 to 4 are executed 1023 
times. 


- 


- 


- 


- 


1 


The SS transmits an UIVID PDU. SN equals 0. 


<— 


UMDPDU 


- 


- 


2 


Check: Does the UE transmit an UIVID PDU 
with SN = 0? 


-> 


UMDPDU 


1 


P 


3 


The SS transmits an UIVID PDU. SN equals 1 
and is incremented for each PDU transmitted. 


<— 


UMD PDU 


- 


- 


4 


Check: Does the UE transmit an UIVID PDU 
with SN increased by 1 compared with the 
previous one? 


-> 


UMDPDU 


2 


P 


5 


The SS transmits an UIVID PDU. SN equals 0. 


<— 


UMDPDU 


- 


- 


6 


Check: Does the UE transmit an UIVID PDU 
with SN=0? 


-> 


UMDPDU 


3,4 


P 



7.2.2.5.2.3.3 Specific message contents 

None. 

7.2.2.6 UM RLC / Concatenation, segmentation and reassembly 

7.2.2.6.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { The UE has multiple RLC SDUs in the transmission buffer that fits into the available UMD 
PDU size } 

then { The UE concatenates the RLC SDUs in the transmission buffer into one UMD PDU and 
transmits it} 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { The UE receives UMD PDUs containing concatenated RLC SDUs} 

then { The UE reassembles the RLC SDUs in accordance with the Framing Info and Length Indicators 
indicated in UMD PDUs } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { The UE has RLC SDU in the transmission buffer that does not fit into the available UMD PDU 
size } 

then { The UE segments the RLC SDU in accordance with the Framing Info and Length Indicators 
indicated in UMD PDUs } 



7.2.2.6.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322, clause 
4.2.1.2.2, 4.2.1.2.3, 4.4, 6.2.1.3 and 6.2.2.6. 

[TS 36.322, clause 4.2.1.2.2] 

When a transmitting UM RLC entity forms UMD PDUs from RLC SDUs, it shall: 

- segment and/or concatenate the RLC SDUs so that the UMD PDUs fit within the total size of RLC PDU(s) 
indicated by lower layer at the particular transmission opportunity notified by lower layer; 
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- include relevant RLC headers in the UMD PDU. 

[TS 36.322, clause 4.2. 1.2.3] 

When a receiving UM RLC entity receives UMD PDUs, it shall: 



reassemble RLC SDUs from the reordered UMD PDUs (not accounting for RLC PDUs for which losses have 
been detected) and deliver the RLC SDUs to upper layer in ascending order of the RLC SN; 



[TS 36.322, clause 4.4] 

The following functions are supported by the RLC sub layer: 

concatenation, segmentation and reassembly of RLC SDUs (only for UM and AM data transfer); 



[TS 36.322, clause 6.2.1.3] 

UMD PDU consists of a Data field and an UMD PDU header. 

UMD PDU header consists of a fixed part (fields that are present for every UMD PDU) and an extension part (fields 
that are present for an UMD PDU when necessary). The fixed part of the UMD PDU header itself is byte aligned and 
consists of a FI, an E and a SN. The extension part of the UMD PDU header itself is byte aligned and consists of E(s) 
and LI(s). 

An UM RLC entity is configured by RRC to use either a 5 bit SN or a 10 bit SN. When the 5 bit SN is configured, the 
length of the fixed part of the UMD PDU header is one byte. When the 10 bit SN is configured, the fixed part of the 
UMD PDU header is identical to the fixed part of the AMD PDU header, except for D/C, RF and P fields all being 
replaced with Rl fields. The extension part of the UMD PDU header is identical to the extension part of the AMD PDU 
header (regardless of the configured SN size). 

An UMD PDU header consists of an extension part only when more than one Data field elements are present in the 
UMD PDU, in which case an E and a LI are present for every Data field element except the last. Furthermore, when an 
UMD PDU header consists of an odd number of LI(s), four padding bits follow after the last LI. 



FI 



SN 



Data 



Oct 1 
Oct 2 

Oct N 



Figure 6.2.1.3-1 : UIVID PDU with 5 bit SN (No LI) 
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R1 R1 



R1 



Fl 



SN 



Data 



Oct 1 
Oct 2 
Oct 3 

Oct N 



Figure 6.2.1.3-2: UIVID PDU with 10 bit SN (No LI) 



Present 
if K >= 3 



Fl 



Lli 



LIk-; 



SN 



Lli 



LI2 (if K>=3) 



LI2 



LIk-2 

E 



LIk- 



LIk-- 



LIk 



LIk Padding 

Data 



Oct1 
Oct 2 
Oct 3 
Oct 4 

Oct [2.5+1 .5*K-5] 
Oct [2.5+1 .5*K-4] 
Oct [2.5+1 .5*K-3] 
Oct [2.5+1 .5*K-2] 
Oct [2.5+1 .5*K-1] 
Oct [2.5+1 .5*K] 

OctN 



Figure 6.2.1.3-3: UIUID PDU with 5 bit SN (Odd number of Lis, i.e. K = 1, 3, 5, ...) 



Fl 


E 


SN 


E 


Lh 


Lh 


E 


LI2 


LI2 




E 


LIk-1 


LIk-1 


E 


LIk 


LIk 


Data 
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Figure 6.2.1.3-4: UIVID PDU with 5 bit SN (Even number of Lis, i.e. K = 2, 4, 6, ...) 
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Present 
if K >= 3 



R1 


R1 


R1 


Fl 


E 


SN 


SN 


E 


Lli 


Lli 


E 


LI2 (if K>=3) 


LI2 




E 


LIk-2 


LiK-2 


E 


LIk-1 


LIk-1 


E 


LIk 


LIk 


Padding 


Data 


... 



Oct1 
Oct 2 
Oct 3 
Oct 4 
Oct 5 

Oct [2.5+1. 5*K-4] 
Oct [2.5+1. 5*K-3] 
Oct [2.5+1. 5*K-2] 
Oct [2.5+1. 5*K-1] 
Oct [2.5+1. 5*K] 
Oct [2.5+1. 5*K+1] 

OctN 



Figure 6.2.1.3-5: UMD PDU with 10 bit SN (Odd number of Lis, i.e. K = 1, 3, 5, ...) 
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Oct [2h 
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Figure 6.2.1.3-6: UIUID PDU with 10 bit SN (Even number of Lis, i.e. K = 2, 4, 6, ...) 



[TS 36.322, clause 6.2.2.6] 

Length: 2 bits. 

The Fl field indicates whether a RLC SDU is segmented at the beginning and/or at the end of the Data field. 
Specifically, the Fl field indicates whether the first byte of the Data field corresponds to the first byte of a RLC SDU, 
and whether the last byte of the Data field corresponds to the last byte of a RLC SDU. The interpretation of the Fl field 
is provided in Table 6.2.2.6-1. 
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Table 6.2.2.6-1 : Fl field interpretation 



Value 


Description 


00 


First byte of the Data field corresponds to the first byte of a RLC SDL). 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


01 


First byte of the Data field corresponds to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 


10 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


11 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 



7.2.2.6.3 Test description 

7.2.2.6.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 
UE: 

None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 
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7.2.2.6.3.2 



Test procedure sequence 

Table 7.2.2.6.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS does not allocate any uplink grant. 


- 


- 


- 


- 


2 


The SS transmits UMD PDU#1 . This PDU 
carries SDU#1 with size of 50 bytes. 


<~ 


UMDPDU#1 (RLCSDU#1) 


- 


- 


3 


The SS transmits UMD PDU#2. This PDU 
carries SDU#2 with size of 50 bytes. 


<— 


UMD PDU#2 (RLC SDU#2) 


- 


- 


4 


SS transmits UL grants to enable UE to return 
RLC SDU#1 and RLC SDU#2 both in one 
UMD PDU. 


<— 


(UL grants) 






5 


Check: Does UE transmit RLC SDU#1 and 
RLC SDU#2 within UMD PDU with Fl field set 
to '00', E field in the fixed part set to '1 ', first E 
field in the extension part set to '0' and first LI 
field set to 50 bytes? 


-> 


UMD PDU#1 (RLC SDU#1 and 
RLC SDU#2) 


1 


P 


5A 


The SS does not allocate any uplink grant. 


- 


- 


- 


- 


6 


SS transmits an UMD PDU#3 including RLC 
SDU#3 and RLC SDU#4 each with size of 50 
bytes. Header of UMD PDU#3 contains 
Fl='00', E='1', SN=2, Ei='0', Lli='50'. 


<— 


UMD PDU#3 (RLC SDU#3 and 
RLC SDU#4) 






7 


The SS waits for 60 ms and then allocates 2 
UL grants to enable UE to return each RLC 
SDU in one UMD PDU. 


<- 


(UL grants) 






8 


Check: Does UE transmit RLC SDU#3 within 
an UMD PDU with Fl field set to '00' and E 
field in the fixed part set to '0'? 


-> 


UMD PDU#3 (RLC SDU#3) 


2 


P 


9 


Check: Does UE transmit RLC SDU#4 within 
an UMD PDU with Fl field set to '00' and E 
field in the fixed part set to '0'? 


-> 


UMD PDU#4 (RLC SDU#4) 


2 


P 


10 


The SS transmits UMD PDU#4. This PDU 
carries SDU#5 with size of 50 bytes. 


<- 


UMD PDU#4 (RLC SDU#5) 


- 


- 


11 


The SS waits for 60 ms and then allocates 2 
UL grants to enable UE to return RLC SDU#5 
in two UMD PDUs. 


<— 


(UL grants) 






12 


Check: Does UE transmit 1^" part of RLC 
SDU#5 within UMD PDU#5 with Fl field set to 
'01 ' and E field in the fixed part set to '0'? 


-> 


UMD PDU#5 


3 


P 


13 


Check: Does UE transmit last part of RLC 
SDU#5 within an UMD PDU#6 with Fl field set 
to '10'and E field in the fixed part set to '0'? 


~> 


UMD PDU#6 


3 


P 



7.2.2.6.3.3 

None. 

7.2.2.7 

7.2.2.7.1 
(1) 



Specific message contents 



UM RLC / In sequence delivery of upper layer PDUs without residual loss of 
RLC PDUs / Maximum re-ordering delay below t-Reordering 

Test Purpose (TP) 



with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives missing PDUs whose SN is within the reordering window before t-Reordering has 
expired } 

then { RLC reassembles and reorders the UMD PDUs and delivers them to the upper layer in 
sequence } 

} 

7.2.2.7.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322, clause 5.1.2.2. 
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[TS 36.322, clause 5. 1.2.2] 

The receiving UM RLC entity shall maintain a reordering window according to state variable VR(UH) as follows: 

- a SN falls within the reordering window if (VR(UH) - UM_Window_Size) <= SN < VR(UH); 
a SN falls outside of the reordering window otherwise. 

When receiving an UMD PDU from lower layer, the receiving UM RLC entity shall: 

either discard the received UMD PDU or place it in the reception buffer (see sub clause 5.1.2.2.2); 

if the received UMD PDU was placed in the reception buffer: 

update state variables, reassemble and deliver RLC SDUs to upper layer and start/stop t-Reordering as 
needed (see sub clause 5.1.2.2.3); 

When an UMD PDU with SN = x is received from lower layer, the receiving UM RLC entity shall: 

- if VR(UR) < X < VR(UH) and the UMD PDU with SN = x has been received before; or 

- if (VR(UH) - UM_Window_Size) <= x < VR(UR): 

- discard the received UMD PDU; 
else: 

place the received UMD PDU in the reception buffer. 

When an UMD PDU with SN = x is placed in the reception buffer, the receiving UM RLC entity shall: 
if X falls outside of the reordering window: 

- update VR(UH) to x+1; 

reassemble RLC SDUs from any UMD PDUs with SN that falls outside of the reordering window, remove 
RLC headers when doing so and deliver the reassembled RLC SDUs to upper layer in ascending order of the 
RLC SN if not delivered before; 

if VR(UR) falls outside of the reordering window: 

- set VR(UR) to (VR(UH) - UM_Window_Size); 

- if the reception buffer contains an UMD PDU with SN = VR(UR): 

- update VR(UR) to the SN of the first UMD PDU with SN > current VR(UR) that has not been received; 

reassemble RLC SDUs from any UMD PDUs with SN < updated VR(UR), remove RLC headers when doing 
so and deliver the reassembled RLC SDUs to upper layer in ascending order of the RLC SN if not delivered 
before; 

if t-Reordering is running: 

- if VR(UX) <= VR(UR); or 

- if VR(UX) falls outside of the reordering window and VR(UX) is not equal to VR(UH):: 

stop and reset t-Reordering; 
if t-Reordering is not running (includes the case when t-Reordering is stopped due to actions above): 

- ifVR(UH)>VR(UR): 

start t-Reordering; 
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7.2.2.7.3 
7.2.2.7.3.1 
System Simulator 

- Cell 1. 
UE: 
None. 
Preamble 



set VR(UX) to VR(UH). 

Test description 
Pre-test conditions 



UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.2.7.3.1-1 
applicable for the configured UM DRB. 

The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

Table 7.2.2.7.3.1-1 : RLC parameters 



Downlink RLC 
t-Reordering 


ms200 



7.2.2.7.3.2 



Test procedure sequence 

Table 7.2.2.7.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an UMD PDU. This PDU 
carries SDU#1 . SN equals 0. 


<~ 


UMD PDU#1 


- 


- 


2 


The UE transmits RLC SDU#1 . 


— > 


(RLCSDU#1) 


- 


- 


2A 


The SS does not allocate any uplink grant. 


- 


- 


- 


- 


3 


The SS transmits an UIVID PDU. This PDU 
contains the last part of SDU#4. SN equals 3. 
The UE starts t-Reordering. 


<— 


UMD PDU#4 






4 


The SS transmits an UMD PDU. This PDU 
contains the last part of SDU#3, and the I'*' 
part of SDU#4. SN equals 2. 


<— 


UMD PDU#3 






5 


The SS transmits an UMD PDU. This PDU 
carries SDU#2 and the l" part of SDU#3. SN 
equals 1 . (Note) 


<- 


UMD PDU#2 






5A 


The SS waits for 60 ms and then allocates 3 
UL grants of size enough for the UE to loop 
back one SDU in one UMD PDU 










6 


Check: Does the UE transmit RLC SDU#2? 


— > 


(RLC SDU#2) 


1 


P 


7 


Check: Does the UE transmit RLC SDU#3? 


— > 


(RLC SDU#3) 


1 


P 


8 


Check: Does the UE transmit RLC SDU#4? 


— > 


(RLC SDU#4) 


1 


P 


Note: The UE stops t-Reordering, reassembles UMD PDUs and delivers RLC SDU#2, RLC SDU#3 and RLC 
SDU#4 to the upper layer in sequence. 



7.2.2.7.3.3 


None. 


7.2.2.8 


7.2.2.8.1 


(1) 



with 



Specific message contents 



UM RLC / In sequence delivery of upper layer PDUs without residual loss of 
RLC PDUs / Maximum re-ordering delay exceeds t-Reordering 

Test Purpose (TP) 



UE in E-UTRA RRC CONNECTED state 
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ensure that { 

when { a PDU is received out of order after t -Reordering has expired } 

then { UE discards the corresponding PDU and delivers all correctly received RLC SDUs to upper 
layer in the correct order } 
} 

7.2.2.8.2 Conformance requirements 

References: The conformance requirements covered in tlie present TC are specified in: TS 36.322, clause 5.1.2.2.2, 

5.1.2.2.3 and 5. 1.2.2.4. 

[TS 36.322, clause 5.1.2.2.2] 

When an UMD PDU with SN = x is received from lower layer, the receiving UM RLC entity shall: 

- if VR(UR) < X < VR(UH) and the UMD PDU with SN = x has been received before; or 

- if (VR(UH) - UM_Window_Size) <= x < VR(UR): 

- discard the received UMD PDU; 
else: 

place the received UMD PDU in the reception buffer. 
[TS 36.322, clause 5. 1.2.2.3] 

When an UMD PDU with SN = x is placed in the reception buffer, the receiving UM RLC entity shall: 
if X falls outside of the reordering window: 

- update VR(UH) to x+ 1; 

reassemble RLC SDUs from any UMD PDUs with SN that falls outside of the reordering window, remove 
RLC headers when doing so and deliver the reassembled RLC SDUs to upper layer in ascending order of the 
RLC SN if not delivered before; 

if VR(UR) falls outside of the reordering window: 

- set VR(UR) to (VR(UH) - UM_Window_Size); 

- if the reception buffer contains an UMD PDU with SN = VR(UR): 

- update VR(UR) to the SN of the first UMD PDU with SN > current VR(UR) that has not been received; 

reassemble RLC SDUs from any UMD PDUs with SN < updated VR(UR), remove RLC headers when doing 
so and deliver the reassembled RLC SDUs to upper layer in ascending order of the RLC SN if not delivered 
before; 

if t-Reordering is running: 

- if VR(UX) <= VR(UR); or 

if VR(UX) falls outside of the reordering window and VR(UX) is not equal to VR(UH): 
stop and reset t-Reordering; 
if t-Reordering is not running (includes the case when t-Reordering is stopped due to actions above): 

- if VR(UH) > VR(UR): 

start t-Reordering; 

- set VR(UX) to VR(UH). 
[TS 36.322, clause 5.1.2.2.4] 

When t-Reordering expires, the receiving UM RLC entity shall: 
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update VR(UR) to the SN of the first UMD PDU with SN >= VR(UX) that has not been received; 

reassemble RLC SDUs from any UMD PDUs with SN < updated VR(UR), remove RLC headers when doing so 
and deUver the reassembled RLC SDUs to upper layer in ascending order of the RLC SN if not delivered before; 

ifVR(UH)>VR(UR): 

start t- Reordering; 

- set VR(UX) to VR(UH). 



Test description 
Pre-test conditions 



7.2.2.8.3 
7.2.2.8.3.1 
System Simulator: 

- Cell L 
UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.2.8.3. 1-1 
applicable for the configured UM DRB. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

Table 7.2.2.8.3.1-1 : RLC parameters 



Downlink RLC 
t-Reordehng 


ms200 



7.2.2.8.3.2 



Test procedure sequence 

Table 7.2.2.8.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits RLC PDU#1 containing first 
segment of RLC SDU#1. 
Note Ti 


<- 


UMD PDU#1 






2 


The SS does not transmit RLC PDU#2 
containing last segment of RLC SDU#1 . 


- 


- 


- 


- 


3 


The SS transmits RLC PDU#3 containing RLC 
SDU#2. 


<- 


UMD PDU#3 


- 


- 


3A 


Check 1 : Does the UE transmit RLC SDU#2 
after t-Reordering (200 ms) expiry? 
Note T2 
Check 2: Is (T2 - Ti) > t-reorderJng? 


-> 


(RLC SDU#2) 


1 


P 


SB 


The SS transmits RLC PDU#2 containing last 
segment of RLCSDU#1. 


<— 


UMD PDU#2 


- 


- 


4 


Check: Does the UE transmit RLC SDU#1 
within 100 ms? 


-> 


(RLCSDU#1) 


1 


F 



7.2.2.8.3.3 
None. 



Specific message contents 
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7.2.2.9 DM RLC / In sequence delivery of upper layer PDUs with residual loss of 

RLC PDUs / Maximum re-ordering delay exceeds t-Reordering 

7.2.2.9.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE detects that RLC PDUs constructing different RLC SDUs are lost } 

then { UE delivers all received RLC SDUs to upper layer in the correct order } 
} 

7.2.2.9.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.322, clause 5.1.2.2.2, 

5.1.2.2.3 and 5. 1.2.2.4. 

[TS 36.322, clause 5. 1.2.2.2] 

When an UMD PDU with SN = x is received from lower layer, the receiving UM RLC entity shall: 

- if VR(UR) < X < VR(UH) and the UMD PDU with SN = x has been received before; or 

- if (VR(UH) - UM_Window_Size) <= x < VR(UR): 

- discard the received UMD PDU; 
else: 

place the received UMD PDU in the reception buffer. 
[TS 36.322, clause 5. 1.2.2.3] 

When an UMD PDU with SN = x is placed in the reception buffer, the receiving UM RLC entity shall: 
if X falls outside of the reordering window: 

- update VR(UH) to x+1; 

reassemble RLC SDUs from any UMD PDUs with SN that falls outside of the reordering window, remove 
RLC headers when doing so and deliver the reassembled RLC SDUs to upper layer in ascending order of the 
RLC SN if not delivered before; 

if VR(UR) falls outside of the reordering window: 

- set VR(UR) to (VR(UH) - UM_Window_Size); 

- if the reception buffer contains an UMD PDU with SN = VR(UR): 

- update VR(UR) to the SN of the first UMD PDU with SN > current VR(UR) that has not been received; 

reassemble RLC SDUs from any UMD PDUs with SN < updated VR(UR), remove RLC headers when doing 
so and deliver the reassembled RLC SDUs to upper layer in ascending order of the RLC SN if not delivered 
before; 

if t-Reordering is running: 

- if VR(UX) <= VR(UR); or 

if VR(UX) falls outside of the reordering window and VR(UX) is not equal to VR(UH): 
stop and reset t-Reordering; 
if t-Reordering is not running (includes the case when t-Reordering is stopped due to actions above): 

- if VR(UH) > VR(UR): 
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start t-Reordering; 
- set VR(UX) to VR(UH). 
[TS 36.322, clause 5. 1.2.2.4] 
When t-Reordering expires, the receiving UM RLC entity shall: 

- update VR(UR) to the SN of the first UMD PDU with SN >= VR(UX) that has not been received; 

reassemble RLC SDUs from any UMD PDUs with SN < updated VR(UR), remove RLC headers when doing so 
and deliver the reassembled RLC SDUs to upper layer in ascending order of the RLC SN if not delivered before; 

- ifVR(UH)>VR(UR): 

start t-Reordering.; 
- set VR(UX) to VR(UH). 
7.2.2.9.3 Test description 

7.2.2.9.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 
UE: 

None. 

Preamble: 

UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.2.9.3.1-1 
applicable for the configured UM DRB. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

Table 7.2.2.9.3.1-1 : RLC parameters 



Downlink RLC 
t-Reordering 


ms200 
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7.2.2.9.3.2 



Test procedure sequence 

Table 7.2.2.9.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits UMD PDU#1 containing first 
segment of RLCSDU#1. 


<— 


UMD PDU#1 


- 


- 


2 


The SS does not transmit UIVID PDU#2 
containing last segment of RLC SDU#1 . 


- 


- 


- 


- 


3 


The SS transmits UIVID PDU#3 containing first 
segment of RLC SDU#2. 


<~ 


UMD PDU#3 


- 


- 


4 


The SS transmits UMD PDU#4 containing last 
segment of RLC SDU#2. 


<- 


UMD PDU#4 


- 


- 


5 


The SS transmits UIVID PDU#5 containing first 
segment of RLC SDU#3. 


<- 


UMD PDU#5 


- 


- 


6 


The SS does not transmit UMD PDU#6 
containing last segment of RLC SDU#3. 


- 


- 


- 


- 


7 


The SS transmits UMD PDU#7 containing first 
segment of RLC SDU#4. 


<— 


UMD PDU#7 


- 


- 


8 


The SS transmits UMD PDU#8 containing last 
segment of RLC SDU#4. 


<— 


UMD PDU#8 


- 


- 


9 


Wait for 200 ms to ensure that t-Reordering^or 
the UMD PDU#2 expires. 


- 


- 


- 


- 


10 


Check: Does the UE transmit RLC SDU#2? 


— > 


(RLC SDU#2) 


1 


P 


11 


Wait for 200 ms to ensure that t-Reordering ^or 
the UMD PDU#6 expires. 


- 


- 


- 


- 


12 


Check: Does the UE transmit RLC SDU#4? 


— > 


(RLC SDU#4) 


1 


P 



7.2.2.9.3.3 
None. 

7.2.2.10 

7.2.2.10.1 
(1) 



Specific message contents 

UM RLC / Duplicate detection of RLC PDUs 
Test Purpose (TP) 



with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives duplicate UMD PDUs } 

then { UE discards the duplicate UMD PDUs 



(2) 



with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives UMD PDUs whose SN is within the reordering window and duplicate UMD PDUs 
then { UE discards the duplicate UMD PDUs } 



7.2.2.10.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322, clause 
4.2.1.2.3 and 5. 1.2.2.2. 

[TS 36.322, clause 4.2.1.2.3] 

When a receiving UM RLC entity receives UMD PDUs, it shall: 

detect whether or not the UMD PDUs have been received in duplication, and discard duplicated UMD PDUs; 

reorder the UMD PDUs if they are received out of sequence; 

detect the loss of UMD PDUs at lower layers and avoid excessive reordering delays; 
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reassemble RLC SDUs from the reordered UMD PDUs (not accounting for RLC PDUs for which losses have 
been detected) and deliver the RLC SDUs to upper layer in ascending order of the RLC SN; 



[TS 36.322, clause 5. L2.2.2] 

When an UMD PDU with SN = x is received from lower layer, the receiving UM RLC entity shall: 

- if VR(UR) < X < VR(UH) and the UMD PDU with SN = x has been received before; or 

- if (VR(UH) - UM_Window_Size) <= x < VR(UR): 
- discard the received UMD PDU; 

7.2.2.10.3 Test description 

7.2.2.10.3.1 Pre-test conditions 

System Simulator: 

- Cell L 
UE: 

None. 
Preamble: 

UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.2.10.3.1-1. 

Table 7.2.2.10.3.1-1 : RLC settings 



Parameter 


Value 


t-Reordering 


mslOO 



The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 
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7.2.2.10.3.2 



Test procedure sequence 

Table 7.2.2.10.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an UMD PDU. This PDU 
carries SDU#1 . SN equals 0. 


<— 


UMD PDU#1 


- 


- 


2 


The UE transmits RLC SDU#1 . 


— > 


(RLCSDU#1) 


- 


- 


3 


The SS transmits an UIVID PDU. This PDU 
carries SDU#1 . SN equals 0. 


<~ 


UMD PDU#1 


- 


- 


4 


Check: Does the UE transmit RLC SDU#1 ? 


-> 


(RLCSDU#1) 


1 


F 


5 


The SS transmits an UIVID PDU. This PDU 
contains SDU#2 and the I'*' part of SDU# 3. 
SN equals 1. 


<~ 


UMD PDU#2 






6 


The UE transmit RLC SDU#2. 


— > 


(RLC SDU#2) 


- 


- 


7 


The SS transmits an UMD PDU. This PDU 
contains SDU#2 and the l" part of SDU#3. SN 
equals 1. 


<— 


UMD PDU#2 






8 


Check: Does the UE transmit RLC SDU#2? 


-> 


(RLC SDU#2) 


1 


F 


9 


The SS transmits an UIVID PDU. This PDU 
contains the last part of SDU#3. SN equals 2. 


<~ 


UMD PDU#3 


- 


- 


10 


The UE transmits RLC SDU#3. 


— > 


(RLC SDU#3) 


- 


- 


10 
A 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


10 
B 


The SS enables the indication of scheduling 
requests till step 15. 


- 


- 


- 


- 


11 


After 100ms the SS transmits an UMD PDU. 
This PDU carries SDU#5. SN equals 4. 


<~ 


UMD PDU#5 


- 


- 


12 


The SS transmits an UMD PDU. This PDU 
carries SDU#6. SN equals 5. 


<- 


UMD PDU#6 


- 


- 


13 


The SS transmits an UMD PDU. This PDU 
contains the last part of SDU#3. SN equals 2. 


<- 


UMD PDU#3 


- 


- 


14 


Check: Does the UE transmit scheduling 
request before transmission of UMD PDU at 
step 15? 


-> 


(SR) 


2 


F 


15 


After 75ms from step 13 the SS transmits an 
UMD PDU. This PDU carries SDU#4. SN 
equals 3. 


<- 


UMD PDU#4 






15 
A 


The SS waits for 60 ms and then allocates 1 
UL grant of size enough for the UE to loop 
back 3 RLC SDU in one UMD PDU (UL grant 
allocation type 3) 


<— 


(UL Grant) 






16 


SS receives SDU#4, SDU#5 and SDU#6 in a 
single PDU 


-> 


(RLC SDU#4, RLC SDU#5 and 
RLC SDU#6) 


1,2 


P 


17 


Void 










18 


Void 











7.2.2.10.3.3 
None. 

7.2.2.11 

7.2.2.11.1 
(1) 



Specific message contents 

DM RLC / RLC re-establishment procedure 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { RLC re-establishment is performed upon request by RRC } 

then { The UE discards all UMD PDUs where no RLC SDUs can be reassembled 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that f 
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when { RLC re-establishment is performed upon request by RRC } 

then { The UE resets variable VT{US), VR{UH) and VR{UR) to its initial value } 
} 

7.2.2.1 1 .2 Conformance requirements 

References: The conformance requirements covered in tlie present TC are specified in: 3GPP TS 36.322, clause 
4.2.1.2.3 and 5.4. 

[TS 36.322, clause 4.2.1.2.3] 

At the time of RLC re-establishment, the receiving UM RLC entity shall: 

if possible, reassemble RLC SDUs from the UMD PDUs that are received out of sequence and deliver them to 
upper layer; 

discard any remaining UMD PDUs that could not be reassembled into RLC SDUs; 

initialize relevant state variables and stop relevant timers. 

[TS 36.322, clause 5.4] 

RLC re-establishment is performed upon request by RRC, and the function is applicable for AM, UM and TM RLC 
entities. 

When RRC indicates that an RLC entity should be re-established, the RLC entity shall: 



if it is a receiving UM RLC entity: 

- when possible, reassemble RLC SDUs from UMD PDUs with SN < VR(UH), remove RLC headers when 
doing so and deliver all reassembled RLC SDUs to upper layer in ascending order of the RLC SN, if not 
delivered before; 

discard all remaining UMD PDUs; 



reset all state variables to their initial values. 
7.2.2.11.3 Test description 

7.2.2.11.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 

UE: 

None. 

Preamble: 

UE is in Loopback Activated state (state 4) according to TS 36.508 clause 4.5 [18] with the exceptions listed in 
table 7.2.2.11.3.1-1 appUcable for the configured UM DRB. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

Table 7.2.2.11.3.1-1: RLC parameters 



Downlink RLC 
t-Reordehng 


ms200 
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7.2.2.11.3.2 



Test procedure sequence 

Table 7.2.2.11.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits UMD PDU#1 . Header of 
UMD PDU#1 contains SN=0. Tliis PDU carries 
RLCSDU#1. 


<— 


UMD PDU#1 






2 


The UE transmits RLC SDU#1 . 


— > 


(RLCSDU#1) 


- 


- 


3 


The SS transmits UIVID PDU#2. Header of 
UIVID PDU#2 contains SN=1 . This PDU carries 
the l" segment of SDU#2. 


<- 


UMD PDU#2 






4 


SS performs a RRC Connection 
Reconfiguration procedure including the 
mobilityControllnfo IE in 
RRCConnectionReconfiguration \.r\ggenng 
RLC re-establishment. 










5 


The SS transmits UMD PDU#3. Header of 
UIVID PDU#3 contains SN=2. This PDU carries 
the last segment of RLC SDU#2. The UE 
starts t-Reordering. 


<— 


UMD PDU#3 






6 


Check: Does the UE transmit RLC SDU#2? 


-> 


(RLC SDU#2) 


1 


F 


7 


300ms (1 .5 * t-Reordering) after step 5 the SS 
transmits UMD PDU#4. Header of UMD 
PDU#4 contains SN=3. This PDU carries RLC 
SDU#3. 


<— 


UMD PDU#4 






8 


The UE transmit RLC SDU#3. Header of UMD 
PDU carrying RLC SDU#3 contains SN=0. 


-> 


(RLC SDU#3) 


- 


- 


9 


The SS transmits UMD PDU#5. Header of 
UMD PDU#5 contains SN=4. This PDU carries 
RLC SDU#4. 


<- 


UMD PDU#5 






10 


The UE transmits RLC SDU#4. Header of 
UMD PDU carrying RLC SDU#4 contains 
SN=1. 


-> 


(RLC SDU#4) 






11 


SS performs a RRC Connection 
Reconfiguration procedure including the 
MobilityControllnfo IE in 
RRCConnectionReconfiguration \r\ggenng 
RLC re-establishment. 










12 


The SS transmits UMD PDU#6. Header of 
UMD PDU#6 contains SN=0. This PDU carries 
RLC SDU#5. 


<- 


UMD PDU#6 






13 


Check 1 : Does the UE transmit RLC SDU#5? 
Check 2: Does header of UMD PDU carrying 
RLC SDU#5 contain SN=0? 


-> 


(RLC SDU#5) 


2 


P 



7.2.2.1 1 .3.3 Specific message contents 

Table 7.2.2.1 1 .3.3-1 : RRCConnectionReconfiguration (step 4 and step 1 1 , Table 7.2.2.1 1 .3.2-1) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 

Table 7.2.2.1 1 .3.3-2: IVIobilityControllnfo (step 4 and step 1 1 , Table 7.2.2.1 1 .3.2-1) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
CelM 






carrierFreq 


Not present 






} 
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7.2.3 Acknowledged mode 

7.2.3.1 AM RLC / Concatenation and reassembly 

7.2.3.1.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { The UE has multiple RLC SDUs in the transmission buffer that fits into the available AMD 
PDU size } 

then { The UE concatenates the RLC SDUs in the transmission buffer into an AMD PDU and transmits 
it} 

} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { The UE receives an AMD PDUs containing concatenated RLC } 

then { The UE reassembles the RLC SDUs in accordance with the Framing Info and Length Indicators 
indicated in AMD PDUs } 
} 

7.2.3.1.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.322, clauses 4.2.1.3.2 , 
4.2.1.3.3, 6.2.1.4 and 6.2.2.6. 

[TS 36.322, clause 4.2.1.3.2] 

When the transmitting side of an AM RLC entity forms AMD PDUs from RLC SDUs, it shall: 

- segment and/or concatenate the RLC SDUs so that the AMD PDUs fit within the total size of RLC PDU(s) 
indicated by lower layer at the particular transmission opportunity notified by lower layer. 



[TS 36.322, clause 4.2.1.3.3] 

When the receiving side of an AM RLC entity receives RLC data PDUs, it shall: 



reassemble RLC SDUs from the reordered RLC data PDUs and deliver the RLC SDUs to upper layer in 
sequence. 



[TS 36.322, clause 6.2.1.4] 

AMD PDU consists of a Data field and an AMD PDU header. 

AMD PDU header consists of a fixed part (fields that are present for every AMD PDU) and an extension part (fields 
that are present for an AMD PDU when necessary). The fixed part of the AMD PDU header itself is byte aligned and 
consists of a D/C, a RF, a P, a FI, an E and a SN. The extension part of the AMD PDU header itself is byte aligned and 
consists of E(s) and LI(s). 

An AMD PDU header consists of an extension part only when more than one Data field elements are present in the 
AMD PDU, in which case an E and a LI are present for every Data field element except the last. Furthermore, when an 
AMD PDU header consists of an odd number of LI(s), four padding bits follow after the last LI. 
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D/C RF P 



Fl 



SN 
Data 



SN Oct 1 

^^^ Oct 2 

Oct 3 



Oct N 



Figure 6.2.1 .4-1 : AIVID PDU (No LI) 



Present if 
K>=3 



D/C 


RF 


P 


Fl 


E 


SN 


SN 


E 


Lh 


Lh 


E 


LI2 (if K>=3) 


/" 






LI2 






E 


LIk-2 


LIk-2 


E 


LIk-1 


V 






LIk-1 




E 


LIk 


LIk 


Padding 


Data 


... 





Oct 1 
Oct 2 
Oct 3 
Oct 4 
Oct 5 

Oct [2.5+1. 5* K- 4] 
Oct [2.5+1. 5* K- 3] 
Oct [2.5+1. 5* K- 2] 
Oct [2.5+1. 5* K-1] 
Oct [2.5+1. 5* K| 
Oct [2.5+1. 5* K+1] 

Oct N 



Figure 6.2.1.4-2: AIVID PDU (Odd number of Lis, i.e. K = 1, 3, 5, ...) 



D/C 


RF 


P 


Fl 


E 


SN 


SN 


E 


Lh 


Lh 


E 


LI2 


LI2 




E 


LIk-1 


Uk-1 


E 


LIk 


LIk 


Data 


... 





Oct 1 




Oct 2 




Oct 3 




Oct 4 




Oct 5 




Oct [2+1 


5*K-2] 


Oct [2+1 


5* K-1] 


Oct [2+1 


5*K| 


Oct [2+1 


5* K+1] 



Oct N 



Figure 6.2.1.4-3: AMD PDU (Even number of Lis, i.e. K = 2, 4, 6, ...) 
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[TS 36.322, clause 6.2.2.6] 

The FI field indicates whether a RLC SDU is segmented at the beginning and/or at the end of the Data field. 
Specifically, the FI field indicates whether the first byte of the Data field corresponds to the first byte of a RLC SDU, 
and whether the last byte of the Data field corresponds to the last byte of a RLC SDU. The interpretation of the FI field 
is provided in Table 6.2.2.6-1. 

Table 6.2.2.6-1 : FI field interpretation 



Value 


Description 


00 


First byte of the Data field corresponds to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


01 


First byte of the Data field corresponds to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 


10 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


11 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 



7.2.3.1.3 Test description 

7.2.3.1.3.1 Pre-test conditions 

System Simulator: 

- Cell L 

UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.3.1.3.1- 
l. 

Table 7.2.3.1 .3.1-1 : RLC settings 



Parameter 


Value 


t-StatusProhibit 


500 ms 
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7.2.3.1.3.2 



Test procedure sequence 

Table 7.2.3.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


During the whole test sequence, the SS should 
not allocate UL grants unless when explicitly 
stated so in the procedure. 










2 


The SS transmits an AMD PDU including two 
RLC SDUs of size 40 bytes each with poll bit 
set to '1'. 


<— 


AMD PDU(AMD PDU 
header(D/C='1', RF='0', P='1', 
FI='00',E='1', SN='0',Ei='0', 
Lli='40' bytes), 2 RLC SDUs of 40 
bytes) 






3 


The SS waits for 60 ms and the allocates an 
UL grant of size 776 bits (Note 1 ). 


<- 


(UL grant, 776 bits) 


- 


- 


4 


Check: Does the UE transmit a STATUS PDU 
with positive acknowledgement? 


-> 


STATUS PDU (ACKSN=1) 


2 


P 


5 


Check: Does the UE transmit two RLC SDUs 
within an AMD PDU with Fl field set to '00', 
first E field in the fixed part set to '1', first E 
field in the extension part set to '0', first LI field 
set to 40 bytes? 


~> 


AMD PDU(AMD PDU 
header(P='1', Fl='00', E='1',SN=0, 
Ei='0', Lli='40') ), two RLC SDUs 
of size 40 bytes) 


1,2 


P 


6 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACKSN=1) 


- 


- 


7 


The SS transmits an AMD PDU including three 
RLC SDU of size 40 bytes with P field set to 

M'l II 


<- 


AMD PDU(AMD PDU 
header(D/C='1', RF='0', P='1', 
FI='00',E='1', SN='1', Ei='1', 
Lli='40' bytes, Eg^'O', Ll2='40' 
bytes), three RLC SDUs of size 40 
bytes) 






8 


The SS waits for 60 ms and then allocates an 
UL grant of size 1096 bits. (Note 2). 


<— 


(UL grant, 1096 bits) 


- 


- 


9 


Check: Does the UE transmit a STATUS PDU 
with positive acknowledgement? 


-> 


STATUS PDU (ACK SN=2) 


2 


P 


10 


Check: Does the UE transmit three RLC SDUs 
within an AMD PDU with Fl field set to "00", 
first E field in the fixed part set to '1', first E 
field in the extension part set to '1 ', first LI field 
set to 40 bytes, second E field in the extension 
part set to '0', second LI field set to 40 bytes 
and P field set to "1"? 


-> 


AMD PDU(AMD PDU 
header(P='1', Fl='00', SN=1, 
Ei='1', Lli='40', E2='0', Ll2='40'), 
three RLC SDUs of size 40 bytes) 


1,2 


P 


11 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACK SN=2) 


- 


- 


Note 1 UL grant of 776 bits (/res^l 1 , A/pne=4, see TS 36.21 3 Table 7.1 .7.2.1-1 ) is chosen such that UE will fit two 
RLC SDUs of 40 bytes within one AIVID PDU. MAC PDU of 776 bits=97 bytes fits an AMD PDU payload of 
80 bytes (two 40 byte RLC SDUs) + 4 bytes AMD PDU header + 13 bytes spare for MAC header and 
possible RLC STATUS PDU and BSR report. 

Note 2 UL grant of 1096 bits {Itbs=8, Nprb=8, see TS 36.213 Table 7.1.7.2.1-1) is chosen such that UE will fit three 
RLC SDUs of 40 bytes within one AMD PDU. MAC PDU of 1096 bits=137 bytes fits an AMD PDU payload 
of 120 bytes (three 40 byte RLC SDUs) -i- 5 bytes AMD PDU header + 12 bytes spare for MAC header and 
possible RLC STATUS PDU and BSR report. 



7.2.3.1.3.3 

None. 

7.2.3.2 

7.2.3.2.1 

(1) 



Specific message contents 

AM RLC / Segmentation and reassembly / No PDU segmentation 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { the UE has a RLC SDU with larger size than available AMD PDU size in the transmission 
buffer } 

then { the UE segments the RLC SDU in accordance with the available AMD PDU size } 
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(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { the UE receives AMD PDUs containing a segmented RLC SDU } 

then { the UE reassembles the RLC SDUs in accordance with the Framing Info and Length Indicators 
indicated in the AMD PDUs } 



7.2.3.2.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.322, clauses 4.2.1.3.2, 
4.2.1.3.3 and 6,2.2.6. 

[TS 36.322, clause 4.2.1.3.2] 

When the transmitting side of an AM RLC entity forms AMD PDUs from RLC SDUs, it shall: 

- segment and/or concatenate the RLC SDUs so that the AMD PDUs fit within the total size of RLC PDU(s) 
indicated by lower layer at the particular transmission opportunity notified by lower layer. 



[TS 36.322, clause 4.2.1.3.3] 

When the receiving side of an AM RLC entity receives RLC data PDUs, it shall: 



reassemble RLC SDUs from the reordered RLC data PDUs and deliver the RLC SDUs to upper layer in 
sequence. 



[TS 36.322, clause 6.2.2.6] 



The FI field indicates whether a RLC SDU is segmented at the beginning and/or at the end of the Data field. 
Specifically, the FI field indicates whether the first byte of the Data field corresponds to the first byte of a RLC SDU, 
and whether the last byte of the Data field corresponds to the last byte of a RLC SDU. The interpretation of the FI field 
is provided in Table 6.2.2.6-1. 

Table 6.2.2.6-1 : FI field interpretation 



Value 


Description 


00 


First byte of the Data field corresponds to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


01 


First byte of the Data field corresponds to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 


10 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


11 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 



7.2.3.2.3 
7.2.3.2.3.1 
System Simulator: 

- Cell 1. 
UE: 
None. 



Test description 
Pre-test conditions 
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Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
7.2.3.2.3.2 Test procedure sequence 

Table 7.2.3.2.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message/PDU/SDU 


1 


During the whole test sequence, the SS should 
not allocate UL grants unless when explicitly 
stated so in the procedure. 










2 


The SS transmits a RLC SDU of size 80 bytes 
segmented into two AMD PDUs. The two AMD 
PDUs are transmitted in separate TTIs. 


<— 


(RLCSDU#1) 

AMDPDU#1(FI='01',SN=0) 

AMDPDU#2(FI='10',SN=1) 






3 


Upon receiving a scheduling request from the 
UE, the SS allocates 2 UL grants of size 392 
bits. (Notel). 


<— 


(UL grants) 






4 


Check: Does the UE return a RLC SDU with 
equal content as sent in downlink in step 2 
segmented into two AMD PDUs and received 
in different TTIs? 
(Note2: Details for AMD PDU#2) 


-> 


(RLCSDU#1) 
AMD PDU#1 
AMD PDU#2 


1,2 


P 


5 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACKSN=1) 


- 


- 


6 


The SS sends a RLC SDU of size 120 bytes 
octets segmented into three AMD PDUs. 


<— 


(RLC SDU#2) 

AMDPDU#1(FI='01',SN=2) 
AMDPDU#2(FI='11',SN=3) 
AMDPDU#3(FI='10',SN=4) 






7 


Upon receiving a scheduling request from the 
UE, the SS allocates 3 UL grants of size 392 
bits. (Notel). 


<- 


(UL grants) 






8 


Check: Does the UE return a RLC SDU with 
equal content as sent in downlink in step 6 
segmented into three AMD PDUs where each 
AMD PDU is received in different TTI? 
(Note2: Details for AMD PDU#3) 


-> 


(RLC SDU#2) 
AMD PDU#1 
AMD PDU#2 
AMD PDU#3 


1,2 


P 


9 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACK SN=2) 


- 


- 


Note 1: UL grant of 392 bits (/Tes=8, Nprb=3, see TS 36.213 Table 7.1.7.2.1-1) is chosen to force the UE to 

segment the returned UL RLC SDL) into multiple AIVID PDUs. An UL grant of 392 bits=49 bytes allows the 
UE to transmit one AIVID PDU of maximum 46 bytes (49 bytes - 2 byte AIVID PDU header - minimum 1 byte 
IVIAC header). UE at step 4 and step 8 during transmission of AMD PDU#1 will transmit BSR IVICE which 
will take 2 bytes and hence AMD PDU size will be 44 bytes. 

Note2: Polling bit will be set for this PDU by the UE and SS transmits a STATUS PDU. 



7.2.3.2.3.3 
None. 

7.2.3.3 
7.2.3.3.1 

(1) 



Specific message contents 



AM RLC / Segmentation and reassembly / Framing info field 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an AMD PDU or an AMD PDU segment containing a FI field set to 00 } 
then { UE correctly decodes the received AMD PDU or AMD PDU segment } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an AMD PDU or an AMD PDU segment containing a FI field set to 01 } 
then { UE correctly decodes the received AMD PDU or AMD PDU segment } 
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(3) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an AMD PDU or an AMD PDU segment containing a FI field set to 11 
then { UE correctly decodes the received AMD PDU or AMD PDU segment} 



(4) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an AMD PDU or an AMD PDU segment containing a FI field set to 10 
then { UE correctly decodes the received AMD PDU or AMD PDU segment } 



7.2.3.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.322, clause 6.2.2.6. 

[TS 36.322, clause 6.2.2.6] 

Length: 2 bits. 

The FI field indicates whether a RLC SDU is segmented at the beginning and/or at the end of the Data field. 
Specifically, the FI field indicates whether the first byte of the Data field corresponds to the first byte of a RLC SDU, 
and whether the last byte of the Data field corresponds to the last byte of a RLC SDU. The interpretation of the FI field 
is provided in Table 6.2.2.6- L 



Table 6.2.2.6-1 : FI field interpretation 



Value 


Description 


00 


First byte of the Data field corresponds to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


01 


First byte of the Data field corresponds to the first byte of a RLC SDU. 

Last byte of the Data field does not correspond to the last byte of a RLC SDU. 


10 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field corresponds to the last byte of a RLC SDU. 


11 


First byte of the Data field does not correspond to the first byte of a RLC SDU. 
Last byte of the Data field does not correspond to the last byte of a RLC SDU. 



7.2.3.3.3 Test description 

7.2.3.3.3.1 Pre-test conditions 

System Simulator: 

- Cell L 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
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7.2.3.3.3.2 



Test procedure sequence 

Table 7.2.3.3.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits AMD PDU#1 containing a 
complete RLC SDU#1 (Fl field = 00). 


<— 


AMD PDU#1 


- 


- 


2 


Check: Does the UE transmit RLC SDU#1 ? 


— > 


(RLCSDU#1) 


1 


P 


2A 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACKSN=1) 


- 


- 


3 


The SS transmits AMD PDU#2 containing the 
first segment of RLC SDU#2 (Fl field = 01 ). 


<- 


AMD PDU#2 


- 


- 


4 


The SS transmits AMD PDU#3 containing the 
second segment of RLC SDU#2 (Fl field = 11). 


<- 


AMD PDU#3 


- 


- 


5 


The SS transmits AMD PDU#4 containing the 
last segment of RLC SDU#2 (Fl field = 1 0). 


<- 


AMD PDU#4 


- 


- 


6 


Check: Does the UE transmit RLC SDU#2? 


-> 


(RLC SDU#2) 


2,3, 
4 


P 


6A 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACK SN=2) 


- 


- 


7 


The t-PollRetransmitbmer for RLC PDU#5 
expires and SS assumes that the transmission 
of AMD PDU#5 containing a complete RLC 
SDU#3 and a complete RLC SDU#4 is failed 
and consider RLC PDU#5 for re-transmission 










8 


The SS transmits AMD PDU segment 
containing a complete RLC SDU#3 (Fl field = 
00). 


<- 


AMD PDU segment 






9 


Check: Does the UE transmit RLC SDU#3? 


— > 


(RLC SDU#3) 


1 


P 


9A 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACK SN=3) 


- 


- 


10 


The SS transmits AMD PDU segment 
containing the first segment of RLC SDU#4 (Fl 
field = 01). 


<- 


AMD PDU segment 






11 


The SS transmits AMD PDU segment 
containing the second segment of RLC SDU#4 
(Fl field = 11). 


<— 


AMD PDU segment 






12 


The SS transmits AMD PDU segment 
containing the last segment of RLC SDU#4 (Fl 
field = 10). 


<— 


AMD PDU segment 






13 


Check: Does the UE transmit RLC SDU#4? 


-> 


(RLC SDU#4) 


2,3, 
4 


P 


14 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACK SN=4) 


- 


- 



7.2.3.3.3.3 

None. 

7.2.3.4 

7.2.3.4.1 

(1) 



Specific message contents 



AM RLC / Segmentation and reassembly / Different numbers of length 
indicators 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an AMD PDU or an AMD PDU segment without no LI field 
then { UE correctly decodes the received AMD PDU or AMD PDU segment } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an AMD PDU or an AMD PDU segment with one LI field } 
then { UE correctly decodes the received AMD PDU or AMD PDU segment } 
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(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an AMD PDU or an AMD PDU segment with two LI fields } 
then { UE correctly decodes the received AMD PDU or AMD PDU segment } 
} 

7.2.3.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.322, clause 6.2.2.5. 

[TS 36.322, clause 6.2.2.5] 

Length: 1 1 bits. 

The LI field indicates the length in bytes of the corresponding Data field element present in the RLC data PDU 
delivered/received by an UM or an AM RLC entity. The first LI present in the RLC DATA PDU header corresponds to 
the first Data field element present in the Data field of the RLC DATA PDU, the second LI present in the RLC DATA 
PDU header corresponds to the second Data field element present in the Data field of the RLC DATA PDU, and so on. 
The value is reserved. 

7.2.3.4.3 Test description 
7.2.3.4.3.1 Pre-test conditions 
System Simulator: 

- Cell 1. 

UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.3.4.3.1- 
1. 

Table 7.2.3.4.3.1-1 : RLC settings 



Parameter 


Value 


t-Reordering 


150 ms 
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7.2.3.4.3.2 



Test procedure sequence 

Table 7.2.3.4.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 




During the whole test sequence, the SS should 
not allocate UL grants unless when explicitly 
stated so in the procedure. 










1 


The SS transmits AIVID PDU#1 containing a 
complete RLC SDU#1 without LI field. 


<~ 


AMD PDU#1 


- 


- 


2 


The SS transmits an uplink grant allowing the 
UE to transmit 1 RLC SDU. 


<— 


(UL grant) 


- 


- 


3 


Check: Does the UE transmit an AMD PDU 
containing RLCSDU#1? 


-> 


AMD PDU (RLCSDU#1) 


1 


P 


3A 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACKSN=1) 


- 


- 


4 


The SS transmits AIVID PDU#2 containing a 
complete RLC SDU#2 and a complete RLC 
SDU#3 with one LI field. 


<— 


AMD PDU#2 






5 


The SS waits for 60 ms then assigns an UL 
grant sufficient for the UE to loopback RLC 
SDU#2 and RLC SDU#3. 


<- 


(UL grant) 






6 


Check: Does the UE transmit an AMD PDU 
containing RLC SDU#2 and RLC SDU#3 in its 
data field? 


-> 


AMD PDU (RLC SDU#2, RLC 
SDU#3) 


2 


P 


7 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACK SN=2) 


- 


- 


8 


The SS transmits AMD PDU#3 containing a 
complete RLC SDU#4, a complete RLC 
SDU#5 and a complete RLC SDU#6 with two 
LI fields. 


<- 


AMD PDU#3 






9 


The SS waits for 60 ms then assigns an UL 
grant sufficient for the UE to loopback RLC 
SDU#4, RLC SDU#5 and RLC SDU#6. 


<— 


(UL grant) 






10 


Check: Does the UE transmit an AMD PDU 
containing RLC SDU#4, RLC SDU#5 and RLC 
SDU#6 in its data field? 


-> 


AMD PDU (RLC SDU#4, RLC 
SDU#5, RLC SDU#6) 


3 


P 


11 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACK SN=3) 


- 


- 


12 


Void 


- 


- 


- 


- 


13 


The f-Po//Refransm/ftimerfor AMD PDU#4 
expires and SS assumes that the transmission 
of AMD PDU#4 containing a complete RLC 
SDU#7, a complete RLC SDU#8, a complete 
RLC SDU#9, a complete RLC SDU#10, a 
complete RLC SDU#1 1 and a complete RLC 
SDU#1 2 is failed and consider AMD PDU#4 
for re-transmission. 










14 


The SS transmits AMD PDU segment 
containing a complete RLC SDU#7 without LI 
field. 


<— 


AMD PDU segment 






15 


The SS waits for 60 ms and then assigns an 
uplink grant allowing the UE to transmit 1 RLC 
SDU. 


<— 


(UL grant) 






16 


Check: Does the UE transmit an AMD PDU 
containing RLC SDU#7? 


-> 


AMD PDU (RLC SDU#7) 


1 


P 


16 
A 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACK SN=4) 


- 


- 


17 


The SS transmits AMD PDU segment 
containing a complete RLC SDU#8 and a 
complete RLC SDU#9 with one LI field. 


<— 


AMD PDU segment 






18 


The SS waits for 60 ms and then assigns an 
UL grant sufficient for the UE to loopback RLC 
SDU#8 and RLC SDU#9. 


<- 


(UL grant) 






19 


Check: Does the UE transmit an AMD PDU 
containing RLC SDU#8 and RLC SDU#9 in its 
data field? 


-> 


AMD PDU (RLC SDU#8, RLC 
SDU#9) 


2 


P 


20 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACK SN=5) 


- 


- 


21 


The SS transmits AMD PDU segment 


<- 


AMD PDU segment 


- 


- 
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containing a complete RLC SDU#10, a 
complete RLC SDU#1 1 and a complete RLC 
SDU#1 2 with two LI fields. 










22 


The SS waits for 60 ms and then assigns an 
UL grant sufficient for the UE to loopback RLC 
SDU#1 0, RLC SDU#1 1 and RLC SDU#1 2. 


<— 


(UL grant) 






23 


Check: Does the UE transmit an AMD PDU 
containing RLC SDU#1 0, RLC SDU#1 1 and 
RLC SDU#1 2 in its data field? 


-> 


AMD PDU (RLC SDU#10, RLC 
SDU#11,RLCSDU#12) 


3 


P 


24 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACK SN=6) 


- 


- 


25 


Void 


- 


- 


- 


- 



7.2.3.4.3.3 
None. 

7.2.3.5 
7.2.3.5.1 

(1) 



Specific message contents 

AM RLC / Reassembly / LI value > PDU size 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives PDU with "Length Indicators" that point beyond the end of the PDU 
then { UE discards PDU } 



7.2.3.5.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322 clauses 5.5.1 
and 6.2.2.5. 

[TS 36.322, clause 5.5.1] 

When an RLC entity receives an RLC PDU that contains reserved or invalid values, the RLC entity shall: 

discard the received PDU. 

[TS 36.322, clause 6.2.2.5] 

Length: 1 1 bits. 

The LI field indicates the length in bytes of the corresponding Data field element present in the RLC data PDU. The 
first LI present in the RLC data PDU header corresponds to the first Data field element present in the Data field of the 
RLC data PDU, the second LI present in the RLC data PDU header corresponds to the second Data field element 
present in the Data of the RLC data PDU, and so on. The value is reserved. 



Test description 
Pre-test conditions 



7.2.3.5.3 
7.2.3.5.3.1 
System Simulator: 

- Cell 1. 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with the loopback size set to 98 bytes. 
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7.2.3.5.3.2 



Test procedure sequence 

Table 7.2.3.5.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message/PDU/SDU 





During the whole test sequence, the SS should 
not allocate UL grants unless when explicitly 
stated so in the procedure. 










1 


The SS transmits an AMD PDU containing the 
first half (50 bytes) of SDU#1 in its data field to 
the UE. 


<— 


AMDPDU#1 (SN = 0) 






2 


The SS transmits an AMD PDU containing the 
second half (50 bytes) of SDU#1 and the first 
half (50 bytes) of SDU#2 in its data field to the 
UE. LI associated with PDU#2 has a value > 
PDU size, i.e. > 100. 


<~ 


AMDPDU#2(SN=1) 






3 


The SS transmits an AMD PDU containing the 
second half (50 bytes) of SDU#2 and the first 
half (50 bytes) of SDU#3 in its data field to the 
UE. 


<~ 


AMD PDU#3 (SN=2) 






4 


The SS transmits an AMD PDU containing the 
second half (50 bytes) of SDU#3 in its data 
field to the UE. 


<~ 


AMD PDU#4 (SN=3) 






4a 


The SS responds to any scheduling requests 
from the UE by transmitting an UL grant of size 
56 bits (Note 1). 


<- 


(UL grant, 56 bits) 






5 


Check: Does the UE transmit a STATUS PDU 
with NACK SN field set to 1 ? 


~> 


STATUS PDU 


1 


P 


6 


The SS transmits an AMD PDU containing the 
second half (50 bytes) of SDU#1 and the first 
half (50 bytes) of SDU#2 in its data field to the 
UE. The LI is correct. 


<— 


AMDPDU#2(SN=1) 






6a 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDU available in UL for 
loopback. 










6b 


The SS transmits an UL grant of size 2536 
bits (Note 2). 


<— 


(UL grant, 2536 bits) 


- 


- 


7 


Check: Does the UE transmit RLC SDU#1 , 

SDU#2, and SDU#3? 

(Note 3: Details for RLC PDU carrying RLC 

SDU#3) 


-> 


AMD PDU(RLC SDU#1, RLC 
SDU#2, RLC SDU#3) 


1 


P 


8 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACKSN=1) 


- 


- 


Note 1: UL grant of 56 bits (/res^l, Nprb=2, see TS 36.213 Table 7.1.7.2.1-1) is chosen such that UE will be enabled 

to send the status PDU. 
Note 2: UL grant of 2536 bits (/rss=13, NpRB=^0, see TS 36.213 Table 7.1.7.2.1-1) is chosen such that UE will fit all 3 

SDU in one AMD PDU. 
Note 3: In step 7, poll is set so SS will send STATUS PDU to UE in step 8. 



7.2.3.5.3.3 

None. 

7.2.3.6 

7.2.3.6.1 
(1) 



Specific message contents 

AM RLC / Correct use of sequence numbering 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits the first PDU } 

then { UE sets the Sequence Number field equal to 



(2) 



with 



UE in E-UTRA RRC CONNECTED state 
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ensure that { 

when { UE transmits subsequent PDUs } 

then { SN incremented by 1 for each PDU transmitted } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits more than 1024 PDUs } 

then { UE wraps the Sequence Number after transmitting the 1024 PDU } 
} 

(4) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { more than 1024 PDUs are sent to UE } 

then { UE accepts PDUs with SNs that wrap around every 1024 PDU } 
} 

7.2.3.6.2 Conformance requirements 

References: The conformance requirements covered in ttie present TC are specified in: 3GPP TS 36.322 clauses 
5.1.3.1.1, 6.2.2.3 and 7.1. 

[TS 36.322, clause 5.1.3.1.1] 

The transmitting side of an AM RLC entity shall prioritize transmission of RLC control PDUs over RLC data PDUs. 
The transmitting side of an AM RLC entity shall prioritize retransmission of RLC data PDUs over transmission of new 
AMD PDUs. 

The transmitting side of an AM RLC entity shall maintain a transmitting window according to state variables VT(A) 
and VT(MS) as follows: 

- a SN falls within the transmitting window if VT(A) <= SN < VT(MS); 

a SN falls outside of the transmitting window otherwise. 

The transmitting side of an AM RLC entity shall not deliver to lower layer any RLC data PDU whose SN falls outside 
of the transmitting window. 

When delivering a new AMD PDU to lower layer, the transmitting side of an AM RLC entity shall: 

- set the SN of the AMD PDU to VT(S), and then increment VT(S) by one. 

The transmitting side of an AM RLC entity can receive a positive acknowledgement (confirmation of successful 
reception by its peer AM RLC entity) for a RLC data PDU by the following: 

- STATUS PDU from its peer AM RLC entity. 

When receiving a positive acknowledgement for an AMD PDU with SN = VT(A), the transmitting side of an AM RLC 
entity shall: 

- set VT(A) equal to the SN of the AMD PDU with the smallest SN, whose SN falls within the range VT(A) <= 
SN <= VT(S) and for which a positive acknowledgment has not been received yet. 

if positive acknowledgements have been received for all AMD PDUs associated with a transmitted RLC SDU :- 
send an indication to the upper layers of successful delivery of the RLC SDU. 

[TS 36.322, clause 6.2.2.3] 

Length: lObits for AMD PDU, AMD PDU segments and STATUS PDUs. ... 

The SN field indicates the sequence number of the corresponding ... AMD PDU. For an AMD PDU segment, the SN 
field indicates the sequence number of the original AMD PDU from which the AMD PDU segment was constructed 
from. The sequence number is incremented by one for every ... AMD PDU. 

[TS 36.322, clause 7.1] 
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All state variables and all counters are non-negative integers. 

All state variables related to AM data transfer can take values from to 1023. All arithmetic operations contained in the 
present document on state variables related to AM data transfer are affected by the AM modulus (i.e. final value = 
[value from arithmetic operation] modulo 1024). 

AMD PDUs ... are numbered integer sequence numbers (SN) cycling through the field: to 1023 for AMD PDU ... 



c) VT(S) - Send state variable 

This state variable holds the value of the SN to be assigned for the next newly generated AMD PDU. It is initially set to 
0, and is updated whenever the AM RLC entity deUvers an AMD PDU with SN = VT(S). 



Test description 
Pre-test conditions 



7.2.3.6.3 
7.2.3.6.3.1 
System Simulator: 

- Cell 1. 
UE: 
None. 
Preamble: 

UE is in state Loopback Activated (state 4) according to [18] with the expectations listed in table 7.2.3.6.3.1-1. 

Table 7.2.3.6.3.1-1 : RLC Settings 



Parameter 


Value 


PollPDU 


pinfinity 


Poll Byte 


kBinfinity 



7.2.3.6.3.2 



Test procedure sequence 

Table 7.2.3.6.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message/PDU/SDU 


- 


EXCEPTION: Step 2 is executed 1024 times. 


- 


- 


- 


- 




EXCEPTION: In parallel to step 2, the 
behaviour described in table 7.2.3.6.3.2-2 is 
running. 










1 


The SS transmits 1 UL grant in each radio 
frame to enable the UE to return each received 
AIVID PDU in one looped back AMD PDU. 


<— 


(UL grants) 






2 


The SS transmits an AMD PDU to the UE. 
SN equals and is incremented for each PDU 
transmitted. 


<- 


AMD PDU 






3 


The SS transmits an AMD PDU to the UE in 
the next TTI. SN equals 0. 


<- 


AMD PDU 


- 


- 


4 


Void 


- 


- 


- 


- 


5 


Check: Does the UE transmit an AMD PDU 
with SN=0? 


-> 


AMD PDU 


3,4 


P 


6 


The SS transmits a STATUS PDU with 
ACK SN = 1. 


<- 


STATUS PDU 


- 


- 
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Table 7.2.3.6.3.2-2: Parallel behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does the UE transmit an AMD PDU 
with SN = 0? 


-> 


AMD PDU 


1 


P 


- 


EXCEPTION; Step 2 is executed 1023 times. 


- 


- 


- 


- 


2 


Checl<: Does the UE transmit an AMD PDU 
with SN increased by 1 compared with the 
previous one? 


~> 


AMD PDU 


2 


P 




EXCEPTION: Step 3a1 describes behaviour 
that depends on the contents of the AMD PDU 
transmitted at Step 2. 










3a1 


IF the UE has set the poll bit in the AMD PDU 
transmitted at Step 2 THEN the SS transmits a 
Status Report. 


<- 


STATUS PDU 







7.2.3.6.3.3 

None. 

7.2.3.7 
7.2.3.7.1 

(1) 



Specific message contents 

AM RLC / Control of transmit window 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state with DRB established and pending uplink data for 

transmission} 

ensure that { 

when { AMD PDUs in transmission buffer fall outside VT{A) <= SN < VT{MS) } 
then { UE does not transmit these AMD PDUs } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state with DRB established and pending uplink data for 
transmission } 
ensure that { 

when { receiving a STATUS PDU where ACK_SN acknowledges at least one AMD PDU not yet acknowledged 



} 



then { UE transmits AMD PDUs within updated window range} 



7.2.3.7.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322 clauses 
5.1.3.1.1,7.1 and7.2. 

[TS 36.322, clause 5.1.3.1.1] 



The transmitting side of an AM RLC entity shall maintain a transmitting window according to state variables VT(A) 
and VT(MS) as follows: 

- a SN falls within the transmitting window if VT(A) <= SN < VT(MS); 

a SN falls outside of the transmitting window otherwise. 

The transmitting side of an AM RLC entity shall not deliver to lower layer any RLC data PDU whose SN falls outside 
of the transmitting window. 

When delivering a new AMD PDU to lower layer, the transmitting side of an AM RLC entity shall: 

- set the SN of the AMD PDU to VT(S), and then increment VT(S) by one. 

The transmitting side of an AM RLC entity can receive a positive acknowledgement (confirmation of successful 
reception by its peer AM RLC entity) for a RLC data PDU by the following: 
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- STATUS PDU from its peer AM RLC entity. 

When receiving a positive acknowledgement for an AMD PDU with SN = VT(A), the transmitting side of an AM RLC 
entity shall: 

- set VT(A) equal to the SN of the AMD PDU with the smallest SN, whose SN falls within the range VT(A) <= 
SN <= VT(S) and for which a positive acknowledgment has not been received yet. 

if positive acknowledgements have been received for all AMD PDUs associated with a transmitted RLC SDU : 

send an indication to the upper layers of successful delivery of the RLC SDU. 

[TS 36.322, clause 7.2] 

a) AM_Window_Size 

This constant is used by both the transmitting side and the receiving side of each AM RLC entity to calculate VT(MS) 
from VT(A), and VR(MR) from VR(R). AM_Window_Size = 512. 



[TS 36.322, clause 7.1] 



a) VT(A) - Acknowledgement state variable 

This state variable holds the value of the SN of the next AMD PDU for which a positive acknowledgment is to be 
received in-sequence, and it serves as the lower edge of the transmitting window). It is initially set to 0, and is 
updated whenever the AM RLC entity receives a positive acknowledgment for an AMD PDU with SN = VT(A). 

b) VT(MS) - Maximum send state variable 

This state variable equals VT(A) + AM_Window_Size, and it serves as the higher edge of the transmitting window. 



7.2.3.7.3 Test description 

7.2.3.7.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 

UE: 

None. 

Preamble: 

UE is in state Loopback Activated (state 4) according to [18] with the loopback size set to 100 bytes, and with 
the expectations listed in table 7.2.3.7.3.1-1. 



Table 7.2.3.7.3.1-1 : RLC Settings 



Parameter 


Value 


PollPDU 


pinfinity 


Poll Byte 


kBinfinity 


t-PollRetransmit 


ms300 
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7.2.3.7.3.2 



Test procedure sequence 

Table 7.2.3.7.3.2-1 : Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


Message 


- 


The SS does not allocate any uplink grant. 


- 


- 


- 


- 




EXCEPTION: Step 1 is repeated W+1 times, 
where W = AI\/l_Window_Size. The 
transmission is performed in subsequent TTIs. 










1 


The SS transmits an AIVID PDU containing a 
SDUtotheUE. 


<- 


AMD PDU 


- 


- 


1A 


In the following steps the SS transmits 1 UL 
grant in each radio frame to enable the UE to 
return each received AIVID PDU in one looped 
back AMD PDU. 


<- 


(UL grants) 






- 


EXCEPTION: Step 18 is repeated W-1 times. 


- 


- 


- 


- 


1B 


The UE transmits an AMD PDU with the same 
data as received in the corresponding DL AMD 
PDU. 


-> 


AMD PDU 






1C 


Check: Does the UE transmit an AMD PDU 
with the Poll bit set and with the contents of the 
SDU? 


~> 


AMDPDU(SN=W-1), Poll 


1 


P 


2 


Check: Does the UE transmit an AMD PDU 
within t-PollRetransmit/27 


-> 


AMD PDU 


1 


F 


3 


The SS transmits a STATUS PDU to 
acknowledge the W uplink AMD PDUs with 
SN=0 to SN=W-1 . ACK SN = W. 


<~ 


STATUS PDU 






3A 


Check: Does the UE transmit an AMD PDU 
with the Poll bit set and with the contents of the 
SDU? 


~> 


AMD PDU(SN=W), Poll 


2 


P 


SB 


The SS transmits a STATUS PDU with 
ACK SN=W+1. 


<- 


STATUS PDU 


- 


- 


Note: SDUs are numbered 1,2, ..., W+1 



7.2.3.7.3.3 
None. 

7.2.3.8 

7.2.3.8.1 

(1) 



Specific message contents 

AM RLC / Control of receive window 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { the UE receives AMD PDUs with SN outside the upper boundary of the receive window } 
then { the UE discards these AMD PDUs } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { the receive window has been moved } 

then { UE continues accepting AMD PDUs within updated window range } 



7.2.3.8.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322 clauses 
5.1.3.2.1 and 7.2. 

[TS 36.322, clause 5.1.3.2.1] 

The receiving side of an AM RLC entity shall maintain a receiving window according to state variables VR(R) and 
VR(MR) as follows: 
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- a SN falls within the receiving window if VR(R) <= SN < VR(MR); 
a SN falls outside of the receiving window otherwise. 

When receiving a RLC data PDU from lower layer, the receiving side of an AM RLC entity shall: 

either discard the received RLC data PDU or place it in the reception buffer (see sub clause 5.1.3.2.2); 

if the received RLC data PDU was placed in the reception buffer: 

update state variables, reassemble and deliver RLC SDUs to upper layer and start/stop t-Reordering as 
needed (see sub clause 5.L3.2.3). 

When t-Reordering expires, the receiving side of an AM RLC entity shall: 

update state variables and start t-Reordering as needed (see sub clause 5.L3.2.4). 

[TS 36.322, clause 7.2] 

a) AM_Window_Size 

This constant is used by both the transmitting side and the receiving side of each AM RLC entity to calculate 
VT(MS) from VT(A), and VR(MR) from VR(R). AM_Window_Size = 512. 

7.2.3.8.3 Test description 

7.2.3.8.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 
UE: 

None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with a loopback size of byte. 
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7.2.3.8.3.2 



Test procedure sequence 

Table 7.2.3.8.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message/PDU/SDU 




EXCEPTION: Step 1 shall be repeated W 
times, where W is AlVI Window Size. Polling 
bit enabled for the Wth RLC PDU transmitted. 
The SS shall set the Sequence Number field 
for the first AMD PDU to and increment it by 
1 for every execution of Step 1 . 










1 


The SS transmits an AMD PDU to the UE 


<— 


AMD PDU 






2 


Check: Does the UE transmit a STATUS PDU 
acknowledging W PDUs? (ACK SN = W) 


~> 


STATUS PDU 


1 


P 


3 


The SS transmits the {W+1)th AMD PDU to 
the UE with the Sequence Number field set to 
((2W mod 1024) = 0) and the Polling bit set 


<— 


AMD PDU 






4 


Check: does the UE transmit a STATUS PDU 
acknowledging W PDUs? (ACK SN = W) 
(Note1) 


~> 


STATUS PDU 


1 


P 


5 


The SS transmits the {W+2)th AMD PDU to 
the UE with the Sequence Number field set to 
W and the Polling bit set. 


<- 


AMD PDU 






6 


Check: Does the UE transmit a STATUS PDU 
acknowledging W +1 PDUs? (ACK SN field = 
W+1) (Note 2) 


-> 


STATUS PDU 


2 


P 


Note 1 : This shows that the UE has discarded the (W+1)th PDU. 

Note 2: This shows that the UE did not discard the (W+2)th PDU and has updated the Receive Window correctly 



7.2.3.8.3.3 
None. 

7.2.3.9 

7.2.3.9.1 

(1) 



Specific message contents 

AM RLC / Polling for status 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state and using AM RLC 
ensure that { 

when { last data in the buffer was transmitted } 
then { UE transmits a Poll } 

} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and using AM RLC 
ensure that { 

when { the t- Pol I J?e transmit timer expires } 
then { UE transmits a Poll } 



(3) 

with { UE in E-UTRA RRC_CONNECTED state and using AM RLC } 
ensure that { 

when { PDU_WITH0UT_P0LL=pollPDL7 } 
then { UE transmits a Poll } 



(4) 

with { UE in E-UTRA RRC_CONNECTED state and using AM RLC 
ensure that { 

when { BYTE_WITHOUT_POLL=poIIByte } 
then { UE transmits a Poll } 



} 
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7.2.3.9.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322 clauses 5.2.2. 

[TS 36.322, clause 5.2.2] 

Upon assembly of a new AMD PDU, the transmitting side of an AM RLC entity shall: 

- increment PDU_WITHOUT_POLL by one; 

increment B YTE_WITHOUT_POLL by every new byte of Data field element that it maps to the Data field of 
the RLC data PDU; 

- if PDU_WITHOUT_POLL >= pollPDU; or 

- if BYTE_WITHOUT_POLL >= pollByte; 

include a poll in the RLC data PDU as described below. 

Upon assembly of an AMD PDU or AMD PDU segment, the transmitting side of an AM RLC entity shall: 

if both the transmission buffer and the retransmission buffer becomes empty (excluding transmitted RLC data 
PDU awaiting for acknowledgements) after the transmission of the RLC data PDU; or 

if no further RLC data PDU can be transmitted after the transmission of the RLC data PDU (e.g. due to window 
stalling); 

include a poll in the RLC data PDU as described below. 

To include a poll in a RLC data PDU, the transmitting side of an AM RLC entity shall: 

- set the P field of the RLC data PDU to " 1 " ; 

- set PDU_WITHOUT_POLL to 0; 

- set BYTE_WITHOUT_POLL to 0; 

After delivering a RLC data PDU including a poll to lower layer and after incrementing of VT(S) if necessary, the 
transmitting side of an AM RLC entity shall: 

- setPOLL_SNto VT(S)-1; 

if t-PollRetransmit is not running: 

start t-PollRetransmit; 

else: 

restart t-PollRetransmit; 

[TS 36.322, clause 5.2.2.3] 

Upon expiry of t-PollRetransmit, the transmitting side of an AM RLC entity shall: 

if both the transmission buffer and the retransmission buffer are empty (excluding transmitted RLC data PDU 
awaiting for acknowledgements); or 

if no new RLC data PDU can be transmitted (e.g. due to window stalling): 

- consider the AMD PDU with SN = VT(S) - 1 for retransmission; 

consider any AMD PDU which has not been positively acknowledged for retransmission; 

include a poll in a RLC data PDU as described in section 5.2.2.1. 
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Test description 
Pre-test conditions 



7.2.3.9.3 
7.2.3.9.3.1 
System Simulator: 

- Cell 1. 
UE: 
None. 
Preamble: 

UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.3.9.3.1-1. 

Table 7.2.3.9.3.1-1 : RLC Settings 



Parameter 


Value 


pollPDU 


p256 


pollByte 


kB25 


t-PollRetransmit 


ms400 
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7.2.3.9.3.2 



Test procedure sequence 

Table 7.2.3.9.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 




During the whole test sequence, the SS should 
not allocate UL grants unless when explicitly 
stated so in the procedure. 










1 


The SS transmits 4 AMD PDUs, each 
containing an RLC SDU of size 5 120 bits. 


<— 


AMD PDU (SN=0) 
AMD PDU (SN=1) 
AMD PDU (SN=2) 
AMD PDU (SN=3) 








EXCEPTION: In parallel to the events 
described in step 1A, the step specified in 
Table 7.2.3.9.3.2-2 should take place. 










1A 


The SS waits for 60 ms, then starts assigning 
UL grants of size 5 160 bits. (Note 1) 


- 


- 


- 


- 


2 


Check 1 : Does the UE transmit an AMD PDU 
with a SN in range to 3 and P=1 ? 
Record time Tb. 
Check 2: Is (Tb - Ta) = t-PollRetransmit? 


— > 


AMD PDU 


2 


P 


3 


Upon receiving the Poll, the SS transmits an 
RLC Status Report. 


<~ 


STATUS PDU 


- 


- 


4 


Check: Does the UE retransmit an AMD PDU 
within 1 sec? 


-> 


AMD PDU 


2 


F 


5 


SS performs an RRC Connection 
Reconfiguration procedure changing pollPDU 
to p4. 










6 


The SS transmits 8 AMD PDUs, each 
containing an RLC SDU of 5 120 bits. 


<- 


AMD PDU (SN=4) 
AMD PDU (SN=5) 

AMD PDU (SN=11) 








EXCEPTION: In parallel to the events 
described in step 6A, the step specified in 
Table 7.2.3.9.3.2-3 should take place. 










6A 


The SS waits for 60 ms, then starts assigning 
UL grants of size 5 160 bits. (Note 1) 


- 


- 


- 


- 


7 


The SS transmits a Status Report with 
ACK SN=12, NACK SN=4, NACK SN=5, 
NACK SN=6, NACK SN=8 and NACK SN=9. 


<- 


STATUS PDU 






8 


Check: Does the UE transmit AMD PDUs with 

the following SN and P values? 

AMD PDU, SN=4, P=0 

AMD PDU, SN=5, P=0 

AMD PDU, SN=6, P=0 

AMD PDU, SN=8, P=0 

AMD PDU, SN=9, P=1 


-> 


AMD PDU (SN=4, P=0) 
AMD PDU (SN=5, P=0) 
AMD PDU (SN=6, P=0) 
AMD PDU (SN=8, P=0) 
AMD PDU (SN=9, P=1) 


3 


P 


8A 


The SS transmits a Status Report with 
ACK SN=12 and no NACK SN. 


<— 


STATUS PDU 


- 


- 


9 


SS performs an RRC Connection 
Reconfiguration procedure changing pollPDU 
to p256. 










10 


The SS transmits 82 AMD PDUs, each 
containing an RLC SDU of size 5 120 bits. 


<— 


AMD PDU (SN=12) 
AMD PDU (SN=13) 

AMD PDU (SN=93) 








EXCEPTION: In parallel to the events 
described in step 10A, the steps specified in 
Table 7.2.3.9.3.2-4 should take place. 










10 
A 


The SS waits for 60 ms, then starts assigning 
UL grants of size 5 160 bits. (Note 1) 


- 


- 


- 


- 


Note 1: UL grant of 5 160 bits {/res^ 13, Nprb=20, see TS 36.213 Table 7.1.7.2.1-1) is chosen to allow the UE to 
loop back one SDL) of size 5 120 bits and one short BSR (8 bits) into each AIVID PDU sent in the uplink (5 
1 60 bits - 1 6 bit AMD PDU header - 8 bit IVIAC BSR subheader - 8 bit MAC PDU subheader). The UE will 
include an SDU of size 5 120 bits and one short BSR in the first looped back PDU, and will include an SDU 
of size 5120 bits and a 1-byte padding in the subsequent PDUs. 
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Table 7.2.3.9.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does the UE transmit 4 AMD PDUs, 
with only the last one having the poll bit set? 
Record time Ta when the PDU with the poll bit 
set is received at the SS. 


-> 


AMD PDUs 


1 


P 



Table 7.2.3.9.3.2-3: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does the UE transmit 8 AMD PDUs, 
with the poll bit set only in the 4* and the 8* 
PDUs? 


-> 


AMD PDUs 


3 


P 



Table 7.2.3.9.3.2-4: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does the UE transmit 40 AMD PDUs, 
with the poll bit set only in the last (40*) one? 


-> 


AMD PDUs 


1,4 


P 


2 


The SS transmits an RLC Status Report. 


<— 


STATUS PDU 


- 


- 


3 


Check: Does the UE transmit 40 AMD PDUs, 
with the poll bit set only in the last (80*) one? 


-> 


AMD PDUs 


1,4 


P 


4 


The SS transmits an RLC Status Report. 


<— 


STATUS PDU 


- 


- 


5 


Check: Does the UE transmit 2 AMD PDUs, 
with the poll bit set only in the last (82"'') one? 


-> 


AMD PDUs 


1,4 


P 


6 


The SS transmits an RLC Status Report. 


<— 


STATUS PDU 


- 


- 



7.2.3.9.3.3 

None. 

7.2.3.10 

7.2.3.10.1 
(1) 



Specific message contents 

AM RLC / Receiver status triggers 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state and using AM RLC } 
ensure that { 

when { Reception failure of an RLC data PDU is detected } 
then { UE initiates Status Reporting when t -Reordering expires } 

} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and using AM RLC } 
ensure that { 

when { Status Reporting is triggered and t-StatusProhibit is running} 
then { UE wait until t-StatusProhibit has expired to send Status Report } 

} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state and using AM RLC } 
ensure that { 

when { Polling from peer AM RLC entity is detected and the sequence number of the PDU that carries 
the Poll is less than VR{MS) } 

then { UE initiates Status Reporting } 

} 
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(4) 

with { UE in E-UTRA RRC_CONNECTED state and using AM RLC } 
ensure that { 

when { Polling from peer AM RLC entity is detected and the sequence number of the PDU that carries 
the Poll is greater than or equal to VR{MS) } 

then { UE waits until VR{MS) becomes greater than the sequence number of the PDU with the Poll 
before initiating Status Reporting } 

} 

(5) 

with { UE in E-UTRA RRC_CONNECTED state and using AM RLC } 
ensure that { 

when { the UE needs to send a Status Report and the UL grant is not large enough to accommodate 
the whole report } 

then { UE includes as many NACK SNs in the Status Report as allowed by the UL grant } 

} 

7.2.3.10.2 Conformance requirements 

References: The conformance requirements covered in ttie present TC are specified in: 3GPP TS 36.322 clause 5.2.3. 

[TS 36.322, clause 5.2.3] 

An AM RLC entity sends STATUS PDUs to its peer AM RLC entity in order to provide positive and/or negative 
acknowledgements of RLC PDUs (or portions of them). 

RRC configures whether or not the status prohibit function is to be used an AM RLC entity. 

Triggers to initiate STATUS reporting include: 

Polling from its peer AM RLC entity: 

When a RLC data PDU with SN = x and the P field set to " 1 " is received from lower layer, the receiving side 
of an AM RLC entity shall: 

if the PDU is to be discarded as specified in subclause 5.1.3.2.2; or 

- if X < VR(MS) or X >= VR(MR): 

trigger a STATUS report; 

else: 

- delay triggering the STATUS report until x < VR(MS) or x >= VR(MR). 

NOTE: This ensures that the RLC Status report is transmitted after HARQ reordering. 

Detection of reception failure of an RLC data PDU: 

The receiving side of an AM RLC entity shall trigger a STATUS report when t-Reordering expires. 

NOTE: The expiry of T_reordering triggers both VR(MS) to be updated and a STATUS report to be triggered, 
but the STATUS report shall be triggered after VR(MS) is updated. 

When STATUS reporting has been triggered, the receiving side of an AM RLC entity shall: 

if t-StatusProhibit is not running: 

at the first transmission opportunity indicated by lower layer, construct a STATUS PDU and deliver it to 
lower layer; 

else: 

at the first transmission opportunity indicated by lower layer after t-StatusProhibit expires, construct a single 
STATUS PDU even if status reporting was triggered several times while t-StatusProhibit was running and 
deliver it to lower layer; 

When a STATUS PDU has been delivered to lower layer, the receiving side of an AM RLC entity shall: 
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start t-StatusProhibit. 

When constructing a STATUS PDU, the AM RLC entity shall: 

- for the AMD PDUs with SN such that VR(R) <= SN < VR(MS) that has not been completely received yet, in 
increasing SN order of PDUs and increasing byte segment order within PDUs, starting with SN = VR(R) up to 
the point where the resulting STATUS PDU still fits to the total size of RLC PDU(s) indicated by lower layer: 

for an AMD PDU for which no byte segments have been received yet for an AMD PDU: 

- include in the STATUS PDU a NACK_SN which is set to the SN of the AMD PDU; 

for a continuous sequence of byte segments of a partly received AMD PDU that have not been received yet : 

- include in the STATUS PDU a set of NACK_SN, SOstart and SOend 

set the ACK_SN to the SN of the next not received RLC Data PDU which is not indicated as missing in the 
resulting STATUS PDU. 



Test description 
Pre-test conditions 



7.2.3.10.3 

7.2.3.10.3.1 

System Simulator: 

- Cell 1. 

UE: 

None. 

Preamble 

The UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.3.10.3.1- 
1. 

Table 7.2.3.10.3.1-1 : RLC settings 



Parameter 


Value 


t-Reordering 


ms150 


t-StatusProhibit 


ms300 


t-Poll Retransmit 


ms500 
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7.2.3.10.3.2 



Test procedure sequence 

Table 7.2.3.10.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


- 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


1 


The SS transmits 4 AIVID PDUs with SN=0, 1 , 
2, and 4. The SS sets the P field of all the 
AMD PDUs too. 

Record time Ta when the AMD PDU with SN=4 
is sent. 


<~ 


AMD PDU (SN=0, P=0) 
AMD PDU (SN=1, P=0) 
AMD PDU (SN=2, P=0) 
AMD PDU (SN=4, P=0) 






1A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns 3 UL grants of size 840 bits (UL Grant 
Allocation type 2). (Note 1) 


<— 


(UL grants, 840 bits) 






1B 


The UE transmits RLC SDU#1. 


— > 


(RLCSDU#1) 


- 


- 


1C 


The UE transmits RLC SDU#2. 


— > 


(RLC SDU#2) 


- 


- 


1D 


The UE transmits RLC SDU#3. 


— > 


(RLC SDU#3) 


- 


- 


1E 


The SS transmits a STATUS PDU 


<— 


STATUS PDU 


- 


- 


1F 


The SS starts the UL default grant 
transmission 


- 


- 


- 


- 


2 


Check 1 : Does the UE transmit a Status 
Report with NAGK_SN=3 and AGK_SN=5? 
Record time Tb 
Check 2: (Tb - Ta) = t-Reordering 


-> 


STATUS PDU 


1 


P 


3 


1 00 ms after the Status Report is received at 
Step 2, the SS transmits 4 AMD PDUs with 
SN=5, 6, 8 and 9. The SS sets the P field of all 
the AMD PDUs too. 


<— 


AMD PDU (SN=5, P=0) 
AMD PDU (SN=6, P=0) 
AMD PDU (SN=8, P=0) 
AMD PDU (SN=9, P=0) 






3A 


Void 


- 


- 


- 


- 


SB 


Check 1 : Does the UE transmit a Status 
Report with NACK_SN=3, ACK_SN=7? 
Record time Tc 
Check 2: (Tc - Tb) = t-StatusProhibit 


-> 


STATUS PDU 


2 


P 


3C 


Void 


- 


- 


- 


- 


4 


The UE transmit a Status Report with 
NACK SN=3, NACK SN=7 and ACK SN=10 


-> 


STATUS PDU 






4A 


The SS ignores scheduling requests unless 
otherwise specified and does not allocate any 
uplink grant and is configured for Uplink Grant 
Allocation Type 3. 










5 


Void 


- 


- 


- 


- 


6 


After 300ms the SS transmits 3 AMD PDUs 
with SN=3, SN=7, and SN=9. The SS sets the 
P field of all the AMD PDUs to except for that 
of the AMD PDU with SN=7. 


<— 


AMD PDU (SN=3, P=0) 
AMD PDU (SN=7, P=1) 






6A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns 1 UL grant of size 40 bits. (Note 2) 


<- 


(UL grant, 40 bits) 






7 


Check: Does the UE transmit a Status Report 
with no NACK SN and ACK SN = 10? 


~> 


STATUS PDU 


3 


P 


7A 


In the subframe following the one scheduled in 
step 6A the SS assigns 7 UL grants of size 
840 bits. (Note 1) 


<— 


(UL grant, 840 bits) 






78 


The UE transmits RLC SDU#4. 


— > 


(RLC SDU#4) 


- 


- 


7C 


The UE transmits RLC SDU#5. 


— > 


(RLC SDU#5) 


- 


- 


7D 


The UE transmits RLC SDU#6. 


— > 


(RLC SDU#6) 


- 


- 


7E 


The UE transmits RLC SDU#7. 


— > 


(RLC SDU#7) 


- 


- 


7F 


The UE transmits RLC SDU#8. 


— > 


(RLC SDU#8) 


- 


- 


7G 


The UE transmits RLC SDU#9. 


— > 


(RLC SDU#9) 


- 


- 


7H 


The UE transmits RLC SDU#10. 


-> 


(RLCSDU#10) 


- 


- 


71 


The SS transmits a STATUS PDU 


<— 


STATUS PDU 


- 


- 


8 


Void 


- 


- 


- 


- 


9 


After 300 ms the SS transmits an AMD PDU 
with SN=10 and P=0, and an AMD PDU with 


<- 


AMD PDU (SN=10, P=0) 
AMD PDU (SN=12, P=1) 


- 


- 
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SN=12andP=1. 










9A 


Check: Does the UE transmits a scheduling 
request within t-Reordering / 2 ms? 


-> 


(SR) 


4 


F 


10 


Within t-Reordering / 2 ms after Step 9, the SS 
transmits an AMD PDU with SN=1 1 and P=0. 
Note: AMD PDUs with SN 10,11 and 12 carry 
RLCSDU#11. 


<— 


AMDPDU(SN=11, P=0) 






10 
A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns 1 UL grant of size 40 bits. (Note 2) 


<- 


(UL grants, 40 bits) 






11 


Check: Does the UE transmit a Status Report 
with no NACK SN and ACK SN=13? 


~> 


STATUS PDU 


4 


P 


11 
A 


The SS assigns 1 UL grant of size 840 bits. 
(Note 1) 


<- 


(UL grants, 840 bits) 


- 


- 


11 
B 


The UE transmit RLC SDU#1 1 . 


-> 


(RLCSDU#11) 


- 


- 


11 
C 


The SS transmits a STATUS PDU 


<- 


STATUS PDU 


- 


- 


12 


Void 


- 


- 


- 


- 


13 


Void 


- 


- 


- 


- 


14 


After 300 ms the SS transmits an AMD PDU 
with SN=13 and P=0, and an AMD PDU with 
SN=19andP=1. 


<— 


AMDPDU (SN=13, P=0) 
AMDPDU (SN=19, P=1) 






15 


The SS waits for t-Reordering ms to ensure 
expiry. 


- 


- 


- 


- 


16 


Void 


- 


- 


- 


- 


17 


Upon reception of a scheduling request the SS 
assigns an UL grant of size 56 bits. (Note 3) 


<- 


(UL Grant) 


- 


- 


18 


Check: Does the UE transmit a Status Report 
with ACK SN=16 and 2 NACK SNs: 14 and 
15? 


-> 


STATUS PDU 


5 


P 


19 


Void 


- 


- 


- 


- 


20 


Void 


- 


- 


- 


- 


21 


After 300 ms tThe SS transmits an AMD PDU 
withSN=14andP=1. 


<~ 


AMDPDU(SN=14, P=1) 


- 


- 


22 


Upon reception of a scheduling request the SS 
assigns an UL grant of size 72 bits. (Note 4) 


<— 


(UL Grant) 


- 


- 


23 


Check: Does the UE transmit a Status Report 
with ACK SN=20 and 4 NACK SNs: 15, 16, 
17 and 18? 


~> 


STATUS PDU 


5 


P 


24 


The SS transmits 4 AMD PDU with SN=15, 16, 

17, 18. 

Note: AMD PDUs with SN 13 to 19 carry RLC 

SDU#12. 


<- 


AMD PDU (SN=15, P=0) 
AMDPDU (SN=16, P=0) 
AMDPDU (SN=17, P=0) 
AMDPDU (SN=18, P=0) 






24 
A 


Upon reception of a scheduling request the SS 
assigns 1 UL grant of size 840 bits. (Note 1) 


<— 


(UL grants, 840 bits) 


- 


- 


25 


The UE loopbacks the complete RLC SDU. 


— > 


(RLCSDU#12) 


- 


- 


26 


The SS transmits a STATUS PDU 


<- 


STATUS PDU 


- 


- 


Note 1: UL grant of 840 bits (/res=14, Nprb=3, see TS 36.213 Table 7.1.7.2.1-1) is chosen to allow the UE to transmit 

one PDU at a time. 
Note 2: UL grant of 40 bits (Itbs=3, NpRB=^, see TS 36.213 Table 7.1.7.2.1-1) is chosen to allow the UE to transmit a 

Status Report with ACK SN and (16-bit short BSR + 8-bit MAC PDU subheader + 4-bit D/C/CPT -i- 10-bit 

ACK_SN + 1-bit E1 -i- Ibit padding). 
Note 3: UL grant of 56 bits (/res^l, Nprb=2, see TS 36.213 Table 7.1.7.2.1-1) is chosen to allow the UE to transmit a 

Status Report with ACK SN and 2 NACK SNs (8-bit MAC PDU subheader + 4-bit D/C/CPT -i- 1 0-bit 

ACK SN-^1-bitE1 -H 2 X (12-bit NACK SN/E1/E2)). 
Note 4: UL grant of 72 bits {hBS=2, Nprb=2, see TS 36.21 3 Table 7.1 .7.2.1-1 ) is chosen to allow the UE to transmit a 

Status Report with ACK SN and 4 NACK SNs (8-bit MAC PDU subheader + 4-bit D/C/CPT -i- 10-bit 

ACK SN-^1-bitE1 -H 4 X (12-bit NACK SN/E1/E2)). 



7.2.3.10.3.3 
None. 



Specific message contents 
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7.2.3.11 Void 

7.2.3.12 Void 

7.2.3.13 AM RLC / Reconfiguration of RLC parameters by upper layers 

7.2.3.1 3.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state and using AM RLC } 
ensure that { 

when { t- Pol lJ?e transmit value is changed during reconfiguration of RLC parameters by upper layers 

} 

then { UE starts using new t- Pol I J?e transmit value } 

} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and using AM RLC } 
ensure that { 

when { t -Reordering value is changed during reconfiguration of RLC parameters by upper layers } 
then { UE starts using new t -Reordering value } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state and using AM RLC } 
ensure that { 

when { t-StatusProhibit value is changed during reconfiguration of RLC parameters by upper layers} 
then { UE starts using new t-StatusProhibit value } 
} 

7.2.3.13.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322 clause 5.2.2, 
5.2.2.1, 5.2.2.2, 5.2.2.3 and 5.2.3. 

[TS 36.322, clause 5.2.2] 

An AM RLC entity can poll its peer AM RLC entity in order to trigger STATUS reporting at the peer AM RLC entity. 

[TS 36.322, clause 5.2.2.1] 

Upon assembly of a new AMD PDU, the transmitting side of an AM RLC entity shall: 

- increment PDU_WITHOUT_POLL by one; 

increment B YTE_WITHOUT_POLL by every new byte of Data field element that it maps to the Data field of 
the RLC data PDU; 

- if PDU_WITHOUT_POLL >= pollPDU; or 

- if BYTE_WITHOUT_POLL >= pollByte; 

include a poll in the RLC data PDU as described below. 

Upon assembly of a AMD PDU or AMD PDU segment, the transmitting side of an AM RLC entity shall: 

if both the transmission buffer and the retransmission buffer becomes empty (excluding transmitted RLC data 
PDU awaiting for acknowledgements) after the transmission of the RLC data PDU; or 

if no new RLC data PDU can be transmitted after the transmission of the RLC data PDU (e.g. due to window 
stalling); 

include a poll in the RLC data PDU as described below. 
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To include a poll in a RLC data PDU, the transmitting side of an AM RLC entity shall: 

- set the P field of the RLC data PDU to " 1 " ; 

- set PDU_WITHOUT_POLL to 0; 

- set BYTE_WITHOUT_POLL to 0; 

After delivering a RLC data PDU including a poll to lower layer and after incrementing of VT(S) if necessary, the 
transmitting side of an AM RLC entity shall: 

- set POLL_SN to VT(S) - 1 ; 

if t-PollRetransmit is not running: 

start t-PoURetransmit; 

else: 

restart t-PoURetransmit; 

[TS 36.322, clause 5.2.2.2] 

Upon reception of a STATUS report from the receiving RLC AM entity the transmitting side of an AM RLC entity 
shall: 

if the STATUS report comprises a positive or negative acknowledgement for the RLC data PDU with sequence 
number equal to POLL_SN: 

if the t-PoURetransmit is running: 

stop and reset t-PollRetransmit. 

[TS 36.322, clause 5.2.2.3] 

Upon expiry of t-PollRetransmit, the transmitting side of an AM RLC entity shall: 

if both the transmission buffer and the retransmission buffer are empty (excluding transmitted RLC data PDU 
awaiting for acknowledgements); or 

if no new RLC data PDU can be transmitted (e.g. due to window stalling): 
consider the AMD PDU with SN = VT(S) - 1 for retransmission; or 
consider any AMD PDU which has not been positively acknowledged for retransmission; 

include a poll in a RLC data PDU as described in section 5.2.2.1. 

[TS 36.322, clause 5.2.3] 

An AM RLC entity sends STATUS PDUs to its peer AM RLC entity in order to provide positive and/or negative 
acknowledgements of RLC PDUs (or portions of them). 

RRC configures whether or not the status prohibit function is to be used for an AM RLC entity. 

Triggers to initiate STATUS reporting include: 

Polling from its peer AM RLC entity: 

When a RLC data PDU with SN = x and the P field set to "1" is received from lower layer, the receiving side 
of an AM RLC entity shall: 

if the PDU is to be discarded as specified in subclause 5.1.3.2.2; or 

- if X < VR(MS) or X >= VR(MR): 

- trigger a STATUS report; 
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else: 

- delay triggering the STATUS report until x < VR(MS) or x >= VR(MR). 

NOTE: This ensures that the RLC Status report is transmitted after HARQ reordering. 

Detection of reception failure of an RLC data PDU: 

The receiving side of an AM RLC entity shall trigger a STATUS report when t-Reordering expires. 

NOTE: The expiry of T_reordering triggers both VR(MS) to be updated and a STATUS report to be triggered, 
but the STATUS report shall be triggered after VR(MS) is updated. 

When STATUS reporting has been triggered, the receiving side of an AM RLC entity shall: 

if t-StatusProhibit is not running: 

at the first transmission opportunity indicated by lower layer, construct a STATUS PDU and deliver it to 
lower layer; 

else: 

at the first transmission opportunity indicated by lower layer after t-StatusProhibit expires, construct a single 
STATUS PDU even if status reporting was triggered several times while T_status_prohibit was running and 
deliver it to lower layer; 

When a STATUS PDU has been delivered to lower layer, the receiving side of an AM RLC entity shall: 

start t-StatusProhibit. 

When constructing a STATUS PDU, the AM RLC entity shall: 

- for the AMD PDUs with SN such that VR(R) <= SN < VR(MS) that has not been completely received yet, in 
increasing SN order of PDUs and increasing byte segment order within PDUs, starting with SN = VR(R) up to 
the point where the resulting STATUS PDU still fits to the total size of RLC PDU(s) indicated by lower layer: 

for an AMD PDU for which no byte segments have been received yet : 

- include in the STATUS PDU a NACK_SN which is set to the SN of the AMD PDU; 

for a continuous sequence of byte segments of a partly received AMD PDU that have not been received yet 

- include in the STATUS PDU a set of NACK_SN, SOstart and SOend 

set the ACK_SN to the SN of the next not received RLC Data PDU which is not indicated as missing in the 
resulting STATUS PDU. 

7.2.3.1 3.3 Test description 

7.2.3.13.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 
UE: 

None. 

Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with the exceptions listed in table 7.2.3.13.3.1- 
L 
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Table 7.2.3.13.3.1-1 : RLC settings 



Parameter 


Value 


t-Reordering 


ms150 


t-StatusProhibit 


msSOO 


t-Poll Retransmit 


ms400 


pollPDU 


pinfinity 


pollByte 


kBinfinity 



7.2.3.13.3.2 



Test procedure sequence 

Table 7.2.3.13.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message/PDU/SDU 


1 


Void 


- 


- 


- 


- 




The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


The SS transmits 4 AMD PDUs with P=0 and 
SN=0, 1,2 and 4. 

The SS record time Ta when AMD PDU#5 
(with SN=4) is sent. 


<— 


AMD PDU#1 (SN=0, P=0) 
AMDPDU#2(SN=1, P=0) 
AMD PDU#3 (SN=2, P=0) 
AMD PDU#5 (SN=4, P=0) 






2A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns 3 UL grants of size 840 bits (UL Grant 
Allocation type 2). (Note 2) 


<— 


(UL grants, 840 bits) 






2B 


The UE transmits RLC SDU#1 . 


-> 


(RLCSDU#1) 


- 


- 


2C 


The UE transmits RLC SDU#2. 


— > 


(RLC SDU#2) 


- 


- 


2D 


The UE transmits RLC SDU#3. 


— > 


(RLC SDU#3) 


- 


- 


2E 


The SS transmits a STATUS PDU 


<- 


STATUS PDU 


- 


- 


2F 


The SS starts the UL default grant 
transmission 


- 


- 


- 


- 


3 


Check 1 : Does the UE transmit a STATUS 
PDU with NACK_SN=3 and ACK_SN=5? 
Record time Tb. 
Check 2: Is (Tb -Ta) = t-Reordering? 


-> 


STATUS PDU 






4 


1 00 ms after the Status Report received at 
Step 3, he SS sends 4 AMD PDUs with P=0 
and SN=5, 6, 8 and 9. 


<~ 


AMD PDU#6 (SN=5, P=0) 
AMD PDU#7 (SN=6, P=0) 
AMD PDU#9 (SN=8, P=0) 
AMDPDU#10(SN=9, P=0) 






4A 


Check 1 : Does the UE transmit a Status 
Report with NACK_SN=3, ACK_SN=7? 
Record time Tc 
Check 2: (Tc - Tb) = t-StatusProliibit? 


-> 


STATUS PDU 






5 


The UE transmits a STATUS PDU with 
NACK SN=3, NACK SN=7 and ACK SN=10. 


-> 


STATUS PDU 


- 


- 


6 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


7 


After 300ms the SS transmits 3 AMD PDUs 
with SN=3, 7 and 9. The SS sets the P field of 
all the AMD PDUs to except for that of the 
AMD PDU with SN=9. 


<~ 


AMD PDU#4 (SN=3, P=0) 
AMD PDU#8 (SN=7, P=0) 
AMDPDU#10(SN=9, P=1) 






7A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns 1 UL grant of size 40 bits (UL Grant 
Allocation type 3). (Note 3) 


<— 


(UL grant, 40 bits) 






8 


The UE transmits a Status Report with no 
NACK SN and ACK SN = 10. 


-> 


STATUS PDU 


- 


- 


8A 


In the subframe following the one scheduled in 
step 7A the SS assigns 7 UL grants of size 
840 bits (UL Grant Allocation type 2). (Note 2) 


<- 


(UL grants, 840 bits) 
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8B 


The UE transmits RLC SDU#4. 


— > 


(RLC SDU#4) 


- 


- 


8C 


The UE transmits RLC SDU#5. 


— > 


(RLC SDU#5) 


- 


- 


8D 


The UE transmits RLC SDU#6. 


— > 


(RLC SDU#6) 


- 


- 


BE 


The UE transmits RLC SDU#7. 


— > 


(RLC SDU#7) 


- 


- 


8F 


The UE transmits RLC SDU#8. 


— > 


(RLC SDU#8) 


- 


- 


8G 


The UE transmits RLC SDU#9. 


— > 


(RLC SDU#9) 


- 


- 


8H 


The UE transmits RLC SDU#10. 


-> 


(RLCSDU#10) 


- 


- 


81 


The SS transmits a STATUS PDU 


<- 


STATUS PDU 


- 


- 


9 


The SS transmits an AMD PDU to the UE. 


<— 


AMDPDU#11 (SN=10, P=0) 


- 


- 


9A 


The SS starts the UL default grant 
transmission 


- 


- 


- 


- 


10 


The UE transmits an AIVID PDU with the same 
data as received in the corresponding DL AIVID 
PDU. Record time Td. 


-> 


AMDPDU#11 (SN=10, P=1) 






11 


Check 1 : Does the UE set the poll bit as both 
the transmission and retransmission buffers 
become empty? Record time Te. 
Check 2: Is (Te - Td ) = t-PollRetransmif? 


-> 


AMDPDU#11 (SN=10, P=1) 


1 


P 


11 
A 


The SS transmits a STATUS PDU 


<— 


STATUS PDU 


- 


- 


12 


The SS reconfigures RLC in the UE and sets: 

- t-Reordering \o ms200, 

- t-StatusProhibitXo ms400, 

- t-PollRetransmit\o ms500. 
(Notel) 










- 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


13 


The SS transmits 4 AIVID PDUs with P=0 and 
SN=11, 12, 13and 15. 
The SS record time Tf when AMD PDU#16 
(withSN=15) is sent. 


<— 


AMDPDU#12(SN=11, P=0) 
AMDPDU#13(SN=12, P=0) 
AMDPDU#14(SN=13, P=0) 
AMDPDU#16(SN=15, P=0) 






13 
A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns 3 UL grants of size 840 bits (UL Grant 
Allocation type 2). (Note 2) 


<- 


(UL grants, 840 bits) 






13 
B 


The UE transmits RLC SDU#12. 


-> 


(RLCSDU#12) 


- 


- 


13 
C 


The UE transmits RLC SDU#13. 


-> 


(RLCSDU#13) 


- 


- 


13 

D 


The UE transmits RLC SDU#14. 


-> 


(RLCSDU#14) 


- 


- 


13 

E 


The SS transmits a STATUS PDU 


<— 


STATUS PDU 


- 


- 


13F 


The SS starts the UL default grant 
transmission 


- 


- 


- 


- 


14 


Check 1 : Does the UE transmit a STATUS 

PDU with NACK_SN=14 and ACK_SN=16? 

Record time Tq. 

Check 2: Is (Tq - Tf) = updated value of f- 

Reordering? 


-> 


STATUS PDU 


2 


P 


15 


1 00 ms after the Status Report received at 
Step 14, t he SS sends 4 AMD PDUs with P=0 
andSN=16, 17, 19 and 20. 


<- 


AMDPDU#17(SN=16, P=0) 
AMDPDU#18(SN=17, P=0) 
AMDPDU#20(SN=19, P=0) 
AMD PDU#21 (SN=20, P=0) 






15 
A 


Check 1 : Does the UE transmit a STATUS 

PDU with NACK_SN=14 and ACK_SN=18? 

Record time Th. 

Check 2: Is (Th - Tq ) = updated value of f- 

StatusProhibif? 


-> 


STATUS PDU 


3 


P 


16 


The UE transmits a STATUS PDU with 
NACK SN=14, NACK SN=18and 
ACK SN=21. 


-> 


STATUS PDU 






17 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


18 


After 450ms the SS transmits 3 AMD PDUs 
with SN=14, 18 and 20. The SS sets the P 
field of all the AMD PDUs to except for that 


<- 


AMDPDU#15(SN=14, P=0) 
AMDPDU#19(SN=18, P=0) 
AMDPDU#21 (SN=20, P=1) 
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of the AMD PDU with SN=20. 










18 
A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns 1 UL grant of size 40 bits (UL Grant 
Allocation type 3). (Note 3) 


<— 


(UL grant, 40 bits) 






19 


The UE transmits a Status Report with no 
NACK SN and ACK SN = 21. 


-> 


STATUS PDU 


- 


- 


19 
A 


In the subframe following the one scheduled in 
step 18A the SS assigns 7 UL grants of size 
840 bits (UL Grant Allocation type 2). (Note 2) 


<- 


(UL grants, 840 bits) 






19 
B 


The UE transmits RLC SDU#15. 


-> 


(RLCSDU#15) 


- 


- 


19 
C 


The UE transmits RLC SDU#16. 


-> 


(RLCSDU#16) 


- 


- 


19 
D 


The UE transmits RLC SDU#17. 


-> 


(RLCSDU#17) 


- 


- 


19 

E 


The UE transmits RLC SDU#18. 


-> 


(RLCSDU#18) 


- 


- 


19F 


The UE transmits RLC SDU#19. 


— > 


(RLCSDU#19) 


- 


- 


19 
G 


The UE transmits RLC SDU#20. 


-> 


(RLC SDU#20) 


- 


- 


19 
H 


The UE transmits RLC SDU#21 . 


-> 


(RLCSDU#21) 


- 


- 


191 


The SS transmits a STATUS PDU 


<— 


STATUS PDU 


- 


- 


20 


The SS transmits an AMD PDU to the UE. 


<— 


AMDPDU#22(SN=21, P=0) 


- 


- 


20 
A 


The SS starts the UL default grant 
transmission 


- 


- 


- 


- 


20 


The SS transmits an AMD PDU to the UE. 


<— 


AMDPDU#22(SN=21, P=0) 


- 


- 


21 


The UE transmits an AMD PDU with the same 
data as received in the corresponding DL AMD 
PDU. Record time T|. 


-> 


AMDPDU#22(SN=21, P=1) 






22 


Check 1 : Does the UE set the poll bit as both 
the transmission and retransmission buffers 
become empty? Record time Tj. 
Check 2: Is (Tj - Ti ) = updated value of f- 
Poll Retransmit? 


-> 


AMDPDU#22(SN=21, P=1) 


1 


P 


23 


The SS transmits a STATUS PDU 


<- 


STATUS PDU 


- 


- 


Note 1 : The RRC Connection Reconfiguration procedure is performed. 

Note 2: UL grant of 840 bits (ITBS=14, NPRB=3, see TS 36.21 3 Table 7.1 .7.2.1-1 ) is ctiosen to allow the UE to 

transmit one PDU at a time. 
Note 3: UL grant of 40 bits {ITBS=3, NPRB=1, see TS 36.213 Table 7.1.7.2.1-1) is chosen to allow the UE to transmit 

a Status Report with ACK SN and {16-blt short BSR -i- 8-bit MAC PDU subheader + 4-bit D/C/CPT -i- 10-bit 

ACK_SN + 1-bit El -i- Ibit padding). 
Note 4: Every DL AMD PDU contains 1 RLC SDU size of 100 bytes. 



7.2.3.13.3.3 
None. 
7.2.3.14 
7.2.3.14.1 

(1) 



Specific message contents 

AM RLC / In sequence delivery of upper layers PDUs 
Test Purpose (TP) 



with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives duplicate AMD PDUs } 

then { UE discards the duplicate AMD PDUs 



(2) 



with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives an AMD PDU with a SN gap } 

then { UE sends STATUS PDU to request retransmissions of PDUs in the SN gap} 
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(3) 

with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives PDUs within a SN gap } 
then { RLC reassembles and reorders the AMD PDUs and deliver them to the upper layer in sequence 



7.2.3.14.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322 clause 
4.2.1.3.3. 

[TS 36.322, clause 4.2.1.3.3] 

When the receiving side of an AM RLC entity receives RLC data PDUs, it shall: 

detect whether or not the RLC data PDUs have been received in duplication, and discard duplicated RLC data 
PDUs; 

reorder the RLC data PDUs if they are received out of sequence; 

detect the loss of RLC data PDUs at lower layers and request retransmissions to its peer AM RLC entity; 

reassemble RLC SDUs from the reordered RLC data PDUs and deliver the RLC SDUs to upper layer in 
sequence. 

7.2.3.14.3 Test description 

7.2.3.14.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



479 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



7.2.3.14.3.2 



Test procedure sequence 

Table 7.2.3.14.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an AIVID PDU to the UE. This 
PDU carries SDU#1. 


<— 


AMD PDU#1 (SN=0) 






2 


The SS transmits an AIVID PDU to the UE. This 
PDU carries SDU#1. 


<— 


AMD PDU#1 (SN=0) 


- 


- 


3 


Checl<: Does the UE transmit RLC SDU#1 ? 
(Note) 


-> 


(RLCSDU#1) 


1 


P 


3A 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACKSN=1) 


- 


- 


4 


The SS transmits an AIVID PDU to the UE. This 
PDU contains SDU#2, and the l" part of 
SDU#3. 


<— 


AMDPDU#2(SN=1) 






5 


Check: Does the UE transmit RLC SDU#2? 


— > 


(RLC SDU#2) 


1 


P 


5A 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACK SN=2) 


- 


- 


6 


The SS transmits an AIVID PDU to the UE. This 
PDU contains SDU#2, and the l" part of 
SDU#3. 


<— 


AMDPDU#2(SN=1) 






7 


Check: Does the UE transmit RLC SDU#2? 


-> 


(RLC SDU#2) 


1 


F 


8 


The SS transmits an AMD PDU to the UE. This 
PDU contains the 2"'^ part of SDU#3. 


<- 


AMD PDU#3 (SN=2) 


- 


- 


9 


Check: Does the UE transmit RLC SDU#3? 


— > 


(RLC SDU#3) 


1 


P 


9A 


The SS transmits a STATUS PDU. 


<— 


STATUS PDU (ACK SN=3) 


- 


- 


10 


The SS transmits an AMD PDU to the UE. This 
PDU contains the last part of SDU#6. 


<- 


AMD PDU#6 (SN=5) 


- 


- 


11 


The SS transmits an AMD PDU to the UE. This 
PDU contains the 2"'^ part of SDU#5, and the 
l^partof SDU#6. 


<— 


AMD PDU#5 (SN=4) 






11 
A 


The SS does not allocate any uplink grant. 


- 


- 


- 


- 


12 


The SS transmits an AMD PDU to the UE. This 
PDU carries SDU#4 and the l" part of SDU#5. 


<— 


AMD PDU#4 (SN=3) 


- 


- 


12 
A 


The SS waits for 60 ms then assigns an UL 
grant sufficient for the UE to loopback SDU#4, 
SDU#5 and SDU#6. 


<— 


(UL grant) 






13 


Check: Does the UE transmit an AMD PDU 
containing RLC SDU#4, RLC SDU#5 and RLC 
SDU#6 in its data field? 


-> 


AMD PDU (RLC SDU#4, RLC 
SDU#5, RLC SDU#6) 


3 


P 


14 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACK SN=4) 


- 


- 


15 


Void 


- 


- 


- 


- 


16 


The SS transmits an AMD RLC PDU to the 
UE. This PDU contains the last part of SDU#9. 


<- 


AMD PDU#9 (SN=8, P=1) 


- 


- 


17 


Check: Does the UE transmit a STATUS PDU 
NACK SN/E1/E2 fields set correctly to inform 
SS of missing PDUs #7, #8, (ACK SN =9, 
NACK SN = 6, NACK SN = 7)? 


-> 


STATUS PDU 


2 


P 


18 


The SS transmits an AMD PDU to the UE. This 
PDU contains SDU#8, and the l" part of 
SDU#9. 


<~ 


AMD PDU#8 (SN=7) 






18 
A 


The SS does not allocate any uplink grant. 


- 


- 


- 


- 


19 


The SS transmits an AMD PDU to the UE. This 
PDU carries SDU#7. 


<— 


AMD PDU#7 (SN=6) 


- 


- 


19 
A 


The SS waits for 60 ms then assigns an UL 
grant sufficient for the UE to loopback SDU#7, 
SDU#8 and SDU#9. 


<— 


(UL grants) 






20 


Check: Does the UE transmit an AMD PDU 
containing RLC SDU#7, RLC SDU#8 and RLC 
SDU#9 in its data field? 


-> 


AMD PDU (RLC SDU#7, RLC 
SDU#8, RLC SDU#9) 


3 


P 


21 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACK SN=5) 


- 


- 


22 


Void 


- 


- 


- 


- 


Note: UE may transmit RLC SDU #1 between Step 1 and Step 2. 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 480 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

7.2.3.14.3.3 Specific message contents 

None. 

7.2.3.1 5 AM RLC / Re-ordering of RLC PDU segments 

7.2.3.15.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives RLC AM PDU segments } 

then { UE reorders RLC AMD PDU segments received out of sequence } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { t -Reordering expires } 

then { Set VR{MS) to SN of the first AMD PDU with SN >= VR{X) for which not all byte segments 
have been received } 
} 

7.2.3.15.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322 clauses 
4.2.1.3.3, 5.1.3.2.1, 5.1.3.2.2, 5.1.2.3.3 and 5.1.2.3.4. 

[TS 36.322, clause 4.2.1.3.3] 

When the receiving side of an AM RLC entity receives RLC data PDUs, it shall: 



detect the loss of RLC data PDUs at lower layers and request retransmissions to its peer AM RLC entity; 

reassemble RLC SDUs from the reordered RLC data PDUs and deliver the RLC SDUs to upper layer in 
sequence. 



[TS 36.322, clause 5.1.3.2.1] 

The receiving side of an AM RLC entity shall maintain a receiving window according to state variables VR(R) and 
VR(MR) as follows: 

- a SN falls within the receiving window if VR(R) <= SN < VR(MR); 

a SN falls outside of the receiving window otherwise. 

When receiving a RLC data PDU from lower layer, the receiving side of an AM RLC entity shall: 

either discard the received RLC data PDU or place it in the reception buffer (see sub clause 5.1 .3.2.2); 

if the received RLC data PDU was placed in the reception buffer: 

update state variables, reassemble and deliver RLC SDUs to upper layer and start/stop t-Reordering as 
needed (see sub clause 5.1.3.2.3). 

When t-Reordering expires, the receiving side of an AM RLC entity shall: 

update state variables and start t-Reordering as needed (see sub clause 5.1.3.2.4). 

[TS 36.322, clause 5.1.3.2.2] 

When a RLC data PDU is received from lower layer, where the RLC data PDU contains byte segment numbers y to z of 
an AMD PDU with SN = x, the receiving side of an AM RLC entity shall: 
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if X falls outside of the receiving window; or 

if byte segment numbers y to z of the AMD PDU with SN = x have been received before: 

discard the received RLC data PDU; 
else: 

place the received RLC data PDU in the reception buffer; 

if some byte segments of the AMD PDU contained in the RLC data PDU have been received before: 
discard the duplicate byte segments. 
[TS 36.322, clause 5. 1.3.2.3] 
When a RLC data PDU with SN = x is placed in the reception buffer, the receiving side of an AM RLC entity shall: 

- if all byte segments of the AMD PDU with SN = VR(MS) are received: 

- update VR(MS) to the SN of the first AMD PDU with SN > current VR(MS) for which not all byte segments 
have been received; 

- ifx = VR(R): 

- if all byte segments of the AMD PDU with SN = VR(R) are received: 

- update VR(R) to the SN of the first AMD PDU with SN > current VR(R) for which not all byte segments 
have been received; 

- update VR(MR) to the updated VR(R) + AM_Window_Size; 

reassemble RLC SDUs from any byte segments of AMD PDUs with SN that falls outside of the receiving 
window and in-sequence byte segments of the AMD PDU with SN = VR(R), remove RLC headers when 
doing so and deliver the reassembled RLC SDUs to upper layer in sequence if not delivered before; 

- ifx>=VR(H) 

- update VR(H) to x+ 1 ; 
if t-Reordering is running: 

- if VR(X) = VR(R); or 

if VR(X) falls outside of the receiving window and VR(X) is not equal to VR(MR): 
stop and reset t-Reordering; 
if t-Reordering is not running (includes the case t-Reordering is stopped due to actions above): 

- ifVR(H)>VR(R): 

start t-Reordering; 

- set VR(X) to VR(H). 
[TS 36.322, clause 5.1.3.2.4] 

When t-Reordering expires, the receiving side of an AM RLC entity shall: 

- update VR(MS) to the SN of the first AMD PDU with SN >= VR(X) for which not all byte segments have been 
received; 

- ifVR(H)>VR(MS): 

start t-Reordering; 

- set VR(X) to VR(H). 
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7.2.3.15.3 Test description 

7.2.3.15.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with a loop back size of 98 bytes. 
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7.2.3.15.3.2 



Test procedure sequence 

Table 7.2.3.15.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage/PDU/SDU 


1 


The SS transmits one AMD PDU containing 
SDU#8 (1 00 bytes) in its data field to the UE. 
SN=7 indicates the loss of 7 PDUs. 


<— 


AMD PDU#8 (SN=7) 






2 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#1 in its data field 
to the UE. This AMD PDU segment carries 
part 1 of AMD PDU#1 , which contained 
SDU#1 (100 bytes) in its data field. SO=0 and 
LSF=0. 


<— 


AMD PDU#1 (SN=0) 
segment 1 






3 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#2 in its data field 
to the UE. This AMD PDU segment carries 
part 2 of AMD PDU#2, which contained 
SDU#2 (100 bytes) in its data field. SO=50 and 
LSF=1. 


<— 


AMDPDU#2(SN=1) 
segment 2 






4 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#3 in its data field 
to the UE. This AMD PDU segment carries 
part 1 of AMD PDU#3, which contained 
SDU#3 (100 bytes) in its data field. SO=0 and 
LSF=0. 


<- 


AMD PDU#3 (SN=2) 
segment 1 






5 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#4 in its data field 
to the UE. This AMD PDU segment carries 
part 2 of AMD PDU#4, which contained 
SDU#4 (100 bytes) in its data field. SO=50 and 
LSF=1. 


<~ 


AMD PDU#4 (SN=3) 
segment 2 






6 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#4 in its data field 
to the UE. This AMD PDU segment carries 
part 1 of AMD PDU#4, which contained SDU#4 
(100 bytes) in its data field. SO=0 and LSF=0. 


<- 


AMD PDU#4 (SN=3) 
segment 1 






7 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#1 in its data field 
to the UE. This AMD PDU segment carries 
part 2 of AMD PDU#1 , which contained 
SDU#1 (100 bytes) in its data field. SO=50 and 
LSF=1. 


<— 


AMD PDU#1 (SN=0) 
segment 2 






8 


Void 










9 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#2 in its data field 
to the UE. This AMD PDU segment carries 
part 1 of AMD PDU#2, which contained 
SDU#2 (100 bytes) in its data field. SO=0 and 
LSF=0. 


<— 


AMDPDU#2(SN=1) 
segment 1 






10 


Void 










11 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#3 in its data field 
to the UE. This AMD PDU segment carries 
part 2 of PDU#3, which contained SDU#3 (100 
bytes) in its data field. SO=50 and LSF=1 . 


<— 


AMD PDU#3 (SN=2) 
segment 2 






11 
A 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#7 in its data field 
to the UE. This AMD PDU segment carries 
part 1 of PDU #7, which contained SDU#7 
(100 bytes) in its data field. SO=0 and LSF=0. 


<— 


AMD PDU#7 (SN=6) 
segment 1 






11 
B 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#6 in its data field 
to the UE. This AMD PDU segment carries 
segment 2 of AMD PDU#6, which contained 
SDU#6 (100 bytes) in its data field. SO=50 and 
LSF=1. 


<— 


AMD PDU#6 (SN=5) 
segment 2 







ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



484 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



11 
c 


The SS waits for 60 ms then SS transmits an 
uplink grant allowing the UE to transmit 1 RLC 
SDU. 


<- 


(UL grant) 






11 

D 


Check: Does the UE transmit an RLC SDU 
containing SDU#1 in its data field? 


-> 


(RLCSDU#1) 


1 


P 


11 

E 


Check: Does the UE transmit an RLC SDU 
containing SDU#2 in its data field? 


-> 


(RLC SDU#2) 


1 


P 


12 


Check: Does the UE transmit an RLC SDU 
containing SDU#3 in its data field? 


-> 


(RLC SDU#3) 


1 


P 


13 


Check: Does the UE transmit an RLC SDU 
containing SDU#4 in its data field? 


-> 


(RLC SDU#4) 


1 


P 


14 


The SS transmits an RLC STATUS PDU to the 
UE. This PDU acks PDUs up to those 
including SDU#4. ACK SN=4. 


<— 


STATUS PDU 






15 


Void 










16 


Void 










17 


Wait for t-Reordering\o run out at the UE side. 


- 


- 


- 


- 


18 


Check: Does the UE transmit a Status Report 
with NACK SN=4, NACK SN=5 with 
SOStart=0 and SOEnd=49, and NACK SN=6 
with SOStart=50 and SOEnd=32767 (special 
SOEnd value), and ACK SN=8? 


-> 


STATUS PDU 


2 


P 


19 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#7 in its data field 
to the UE. This AIVID PDU segment carries 
part 2 of AMD PDU#7, which contained 
SDU#7 (100 bytes) in its data field. SO=50 and 
LSF=1. 


<— 


AMD PDU#7 (SN=6) 
segment 2 






20 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#6 in its data field 
to the UE. This AMD PDU segment carries 
part 1 of AMD PDU#6, which contained 
SDU#6 (100 bytes) in its data field. SO=0 and 
LSF=0. 


<- 


AMD PDU#6 (SN=5) 
segment 1 






21 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#5 in its data field 
to the UE. This AMD PDU segment carries 
part 1 of AMD PDU#5, which contained 
SDU#5 (100 bytes) in its data field. SO=0 and 
LSF=0. 


<— 


AMD PDU#5 (SN=4) 
segment 1 






22 


Wait for t-ReordehngXo run out at the UE side. 


- 


- 


- 


- 


23 


Check: Does the UE transmit a Status Report 
with NACK SN=4 with SOStart=50 and 
SOEnd=32767 (special SOEnd value), and 
ACK SN=8? 


-> 


STATUS PDU 


2 


P 


24 


The SS transmits one AMD PDU segment 
containing 50 bytes of SDU#5 in its data field 
to the UE. This AMD PDU segment carries 
part 2 of AMD PDU#5, which contained 
SDU#5 (100 bytes) in its data field. SO=50 and 
LSF=1. 


<- 


AMD PDU#5 (SN=4) 
segment 2 






24 
A 


The SS waits for 60 ms then SS transmits an 
uplink grant allowing the UE to transmit 1 RLC 
SDU. 


<- 


(UL grant) 






25 


Check: Does the UE transmit an RLC SDU 
containing SDU#5 in its data field? 


-> 


(RLC SDU#5) 


1 


P 


26 


Check: Does the UE transmit an RLC SDU 
containing SDU#6 in its data field? 


-> 


(RLC SDU#6) 


1 


P 


27 


Check: Does the UE transmit an RLC SDU 
containing SDU#7 in its data field? 


-> 


(RLC SDU#7) 


1 


P 


28 


Check: Does the UE transmit an RLC SDU 
containing SDU#8 in its data field? 


-> 


(RLC SDU#8) 


1 


P 


29 


The SS transmits an RLC STATUS PDU to the 
UE. This PDU acks PDUs up to those 
including SDU#7. ACK SN=8. 


<— 


STATUS PDU 
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7.2.3.15.3.3 Specific message contents 

None. 

7.2.3.16 AM RLC / Re-transmission of RLC PDU without re-segmentation 

7.2.3.16.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a STATUS PDU including a NACK_SN for missing AMD PDUs and missing AMD PDUs can 
fit into within the total size of RLC PDU{s) indicated by lower layer at the particular transmission 
opportunity} 

then { UE successfully retransmits missing AMD PDUs without re-segmentation} 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { NACK received for missing AMD PDUs and RETX_COUNT < maxRetxThreshold } 
then { UE retransmits AMD PDUs } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { an AMD PDU or a portion of an AMD PDU is considered for retransmission and if RETX_COUNT = 
maxRetxThreshold } 

then { UE indicates to upper layers that max retransmission has been reached } 
} 

7.2.3.16.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322 clause 5.2.1. 

[TS 36.322 clause 5.2.1] 

The transmitting side of an AM RLC entity can receive a negative acknowledgement (notification of reception failure 
by its peer AM RLC entity) for an AMD PDU or a portion of an AMD PDU by the following: 

- STATUS PDU from its peer AM RLC entity. 

When receiving a negative acknowledgement for an AMD PDU or a portion of an AMD PDU by a STATUS PDU from 
its peer AM RLC entity, the transmitting side of the AM RLC entity shall: 

- if the SN of the corresponding AMD PDU falls within the range VT(A) <= SN < VT(S): 

consider the AMD PDU or the portion of the AMD PDU for which a negative acknowledgement was 
received for retransmission. 

When an AMD PDU or a portion of an AMD PDU is considered for retransmission, the transmitting side of the AM 
RLC entity shall: 

if the AMD PDU is considered for retransmission for the first time: 

- set the RETX_COUNT associated with the AMD PDU to zero; 

else, if it (the AMD PDU or the portion of the AMD PDU that is considered for retransmission) or a portion of it 
is not pending for retransmission already: 

- increment the RETX_COUNT; 

- if RETX_COUNT = maxRetxThreshold: 

indicate to upper layers that max retransmission has been reached. 
When retransmitting an AMD PDU, the transmitting side of an AM RLC entity shall: 
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if the AMD PDU can entirely fit within the total size of RLC PDU(s) indicated by lower layer at the particular 
transmission opportunity: 

deliver the AMD PDU as it is except for the P field (the P field should be set according to sub clause 5.2.2) to 
lower layer; 

otherwise: 

- segment the AMD PDU form a new AMD PDU segment which will fit within the total size of RLC PDU(s) 
indicated by lower layer at the particular transmission opportunity and deliver the new AMD PDU segment 
to lower layer. 

When retransmitting a portion of an AMD PDU, the transmitting side of an AM RLC entity shall: 

segment the portion of the AMD PDU as necessary, form a new AMD PDU segment which will fit within the 
total size of RLC PDU(s) indicated by lower layer at the particular transmission opportunity and deliver the new 
AMD PDU segment to lower layer. 

When forming a new AMD PDU segment, the transmitting side of an AM RLC entity shall: 

- only map the Data field of the original AMD PDU to the Data field of the new AMD PDU segment; 
set the header of the new AMD PDU segment in accordance with the description in sub clause 6.; 
set the P field according to sub clause 5.2.2. 

7.2.3.16.3 Test description 

7.2.3.16.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 
UE: 

None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with a loopback size of 98 bytes. 
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7.2.3.16.3.2 



Test procedure sequence 

Table 7.2.3.16.3.2-1: Main behaviour 



St 


Procedure 


U-S 


Message Sequence 
Message 


TP 


Verdict 


1 


The SS transmits one AIVID PDU containing 
SDU#1 (1 00 bytes) in its data field. 


<— 


AMD PDU#1 


- 


- 


2 


The UE transmits one AIVID PDU containing 
SDU#1 in its data field. 


— > 


AMD PDU#1 (SN=0) 


- 


- 


3 


The SS transmits one AMD PDU containing 
SDU#2 (1 00 bytes) in its data field. 


<— 


AMD PDU#2 


- 


- 


4 


The UE transmits one AIVID PDU containing 
SDU#2 in its data field. 


— > 


AMDPDU#2(SN=1) 


- 


- 


5 


The SS transmits an RLC STATUS PDU. 
ACK SN=2, NACK SN=0. 


<— 


STATUS PDU 


- 


- 


6 


Check: Does the UE transmit the AIVID PDU 
not yet acknowledged? 


— > 


AMD PDU#1 (SN=0) 


1 


P 


7 


The SS transmits an RLC STATUS PDU. 
ACK SN=2. 


<— 


STATUS PDU 


- 


- 


8 


The SS transmits one AMD PDU containing 
SDU#3 (1 00 bytes) in its data field. 


<— 


AMD PDU#3 


- 


- 


9 


The UE transmits an AMD PDU containing 
SDU#3 in its data field. 


— > 


AMD PDU#3 (SN=2) 


- 


- 


- 


EXCEPTION: Step 1 to 1 1 shall be repeated 
maxRetxThreshold times 


- 


- 


- 


- 


10 


The SS transmits an RLC STATUS PDU. 
ACK SN =3 and NACK SN =2. 


<— 


STATUS PDU 


- 


- 


11 


Check: Does the UE retransmit the AMD PDU 
not yet acknowledged? 


— > 


AMD PDU#3 (SN=2) 


2 


P 


12 


The SS transmits an RLC STATUS PDU. 
ACK SN =3 and NACK SN =2. 


<— 


STATUS PDU 


- 


- 


13 


Check: Does the UE transmit an RRC 
Connection Re-establishment Request? 
Note 1 






3 


P 


Note 1 : The RRC Connection Re-establishment procedure is initiated. See 36.331 cl. 5.3.7.2 and 5.3.1 1 .3. 



7.2.3.16.3.3 
None. 

7.2.3.17 
7.2.3.17.1 
(1) 



Specific message contents 

AM RLC / Re-segmentation RLC PDU / SO, Fl, LSF 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { AMD PDU to be retransmitted does not fit in new allocated TBS } 
then { UE segments AMD PDU into AMD PDU segments } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { AMD PDU segment to be retransmitted does not fit in new allocated TBS } 
then { UE resegments AMD PDU segment to fit TBS } 



7.2.3.17.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322 clauses 
4.2.1.3.2, 5.2.1, 6.2.1.4 and 6.2.1.5. 

[TS 36.322, clause 4.2.1.3.2] 
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When the transmitting side of an AM RLC entity forms AMD PDUs from RLC SDUs, it shall: 

- segment and/or concatenate the RLC SDUs so that the AMD PDUs fit within the total size of RLC PDU(s) 
indicated by lower layer at the particular transmission opportunity notified by lower layer. 

The transmitting side of an AM RLC entity supports retransmission of RLC data PDUs (ARQ): 

if the RLC data PDU to be retransmitted does not fit within the total size of RLC PDU(s) indicated by lower 
layer at the particular transmission opportunity notified by lower layer, the AM RLC entity can re-segment the 
RLC data PDU into AMD PDU segments; 

the number of re-segmentation is not limited. 

When the transmitting side of an AM RLC entity forms AMD PDUs from RLC SDUs received from upper layer or 
AMD PDU segments from RLC data PDUs to be retransmitted, it shall: 

include relevant RLC headers in the RLC data PDU. 

[TS 36.322 clause 5.2.1] 



When retransmitting an AMD PDU, the transmitting side of an AM RLC entity shall: 

if the AMD PDU can entirely fit within the total size of RLC PDU(s) indicated by lower layer at the particular 
transmission opportunity: 

deliver the AMD PDU as it is except for the P field (the P field should be set according to sub clause 5.2.2) to 
lower layer; 

otherwise: 

- segment the AMD PDU form a new AMD PDU segment which will fit within the total size of RLC PDU(s) 
indicated by lower layer at the particular transmission opportunity and deliver the new AMD PDU segment 
to lower layer. 

When retransmitting a portion of an AMD PDU, the transmitting side of an AM RLC entity shall: 

segment the portion of the AMD PDU as necessary form a new AMD PDU segment which will fit within the 
total size of RLC PDU(s) indicated by lower layer at the particular transmission opportunity and deliver the new 
AMD PDU segment to lower layer. 

When forming a new AMD PDU segment, the transmitting side of an AM RLC entity shall: 

- only map the Data field of the original AMD PDU to the Data field of the new AMD PDU segment; 

set the header of the new AMD PDU segment in accordance with the description in sub clause 6.; 

set the P field according to sub clause 5.2.2. 

[TS 36.322, clause 6.2. L4] 

AMD PDU consists of a Data field and an AMD PDU header. 

AMD PDU header consists of a fixed part (fields that are present for every AMD PDU) and an extension part (fields 
that are present for an AMD PDU when necessary). The fixed part of the AMD PDU header itself is byte aligned and 
consists of a D/C, a RF, a P, a FI, an E and a SN. The extension part of the AMD PDU header itself is byte aligned and 
consists of E(s) and LI(s). 

An AMD PDU header consists of an extension part only when more than one Data field elements are present in the 
AMD PDU, in which case an E and a LI are present for every Data field element except the last. Furthermore, when an 
AMD PDU header consists of an odd number of LI(s), four padding bits follow after the last LI 



[TS 36.322, clause 6.2.1.5] 
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AMD PDU segment consists of a Data field and an AMD PDU segment header. 

AMD PDU segment header consists of a fixed part (fields that are present for every AMD PDU segment) and an 
extension part (fields that are present for an AMD PDU segment when necessary). The fixed part of the AMD PDU 
segment header itself is byte aligned and consists of a D/C, a RF, a P, a FI, an E, a SN, a LSF and a SO. The extension 
part of the AMD PDU segment header itself is byte aligned and consists of E(s) and LI(s). 

An AMD PDU segment header consists of an extension part only when more than one Data field elements are present 
in the AMD PDU segment, in which case an E and a LI are present for every Data field element except the last. 
Furthermore, when an AMD PDU segment header consists of an odd number of LI(s), four padding bits follow after the 
last LI. 



7.2.3.17.3 Test description 

7.2.3.17.3.1 Pre-test conditions 

System Simulator: 

- Cell L 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with a loop back size of 98 bytes. 
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7.2.3.17.3.2 



Test procedure sequence 

Table 7.2.3.17.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage/PDU/SDU 


1 


The SS transmits one AMD PDU containing 
SDU#1 (100 bytes) in its data field. 


<— 


AMD PDU#1 


- 


- 


2 


The UE transmits an AMD PDU with the same 
data contents as received in the corresponding 
partof DLPDU#1? 


-> 


AMD PDU#1 (SN=0) 






3 


The SS transmits one AMD PDU containing 
SDU#2 (100 bytes) in its data field. 


<~ 


AMD PDU#2 


- 


- 


4 


The UE transmits an AMD PDU with the same 
data contents as received in the corresponding 
part of DL PDU#2? 


-> 


AMDPDU#2(SN=1) 






5 


SS responds to any scheduling requests from 
the UE by transmitting UL grants of size 472 
bits (Note 1). 


<— 


(UL grants, 472 bits) 






6 


The SS transmits a STATUS PDU. This PDU 
nacks the AMD PDU with SN=0. NACK SN=0 
andACK SN=2. 


<- 


STATUS PDU 






7 


Check: Does the UE transmit an AMD PDU 
segment with SO=0, LSF=0 and the same data 
contents at the received positions as in the 
original AMD PDU? 


~> 


AMD PDU#1 segment 1 (SN=0) 


1 


P 


8 


Check: Does the UE transmit an AMD PDU 
segment with SO=<x>, LSF=1 and the same 
data contents at the received positions as in 
the original AMD PDU? (Note 3) 


-> 


AMD PDU#1 segment 2 (SN=0) 


1 


P 


9 


SS responds to any scheduling requests from 
the UE by transmitting UL grants of size 328 
bits (Note 2). 


<— 


(UL grants, 328 bits) 






10 


The SS transmits a STATUS PDU. This PDU 
nacks the AMD PDU with SN=0. NACK SN=0, 
SOStart=0,SOEnd=<x-1> andACK SN =2. 
(Note 3) 


<- 


STATUS PDU 






11 


Check: Does the UE transmit an AMD PDU 
segment with SO=0, LSF=0 and the same data 
contents at the received positions as in the 
original AMD PDU? 


~> 


AMD PDU#1 segment 1, Impart 
(SN=0) 


2 


P 


12 


Check: Does the UE transmit an AMD PDU 
segment with SO=<y>, LSF=0 and the same 
data contents at the received positions as in 
the original AMD PDU? (Note 3) 


-> 


AMD PDU#1 segment 1 , 2™ part 
(SN=0) 


2 


P 


13 


The SS transmits a STATUS PDU. This PDU 
acks the AMD PDUs with SN=0 and SN=1 . 
ACK SN=2. 


<- 


STATUS PDU 






Note 1 UL grant of 472 bits {Itbs=7, Nprb=4, see TS 36.213 Table 7.1.7.2.1-1) is chosen such that UE will segment 
into 2 AMD PDUs. MAC PDU of 472 bits=59 bytes fits an AMD PDU payload of >= 50 bytes + 2 bytes AMD 
PDU header + 2 bytes of segment header + ? bytes spare for MAC header and possible RLC STATUS 
PDU and BSR report. 

Note 2 UL grant of 328 bits (/res=5, Nprb=4, see TS 36.213 Table 7.1 .7.2.1-1) is chosen such that UE will segment 
into 2 AMD PDUs. MAC PDU of 328 bits=41 bytes fits an AMD PDU payload of >= 25 bytes + 2 bytes AMD 
PDU header -i- 2 bytes of segment header -i- ? bytes spare for MAC header and possible RLC STATUS 
PDU and BSR report. 

Note 3 The values x and y depend upon the need of the UE to add RLC STATUS PDU and BSR report. The TBS 
has been chosen to ensure that the PDUs to be resegmented can be carried in 2 segments. 



7.2.3.17.3.3 
None. 



Specific message contents 
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7.2.3.1 8 AM RLC / Reassembly / AMD PDU reassembly from AMD PDU segments, 
Segmentation Offset and Last Segment Flag fields 

7.2.3.18.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives AM PDU segments } 

then { UE delivers reassembled RLC SDU to upper layer} 
} 

(2) 

with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives RLC AM PDU segments without segment header extension part } 
then { UE correctly reassembles RLC AMD PDU segments into RLC AMD PDUs } 
} 

(3) 

with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives RLC AM PDU segments with segment header extension part } 
then { UE correctly reassembles RLC AMD PDU segments into RLC AMD PDUs } 
} 

(4) 

with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives duplicate RLC AM PDU segments } 
then { UE discards duplicate RLC AMD PDU segments } 
} 

(5) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives RLC AM PDU segments out of sequence } 
then { UE delivers reassembled RLC SDU to upper layer } 
} 

(6) 

with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives RLC AMD PDU segments with segments lost } 

then { UE transmits STATUS PDU to request retransmission of missing segments } 
} 

(7) 

with { UE in E-UTRAN RRC_CONNECTED state } 
ensure that { 

when { UE receives overlapping RLC AMD PDU segments } 

then { UE discards duplicate RLC AMD PDU byte segments } 
} 

7.2.3.18.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.322 clauses 
4.2.1.3.3, 5.1.3.2.2, 6.2.1.4 and 6.2.1.5. 

[TS 36.322, clause 4.2.1.3.3] 

When the receiving side of an AM RLC entity receives RLC data PDUs, it shall: 

detect whether or not the RLC data PDUs have been received in duplication, and discard duplicated RLC data 
PDUs; 

- reorder the RLC data PDUs if they are received out of sequence; 
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detect the loss of RLC data PDUs at lower layers and request retransmissions to its peer AM RLC entity; 

reassemble RLC SDUs from the reordered RLC data PDUs and deliver the RLC SDUs to upper layer in 
sequence. 



[TS 36.322, clause 5.1.3.2.2] 

When a RLC data PDU is received from lower layer, where the RLC data PDU contains byte segment numbers y to z of 
an AMD PDU with SN = x, the receiving side of an AM RLC entity shall: 

if X falls outside of the receiving window; or 

if byte segment numbers y to z of the AMD PDU with SN = x have been received before: 

discard the received RLC data PDU; 

else: 

place the received RLC data PDU in the reception buffer; 

if some byte segments of the AMD PDU contained in the RLC data PDU have been received before: 

discard the duplicate byte segments. 

[TS 36.322, clause 6.2. L4] 

AMD PDU consists of a Data field and an AMD PDU header. 

AMD PDU header consists of a fixed part (fields that are present for every AMD PDU) and an extension part (fields 
that are present for an AMD PDU when necessary). The fixed part of the AMD PDU header itself is byte aligned and 
consists of a D/C, a RF, a P, a FI, an E and a SN. The extension part of the AMD PDU header itself is byte aligned and 
consists of E(s) and LI(s). 

An AMD PDU header consists of an extension part only when more than one Data field elements are present in the 
AMD PDU, in which case an E and a LI are present for every Data field element except the last. Furthermore, when an 
AMD PDU header consists of an odd number of LI(s), four padding bits follow after the last LI. 

[TS 36.322, clause 6.2. L5] 

AMD PDU segment consists of a Data field and an AMD PDU segment header. 

AMD PDU segment header consists of a fixed part (fields that are present for every AMD PDU segment) and an 
extension part (fields that are present for an AMD PDU segment when necessary). The fixed part of the AMD PDU 
segment header itself is byte aligned and consists of a D/C, a RF, a P, a FI, an E, a SN, a LSF and a SO. The extension 
part of the AMD PDU segment header itself is byte aligned and consists of E(s) and LI(s). 

An AMD PDU segment header consists of an extension part only when more than one Data field elements are present 
in the AMD PDU segment, in which case an E and a LI are present for every Data field element except the last. 
Furthermore, when an AMD PDU segment header consists of an odd number of LI(s), four padding bits follow after the 
last LI. 



7.2.3.18.3 Test description 

7.2.3.18.3.1 Pre-test conditions 

System Simulator: 

- Cell L 
UE: 
None. 
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Preamble: 

The UE is in state Loopback Activated (state 4) according to [18] with a loop back size of 98 bytes. 
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7.2.3.18.3.2 



Test procedure sequence 

Table 7.2.3.18.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage/PDU/SDU 


1 


The SS transmits an AMD PDU containing the 
first half (50 bytes) of SDU#1 in its data field. 
This PDU is in error (SN falls outside of the 
receiving window) and is to be discarded by 
the UE. 


<— 


AMD PDU#1 (SN=WindoSize-i-3) 






2 


The SS transmits an AMD PDU containing 
SDU#2 (1 00 bytes) in its data field with the P- 
bit set. 


<— 


AMDPDU#2(SN=1, P=1) 






3 


The UE transmits a STATUS PDU with 
NACK SN field indicating missing PDU#1. 
ACK SN=2, NACK SN=0. 


-> 


STATUS PDU 






3A 


The SS stops the UL grant transmission. 


- 


- 


- 


- 


4 


After 100 ms the SS transmits an AMD PDU 
segment of AMD PDU#1 (AMD PDU#1 carries 
SDU#1) containing the first 50 bytes of SDU#1 
in its data field. SO=0 and LSF=0. No header 
extension part is provided. 


<— 


AMD PDU#1 (SN=0) 
segment 1 






5 


The SS transmits an AMD PDU segment of 
AMD PDU#1 (AMD PDU#1 carries SDU#1) 
containing the last 50 bytes of SDU#1 in its 
data field with the P-bit set. SO=50 and 
LSF=1 . No header extension part is provided. 


<— 


AMD PDU #1 (SN=0, P=1) 
segment 2 






5A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns one default UL grant. 


<- 


(UL grant) 






6 


Check: Does the UE transmit a STATUS PDU 
with ACK_SN=2, thus acknowledging the 
reception of PDUs with SN=0 and SN=1 , and 
no NACK SN provided? 


-> 


STATUS PDU 


2 


P 


7 


Check: Does the UE transmit RLC SDU#1 and 
RLC SDU#2? 


-> 


AMD PDU (RLC SDU#1, RLC 
SDU#2) 


1 


P 


8 


Void 


- 


- 


- 


- 


8A 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACK SN=2) 


- 


- 


9 


After 100 ms the SS transmits an AMD PDU 
segment of AMD PDU#3 (AMD PDU#3 carries 
SDU#3 and SDU#4) containing the last 50 
bytes of SDU#4 in its data field, with the P-bit 
set. Fl=10, SO=150and LSF=1. No header 
extension part is provided. 


<— 


AMD PDU#3 (SN=2, P=1) 
segment 2 






9A 


Upon reception of a scheduling request the SS 
assigns one default grant. 


<- 


(UL grant) 


- 


- 


10 


The UE transmits a STATUS PDU NACK SN 
field for receipt of PDU#3. ACK SN=3, 
NACK SN=2, SOStart=0/SOEnd=149. 


-> 


STATUS PDU 






11 


After 100 ms the SS transmits an AMD PDU 
segment of AMD PDU#3 (AMD PDU#3 carries 
SDU#3 and SDU#4) containing SDU#3 (100 
bytes) and the first 50 bytes of SDU#4 in its 
data field, with the P-bit set. Fl=01 , SO=0 and 
LSF=0. Header extension part present: E in 
fixed part header=1 , E in extension part 
header=0, Ll=100. 


<~ 


AMD PDU#3 (SN=2, P=1) 
segment 1 






11 
A 


After 100 ms the SS waits for 60 ms to ensure 
UE RLC has all the required SDUs available 
and then assigns one default UL grant. 


<— 


(UL grant) 






12 


Check: Does the UE transmit a STATUS PDU 
with ACK SN=3? 


-> 


STATUS PDU 


3 


P 


13 


Void 


- 


- 


- 


- 


14 


Check: Does the UE transmit RLC SDU#3 and 
RLC SDU#4? 


-> 


AMD PDU (RLC SDU#3, RLC 
SDU#4) 


1,5 


P 


14 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACK SN=4) 


- 


- 
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A 












15 


After 100 ms the SS transmits an AMD PDU 
segment of AMD PDU#4 (AMD PDU#4 carries 
SDU#5) containing the first 50 bytes of SDU#5 
in its data field. SO=0 and LSF=0. No header 
extension part is provided. 


<— 


AMD PDU#4 (SN=3) 
segment 1 






16 


The SS transmits an AMD PDU segment of 
AMD PDU#4 (AMD PDU#4 carries SDU#5) 
containing the first 50 bytes of SDU#5 in its 
data field. SO=0 and LSF=0. No header 
extension part is provided. 


<— 


AMD PDU#4 (SN=3) 
segment 1 






17 


The SS transmits an AMD PDU segment of 
AMD PDU#4 (AMD PDU#4 carries SDU#5) 
containing the last 50 bytes of SDU#5 in its 
data field, with the P-bit set. SO=50 and 
LSF=1 . No header extension part is provided. 


<~ 


AMD PDU#4 (SN=3, P=1) 
segment 2 






17 
A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns one default UL grant. 


<- 


(UL grant) 






18 


Check: Does the UE transmit a STATUS PDU 
with ACK_SN=4, thus acknowledging the 
reception of PDUs with SN=0 to SN=3, and no 
NACK SN provided? 


-> 


STATUS PDU 


4 


P 


19 


Check: Does the UE transmit RLC SDU#5? 


— > 


(RLC SDU#5) 


1 


P 


19 
A 


The SS transmits a STATUS PDU. 


<~ 


STATUS PDU (ACK SN=5) 


- 


- 


20 


After 100 ms the SS transmits an AMD PDU 
segment of AMD PDU#6 (AMD PDU#6 carries 
SDU#7) containing the last 50 bytes of SDU#7 
in its data field, with the P-bit set. This AMD 
PDU segment is sent with SN=5. SO=50 and 
LSF=1 . No header extension part is provided. 


<~ 


AMD PDU#6 (SN=5, P=1) 
segment 2 






20 
A 


Upon reception of a scheduling request the SS 
assigns one default grant. 


<- 


(UL grant) 


- 


- 


21 


Check: Does the UE transmit a STATUS PDU 
with ACK_SN=6, thus acknowledging the 
reception of PDUs with SN=0 to SN=5, and 
NACK SN=4, E1/E2 field for receipt of PDU#5 
and NACK SN=5,SOStart=0/SOEnd=49 for 
segment 1 of PDU#6? 


~> 


STATUS PDU 


6 


P 


22 


After 100 ms the SS transmits an AMD PDU 
segment of AMD PDU#6 (AMD PDU#6 carries 
SDU#7) containing the first 50 bytes of SDU#7 
in its data field. SO=0 and LSF=0. No header 
extension part is provided. 


<- 


AMD PDU#6 (SN=5) 
segment 1 






23 


The SS transmits one AMD PDU containing 
SDU#6 (100 bytes) in its data field, with the P- 
bitset.. 


<— 


AMD PDU#5 (SN=4, P=1) 






23 
A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns one default UL grant. 


<— 


(UL grant) 






24 


The UE transmits a STATUS PDU with 
ACK SN=6, thus acknowledging the reception 
of PDUs with SN=0 to SN=5, and no 
NACK SN provided . 


-> 


STATUS PDU 






25 


The UE transmits RLC SDU#6. 


— > 


(RLC SDU#6) 


- 


- 


26 


Check: Does the UE transmit RLC SDU#6 and 
RLC SDU#7? 


-> 


AMD PDU (RLC SDU#6, RLC 
SDU#7) 


2,5 


P 


26 
A 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACK SN=7) 


- 


- 


27 


After 100 ms the SS transmits an AMD PDU 
segment of AMD PDU#7 (AMD PDU#7 carries 
SDU#8, SDU#9 and SDU#10) containing the 
last 20 bytes of SDU#9 and the complete 
SDU#10 (100 bytes) in its data field, with the 
P-bit set. Fl=1 0, S0=1 80 and LSF=1 . Header 
extension part present: E in fixed part 
header=1 , E in extension part header=0. 


<— 


AMD PDU#7 (SN=6, P=1) 
segment 3 
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Ll=20. 










27 
A 


Upon reception of a scheduling request the SS 
assigns one default grant. 


<— 


(UL grant) 


- 


- 


28 


The UE transmits a STATUS PDU NACK SN 
field for receipt of PDU#7. ACK SN=7, 
NACK SN=6, SOStart=0/SOEnd=179. 


~> 


STATUS PDU 






29 


After 100 ms the SS transmits an AMD PDU 
segment of AMD PDU#7 (AMD PDU#7 carries 
SDU#8, SDU#9 and SDU#10) containing the 
last 20 bytes of SDU#8 and the complete 
SDU#9 in its data field, with the P-bit set. 
Fl=10, SO=80 and LSF=0. Header extension 
part present: E in fixed part header=1, E in 
extension part header=0, Ll=20. 


<— 


AMD PDU#7 (SN=6, P=1) 
segment 2 






29 
A 


Upon reception of a scheduling request the SS 
assigns one default grant. 


<- 


(UL grant) 


- 


- 


30 


The UE transmits a STATUS PDU NACK SN 
field for receipt of PDU#7. ACK SN=7, 
NACK SN=6, SOStart=0/SOEnd=79. 


-> 


STATUS PDU 


7 


P 


31 


60 ms after step 29 the SS transmits an AMD 
PDU segment of AMD PDU#7 (AMD PDU#7 
carries SDU#8, SDU#9 and SDU#10) 
containing the first 80 bytes of SDU#8 in its 
data field, with the P-bit set. SO=0 and LSF=0. 
No header extension part is provided. 
Note 4 


<- 


AMD PDU#7 (SN=6, P=1) 
segment 1 






31 
A 


The SS waits for 60 ms to ensure UE RLC has 
all the required SDUs available and then 
assigns one default UL grant. 


<- 


(UL grant) 






32 


Check: Does the UE transmit a STATUS PDU 
with ACK_SN=7, thus acknowledging the 
reception of PDUs with SN=0 to SN=6, and no 
NACK SN provided ? 


~> 


STATUS PDU 


7 


P 


33 


Void 


- 


- 


- 


- 


34 


Void 


- 


- 


- 


- 


35 


Check: Does the UE transmit RLC SDU#8, 
RLC SDU#9 and RLC SDU#10? 


-> 


AMD PDU (RLC SDU#8, RLC 
SDU#9, RLCSDU#10) 


7 


P 


36 


The SS transmits a STATUS PDU. 


<- 


STATUS PDU (ACK SN=10) 


- 


- 


Note 1 : From steps 4 onwards, the transmission of AIVID PDUs is sclieduled. The activation time of 1 00 ms for the 
first of possibly several AMD PDUs is greater than t-StatusProhibit, and therefore there is no need to wait 
for the expiry of this timer. Subsequent AMD PDU transmissions are using subsequent TTIs. 

Note 2: In steps 9A, 20A, 27A, 29A the SS will send the STATUS PDU upon scheduling request. 

Note 3: In steps 6-8, 12-14, 18-19, 24-26, 32-35 the STATUS PDU and the AMD PDU consisting of one or more 
RLC SDUs are received as a PDU list in one 1 1 1. 

Note 4: Step 31 shall be executed within 60ms after step 29 to ensure that the UE receives the AMD PDU before 
the expiry of t-Reordering at the UE. 



7.2.3.18.3.3 
None. 
7.2.3.19 
7.2.3.20 

7.2.3.20.1 
(1) 



Specific message contents 

Void 

AM RLC / Duplicate detection of RLC PDUs 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is in AM mode and receives duplicated RLC data PDUs having the same sequence number} 
then { UE discards the duplicated RLC data PDUs } 
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7.2.3.20.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.322, clause 4.2.1.3.3. 

[TS 36.322, clause 4.2.1.3.3] 

When the receiving side of an AM RLC entity receives RLC data PDUs, it shall: 

- detect whether or not the RLC data PDUs have been received in duplication, and discard duplicated RLC data 
PDUs; 



Test description 
Pre-test conditions 



7.2.3.20.3 
7.2.3.20.3.1 
System Simulator: 

- Cell 1. 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
7.2.3.20.3.2 Test procedure sequence 

Table 7.2.3.20.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


SS creates 3 RLC SDUs of size 40 bytes 
segmented into two AMD PDUs each. AMD 
PDU#1 and AMD PDU#2 belong to RLC 
SDU#1 , AMD PDU#3 and #4 belong to RLC 
SDU#2 and AMD PDU#5 and #6 belong to 
RLC SDU#3. 

SS transmits AMD PDU#1 with SN=0, AMD 
PDU#2 with SN=1 and AMD PDU#3 twice with 
SN=2. 


<— 


RLC AMD PDU#1 (SN=0) 
RLCAMDPDU#2(SN=1) 
RLC AMD PDU#3 (SN=2) 
RLC AMD PDU#3 (SN=2) 






2 


Check: Does the UE transmit RLC SDU#1 ? 
(Note 1) 


-> 


(RLCSDU#1) 


1 


P 


3 


SS transmits AMD PDU#4 with SN=3. 


<- 


RLC AMD PDU#4 (SN=3) 


- 


- 


4 


Check: Does the UE transmit RLC SDU#2? 


— > 


(RLC SDU#2) 


1 


P 


5 


SS transmits AMD PDU#6 twice with SN=5. 


<— 


RLC AMD PDU#6 (SN=5) 
RLC AMD PDU#6 (SN=5) 






6 


SS transmits AMD PDU#5 twice with SN=4. 


<— 


RLC AMD PDU#5 (SN=4) 
RLC AMD PDU#5 (SN=4) 


- 


- 


7 


Check: Does the UE transmit RLC SDU#3 

once? 

(Note 2) 


-> 


(RLC SDU#3) 


1 


P 


Note 1 The duplicated AMD PDU#3 have been discarded by the conformant UE in step 1 . 
Note 2 The duplicated AMD PDU#5 and AMD PDU#6 have been discarded by the conformant UE in steps 5 and 
6. 



7.2.3.20.3.3 
None. 



Specific message content 
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7.2.3.21 AM RLC / RLC re-establishment at RRC connection reconfiguration including 
mobilityControllnfo IE 

7.2.3.21 .1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is requested to perform a RRC Connection reconfiguration including mobilityControllnfo 
IE } 

then { UE discards the remaining AMD PDUs; and discards all RLC SDUs in the transmitting side; 
and reset all state variables to their initial values. } 



7.2.3.21.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.322, clause 5.4 and TS 
36.331 clause 5.3.5.4. 

[TS 36.322, clause 5.4] 

RLC re-establishment is performed upon request by RRC, and the function is applicable for AM, UM and TM RLC 
entities. 

When RRC indicates that an RLC entity should be re-established, the RLC entity shall: 



- if it is an AM RLC entity: 

- when possible, reassemble RLC SDUs from any byte segments of AMD PDUs with SN < VR(MR) in the 
receiving side, remove RLC headers when doing so and deliver all reassembled RLC SDUs to upper layer in 
ascending order of the RLC SN, if not delivered before; 

discard the remaining AMD PDUs and byte segments of AMD PDUs in the receiving side; 

- discard all RLC SDUs and AMD PDUs in the transmitting side; 

- discard all RLC control PDUs. 
stop and reset all timers; 

reset all state variables to their initial values. 

[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControllnfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> re-establish RLC for all RBs that are established; 

7.2.3.21 .3 Test description 

7.2.3.21.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 
UE: 

None. 
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Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
7.2.3.21 .3.2 Test procedure sequence 

Table 7.2.3.21.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


SS creates 3 RLC SDUs of size 40 bytes 
segmented into two AMD PDUs each. AMD 
PDU#1 and AMD PDU#2 belong to RLC 
SDU#1 , AMD PDU#3 and #4 belong to RLC 
SDU#2 and AMD PDU#5 and #6 belong to 
RLC SDU#3. SS transmits AMD PDU#1 
(SN=0), AMD PDU#2 (SN=1) and AMD 
PDU#4 (SN=3). 


<- 


AMD PDU#1 
AMD PDU#2 
AMD PDU#4 






2 


Check: Does the UE return RLC SDU#1 ? 


— > 


(RLCSDU#1) 


1 


P 


3 


SS does not acknowledge the reception of 
RLCSDU#1. 


- 


- 


- 


- 


4 


SS performs a RRC Connection 
Reconfiguration procedure including the 
mobilityControllnfo IE triggering RLC- 
reestablishment. 
(Note 1) 










4A 


The UE retransmits RLC SDU #1 . 
(Note 1A) 


-> 


(RLCSDU#1) 


- 


- 


4B 


SS transmits a STATUS PDU (ACK SN = 1). 


<- 


STATUS PDU 


- 


- 


5 


SS transmits AMD PDU#5 with SN=0 and the 
P field set to "1" 


<- 


AMD PDU#5 


- 


- 


6 


Check: Does the UE transmit a STATUS PDU 
report indicating that the AMD PDU with SN=2 
is missing? 
(Note 2) 


~> 


STATUS PDU 


1 


F 


7 


SS transmits AMD PDU#6 with 
SN=Receiving AM Window Size+2 


<— 


AMD PDU#6 


- 


- 


8 


Check: Does the UE return RLC SDU#3 within 

Is? 

(Note 3) 


-> 


(RLC SDU#3) 


1 


F 


9 


SS transmits AMD PDU#6 with SN=1 


<- 


AMD PDU#6 


- 


- 


10 


Check: Does the UE return RLC SDU#3 with 
its first AMD PDU set to SN=1 ? 


-> 


(RLC SDU#3) 


1 


P 


Note 1 : Upon a RLC re-establishment a conformant UE discards any remaining AIVID PDUs in the receiver and 
transmitter side, stops and resets all timers and resets all state variables to their initial values. 

Note 1 A: The UE will retransmit the PDCP SDU associated with RLC SDU#1 in accordance to TS 36.323 clause 
5.2.1.1. 

Note 2: AIVID PDU#4 is discarded by a conformant UE in step 4. 

Note 3: AIVID PDU#6 is discarded by a conformant UE due to being outside the receiving window size. 



7.2.3.21 .3.3 Specific message contents 

Table 7.2.3.21.3.3-1 : RRCConnectionReconfiguration (step 4, table 7.2.3.21.3.2-1) 



Derivation Path: 36.508 table 4.6.1-8: RRCConnectionReconfiguration, condition HO 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








mobilityControllnfo SEQUENCE { 








targetPhysCellld 


Set to the physical cell 
identity of cell 1 






carrierFreq 


Not present 






} 








radioResourceConfigCommon 


Not present 
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1 








} 








} 








} 









7.3 PDCP 

7.3.1 Maintenance of PDCP sequence numbers for radio bearers 

7.3.1 .1 Maintenance of PDCP sequence numbers / User plane / RLC AM 

7.3.1.1.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits a PDCP Data SDU on a DRB mapped on AM RLC } 

then { UE increments SN with 1 for each transmitted PDU for SN=0 to Maximum_PDCP_SN } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits a PDCP Data SDU on a DRB mapped on AM RLC and, after incrementation, 
Next_PDCP_TX_SN is larger than the Maximum_PDCP_SN } 

then { UE sets SN to in the next transmitted PDCP SDU} 

} 

7.3.1 .1 .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.323 clause 5.1.1, 

5.1.2.2 and 6.2.3. 

[TS 36.323, clause 5.1.1] 

At reception of a PDCP SDU from upper layers, the UE shall: 

discardTime rstcLTt the associated with this PDCP SDU (if configured); 
For a PDCP SDU received from upper layers, the UE shall: 

- associate the PDCP SN corresponding to Next_PDCP_TX_SN to this PDCP SDU; 

perform header compression of the PDCP SDU (if configured) as specified in the subclause 5.5.4; 

perform integrity protection (if applicable), and ciphering (if applicable) using COUNT based on TX_HFN and 
the PDCP SN associated with this PDCP SDU as specified in the subclause 5.7 and 5.6, respectively; 

- increment Next_PDCP_TX_SN by one; 

- if Next_PDCP_TX_SN > Maximum_PDCP_SN: 

- set Next_PDCP_TX_SN to 0; 
increment TX_HFN by one; 

submit the resulting PDCP Data PDU to lower layer. 
[TS 36.323, clause 5.1.2.1.2] 
For DRBs mapped on RLC AM, at reception of a PDCP Data PDU from lower layers, the UE shall: 

- if received PDCP SN - Last_Submitted_PDCP_RX_SN > Reordering_Window or <= 
Last_Submitted_PDCP_RX_SN - received PDCP SN < Reordering_Window: 

- if received PDCP SN > Next_PDCP_RX_SN: 
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decipher the PDCP PDU as specified in the subclause 5.6, using COUNT based on RX_HFN - 1 and the 
received PDCP SN; 

else: 

decipher the PDCP PDU as specified in the subclause 5.6, using COUNT based on RX_HFN and the 
received PDCP SN; 

perform header decompression (if configured) as specified in the subclause 5.5.5; 

- discard this PDCP SDU; 

- else if Next_PDCP_RX_SN - received PDCP SN > Reordering_Window: 

increment RX_HFN by one; 

- use COUNT based on RX_HFN and the received PDCP SN for deciphering the PDCP PDU; 

- set Next_PDCP_RX_SN to the received PDCP SN + 1 ; 

- else if received PDCP SN - Next_PDCP_RX_SN > =Reordering_Window: 

- use COUNT based on RX_HFN - 1 and the received PDCP SN for deciphering the PDCP PDU; 

- else if received PDCP SN >= Next_PDCP_RX_SN: 

- use COUNT based on RX_HFN and the received PDCP SN for deciphering the PDCP PDU; 

- set Next_PDCP_RX_SN to the received PDCP SN + 1 ; 

- if Next_PDCP_RX_SN is larger than Maximum_PDCP_SN: 

- set Next_PDCP_RX_SN to 0; 
increment RX_HFN by one; 

- else if received PDCP SN < Next_PDCP_RX_SN: 

- use COUNT based on RX_HFN and the received PDCP SN for deciphering the PDCP PDU; 

if the PDCP PDU has not been discarded in the above: 

perform deciphering and header decompression (if configured) for the PDCP PDU as specified in the 
subclauses 5.6 and 5.5.5, respectively; 

- if a PDCP SDU with the same PDCP SN is stored: 

- discard this PDCP SDU; 

- else: 

- store the PDCP SDU; 

if the PDCP PDU received by PDCP is not due to the re-establishment of lower layers: 

deliver to upper layers in ascending order of the associated COUNT value: 

all stored PDCP SDU(s) with an associated COUNT value less than the COUNT value associated with 
the received PDCP SDU; 

all stored PDCP SDU(s) with consecutively associated COUNT value(s) starting from the COUNT value 
associated with the received PDCP SDU; 

- set Last_Submitted_PDCP_RX_SN to the PDCP SN of the last PDCP SDU delivered to upper layers; 

- else if received PDCP SN = Last_Submitted_PDCP_RX_SN + 1 or received PDCP SN = 
Last_Submitted_PDCP_RX_SN - Maximum_PDCP_SN: 
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deliver to upper layers in ascending order of the associated COUNT value: 

all stored PDCP SDU(s) with consecutively associated COUNT value(s) starting from the COUNT value 
associated with the received PDCP SDU; 

- set Last_Submitted_PDCP_RX_SN to the PDCP SN of the last PDCP SDU delivered to upper layers. 

[TS 36.323, clause 6.2.3] 

Figure 6.2.3. 1 shows the format of the PDCP Data PDU when a 12 bit SN length is used. This format is applicable for 
PDCP Data PDUs carrying data from DRBs mapped on RLC AM or RLC UM. 



I 1 \ \ 1 1 \ h 



D/C 


R 


R 


R 


PDCP SN 


PDCP SN (cont.) 


Data 



Oct1 
Oct 2 
Oct 3 



Figure 6.2.3.1 : PDCP Data PDU format for DRBs using a 12 bit SN 



Test description 
Pre-test conditions 



7.3.1.1.3 
7.3.1.1.3.1 
System Simulator 

- Cell 1 

- SS PDCP set to Transparent Mode 
UE: 

None. 
Preamble 

The UE is in state Loopback Activated (state 4) according to [18]. 
7.3.1 .1 .3.2 Test procedure sequence 

Table 7.3.1.1.3.2-1: lUlain behiaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 1 


U-S 


Message 




- 


EXCEPTION: Steps 1 and 2 shall be repeated 
for k=0 to Maximum PDCP SN (increment=1). 










1 


SS transmits a PDCP Data PDU on DRB1 
containing one IP packet without header 
compression. 


<— 


PDCP Data PDU (SN = k) 






2 


CHECK: Does UE transmit a PDCP Data PDU 
with SN=0 for the first iteration and then 
incremented by 1 at each iteration? 


--> 


PDCP Data PDU (SN = k) 


1 


P 


3 


SS transmits a PDCP Data PDU on DRB1 
containing one IP packet without header 
compression. 


<— 


PDCP Data PDU (SN = 0) 






4 


CHECK: Does UE transmit a PDCP Data PDU 
with SN=0? 


— > 


PDCP Data PDU (SN = 0) 


2 


P 


5 


SS sends a PDCP Data PDU on DRB1 


<- 


PDCP Data PDU (SN = 1) 
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containing one IP pacl<et witiiout lieader 
compression. 










6 


CHECK: Does UE transmit a PDCP Data PDU 
withSN=1? 


— > 


PDCP Data PDU (SN = 1) 


1 


P 



7.3.1.1.3.3 
None 

7.3.1.2 

7.3.1.2.1 
(1) 



Specific message contents 



Maintenance of PDCP sequence numbers / User plane / RLC UM / Short 
PDCP SN (7 bits) 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits a PDCP Data SDU on a DRB mapped on UM RLC and configured for short PDCP SN 
size {7 bits) } 

then { UE increments SN with 1 for each transmitted PDU for SN=0 to Maximum_PDCP_SN } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits a PDCP Data SDU on a DRB mapped on UM RLC and configured for short PDCP SN 
size {7 bits) ; and, after incrementation, Next_PDCP_TX_SNis larger than the Maximum_PDCP_SN } 
then { UE sets SN to in the next transmitted PDCP SDU} 



7.3.1.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.323 clause 5.1.1 , 
5.1.2.1.3 and 6.2.4. 

[TS 36.323, clause 5.1.1] 

At reception of a PDCP SDU from upper layers, the UE shall: 

start the discardTimer associated with this PDCP SDU (if configured); 

For a PDCP SDU received from upper layers, the UE shall: 

- associate the PDCP SN corresponding to Next_PDCP_TX_SN to this PDCP SDU; 

perform header compression of the PDCP SDU (if configured) as specified in the subclause 5.5.4; 

perform integrity protection (if applicable), and ciphering (if applicable) using COUNT based on TX_HFN and 
the PDCP SN associated with this PDCP SDU as specified in the subclause 5.7 and 5.6, respectively; 

- increment Next_PDCP_TX_SN by one; 

- if Next_PDCP_TX_SN > Maximum_PDCP_SN: 
- set Next_PDCP_TX_SN to 0; 

increment TX_HFN by one; 
submit the resulting PDCP Data PDU to lower layer. 
[TS 36.323, clause 5.1.2.1.3] 
For DRBs mapped on RLC UM, at reception of a PDCP Data PDU from lower layers, the UE shall: 

- if received PDCP SN < Next_PDCP_RX_SN: 

increment RX_HFN by one; 
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- decipher the PDCP Data PDU using COUNT based on RX_HFN and the received PDCP SN as specified in the 
subclause 5.6; 

- set Next_PDCP_RX_SN to the received PDCP SN + 1 ; 

- if Next_PDCP_RX_SN > Maximum_PDCP_SN: 
- set Next_PDCP_RX_SN to 0; 

increment RX_HFN by one; 

- perform header decompression (if configured) of the deciphered PDCP Data PDU as specified in the subclause 

5.5.5; 

deliver the resulting PDCP SDU to upper layer. 

[TS 36.323, clause 6.2.4] 

Figure 6.2.4. 1 shows the format of the PDCP Data PDU when a 7 bit SN length is used. This format is applicable for 
PDCP Data PDUs caiiying data from DRBs mapped on RLC UM. 



1 \ 1 1 \ \ 1 \ 1 


D/C 


PDCP SN 


Data 



Oct1 
Oct 2 



Figure 6.2.4.1 : PDCP Data PDU format for DRBs using 7 bit SN 



Test description 
Pre-test conditions 



7.3.1.2.3 
7.3.1.2.3.1 
System Simulator 

- Cell 1 

- SS PDCP set to Transparent Mode 
UE: 

None. 
Preamble 

The UE is in state Loopback Activated (state 4) according to [18]. 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 
7.3.1 .2.3.2 Test procedure sequence 

Table 7.3.1 .2.3.2-1: IVIain behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 1 


U-S 


lUlessage 




- 


EXCEPTION: Steps 1 and 2 shall be repeated 
for k=0 to Maximum PDCP SN (increment=1). 










1 


SS transmits a PDCP Data PDU on UM DRB 
containing one IP packet without header 
compression. 


<— 


PDCP Data PDU (SN = k) 






2 


CHECK: Does UE transmit a PDCP Data PDU 
with SN=0 for the first iteration and then 


--> 


PDCP Data PDU (SN = k) 


1 


P 
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incremented by 1 at each iteration? 










3 


SS transmits a PDCP Data PDU on UIVI DRB 
containing one IP pacl<et without header 
compression. 


<— 


PDCP Data PDU (SN = 0) 






4 


CHECK: Does UE transmit a PDCP Data PDU 
with SN=0? 


— > 


PDCP Data PDU (SN = 0) 


2 


P 


5 


SS sends a PDCP Data PDU on UIVI DRB 
containing one IP packet without header 
compression. 


<— 


PDCP Data PDU (SN = 1) 






6 


CHECK: Does UE transmit a PDCP Data PDU 
withSN=1? 


--> 


PDCP Data PDU (SN = 1) 


1 


P 



7.3.1.2.3.3 
None 

7.3.1.3 

7.3.1.3.1 
(1) 



Specific message contents 



Maintenance of PDCP sequence numbers / User plane / RLC UM / Long 
PDCPSN (12 bits) 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits a PDCP Data SDU on a DRB mapped on UM RLC and configured for long PDCP SN size 
(12 bits) } 

then { UE increments SN with 1 for each transmitted PDU for SN=0 to Maximum_PDCP_SN } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE transmits a PDCP Data SDU on a DRB mapped on UM RLC and configured for long PDCP SN size 
{12 bits); and, after incrementation, Next_PDCP_TX_SN is larger than the Maximum_PDCP_SN limit } 

then { UE sets SN to in the next transmitted PDCP SDU} 
} 



7.3.1.3.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.323 clause 5.1.1 , 
5.1.2.1.3 and 6.2.3. 

[TS 36.323, clause 5.1.1] 

At reception of a PDCP SDU from upper layers, the UE shall: 

start the discardTimer associated with this PDCP SDU (if configured); 

For a PDCP SDU received from upper layers, the UE shall: 

- associate the PDCP SN corresponding to Next_PDCP_TX_SN to this PDCP SDU; 

perform header compression of the PDCP SDU (if configured) as specified in the subclause 5.5.4; 

perform integrity protection (if applicable), and ciphering (if applicable) using COUNT based on TX_HFN and 
the PDCP SN associated with this PDCP SDU as specified in the subclause 5.7 and 5.6, respectively; 

- increment Next_PDCP_TX_SN by one; 

- if Next_PDCP_TX_SN > Maximum_PDCP_SN: 
- set Next_PDCP_TX_SN to 0; 

increment TX_HFN by one; 
submit the resulting PDCP Data PDU to lower layer. 
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[TS 36.323, clause 5.1.2.1.3] 

For DRBs mapped on RLC UM, at reception of a PDCP Data PDU from lower layers, the UE shall: 

- if received PDCP SN < Next_PDCP_RX_SN: 

increment RX_HFN by one; 

- decipher the PDCP Data PDU using COUNT based on RX_HFN and the received PDCP SN as specified in the 
subclause 5.6; 

- set Next_PDCP_RX_SN to the received PDCP SN + 1 ; 

- if Next_PDCP_RX_SN > Maximum_PDCP_SN; 
- set Next_PDCP_RX_SN to 0; 

increment RX_HFN by one; 

perform header decompression (if configured) of the deciphered PDCP Data PDU as specified in the subclause 
5.5.5; 

deliver the resulting PDCP SDU to upper layer. 

[TS 36.323, clause 6.2.3] 

Figure 6.2.3.1 shows the format of the PDCP Data PDU when a 12 bit SN length is used. This format is applicable for 
PDCP Data PDUs caii-ying data from DRBs mapped on RLC AM or RLC UM. 



1 1 \ \ 1 1 \ 1 1 


D/C 


R 


R 


R 


PDCP SN 


PDCP SN (cont.) 


Data 



Oct1 
Oct 2 
Oct 3 



Figure 6.2.3.1 : PDCP Data PDU format for DRBs using a 12 bit SN 

7.3.1.3.3 Test description 

7.3.1.3.3.1 Pre-test conditions 

System Simulator 

- Cell 1 

- SS PDCP set to Transparent Mode 
UE: 

None. 

Preamble 

The UE is in state Loopback Activated (state 4) according to [18] with the RLC UM bearer configured for long 
PDCP SN size (12 bits). 

- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 
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7.3.1.3.3.2 



Test procedure sequence 

Table 7.3.1 .3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 




- 


EXCEPTION: Steps 1 and 2 shall be repeated 
for k=0 to Maximum PDCP SN (increment=1). 










1 


SS transmits a PDCP Data PDU on UIVI DRB 
containing one IP packet without header 
compression. 


<— 


PDCP Data PDU (SN = k) 






2 


CHECK: Does UE transmit a PDCP Data PDU 
with SN=0 for the first iteration and then 
incremented by 1 at each iteration? 


— > 


PDCP Data PDU (SN = k) 


1 


P 


3 


SS transmits a PDCP Data PDU on UIVI DRB 
containing one IP packet without header 
compression. 


<— 


PDCP Data PDU (SN = 0) 






4 


CHECK: Does UE transmit a PDCP Data PDU 
with SN=0? 


— > 


PDCP Data PDU (SN = 0) 


2 


P 


5 


SS sends a PDCP Data PDU on UIVI DRB 
containing one IP packet without header 
compression. 


<— 


PDCP Data PDU (SN = 1) 






6 


CHECK: Does UE transmit a PDCP Data PDU 
withSN=1? 


--> 


PDCP Data PDU (SN = 1) 


1 


P 



7.3.1.3.3.3 
None 

7.3.3 

7.3.3.1 

7.3.3.1.1 
(1) 



Specific message contents 



PDCP ciphering and decipirering 

Ciphering and deciphering / Correct functionality of EPS AS encryption 
algorithms / SNOW 3G 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is requested to achieve functionality of EPS AS encription algorithms with SNOW 3G } 
then { UE performs correct AS ciphering function in PDCP entities associated with SRBs . } 



7.3.3.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.323, clause 5.6. 

[TS 36.323, clause 5.6] 

The ciphering function includes both ciphering and deciphering and is performed in PDCP. For the control plane, the 
data unit that is ciphered is the data part of the PDCP PDU (see subclause 6.3.3) and the MAC -I (see subclause 6.3.4). 
For the user plane, the data unit that is ciphered is the data part of the PDCP PDU (see subclause 6.3.3); ciphering is not 
apphcable to PDCP Control PDUs. 

The ciphering algorithm and key to be used by the PDCP entity are configured by upper layers [3] and the ciphering 
method shall be applied as specified in [6]. 

The ciphering function is activated by upper layers [3]. After security activation, the ciphering function shall be applied 
to all PDCP PDUs indicated by upper layers [3] for the downlink and the uplink, respectively. 

The parameters that are required by PDCP for ciphering are defined in [6] and are input to the ciphering algorithm. The 
required inputs to the ciphering function include the COUNT value, and DIRECTION (direction of the transmission: set 
as specified in [6]).The parameters required by PDCP which are provided by upper layers [3] are listed below: 
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BEARER (defined as the radio bearer identifier in [6]. It will use the value RB identity -1 as in [3]); 
KEY (the ciphering keys for the control plane and for the user plane are KRRCenc and Kupenc, respectively). 
7.3.3.1.3 Test description 

7.3.3.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1. 
UE: 

None. 
Preamble: 

The UE shall be in Registered Idle Mode (State 2) according to [18]. 

7.3.3.1 .3.2 Test procedure sequence 

Table 7.3.3.1.3.2-1: Main Behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS sends a Paging message to the UE on the 
appropriate paging block, and including the UE 
identity in one entry of the IE pagingRecordLists. 


<- 


Paging (PCCH) 






2 


The UE transmits an RRCConnectionRequest 
message. This message related PDCP Data PDU 
should not be integrity protected and ciphered. 


-> 


RRCConnectionRequest 






3 


The SS transmits an RRCConnectionSetup 
message. This message related PDCP Data PDU 
should not be integrity protected and ciphered. 


<- 


RRCConnectionSetup 






4 


The UE transmits an 

RRCConnectionSetupComplete message to 
confirm the successful completion of the 
connection establishment and to initiate the 
session management procedure by including the 
SERVICE REQUEST message. (StateS) This 
message related PDCP Data PDU should not be 
integrity protected and ciphered. 


-> 


RRCConnectionSetupCompI 
ete 






5 


The SS transmits a SecuhtyModeCommand 
message to activate EPS AS encryption algorithm 
security. The message related PDCP Data PDU 
should be integrity protected but not ciphered. 


<— 


SecuhtyModeCommand 






6 


The UE transmits a SecuhtyModeComplete 
message and establishes the initial security 
configuration. The message related PDCP Data 
PDU should be integrity protected but not 
ciphered. 


-> 


SecurityModeComplete 






7 


The SS configures a new data radio bearer, 
associated with the default EPS bearer context. 
This message related PDCP Data PDU should be 
integrity protected and ciphered. The COUNT of 
this message related PDCP Data PDU can be 
used for deciphering. 


<- 


RRCConnectionReconfigurat 
ion 






8 


The UE transmits a 

RRCConnectionReconfigurationComplete 
message to confirm the establishment of the new 
data radio bearer, associated with the default 
EPS bearer context. This message related PDCP 
Data PDU should be integrity protected and 
ciphered. The COUNT of this message related 
PDCP Data PDU can be used for deciphering. 


-> 


RRCConnectionReconfigurat 
ionComplete 


1 


P 
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7.3.3.1 .3.3 Specific message contents 

Table 7.3.3.1.3.3-1 SecurityModeCommand {step 6, Table 7.3.3.1.3.2-1) 



Derivation Path: TS36.508 clause 4.6.1 table 4.6.1-19 


Information Element 


Value/remark 


Comment 


Condition 


SecurityModeCommand ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








securitylVlodeCommand-rS SEQUENCE { 








securityConfigSMC SEQUENCE { 








securityAlgorithmConfig SEQUENCE { 








cipheringAlgorithm 


eeal 






integrityProtAlgorithm 


Default value specified in 
TS 36.508 






1 








nonCriticalExtension SEQUENCE {} 


Not present 






} 








} 








1 








1 








} 









7.3.3.2 



7.3.3.2.1 



Ciphering and deciphering / Correct functionality of EPS UP encryption 
algorithms / SNOW 3G 

Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is requested to achieve functionality of EPS UP encription algorithms with SNOW 3G } 
then { UE performs correct UP ciphering function in PDCP entities associated with DRBs . } 
} 

7.3.3.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.323, clause 5.6. 

[TS 36.323, clause 5.6] 

The ciphering function includes both ciphering and deciphering and is performed in PDCP. For the control plane, the 
data unit that is ciphered is the data part of the PDCP PDU (see subclause 6.3.3) and the MAC -I (see subclause 6.3.4). 
For the user plane, the data unit that is ciphered is the data part of the PDCP PDU (see subclause 6.3.3); ciphering is not 
applicable to PDCP Control PDUs. 

The ciphering algorithm and key to be used by the PDCP entity are configured by upper layers [3] and the ciphering 
method shall be applied as specified in [6]. 

The ciphering function is activated by upper layers [3]. After security activation, the ciphering function shall be applied 
to all PDCP PDUs indicated by upper layers [3] for the downlink and the uplink, respectively. 

The parameters that are required by PDCP for ciphering are defined in [6] and are input to the ciphering algorithm. The 
required inputs to the ciphering function include the COUNT value, and DIRECTION (direction of the transmission: 
for uplink, 1 for downlink). The parameters required by PDCP which are provided by upper layers [3] are listed below: 

BEARER (defined as the radio bearer identifier in [6]. It will use the value RB identity -1 as in [3]); 

KEY (the ciphering keys for the control plane and for the user plane are Krrcbiic and Kupenc, respectively). 
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Test description 
Pre-test conditions 



7.3.3.2.3 
7.3.3.2.3.1 
System Simulator: 

- Cell 1. 
UE: 

None. 
Preamble 

The UE shall be in Loopback Activation state (State 4) according to TS36.508. 
7.3.3.2.3.2 Test procedure sequence 

Table 7.3.3.2.3.2-1 : Main Behavior 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS Transmits PDCP PDU on DRB ciphered. 


<— 


PDCP PDU 


- 


- 


2 


Check; Does the UE transmit loop backed PDCP 
PDU ciphered. 


-> 


PDCP PDU 


1 


P 



7.3.3.2.3.3 



Specific message contents 

Table 7.3.3.2.3.3-1 SecurityModeCommand (in the preamble) 



Derivation Path: TS36.508 clause 4.6.1 table 4.6.1-19 


Information Element 


Value/remark 


Comment 


Condition 


SecurityModeCommand ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








securitylVlodeCommand-rS SEQUENCE { 








securityConfiguration SEQUENCE { 








cipheringAlgorithm 


eeal 






nextHopChainingCount 


Not present 






} 








nonCriticalExtension SEQUENCE {} 


Not present 






1 








} 








} 








} 









7.3.3.3 



7.3.3.3.1 



Ciphering and deciphering / Correct functionality of EPS AS encryption 
algorithms / AES 

Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is requested to achieve functionality of EPS AS encription algorithms with AES } 
then { UE performs correct AS ciphering function in PDCP entities associated with SRBs . 



7.3.3.3.2 Conformance requirements 

Same Conformance requirements as in clause 7.3.3.1.2 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



511 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



7.3.3.3.3 Test description 

7.3.3.3.3.1 Pre-test conditions 
Same Pre-test conditions as in clause 7.3.3.1.3.1. 

7.3.3.3.3.2 Test procedure sequence 
Same Test procedure sequence as in Table 7.3.3.1.3.2. 

7.3.3.3.3.3 Specific message contents 

Table 7.3.3.3.3.3-1 SecurityModeCommand (step 6) 



Derivation Path: TS36.508 clause 4.6.1 table 4.6.1-19 


Information Element 


Value/remark 


Comment 


Condition 


SecurityModeCommand ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








securityModeCommand-r8 SEQUENCE { 








securityConfiguration SEQUENCE { 








cipheringAlgorithm 


eea2 






nextHopChainingCount 


Not present 






1 








nonCriticalExtension SEQUENCE {} 


Not present 






} 








} 








} 








} 









7.3.3.4 



7.3.3.4.1 



Ciphering and deciphering / Correct functionality of EPS UP encription 
algorithms / AES 

Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is requested to achieve functionality of EPS UP encription algorithms with AES } 
then { UE performs correct UP ciphering function in PDCP entities associated with DRBs . 
} 

7.3.3.4.2 Conformance requirements 
Same Conformance requirements as in clause 7.3.3.2.2. 

7.3.3.4.3 Test description 

7.3.3.4.3.1 Pre-test conditions 
Same Pre-test conditions as in clause 7.3.3.2.3.1. 

7.3.3.4.3.2 Test procedure sequence 
Same Test procedure sequence as in Table 7.3.3.2.3.2. 
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7.3.3.4.3.3 



Specific message contents 

Table 7.3.3.4.3.3-1 SecurityModeCommand (in the preamble) 



Derivation Path: TS36.508 clause 4.6.1 table 4.6.1-19 


Information Element 


Value/remark 


Comment 


Condition 


SecurityModeCommand ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








securitylVlodeCommand-rS SEQUENCE { 








securityConfiguration SEQUENCE { 








cipheringAlgorithm 


eea2 






nextHopChainingCount 


Not present 






1 








nonCriticalExtension SEQUENCE {} 


Not present 






} 








} 








} 








1 









7.3.4 

7.3.4.1 

7.3.4.1.1 
(1) 



PDCP integrity protection 

Integrity protection / Correct functionality of EPS AS integrity algorithms / 
SN0W3G 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is requested to achieve functionality of EPS AS integrity algorithms with SN0W3G} 

then { UE performs the integrity protection function in PDCP entities associated with SRBs . 



7.3.4.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.323 clauses 5.7 

[TS 36.323, clause 5.7] 

The integrity protection function includes both integrity protection and integrity verification and is performed in PDCP 
for PDCP entities associated with SRBs. The data unit that is integrity protected is the PDU header and the data part of 
the PDU before ciphering. 

The integrity protection algorithm and key to be used by the PDCP entities are configured by upper layers [3] and the 
integrity protection method shall be applied as specified in [6] . 

The integrity protection function is activated by upper layers [3]. After security activation, the integrity protection 
function shall be applied to all PDUs including and subsequent to the PDU indicated by upper layers [3] for the 
downlink and the uplink, respectively. 

NOTE: As the RRC message which activates the integrity protection function is itself integrity protected with the 
configuration included in this RRC message, this message needs first be decoded by RRC before the 
integrity protection verification could be performed for the PDU in which the message was received. 

The parameters that are required by PDCP for integrity protection are defined in [6] and are input to the integrity 
protection algorithm. The required inputs to the integrity protection function include the COUNT value, and 
DIRECTION (direction of the transmission: set as specification in [6]). The parameters required by PDCP which are 
provided by upper layers [3] are listed below: 

BEARER (defined as the radio bearer identifier in [6]. It will use the value RB identity -1 as in [3]); 

- KEY (KRRCint)- 
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At transmission, the UE computes the value of the MAC -I field and at reception it verifies the integrity of the PDCP 
PDU by calculating the X-MAC based on the input parameters as specified above. If the calculated X-MAC 
corresponds to the received MAC-I, integrity protection is verified successfully. 



Test description 
Pre-test conditions 



7.3.4.1.3 
7.3.4.1.3.1 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

- The UE is in state Registered, Idle Mode (State 2) according to [18]. 
7.3.4.1 .3.2 Test procedure sequence 

Table 7.3.4.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Generic procedure in 36.508 clause 4.5.3.3 is 
executed 


- 


- 


- 


- 


2 


The SS transmits a UECapabilityEnquiry 
message to request UE radio access capability 
information for E UTRA only. 


<- 


UECapabilityEnquiry 






3 


Check: Does the UE transmit a 
UEcapabilitylnformation message, which 
passes the SS integrity protection check? 


~> 


UEcapabilitylnformation 


1 


P 



7.3.4.1.3.3 



Specific message contents 



Table 7.3.4.1.3.3-1 : SecurityModeCommand message (step 1, Table 7.3.4.1.3.2-1, step 6 table 4.5.3.3-1 

of 36.508) 



Derivation Path: 36.508 Table 4.6.1-19 


Information Element 


Value/remark 


Comment 


Condition 


SecuritylVlodeCommand ::= SEQUENCE { 








rrc-Transaction Identifier 


RRC- 

Transaction Identifier-DL 






criticalExtensions CHOICE { 








c1 CHOICE! 








securityl\/lodeCommand-r8 SEQUENCE { 








securityConfigSMC SEQUENCE { 








securityAlgorithmConfig SEQUENCE { 








IntegrityProtAlgorithm 


eial 


128-EIA1 
SNOW 3G 




} 








1 








1 








} 








} 








} 
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7.3.4.2 



7.3.4.2.1 



Integrity protection / Correct functionality of EPS AS integrity algorithms / 
AES 

Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is requested to achieve functionality of EPS AS integrity algorithms with AES } 

then { UE performs the integrity protection function in PDCP entities associated with SRBs . } 
} 

7.3.4.2.2 Conformance requirements 
Same Conformance requirements as in clause 7.3.4.1.2 

7.3.4.2.3 Test description 

7.3.4.2.3.1 Pre-test conditions 
Same Pre-test conditions as in clause 7.3.4.1.3.1. 

7.3.4.2.3.2 Test procedure sequence 

Same Test procedure sequence as in table 7.3.4.1.3.2-1, except the integrity protection algorithm is AES. 

7.3.4.2.3.3 Specific message contents 

Table 7.3.4.2.3.3-1 : SecurityModeCommand message (step 1, Table 7.3.4.1.3.2-1, step 6 table 4.5.3.3-1 

of 36.508) 



Derivation Path: 36.508 Table 4.6.1-19 


Information Element 


Value/remark 


Comment 


Condition 


SecurityModeCommand ::= SEQUENCE { 








rrc-Transactlon Identifier 


RRC- 

Transactlon Identlfler-DL 






crItlcalExtenslons CHOICE { 








c1 CHOICE! 








securltyModeCommand-r8 SEQUENCE { 








securltyConflgSMC SEQUENCE { 








securltyAlgorlthmConfIg SEQUENCE { 








InteqrItyProtAlqorlthm 


ela2 


128-EIA2AES 




1 








} 








} 








} 








1 








} 









7.3.5 

7.3.5.1 
7.3.5.2 

7.3.5.2.1 

(1) 



PDCP handover 

Void 

PDCP handover / Lossless handover / PDCP sequence number 
maintenance 

Test Purpose (TP) 



with {UE in E-UTRA RRC_CONNECTED state with default RB using RLC-AM} 
ensure that { 

when { UE is requested to make a lossless handover by SS } 
then { UE retransmits the unacknowledged data} 
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7.3.5.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.323 clause 5.2.1.1. 

[TS 36.323, clause 5.2.1.1] 

When upper layers request a PDCP re-establishment, the UE shall: 

reset the header compression protocol for uplink (if configured); 

apply the ciphering algorithm and key provided by upper layers during the re-establishment procedure; 

from the first PDCP SDU for which the successful delivery of the corresponding PDCP PDU has not 
been confirmed by lower layers, perform retransmission or transmission of all the PDCP SDUs already 
associated with PDCP SNs in ascending order of the COUNT values associated to the PDCP SDU prior 
to the PDCP re-establishment as specified below: 

perform header compression of the PDCP SDU (if configured) as specified in the subclause 5.5.4; 

perform ciphering of the PDCP SDU using the COUNT value associated with this PDCP SDU as specified in 
the subclause 5.6; 

submit the resulting PDCP Data PDU to lower layer 

7.3.5.2.3 Test description 
7.3.5.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
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7.3.5.2.3.2 



Test procedure sequence 

Table 7.3.5.2.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS creates 5 PDCP Data PDUs and the 
Next PDCP TX SN is set to "0". 


- 


- 


- 


- 


- 


EXCEPTION: Step 2 and 3 shall be repeated 
for k=0 to 1 (increment=1 ). 


- 


- 


- 


- 


2 


The SS sends the PDCP Data PDU#k via 

RLC-AM RB with the following content to the 

UE: 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN = k. 

After having sent a PDU, the SS set 

Next PDCP TX SN=k+1. 


<- 


PDCP PDU DATA #k 






3 


The UE sends the PDCP Data PDU#k via 

RLC-AM RB with the following content to the 

UE: 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN = k. 

Data is previously received data from PDU #k. 

(Note1) 


-> 


PDCP PDU DATA #k 






4 


Configure SS not to allocate UL grant to the 
UE in Cell 1. 


- 


- 


- 


- 


- 


EXCEPTION: Step 5 shall be repeated for 
m=2 to 4 (increment=1). 






- 


- 


5 


The SS sends the PDCP Data PDU #m via 

RLC-AM RB with the following content to the 

UE: 

D/C field = 1 (PDCP Data PDU) and PDCP SN 

=m. 

After having sent a PDU, the SS set 

Next PDCP TX SN = m-Hl. 


<~ 


PDCP PDU DATA #m 






6 


The SS requests UE to make a handover to 
Cell2 with the RRCConnectionReconfiguration 
message sent on Cell 1 . 


<— 


RRCConnectionReconfiguration 






7 


Configure SS to allocate UL grant to the UE in 
Cell 2 






- 


- 


8 


The UE on Cell 2 transmits a 
RRCConnectionReconfigurationComplete 
message. (Note 2). 


-> 


RRCConnectionReconfigurationC 
omplete 








EXCEPTION: Step 9 shall be repeated for 
m=2 to 4 (increment=1). 


- 


- 


- 


- 


9 


Check: Does the UE send the PDCP Data 

PDU #m via RLC-AM RB with the following 

content to the SS: 

D/C field = 1 (PDCP Data PDU) and PDCP SN 

= m? 

Data is previously received data from PDU #m. 

(Note 2). 


-> 


PDCP PDU DATA#m 


1 


P 


Note 1 : The SS acknowledges the received data. 

Note 2: Depending on the assigned UL grant size, the messages in step 8 (RRCConnectionReconfigurationComplete) 
and step 9 (PDCP PDU DATA #m) can be received in the same IVIAC PDU. 
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7.3.5.2.3.3 Specific message contents 

Table 7.3.5.2.3.3-1 : RRCConnectionReconfiguration (step 6, Table 7.3.5.2.3.2-1) 



Derivation Path: 36.508, Table 4.6.1-8, condition HO 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEOUENCE { 








mobilityControllnfo SEQUENCE { 




MobilityControllnfo 
-HO 




targetPhysCellld 


PhysicalCellldentity of 
Cell 2 






1 








1 








} 








} 








} 









7.3.5.3 



7.3.5.3.1 



PDCP handover/ Non-lossless handover PDCP sequence number 
maintenance 

Test Purpose (TP) 



(1) 

with {UE in E-UTRA RRC_CONNECTED state with bearer using RLC-UM} 
ensure that { 

when {UE is requested to make a non- lossless handover by SS} 
then {UE transmits next PDCP Data PDU with SN value } 



7.3.5.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.323 clauses 5.2.1.2. 

[TS 36.323, clause 5.2.1.2] 
When upper layers request a PDCP re-establishment, the UE shall: 

reset the header compression protocol for uplink (if configured); 

set Next_PDCP_TX_SN, and TX_HFN to 0; 

apply the ciphering algorithm and key provided by upper layers during the re-establishment procedure; 

for each PDCP SDU already associated with a PDCP SN but for which a corresponding PDU has not 
previously been submitted to lower layers: 

consider the PDCP SDUs as received from upper layer; 

perform transmission of the PDCP SDUs in ascending order of the COUNT value associated to the PDCP SDU 
prior to the PDCP re-establishment, as specified in the subclause 5.1.1 without restarting the t/iscard-Timer. 



7.3.5.3.3 
7.3.5.3.3.1 
System Simulator: 

- Cell 1 and Cell 2 
UE: 
None. 



Test description 
Pre-test conditions 
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Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
- The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 
7.3.5.3.3.2 Test procedure sequence 

Table 7.3.5.3.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS creates 3 PDCP Data PDUs and the 
Next PDCP TX SN is set to "0". 


- 


- 


- 


- 




EXCEPTION: Step 2 and 3 shall be repeated 
for k=0 to 1 (jncrement=1). 










2 


The SS sends the PDCP Data PDU #k via 

RLC-UM RB with the following content to the 

UE: 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN = k. 

After having sent a PDU, the SS set 

Next PDCP TX SN=k+1. 


<~ 


PDCP PDU DATA #k 






3 


The UE sends the PDCP Data PDU #k via 

RLC-UIVI RB with the following content to the 

SS' 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN = k. 

Data is previously received data PDU #k. 


-> 


PDCP PDU DATA#k 






4 


The SS requests UE to make a handover to 
Cell 2 with the RRCConnectionReconfiguration 
message. 


<— 


RRCConnectionReconfiguration 






5 


The UE transmits a 

RRCConnectionReconfigurationComplete 

message. 


~> 


RRCConnectionReconfigurationC 
omplete 






6 


The SS sends the PDCP Data PDU #2 via 

RLC-UM RB with the following content to the 

UE: 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN = 2. 

After having sent a PDU, the SS set 

Next PDCP TX SN=k+1. 


<~ 


PDCP PDU DATA #2 






7 


Check: Does the UE send the PDCP Data 

PDU #2 via RLC-UM RB with the following 

content back to the SS: 

D/C field = 1 (PDCP Data PDU) and PDCP SN 

= 0. 

Data is previously received data PDU #2. 


-> 


PDCP PDU DATA #2 


1 


P 
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7.3.5.3.3 Specific message contents 

Table 7.3.5.3.3-1 : RRCConnectionReconfiguration (step 4, 7.3.5.3.3.2-1) 



Derivation Path: 36.508, Table 4.6.1-8, condition HO 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEOUENCE { 








mobilityControllnfo SEQUENCE { 




MobilityControllnfo 
-HO 




targetPhysCellld 


PhysicalCellldentity of 
Cell 2 






1 








1 








} 








} 








} 









7.3.5.4 



7.3.5.4.1 



PDCP handover / Lossless handover / PDCP status report to convey the 
information on missing or acknowledged PDCP SDUs at handover 

Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_CONNECTED state with default RB used RLC-AM mode } 
ensure that { 

when { UE is requested to make a handover by SS } 
then { UE creats a PDCP status report to SS}} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state with default RB used RLC-AM mode } 
ensure that { 

when { UE is requested to make a handover by SS } 

then { UE discards the corresponding PDCP PDU and PDCP SDU according to the PDCP satus report 
from SS } } 



7.3.5.4.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.323 clauses 5.3 and 
5.4 

[TS 36.323, clause 5.3.1] 

When upper layers request a PDCP re-establishment, for radio bearers that are mapped on RLC AM, the UE shall: 

if the radio bearer is configured by upper layers to send a PDCP status report in the uplink, compile a status 
report as indicated below after processing the PDCP Data PDUs that are received from lower layers due to the 
re-establishment of the lower layers as specified in the subclause 5.2.2.1, and submit it to lower layers as the first 
PDCP PDU for the transmission, by: 

- setting the FMS field to the PDCP SN of the first missing PDCP SDU; 

if there is at least one out-of-sequence PDCP SDU stored, allocating a Bitmap field of length in bits equal to 
the number of PDCP SNs from and not including the first missing PDCP SDU up to and including the last 
out-of-sequence PDCP SDUs, rounded up to the next multiple of 8; 

setting as '0' in the corresponding position in the bitmap field for all PDCP SDUs that have not been 
received as indicated by lower layers, and optionally PDCP SDUs for which decompression have failed; 

indicating in the bitmap field as '1' for all other PDCP SDUs. 

[TS 36.323, clause 5.3.2] 
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When a PDCP status report is received in the downlink, for radio bearers that are mapped on RLC AM: 

for each PDCP SDU, if any, with the bit in the bitmap set to '1', or with the associated COUNT value less than 
the COUNT value of the PDCP SDU identified by the FMS field, the successful delivery of the corresponding 
PDCP SDU is confirmed, and the UE shall process the PDCP SDU as specified in the subclause 5.4. 

[TS 36.323, clause 5.4] 

When the Discard_Timer expires for a PDCP SDU, or the successful delivery of a PDCP SDU is confirmed by PDCP 
status report, the UE shall discard the PDCP SDU along with the corresponding PDCP PDU. If the corresponding 
PDCP PDU has already been submitted to lower layers the discard is indicated to lower layers. 

7.3.5.4.3 Test description 

TC is applicable to: 

- All UEs supporting E-UTRA. 
7.3.5.4.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2 

ROHC is not used for headerCompression settings. 
UE: 

- UE in UE Loopback Activated test state (state 4) with default RB using RLC- AM in Cell 1 . 
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7.3.5.4.3.2 



Test procedure sequence 

Table 7.3.5.4.3.2: Main Behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Next_PDCP_TX_SN is set to "0". The SS 
creates 4 PDCP Data PDUs. 




- 


- 


- 


2 


The SS sends the PDCP Data PDU #0 via 

RLC-AIVI RB with the following content to the 

UE: 

D/C field = 1 (PDCP Data PDU) and PDCP SN 

=0. 

The SS sets Next PDCP TX SN = 1 . 


<~ 


PDCP DATA PDU #0 






3 


The UE sends a PDCP Data PDU #0 via RLC- 
AIVI RB with the following content back to the 
SS' 

D/C field = 1 (PDCP Data PDU) and PDCP 
SN = 
data: previously received packet. 

(Note1) 


-> 


PDCP DATA PDU #0 






4 


The SS is configured on Cell 1 not to send 
RLC acknowledgements (RLC ACK s) to the 
UE. 










5 


The SS sends the PDCP Data PDU #1 via 

RLC-AM RB with the following content to the 

UE: 

D/C field = 1 (PDCP Data PDU) and PDCP SN 

=1. 

The SS set Next PDCP TX SN = 2. 


<— 


PDCP DATA PDU#1 






6 


The UE sends a PDCP Data PDU #1 via RLC- 
AIVI RB with the following content back to the 
SS' 

D/C field = 1 (PDCP Data PDU) and PDCP 
SN = 1 
data: previously received packet. 


-> 


PDCP DATA PDU#1 






7 


The SS requests UE to make a handover to 
Cell2 with the RRCConnectionReconfiguration 
message sent on Colli. 


<~ 


RRCConnectionReconfiguration 
message. 






8 


The UE transmits a 

RRCConnectionReconfigurationComplete 
message on Cell2. 


-> 


RRCConnectionReconfigurationC 
omplete message. 






9 


Check: Does the UE send PDCP Control 
PDUs via RLC-AM RB with the following 
content to the SS: D/C field = (PDCP control 
PDU) and PDU Type =000, FMS field = 2. 


-> 


PDCP status report 


1 


P 


10 


The SS generates a PDCP status report 
message and sends it to UE: D/C field = 
(PDCP control PDU) and PDU Type =000, 
FMS field = 2. 


<- 


PDCP status report 








EXCEPTION: Step 1 1 shall be repeated for 
k=2 to 3 (increment=1). 










11 


The SS sends the PDCP Data PDU #k via 

RLC-AM RB with the following content to the 

UE: 

D/C field = 1 (PDCP Data PDU) and PDCP SN 

= k. 

After having sent a PDU, the SS set 

Next PDCP TX SN = k-^1. 


<— 


PDCP DATA PDU #k 






12 


Check:Does the UE send a PDCP Data 

PDU#2 via RLC-AM RB with the following 

content back to the SS: 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN = 2 

data: previously received packet. 


-> 


PDCP DATA PDU #2 


2 


P 


13 


Check:Does the UE send a PDCP Data 
PDU#3 via RLC-AM RB with the following 


-> 


PDCP DATA PDU #3 


2 


P 
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content back to the SS: 

D/C field = 1 (PDCP Data PDU) and PDCP SN 

= 3 

data: previously received packet. 



Note 1 : The SS sends RLC ACK to the UE 



7.3.5.4.3.3 Specific message contents 

Table 7.3.5.4.3.3-1 : RRCConnectionReconfiguration (Step 4, table 7.3.5.4.3.2-1) 



Derivation Path: 36.508 Table 4.6.1-8 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








RadioResourceConfigDedicated-HO { 








drb-ToAddModifyList { 








PDCP-Configuration-DRB-AIVI { 








discardTimer 


infinity 






rIc-AM SEQUENCE { 








statusReportRequired 


TRUE 






} 








1 








1 








} 








} 








} 








1 








} 









7.3.5.5 

7.3.5.5.1 
(1) 



PDCP handover / In-order delivery and duplicate elimination in the downlink 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state with default RB using RLC-AM } 
ensure that { 

when { UE is requested to make a handover by SS } 

then { UE achieves in-order delivery and duplicate elimination in the downlink 



7.3.5.5.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.323 clauses 
5.1.2.1.2. 

[TS 36.323, clause 5.1.2.1.2] 

For DRBs mapped on RLC AM, at reception of a PDCP Data PDU from lower layers, the UE shall: 

- if received PDCP SN - Last_Submitted_PDCP_RX_SN > Reordering_Window or <= 
Last_Submitted_PDCP_RX_SN - received PDCP SN < Reordering_Window: 

- if received PDCP SN > Next_PDCP_RX_SN : 

decipher the PDCP PDU as specified in the subclause 5.6, using COUNT based on RX_HFN - 1 and the 
received PDCP SN; 



else: 



decipher the PDCP PDU as specified in the subclause 5.6, using COUNT based on RX_HFN and the 
received PDCP SN; 
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perform header decompression (if configured) as specified in the subclause 5.5.5; 

- discard this PDCP SDU; 

- else if Next_PDCP_RX_SN - received PDCP SN > Reordering_Window: 

increment RX_HFN by one; 

- use COUNT based on RX_HFN and the received PDCP SN for deciphering the PDCP PDU; 

- set Next_PDCP_RX_SN to the received PDCP SN + 1 ; 

- else if received PDCP SN - Next_PDCP_RX_SN >= Reordering_Window: 

- use COUNT based on RX_HFN - 1 and the received PDCP SN for deciphering the PDCP PDU; 

- else if received PDCP SN >= Next_PDCP_RX_SN: 

- use COUNT based on RX_HFN and the received PDCP SN for deciphering the PDCP PDU; 

- set Next_PDCP_RX_SN to the received PDCP SN + 1 ; 

- if Next_PDCP_RX_SN is larger than Maximum_PDCP_SN: 

- set Next_PDCP_RX_SN to 0; 
increment RX_HFN by one; 

- else if received PDCP SN < Next_PDCP_RX_SN: 

- use COUNT based on RX_HFN and the received PDCP SN for deciphering the PDCP PDU; 

if the PDCP PDU has not been discarded in the above: 

perform deciphering and header decompression (if configured) for the PDCP PDU as specified in the 
subclauses 5.6 and 5.5.5, respectively; 

- if a PDCP SDU with the same PDCP SN is stored: 

- discard this PDCP SDU; 
else: 

- store the PDCP SDU; 

if the PDCP PDU received by PDCP is not due to the re-establishment of lower layers: 

deliver to upper layers in ascending order of the associated COUNT value: 

all stored PDCP SDU(s) with an associated COUNT value less than the COUNT value associated 
with the received PDCP SDU; 

all stored PDCP SDU(s) with consecutively associated COUNT value(s) starting from the COUNT 
value associated with the received PDCP SDU; 

- set Last_Submitted_PDCP_RX_SN to the PDCP SN of the last PDCP SDU delivered to upper layers; 

- else if received PDCP SN = Last_Submitted_PDCP_RX_SN + 1 or received PDCP SN = 
Last_Submitted_PDCP_RX_SN - Maximum_PDCP_SN: 

deliver to upper layers in ascending order of the associated COUNT value: 

all stored PDCP SDU(s) with consecutively associated COUNT value(s) starting from the COUNT 
value associated with the received PDCP SDU; 

- set Last_Submitted_PDCP_RX_SN to the PDCP SN of the last PDCP SDU delivered to upper layers. 
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7.3.5.5.3 Test description 

7.3.5.5.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 and Cell 2 
UE: 
None. 
Preamble: 

The UE is in state Loopback Activated (state 4) according to [18]. 
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7.3.5.5.3.2 



Test procedure sequence 

Table 7.3.5.5.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The Next PDCP TX SN is set to "0". The SS 
creates a PDCP Data PDU#0. 


- 


- 


- 


- 


2 


The SS sends the PDCP Data PDU#0 via 

RLC-AIVI RB with the following content to the 

UE: 

PDCP Data PDU #0 ( 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN=0) 

(Note 1) 


<~ 


PDCP DATA PDU#0 






3 


The UE transmits a PDCP Data PDU via RLC- 

AM RB with the following content back to the 

SS 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN=0 

data: previously received packet in PDCP Data 

PDU#0 

(Note 2)(Note 2a) 


-> 


PDCP DATA PDU #0 






4 


Next_PDCP_TX_SN is set to 1 . 

The SS creates a PDCP Data PDU#1 (not 
transmitted). 










5 


The Next_PDCP_TX_SN is set to "2". The SS 
creates a PDCP Data PDU #1 . 


- 


- 


- 


- 


6 


The SS sends the PDCP Data PDU#2 via 

RLC-AM RB with the following content to the 

UE: 

PDCP Data PDU#1; 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN=2 

(Note 3) 


<- 


PDCP DATA PDU #2 






7 


Check: Does the UE transmit a PDCP DATA 
PDU#2? 


-> 


PDCP DATA PDU#2 


1 


F 


8 


The SS requests UE to make a handover to 
Cell 2 with the RRCConnectionReconfiguration 
message. 


<— 


RRCConnectionReconfiguration 






9 


The UE transmits a 

RRCConnectionReconfigurationComplete 
message in the new cell. 


~> 


RRCConnectionReconfigurationC 
omplete 






10 


The SS sends the PDCP Data PDU#0 via 

RLC-AM RB with the following content to the 

UE: 

PDCP Data PDU #0( 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN=0) 

(Note 4) 


<- 


PDCP DATA PDU #0 






11 


Check: Does the UE transmit PDCP Data PDU 

via RLC-AIVI RB with the following content 

back to the SS? 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN=0 

data: previously received packet in PDCP Data 

PDU#0 


-> 


PDCP DATA PDU #0 


1 


F 


12 


The SS sends the PDCP Data PDU#1 via 

RLC-AIVI RB with the following content to the 

UE: 

PDCP Data PDU#1 ( 


<~ 


PDCP DATA PDU #1 
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D/C field = 1 (PDCP Data PDU) and PDCP 
SN=1) 

(Note 5) 










13 


Checl<: Does the UE transmit a PDCP Data 

PDU via RLC-AIVI RB with the following 

content back to the SS? 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN=1 

data: previously received packet in PDCP Data 

PDU#1 


~> 


PDCP DATA PDU #1 


1 


P 


14 


Check: Does the UE transmit PDCP Data PDU 

via RLC-AIVI RB with the following content 

back to the SS? 

D/C field = 1 (PDCP Data PDU) and PDCP 

SN=2 

data: previously received packet in PDCP Data 

PDU#2 


-> 


PDCP DATA PDU #2 


1 


P 


Note 1 : PDCP Data PDU#0 is sent in RLC PDU#0: SN=0. 

Note 2: The SS acl<nowledges the received data. 

Note 2a: The SS sends RLC ACK to the UE 

Note 3: PDCP Data PDU #2 is sent in RLC PDU#2: SN=2 

Note 4: PDCP Data PDU #0 is sent in RLC PDU#0: SN=0 

Note 5: PDCP Data PDU #1 is sent in RLC PDU #1 :SN = 1 



7.3.5.5.3.3 Specific message contents 

Table 7.3.5.5.3.3-1 : RRCConnectionReconfiguration (Step 4, Table 7.3.5.5.3.2-1) 



Derivation Path: 36.508, Table 4.6.1-8 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 
criticalExtensions CHOICE { 
c1 CHOICE! 
rrcConnectionReconfiguration-r8 SEQUENCE { 
mobilityControllnfo SEQUENCE { 

targetPhysCellld 

} 
radioResourceConfigDedicated { 

} 
} 
} 
} 
} 


PhysicalCellldentity 
of Cell 2 


MobilityContr 
ollnfo-HQ 





7.3.6 
7.3.6.1 

7.3.6.1.1 
(1) 



PDCP Others 
PDCP Discard 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { the Discard Timer for a PDCP SDU expires 
then { UE discards the corresponding PDCP SDU 



7.3.6.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.323 clause 5.9. 
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[TS 36.323, clause 5.4] 

When the Discard_Timer expires for a PDCP SDU, or the successful delivery of a PDCP SDU is confirmed by PDCP 
status report, the UE shall discard the PDCP SDU along with the corresponding PDCP PDU. If the corresponding 
PDCP PDU has already been submitted to lower layers the discard is indicated to lower layers. 



7.3.6.1.3 
7.3.6.1.3.1 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble 



Test description 
Pre-test conditions 



The UE is in state Loopback Activated (state 4) according to [18 with the exceptions listed in table 7.3.6.1.3.1-1 
applicable for the configured UM DRB and table 7.3.6.1.3.1-2 for SR configuration. 

The condition SRB2-DRB(1,1) is used for step 8 in 4.5.3A.3 according to [18]. 

Table 7.3.6.1.3.1-1: PDCP Settings 



Parameter 


Value 


Discard Timer 


500ms 



Table 7.3.6.1.3.1-2: SchedulingRequest-Config (preamble Table 4.5.3.3-1 : Step8) 



Derivation Path: 36.508 Table 4.6.3-20 


Information Element 


Value/remark 


Comment 


Condition 


dsr-TransMax 


n64 
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7.3.6.1.3.2 



Test procedure sequence 

Table 7.3.6.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS creates 5 PDCP Data PDUs and the 
Next PDCP TX SN is setto "0". 


- 




- 


- 


2 


The SS ignores scheduling requests and does not 
allocate any uplink grant. 


- 


- 


- 


- 




EXCEPTION: Step 3 shall be repeated for k=0 to 2 
(increment=1). 










3 


The SS sends a PDCP Data PDU via RLC-UM RB 

with the following content to the UE: 

D/C field = 1 (PDCP Data PDU) and PDCP SN = k 

After having sent a PDU, the SS sets 

Next PDCP TX SN = k+1. 


<— 


PDCP DATA PDU (SN=k) 






4 


Wait for Discard_Timer 

Note: According to TS36.508, timer tolerance 
should be 1 0% of Discard_Timer or 5 x RTT, 
whichever is greater. RTT = 8 TTIs for FDD and 
RTT =16 1 Ms for TDD 












EXCEPTION: Step 5 shall be repeated for k=3 to 4 
(increment=1). 










5 


The SS sends a PDCP Data PDU via RLC-UM RB 

with the following content to the UE: 

D/C field = 1 (PDCP Data PDU) and PDCP SN = k 

After having sent a PDU, the SS set 

Next PDCP TX SN = k+1. 


<— 


PDCP DATA PDU (SN=k) 






6 


The SS resumes normal UL grant allocation. 


- 




- 


- 


7 


Check: Does UE transmit a PDCP Data PDU with 
PDCP SN = 3? 


— > 


PDCP Data PDU (SN = 3) 


1 


P 


8 


Check: Does UE transmit a PDCP Data PDU with 
PDCP SN = 4? 


— > 


PDCP Data PDU (SN = 4) 


1 


P 



7.3.6.1.3.3 
None. 



Specific message contents 
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8 RRC 

8.1 RRC connection management procedures 

8.1.1 Paging 

8.1 .1 .1 RRC / Paging for connection in idle mode 

8.1.1.1.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE receives a Paging message including an ue-Identity set an unmatched S-TMSI i.e. other 
than the one allocated to the UE at the UE registration procedure } 
then { UE does not establish an RRC connection } 

} 

(2) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE receives a Paging message including an ue-Identity set to the S-TMSI which was allocated 
to the UE at the UE registration procedure } 
then { UE establishes an RRC connection } 
} 

8.1 .1 .1 .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.2.3, 
5.3.3.2, 5.3.3.3 and 5.3.3.4. 

[TS 36.331, clause 5.3.2.3] 

Upon receiving the Paging message, the UE shall: 

1> if in RRC_IDLE, for each of the PagingRecord, if any, included in the Paging message: 

2> if the ue-Identity included in the PagingRecord matches one of the UE identities allocated by upper layers: 

3> forward the ue-Identity, and the cn-Domain to the upper layers. 

[TS 36.331, clause 5.3.3.2] 

The UE initiates the procedure when upper layers request establishment of an RRC connection while the UE is in 
RRCJDLE. 

Upon initiation of the procedure, the UE shall: 

l>if access to the cell, as specified above, is not barred: 

2> apply the default physical channel configuration as specified in 9.2.4; 

2> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

2> apply the default MAC main configuration as specified in 9.2.2; 

2> apply the CCCH configuration as specified in 9.1.1.2; 

2> apply the timeAlignmentTimerCommon included in SystemInfoBlockType2; 
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2> start timer T300; 

2> initiate transmission of the RRCConnectionRequest message in accordance with 5.3.3.3; 

NOTE 2: Upon initiating the connection estabUshment procedure, the UE is not required to ensure it maintains up 
to date system information appHcable only for UEs in RRC_IDLE state. However, the UE needs to 
perform system information acquisition upon cell re-selection. 

[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 

1> set the ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 

2> else: 

3> draw a random value in the range .. 2'*"-l and set the ue-Identity to this value; 

NOTE 1 : Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 

1> set the establishmentCause in accordance with the information received from upper layers; 

The UE shall submit the RRCConnectionRequest message to lower layers for transmission. 

The UE shall continue cell re-selection related measurements as well as cell re-selection evaluation. If the conditions for 
cell re-selection are fulfilled, the UE shall perform cell re-selection as specified in 5.3.3.5. 

[TS 36.331, clause 5.3.3.4] 

NOTE: Prior to this, lower layer signalling is used to allocate a C-RNTI. For further details see TS 36.321 [6]; 

The UE shall: 

1> perform the radio resource configuration procedure in accordance with the received 
radioResourceConfigDedicated and as specified in 5.3.10; 

1> if stored, discard the cell reselection priority information provided by the idleModeMobilityControlInfo or 
inherited from another RAT; 

1> stop timer T300; 

1> stop timer T302, if running; 

1> stop timer T303, if running; 

1> stop timer T305, if running; 

1> perform the actions as specified in 5.3.3.7; 

1> stop timer T320, if running; 

1> enter RRC_CONNECTED; 

1> stop the cell re-selection procedure; 

1> set the content of RRCConnectionSetupComplete message as follows: 

2> set the selectedPLMN-Identity to the PLMN selected by upper layers (see TS 23.122 [11], TS 24.301 [35]) 
from the PLMN(s) included in the plmn-IdentityList in SystemlnformationBlockTypel; 

2> if upper layers provide the 'Registered MME', include and set the registeredMME as follows: 
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3> if the PLMN identity of the 'Registered MME' is different from the PLMN selected by the upper layers: 

4> include the plmnldentity in the registeredMME and set it to the value of the PLMN identity in the 
'Registered MME' received from upper layers; 

3> set the mmegi and the mmec to the value received from upper layers; 

2> set the dedicatedlnfoNAS to include the information received from upper layers; 

2> submit the RRCConnectionSetupComplete message to lower layers for transmission, upon which the 
procedure ends. 



Test description 
Pre-test conditions 



8.1.1.1.3 
8.1.1.1.3.1 
System Simulator: 

- Cell 1. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
8.1 .1 .1 .3.2 Test procedure sequence 

Table 8.1 .1 .1 .3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits a Paging message including 
an unmatched identity (incorrect S-TIVISI). 


<— 


Paging 


- 


- 


2 


Check: Does the UE transmit an 
RRCConnectionRequest message within 5 s? 


~> 


RRCConnectionRequest 


1 


F 


3 


The SS transmits a Paging message including 
a matched identity. 


<~ 


Paging 


- 


- 


4 


Check: Does the UE transmit an 
RRCConnectionRequest message? 


-> 


RRCConnectionRequest 


2 


P 


5 


The SS transmits an RRCConnectionSetup 
message. 


<— 


RRCConnectionSetup 


- 


- 


6 


Check: Does the UE transmit an 
RRCConnectionSetupComplete message 
Including SERVICE REQUEST to confirm the 
successful completion of the connection 
establishment? 


~> 


RRCConnectionSetupCompiete 


2 


P 


6A- 
6D 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 










7 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1 ? 






1,2 
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8.1.1.1.3.3 



Specific message contents 

Table 8.1 .1 .1 .3.3-1 : Paging (step 1 , Table 8.1 .1 .1 .3.2-1) 



Derivation Path: 36.508 Table 4.6.1-7 


Information Element 


Value/remark 


Comment 


Condition 


Paging ::= SEQUENCE { 








pagingRecordList SEQUENCE (SIZE 
(1 ..maxPageRec)) QF SEQUENCE { 


1 entry 






ue-ldentity[1]CHQICE{ 








s-TMSI SEQUENCE { 








mmec 


Set to the different value 
from the S-TMSI of the 
UE 






m-TMSI 


Set to the different value 
from the S-TMSI of the 
UE 






} 








} 








} 








1 








Table 8.1.1.1.3.3-2: RRCConnectionRequest {step 4, Table 8.1.1.1.3.2-1) 


Derivation Path: 36.508 Table 4.6.1-16 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








establishmentCause 


mt-Access 






1 








} 








} 









8.1.1.2 



8.1.1.2.1 



RRC / Paging for notification of BCCH modification in idle mode 
Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE receives a Paging message including a systemlnfoModification } 

then { UE re-acquires and applies the new system information about the correct prach-Configlndex 
in random access | 



8.1.1.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.2.3, 
5.2.2.3, and 5.2.2.4. 

[TS 36.331, clause 5.3.2.3] 

Upon receiving the Paging message, the UE shall: 

1> if in RRC_1DLE, for each of the PagingRecord, if any included in the Paging message: 

2> if the ue-Identity included in the PagingRecord matches one of the UE identities allocated by upper layers: 

3> forward the ue-Identity and the cn-Domain to the upper layers; 

1> if the systemlnfoModification is included: 
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2> re-acquire the required system information using the system information acquisition procedure as specified in 

5.2.2. 



[TS 36.331, clause 5.2.2.3] 

The UE shall: 

1> ensure having a valid version, as defined below, of (at least) the following system information, also referred to as 
the 'required' system information: 

2> ifinRRC_lDLE: 

3> the MasterlnformationBlock and SystemlnformationBlockTypel as well as SystemlnformationBlockTypel 
through SystemlnformationBlockTypeS, depending on support of the concerned RATs; 



[TS 36.331, clause 5.2.2.4] 
The UE shall: 

1> apply the specified BCCH configuration defined in 9. 1 . 1 . 1 ; 

1> if the procedure is triggered by a system information change notification: 

2> start acquiring the required system information, as defined in 5.2.2.3, from the beginning of the modification 
period following the one in which the change notification was received; 

The UE may apply the received SIBs immediately, i.e. the UE does not need to delay using a SIB until all SI messages 
have been received. The UE may delay applying the received SIBs until completing lower layer procedures associated 
with a received or a UE originated RRC message, e.g. an ongoing random access procedure. 

NOTE 3: While attempting to acquire a particular SIB, if the UE detects from schedulinglnfoList that it is no longer 
present, the UE should stop trying to acquire the particular SIB. 

8.1.1.2.3 Test description 

8.1.1.2.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 

UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



534 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



8.1.1.2.3.2 



Test procedure sequence 

Table 8.1.1.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits a Paging message including 
a matclied identity. 


<— 


Paging 


- 


- 


2 


Checl<: Does tlie UE transmit an 
RRCConnectionRequest message? 


-> 


RRCConnectionRequest 


1 


P 


3 


The SS transmits an RRCConnectionSetup 
message. 


<- 


RRCConnectionSetup 


- 


- 


3A 


The UE transmits an 

RRCConnectionSetupComplete m essag e . 
This message includes a SERVICE REQUEST 
message. 


-> 


RRCConnectionSetupCompiete 






SB 


The SS transmits a SecurityModeCommand 
message. 


<— 


SecurityModeCommand 


- 


- 


3C 


The UE transmits a SecurityModeComplete 
message. 


-> 


SecurityModeComplete 


- 


- 


3D 


The SS transmits an 
RRCConnectionReconfiguration message. 


<— 


RRCConnectionReconfiguration 


- 


- 


3E 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3F 


The SS transmits an RRCConnectionRelease 
message. 


<— 


RRCConnectionRelease 


- 


- 


3G 


Wait for 5 s for the UE to enter E-UTRA 
RRC IDLE state. 


- 


- 


- 


- 


4 


The SS changes the prach-Configlndex in the 
system information 


- 


- 


- 


- 


5 


The SS transmits a Paging message including 
a systemlnfoModification. 


<- 


Paging 


- 


- 


6 


Wait for 15s for the UE to receive system 
information. 


- 


- 


- 


- 


7 


The SS transmits a Paging message including 
a matched identity. 


<— 


Paging 


- 


- 


7A 


Check: Does the UE re-transmit a random 
access using prach-Configlndex given in step 
4? 






1 


P 


8 


The UE transmit an RRCConnectionRequest 
message. 


-> 


RRCConnectionRequest 


- 


- 


9 


The SS transmits an RRCConnectionSetup 
message. 


<— 


RRCConnectionSetup 


- 


- 


9A 


The UE transmits an 

RRCConnectionSetupCompiete m essag e . 
This message includes a SERVICE REQUEST 
message. 


~> 


RRCConnectionSetupCompiete 






9B 


The SS transmits a Securityl\/lodeCommand 
message. 


<- 


SecurityModeCommand 


- 


- 


9C 


The UE transmits a SecurityModeConnplete 
message. 


-> 


SecurityModeComplete 


- 


- 


9D 


The SS transmits an 
RRCConnectionReconfiguration message. 


<- 


RRCConnectionReconfiguration 


- 


- 


9E 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






9F 


The SS transmits an RRCConnectionRelease 
message. 


<- 


RRCConnectionRelease 


- 


- 


9G 


Wait for 5 s for the UE to enter E-UTRA 
RRC IDLE state. 


- 


- 


- 


- 


10 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.2 
indicate that the UE is in E-UTRA RRCJDLE 
state on Cell 1 ? 






1 
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8.1 .1 .2.3.3 Specific message contents 

Table 8.1 .1 .2.3.3-1 : RRCConnectionRequest (step 2 and step 8, Table 8.1 .1 .2.3.2-1) 



Derivation Path: 36.508 Table 4.6.1-16 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








establishmentCause 


mt-Access 






} 








} 








} 









Table 8.1.1.2.3.3-2A: RRCConnectionReconfiguration (step 3D and step 9D, Table 8.1.1.2.3.2-1) 

Derivation Path: 36.508 Table 4.6.1-8, condition SRB2-DRB(1 , 0) 



Table 8.1 .1 .2.3.3-2: Paging (step 5, Table 8.1 .1 .2.3.2-1) 



Derivation Path: 36.508 Table 4.6.1-7 


Information Element 


Value/remark 


Comment 


Condition 


Paging ::= SEQUENCE { 








pagingRecordList 


Not present 






systemlnfoModification 


true 






} 









Table 8.1.1.2.3.3-3: SystemlnformationBlockType2 {step 6, Table 8.1.1.2.3.2-1) 



Derivation Path: 36.508 Table 4.4.3.3-1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








radioResourceConfigCommon SEQUENCE { 








prach-Config SEQUENCE { 








prach-Configlnfo SEQUENCE { 








prach-Configlndex 


5 




FDD 


prach-Configlndex 


FFS 


Set to index which 
denote subframe 
numbers different 
from the default 
one. 


TDD 


1 








} 








} 








} 









Condition 


Explanation 


FDD 


FDD cell environment 


TDD 


TDD cell environment 



8.1.1.3 
8.1.1.3.1 
(1) 



RRC / Paging for connection in idle mode / Multiple paging records 
Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE receives a Paging message including only unmatched identities 
then { UE does not establish any RRC connection } 
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(2) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE receives a Paging message including any matched indentity } 
then { UE establishes an RRC connection } 
} 

8.1.1.3.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clause 5.3.2.3, 
5.3.3.2, 5.3.3.3 and 5.3.3.4. 

[TS 36.331, clause 5.3.2.3] 

Upon receiving the Paging message, the UE shall 

1> If in RRC_IDLE, for each of the Paging records included in the Paging message: 

2> If the ue-identity included in the pagingRecordList matches one of the UE identities allocated by upper 
layers: 

3> forward the ue-Identity, the cn-Domain and the pagingCause to the upper layers. 



[TS 36.331, clause 5.3.3.2] 

The UE initiates the procedure when upper layers request establishment of an RRC connection while the UE is in 
RRCJDLE state. 

Upon initiation of the procedure, the UE shall: 



1> If access to the cell, as specified above, is not barred: 

2> apply the default configuration applicable for the antennalnformation as specified in 9.2.3, until explicitly 
receiving a configuration; 

2> start timer T300; 

2> initiate transmission of the RRCConnectionRequest message in accordance with 5.3.3.3; 

NOTE 2: Upon initiating the connection establishment procedure, the UE is not required to ensure it maintains up 
to date system information applicable only for UEs in RRC_1DLE state. However, the UE needs to 
perform system information acquisition upon re-selection. 



[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 
1> set the IE ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 
2> else 

3> draw a random value and set the ue-Identity to this value; 
NOTE 1 Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 
1> Set the establishmentCause in accordance with the information received from upper layers; 
The UE shall submit the RRCConnectionRequest message to lower layers for transmission. 
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The UE shall continue cell re-selection related measurements as well as cell re-selection evaluation. If the conditions for 
cell re-selection are fulfilled, the UE shall perform cell re-selection as specified in 5.3.3.5. 

[TS 36.331, clause 5.3.3.4] 

NOTE: Prior to this, lower layers allocate a C-RNTI. For further details see TS 36.321 [6]; 
The UE shall: 

1> establish SRBl in accordance with the received radioResourceConfiguration and as specified in 5.3.10; 

1> if stored, discard the Inter-frequency priority information and the Inter- RAT priority information provided via 
dedicated signalling using the IE idleModeMobilityControlInfo; 

1> stop timer T300; 

1> stop timer T302, if running; 

1> stop timer T303, if running; 

1> stop timer T305, if running; 

1> stop timer T320, if running; 

1> enter RRC_CONNECTED state; 

1> stop the cell re-selection procedure; 

1> set the content of RRCConnectionSetupComplete message as follows: 

2> set the selectedPLMN-Identity to the PLMN selected by upper layers [TS 23.122, TS 24.008] from the 
PLMN(s) included in the plmn-IdentityList broadcast, within SystemlnformationBlockTypel , in the cell 
where the RRC connection was established; 

2> if upper layers provide the 'Registered MME', set the registeredMME as follows: 

3> if the PLMN identity of the 'Registered MME' is different from the PLMN selected by the upper layers, 
set the IE plmnldentity to the value received from upper layers; 

3> set the lEs mmegi and mmec to the value received from upper layers; 

2> set the nas-Dedicatedlnformation to include the information received from upper layers; 

2> submit the RRCConnectionSetupComplete message to lower layers for transmission, upon which the 
procedure ends. 

8.1.1.3.3 Test description 

8.1.1.3.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 

UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
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8.1.1.3.3.2 



Test procedure sequence 

Table 8.1.1.3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits a Paging message including 
only unmatched identities (incorrect IMSI). 


<— 


Paging 


1 


- 


2 


Check: Does the UE transmit an 
RRCConnectionRequest message within 10s? 


-> 


RRCConnectionRequest 


1 


F 


3 


The SS transmits a Paging message including 
two unmatched identities and a matched 
identity. 


<- 


Paging 


2 




4 


Check: Does the UE transmit an 
RRCConnectionRequest message? 


-> 


RRCConnectionRequest 


2 


P 


5 


The SS transmits an RRCConnectionSetup 
message. 


<— 


RRCConnectionSetup 


- 


- 


6 


The UE transmits an 

RRCConnectionSetupComplete message 
including SERVICE REQUEST to confirm the 
successful completion of the connection 
establishment. 


-> 


RRCConnectionSetupComplete 






6A- 
6D 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 










7 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1 ? 






1,2 


P 



8.1.1.3.3.3 



Specific message contents 

Table 8.1 .1 .3.3.3-1 : Paging (step 1 , Table 8.1 .1 .3.3.2-1) 



Derivation Path: 36.508 Table 4.6.1-7 


Information Element 


Value/remark 


Comment 


Condition 


Paging ::= SEQUENCE { 








pagingRecordList SEQUENCE (SIZE 
(1 ..maxPageRec)) QF SEQUENCE { 


3 entries 






ue-ldentity[1]CHQICE{ 








imsi 


Set to the different value 
from the IMSI of the UE 






} 








cn-Domain [1] 


ps 






ue-ldentity[2] CHQICE { 








imsi 


Set to the different value 
from the IMSI of the UE 






} 








cn-Domain [2] 


ps 






ue-ldentity[3] CHQICE { 








Imsi 


Set to the different value 
from the IMSI of the UE 






} 








cn-Domain [3] 


ps 






1 








} 








} 
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Table 8.1.1.3.3.3-2: Paging {step 3, Table 8.1.1.3.3.2-1) 



Derivation Path: 36.508 Table 4.6.1-7 | 


Information Element 


Value/remark 


Comment 


Condition 


Paging ::= SEQUENCE { 








pagingRecordList SEQUENCE (SIZE 
(1 ..maxPageRec)) QF SEQUENCE { 


3 entries 






ue-ldentity[1]CHQICE{ 








imsi 


Set to the different value 
from the IMSI of the UE 






1 








cn-Domain [1] 


ps 






ue-ldentity[2] CHQICE { 








Imsi 


Set to the different value 
from the IMSI of the UE 






1 








cn-Domain [2] 


ps 






ue-ldentity[3] CHQICE { 








imsi 


Set to the value of the 
IMSI of the UE 






1 








cn-Domain [3] 


ps 






} 








} 








} 









Table 8.1.1.3.3.3-3: RRCConnectionRequest (step 4, Table 8.1.1.3.3.2-1) 



Derivation Path: 36.508 Table 4.6.1-16 | 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








establishmentCause 


mt-Access 






1 








} 








} 









8.1 .1 .4 RRC / Paging for connection in idle mode / Shared network environment 

Editor's Note: This section is based on 36.331 v8.3.0 i.e. after RAN#41. 



8.1.1.4.1 



(1) 



Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state having been registered in the TA of the current cell which has 
broadcasted a SystemlnformationBlockTypel message including multiple PLMN identities } 
ensure that { 

when { UE receives a Paging message including an IE ue-Identity set to the S-TMSI which was 
allocated to the UE at the UE registration procedure } 
then { UE establishes an RRC connection } 



8.1.1.4.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.2.3, 
5.3.3.2, 5.3.3.3 and 5.3.3.4. 

[TS 36.331, clause 5.3.2.3] 

Upon receiving the Paging message, the UE shall: 

1> If in RRC_1DLE, for each of the Paging records included in the Paging message: 
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2> If the ue-identity included in the pagingRecordList matches one of the UE identities allocated by upper 
layers: 

3> forward the ue-Identity, the cn-Domain and the pagingCause to the upper layers. 



[TS 36.331, clause 5.3.3.2] 

The UE initiates the procedure when upper layers request establishment of an RRC connection while the UE is in 
RRCJDLE state. 

Upon initiation of the procedure, the UE shall: 



1> If access to the cell, as specified above, is not barred: 

2> apply the default configuration applicable for the antennalnformation as specified in 9.2.3, until explicitly 
receiving a configuration; 

2> start timer T300 

2> initiate transmission of the RRCConnectionRequest message in accordance with 5.3.3.3; 

NOTE 2: Upon initiating the connection establishment procedure, the UE is not required to ensure it maintains up 
to date system information applicable only for UEs in RRC_IDLE state. However, the UE needs to 
perform system information acquisition upon re-selection. 



[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 

1> set the IE ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 

2> else 

3> draw a random value and set the ue-Identity to this value; 

NOTE 1 Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 

1> Set the establishmentCause in accordance with the information received from upper layers; 

The UE shall submit the RRCConnectionRequest message to lower layers for transmission. 

The UE shall continue cell re-selection related measurements as well as cell re-selection evaluation. If the conditions for 
cell re-selection are fulfilled, the UE shall perform cell re-selection as specified in 5.3.3.5. 

[TS 36.331, clause 5.3.3.4] 

NOTE: Prior to this, lower layers allocate a C-RNTI. For further details see TS 36.321 [6]; 
The UE shall: 

1> establish SRBl in accordance with the received radioResourceConfiguration and as specified in 5.3.10; 

1> If stored, discard the Inter-frequency priority information and the Inter-RAT priority information provided via 
dedicated signalling using the IE idleModeMobilityControlInfo; 

1> stop timer T300; 

1> stop timer T302, if running; 
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1> stop timer T303, if running; 

1> stop timer T305, if running; 

1> stop timer T320, if running; 

1> enter RRC_CONNECTED state; 

1> stop the cell re-selection procedure; 

1> set the content of RRCConnectionSetupComplete message as follows: 

2> set the selectedPLMN-Identity to the PLMN selected by upper layers [TS 23.122, TS 24.008] from the 
PLMN(s) included in the plmn-IdentityList broadcast, within SystemlnformationBlockTypel , in the cell 
where the RRC connection was established; 

2> if upper layers provide the 'Registered MME', set the registeredMME as follows: 

3> if the PLMN identity of the 'Registered MME' is different from the PLMN selected by the upper layers, 
set the IE plmnldentity to the value received from upper layers; 

3> set the lEs mmegi and mmec to the value received from upper layers; 

2> set the nas-Dedicatedlnformation to include the information received from upper layers; 

2> submit the RRCConnectionSetupComplete message to lower layers for transmission, upon which the 
procedure ends. 

8.1.1.4.3 Test description 

8.1.1.4.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 

UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
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8.1.1.4.3.2 



Test procedure sequence 

Table 8.1.1.4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits a Paging message including 
a matclied identity. 


<— 


Paging 


- 


- 


2 


Checl<: Does tlie UE transmit an 
RRCConnectionRequest message? 


-> 


RRCConnectionRequest 


1 


P 


3 


The SS transmit an RRCConnectionSetup 
message. 


<- 


RRCConnectionSetup 


- 


- 


4 


Checl<: Does the UE transmit an 
RRCConnectionSetupComplete message 
including SERVICE REQUEST and an IE 
se/ecfedPLMA/-/cfenf/fy corresponding to the 
PLIVIN on which the UE has been registered to 
confirm the successful completion of the 
connection establishment? 


-> 


RRCConnectionSetupCompiete 


1 


P 


4A- 
4D 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 










5 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1 ? 






1 





8.1 .1 .4.3.3 Specific message contents 

Editors note:To be updated according to agreed RRC message structure 

Table 8.1.1.4.3.3-1 : SystemlnformationBlockTypel (all steps, Table 8.1.1.4.3.2-1) 



Derivation Path: 36.508 Table 4.4.3.2-3 | 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnformation SEQUENCE { 








pImn-ldentityList SEQUENCE (SIZE (1 ..6)) OF 
SEQUENCE { 


2 entries 






plmn-ldentity[1] SEQUENCE { 








mcc 


FFS 






mnc 


FFS 






1 








cellReservedForQperatorUse[1] 


notReserved 






Plmn-ldentity[2] SEQUENCE { 








mcc 


FFS 






mnc 


FFS 






1 








cellReservedForQperatorUse[2] 


notReserved 






} 








} 








} 
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Table 8.1.1.4.3.3-2: RRCConnectionRequest (step 2, Table 8.1.1.4.3.2-1) 



Derivation Path: 36.508 Table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








establishmentCause 


mt-Access 






} 








1 








} 








Table 8.1.1.4.3.3-3: RRCConnectionSetupComplete (step 4, Table 8.1.1.4.3.2-1) 


Derivation Path: 36.508, Table 4.6.1-17 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionSetupComplete ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionSetupComplete-r8 SEQUENCE { 








selectedPLIVIN-ldentity 


Set to the PLMN selected 
by upper layers 






1 








1 








} 








} 









8.1.1.6 



8.1.1.6.1 



RRC / BCCH modification in connected mode 
Test Purpose (TP) 



with { the UE is in E-UTRA RRC_CONNECTED } 
ensure that { 

when { the UE receives a Paging message including the systemlnfoModification } 

then { the UE re-acquires the MasterlnformationBlock, SystemlnformationBlockTypel and 
SystemInformationBlockType2 } 



8.1.1.6.2 



Conformance requirements 



References: The conformance requirements covered in the present test case are specified in: TS 36.331 clauses 5.3.2.3, 
5.2.2.3 and 5.2.2.4. 

[TS 36.331, clause 5.3.2.3] 

Upon receiving the Paging message, the UE shall: 



1> if the systemlnfoModification is included: 

2> re-acquire the required system information using the system information acquisition procedure as specified in 

5.2.2. 



[TS 36.331, clause 5.2.2.3] 

The UE shall: 

1> ensure having a valid version, as defined below, of (at least) the following system information, also referred to as 
the 'required' system information: 



2> if in RRC CONNECTED: 
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3> the MasterlnformationBlock, SystemlnformationBlockType 1 and SystemInformationBlockType2 as well as 
SystemlnformationBlockTypeS, depending on support of CDMA2000; 



[TS 36.331, clause 5.2.2.4] 
The UE shall: 

1> apply the specified BCCH configuration defined in 9. 1 . 1 . 1 ; 

1> if the procedure is triggered by a system information change notification: 

2> start acquiring the required system information, as defined in 5.2.2.3, from the beginning of the modification 
period following the one in which the change notification was received; 

NOTE 1 : The UE continues using the previously received system information until the new system information has 
been acquired. 



The UE may apply the received SIBs immediately, i.e. the UE does not need to delay using a SIB until all SI messages 
have been received. The UE may delay applying the received SIBs until completing lower layer procedures associated 
with a received or a UE originated RRC message, e.g. an ongoing random access procedure. 

NOTE 2: While attempting to acquire a particular SIB, if the UE detects from schedulinglnfoList that it is no longer 
present, the UE should stop trying to acquire the particular SIB. 



8.1.1.6.3 


Test description 


8.1.1.6.3.1 


Pre-test conditions 


System Simulator: 




- Cell 1. 




UE: 




None. 




Preamble: 





The UE is in state Generic RB Established (state 3) according to [18], and using the condition 
no_periodic_BSR_or_PHR. 
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8.1.1.6.3.2 



Test procedure sequence 

Table 8.1.1.6.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits a Paging message paging 
occasion including a systemlnfoModification. 


<— 


Paging 


- 


- 


2 


From the begining of the next modification 
period the SS transmits a modified 
SystemlnformationBlockTypel and 
SystemlnformationBlockType2 as specified. 










3 


During the first on duration period after the end 
of the modification period where 
SystemlnformationBlockType2 was modified 
(see step 2), the SS transmits a PDCCH order 
including a dedicated preamble. 










4 


Check: Does the UE initiate a random access 
procedure using prach-Configlndex g\\/en in 
step 2 (i.e. in subframe number 7 and not 1)? 






1 


P 


5 


The SS transmits Random Access Response 
with RAPID corresponding to preamble in 
steps 3 and 4. 











8.1.1.6.3.3 



Specific message contents 



Table 8.1.1.6.3.3-1 : RRCConnectionReconfiguration (preamble, step 8, TS 36.508 table 

8.1.1.6.34.5.3.3-1) 



Derivation path: 36.508 table 4.6.1-8 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 
criticalExtensions CHOICE { 
c1 CHOICE! 
rrcConnectionReconfiguration-r8 { 
radioResourceConfigDedicated { 
mac-MainConfig { 
explicitValue { 

Drx-Config 
} 
} 
} 
} 
} 
} 
} 


Not present 







Table 8.1.1.6.3.3-2: SystemlnformationBlockTypel (step 2, table 8.1.1.6.3.2-1) 



Derivation path: 36.508 Table 4.4.3.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 
systemlnfoValueTag 
1 


1 


Default value is 
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Table 8.1 .1 .6.3.3-3: SystemlnformationBlockType2 (step 2, table 8.1 .1 .6.3.2-1 ) 



Derivation path: 36.508 Table 4.4.3.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlocl<Type2 ::= SEQUENCE { 
radioResourceConfigCommon SEQUENCE { 
prach-Config SEQUENCE { 
prach-Configlnfo SEQUENCE { 
prach-Configlndex 
prach-Configlndex 
} 
} 
} 
1 


5 
53 


The default is 3 
The default is 51 


FDD 

TDD 



8.1 .2 RRC connection establishment 

8.1 .2.1 RRC connection establishment / Ks=1 .25/ Success 

8.1.2.1.1 Test Purpose (TP) 

(1) 

with {UE in E-UTRA RRC_IDLE state} 
ensure that { 

when { UE is requested to make an outgoing call } 
then { UE establishes an RRC Connection } 



8.1.2.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.331 clauses 5.3.3.2, 
5.3.3.3 and 5.3.3.4. 

[TS 36.331, clause 5.3.3.2] 

The UE initiates the procedure when upper layers request establishment of a signalling connection while the UE is in 
RRCJDLE state. 

Upon initiation of the procedure, the UE shall: 

1> If access to the cell, as specified above, is not barred: 

2> apply the default physical channel configuration as specified in 9.2.4; 

2> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

2> apply the default MAC main configuration as specified in 9.2.2; 

2> apply the CCCH configuration as specified in 9.1.1.2; 

2> apply the timeAlignmentTimerCommon included in SystemlnformationBlockTypel; 

2> start timer T300; 

2> initiate transmission of the RRCConnectionRequest message in accordance with 5.3.3.3; 

NOTE 2 Upon initiating the connection establishment procedure, the UE is not required to ensure it maintains up 
to date system information applicable only for UEs in RRC_1DLE state. However, the UE needs to 
perform system information acquisition upon re-selection. 

[TS 36.331, clause 5.3.3.3] 
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The UE shall set the contents of RRCConnectionRequest message as follows: 
1> set the IE ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 
2> else 

3> draw a random value in the range .. 2'**'-l and set the ue-Identity to this value; 
NOTE 1 Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 
1> Set the establishmentCause in accordance with the information received from upper layers; 
The UE shall submit the RRCConnectionRequest message to lower layers for transmission. 

[TS 36.331, clause 5.3.3.4] 

The UE shall: 

1> perform the radio resource configuration procedure in accordance with the received radioResourceConfiguration 
and as specified in 5.3.10; 

1> if stored, discard the cell reselection priority information provided by the idleModeMobilityControlInfo or 
inherited from another RAT; 

1> stop timer T300; 

1> stop timer T302, if running; 

1> stop timer T303, if running; 

1> stop timer T305, if running; 

1> perform the actions as specified in 5.3.3.7; 

1> stop timer T320, if running; 

1> enter RRC_CONNECTED; 

1> stop the cell re-selection procedure; 

1> set the contents of RRCConnectionSetupComplete message as follows: 

2> set the selectedPLMN-Identity to the PLMN selected by upper layers (see TS 23.122 [11], TS 24.301 [35]) 
from the PLMNs included in the plmn-IdentityList in SystemlnformationBlockTypel ; 

2> if upper layers provide the 'Registered MME', include and set the registeredMME as follows: 

3> if the PLMN identity of the 'Registered MME' is different from the PLMN selected by the upper layers: 

4> include the plmnldentity in the registeredMME and set it to the value of the PLMN identity in the 
'Registered MME' received from upper layers; 

3> set the mmegi and mmec to the value received from upper layers; 

2> set the nas-Dedicatedlnformation to include the information received from upper layers; 

2> submit the RRCConnectionSetupComplete message to lower layers for transmission, upon which the 
procedure ends. 
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Test description 
Pre-test conditions 



8.1.2.1.3 
8.1.2.1.3.1 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
8.1.2.1.3 Test procedure sequence 

Table 8.1.2.1.3-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS sends a Paging message to the UE on the 
appropriate paging block, and including the UE 
identity in one entry of the IE 
pagingRecordLists. 


<— 


Paging 






2 


Check: does the UE transmit an 
RRCConnectionRequest message? 


-> 


RRCConnectionRequest 


1 


P 


3 


The SS transmit an RRCConnectionSetup 
message with SRB1 configuration (Note 1). 


<- 


RRCConnectionSetup 


- 


- 


4 


Check: Does the UE transmit an 
RRCConnectionSetupComplete \nc\ud\r\g 
SERVICE REQUEST message to confirm the 
successful completion of the connection 
establishment? 


-> 


RRCConnectionSetupComplete 


1 


P 


4A- 
4D 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 










5 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 






1 




Note 1 : Contains a SERVICE REQUEST NAS message. 
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8.1 .2.1 .3.3 Specific message contents 

Table 8.1 .2.1 .3.3-1 : RRCConnectionSetup-DeltaMCS (step 3, Table 8.1 .2.1 .3-1) 



Derivation Path: 36.508, Table 4.6.1-17 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionSetup-DeltalVICS ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionSetup-r8 SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-SRBI-DeltalVICS 






} 








} 








1 








} 









Table 8.1.2.1.3.3-2: RadioResourceConfigDedicated-SRBI-DeltaMCS (Table 8.1.2.1.3.3-1) 



Derivation Path: 36.508, Table 4.6.3-15, 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated-SRBI-DeltaMCS ::= 
SEQUENCE! 








physicalConfigDedicated 


PhysicalConfigDedicated 
-DeltaMCS using 
condition SRB1 






} 









Table 8.1.2.1.3.3-3: PhysicalConfigDedicated— DeltaMCS (Table 8.1.2.1.3.3-2) 



Derivation Path: 36.508, Table 4.8.2.1 .6-1 


Information Element 


Value/remark 


Comment 


Condition 


PhysicalConfigDedicated-DeltalVICS ::= SEQUENCE 
1 








uplinkPowerControlDedicated 


UplinkPowerControlDedic 
ated-DeltalVICS 




SRB1 


} 









Table 8.1.2.1.3.3-4: UplinkPowerControlDedicated-DeltaMCS (Table 8.1.2.1.3.3-3) 



Derivation Path: 36.508, Table 4.6.3-26 


Information Element 


Value/remark 


Comment 


Condition 


UplinkPowerControlDedicated-DeltaMCS ::= 
SEQUENCE! 








deltaMCS-Enabled 


en1 


Corresponds to 
Ks value 1.25 
corresponding to 
"enabled". 




} 









8.1.2.2 

8.1.2.2.1 
(1) 



RRC connection establishment / Reject with wait time 
Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state and has sent an RRCConnectionRequest message } 
ensure that { 

when { UE receives an RRCConnectionReject message including an IE waitTime set to non-zero value 
then { UE doesn't re-send RRCConnectionRequest before the waitTime is expired} 
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8.1.2.2.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.3.2, 
5.3.3.3 and 5.3.3.8. 

[TS 36.331, clause 5.3.3.2] 



Upon initiation of the procedure, the UE shall: 

1> if the UE is establishing the RRC connection for mobile terminating calls: 
2> if timer T302 is running: 

3> consider access to the cell as barred; 
2> else: 

3> consider access to the cell as not barred; 
1> else if the UE is establishing the RRC connection for emergency calls: 

1> else if the UE is establishing the RRC connection for mobile originating calls: 
2> if timer T302 or T303 is running: 

3> consider access to the cell as barred; 

1> If access to the cell, as specified above, is not barred: 

2> apply the default physical channel configuration as specified in 9.2.4; 

2> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

2> apply the default MAC main configuration as specified in 9.2.2; 

2> apply the CCCH configuration as specified in 9.1.1.2; 

2> apply the timeAlignmentTimerCommon included in SystemInformationBlockType2; 

2> start timer T300; 

2> initiate transmission of the RRCConnectionRequest message in accordance with 5.3.3.3; 

NOTE 2: Upon initiating the connection establishment procedure, the UE is not required to ensure it maintains up 
to date system information applicable only for UEs in RRC_1DLE state. However, the UE needs to 
perform system information acquisition upon re-selection. 

[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 
1> set the IE ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 
2> else 

3> draw a random value in the range .. 2'"'-l and set the ue-Identity to this value; 
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NOTE 1 Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 
1> Set the establishmentCause in accordance with the information received from upper layers; 
The UE shall submit the RRCConnectionRequest message to lower layers for transmission. 

[TS 36.331, clause 5.3.3.8] 
The UE shall: 

1> stop timer T300; 

1> reset MAC and release the MAC configuration; 

1> start timer T302, with the timer value set to the waitTime; 

1> inform upper layers about the failure to establish the RRC connection and that access barring for mobile 
originating calls, mobile originating signalling and mobile terminating access is applicable, upon which the 
procedure ends. 

8.1.2.2.3 Test description 

8.1.2.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 

8.1 .2.2.3.2 Test procedure sequence 

Table 8.1.2.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Make the UE attempt an outgoing call 


- 


- 


- 


- 


2 


Check: Does the UE transmit an 
RRCConnectionRequest message. 


-> 


RRCConnectionRequest 


- 


- 


3 


The SS responds with RRCConnectionReject 
message with IE iva/f 77'me set to 10s. 


<- 


RRCConnectionReject 


- 


- 




EXCEPTION: the behaviour in table 

8.1 .2.2.3.2-2 runs in parallel with steps 4 and 5 

below. 










4 


Make the UE attempt an outgoing call. 


- 


- 


- 


- 


5 


The SS transmits a Paging message with a 
matching UE identity. 


<— 


Paging 


- 


- 


6 


Checkl : Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.2 
indicate that the UE is in E-UTRA RRCJDLE 
state on Cell 1 (see note)? 
Check2: Does the test results of CALL generic 
procedure indicate that the UE is in E-UTRA 
RRC IDLE state (see note). 






1 




NOTE: Test step 6 is always executed 1 0s after step 3, i.e. when the reject timer is expired in the UE and the UE 
is allowed to answer paging and initiate calls again. This is because test steps 4 and 5 of the main 
behaviour run in parallel with test step 1 of the parallel behaviour, which lasts 10s unless the verdict is 
"Failed". 
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Table 8.1.2.2.3.2-2: Parallel behaviour 



St 



Procedure 



Check: Does the UE transmit an 
RRCConnectionRequest message within 10s. 



U-S 



Message Sequence 



miessage 



TP 



Verdict 



RRCConnectionRequest 



8.1 .2.2.3.3 Specific message contents 

Table 8.1 .2.2.3.3-1 : RRCConnectionReject (step 3, table 8.1 .2.2.3.2-1) 



Derivation path: 36.508 table 4.6.1-14 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReject ::= SEQUENCE { 
criticalExtensions CHOICE { 
c1 CHOICE! 
rrcConnectionReject-r8 SEQUENCE { 
waitTime 
} 
} 
} 
1 


10 


1 seconds 





8.1.2.3 

8.1.2.3.1 
(1) 



RRC connection establishment / Return to idle state after T300 timeout 
Test Purpose (TP) 



with {UE in E-UTRA RRC_IDLE state having sent an RRCConnectionRequest message} 
ensure that { 

when { the SS does not answer to the UE during T300} 
then {UE goes to RRC_IDLE} 



8.1.2.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.331 clause 5.3.3.6. 

[TS 36.331, clause 5.3.3.6] 

The UE shall: 

1> if timer T300 expires 

2> reset MAC, release the MAC configuration and re-establish RLC for all RBs that are established; 

2> inform upper layers about the failure to establish the RRC connection, upon which the procedure ends. 
8.1.2.3.3 Test description 

8.1.2.3.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

- The UE is in state Registered, Idle mode (state 2) according to [18]. 
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8.1.2.3.3.2 



Test procedure sequence 

Table 8.1.2.3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Make the UE attempt an outgoing call 


- 


- 


- 


- 


2 


The UE transmits an RRCConnectionRequest 
message. 


-> 


RRCConnectionRequest 


- 


- 


3 


The SS waits for 2s. 

Note: the UE may transmit one or more 
RRCConnectionRequest messages but the SS 
does not answer to these messages. 


~> 


RRCConnectionRequest 






4 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.2 
indicate that the UE is in E-UTRA RRCJDLE 
state on Cell 1 ? 






1 





8.1.2.3.3.3 


None. 


8.1.2.5 


8.1.2.5.1 


(1) 



Specific message contents 



RRC connection establishment / 0% access probability for MO calls, no 
restriction for MO signalling 

Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state having received a SystemInformationBlockType2 indicating 0% 
access probability for MO calls } 
ensure that { 

when { UE has user data pending } 

then { UE does not transmit any RRCConnectionRequest message } 
} 

(2) 

with { UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE reselects a new cell which belongs to different TA and broadcasts a 
SystemInformationBlockType2 indicating no restriction for MO signalling } 
then { UE transmits an RRCConnectionRequest message } 



8.1.2.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.3.2. 

[TS 36.331, clause 5.3.3.2] 

The UE initiates the procedure when upper layers request establishment of an RRC connection while the UE is in 
RRCJDLE. 

Upon initiation of the procedure, the UE shall: 

1> if the UE is establishing the RRC connection for mobile terminating calls: 

1> else if the UE is establishing the RRC connection for emergency calls: 

1> else if the UE is establishing the RRC connection for mobile originating calls: 
2> if timer T302 or T303 is running: 
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3> consider access to the cell as barred; 

2> else if SystemInformationBlockType2 includes the ac-Barringlnfo and the ac-BarringForMO-Data is present: 

3> if the UE has one or more Access Classes, as stored on the USIM, with a value in the range 1 1..15, which 
is valid for the UE to use according to TS 22.01 1 [10] and TS 23. 122 [11], and 

3> for at least one of these Access Classes the corresponding bit in the ac-BarringForSpecialAC contained in 
ac-BarringForMO-Data is set to zero: 

4> consider access to the cell as not barred; 

3> else: 

4> draw a random number VanJ' uniformly distributed in the range: < rand < 1; 

4> if 'rand' is lower than the value indicated by ac-BarringFactor included in ac-BarringForMO-Data: 

5> consider access to the cell as not barred; 

4> else: 

5> consider access to the cell as barred; 

2> else: 

3> consider access to the cell as not barred; 

1> else (the UE is establishing the RRC connection for mobile originating signalling): 

2> if timer T302 or T305 is running: 

3> consider access to the cell as barred; 

2> else if SystemlnformationBlockTypel includes the ac-Barringlnfo and the ac-BarringForMO-Signalling is 
present: 

3> if the UE has one or more Access Classes, as stored on the USIM, with a value in the range 1 1..15, which 
is valid for the UE to use according to TS 22.01 1 [10] and TS 23. 122 [11], and 

3> for at least one of these Access Classes the corresponding bit in the ac-BarringForSpecialAC contained in 
ac-BarringForMO-Signalling is set to zero: 

4> consider access to the cell as not barred; 

3> else: 

4> draw a random number 'rand' uniformly distributed in the range: < rand < 1 ; 

4> if 'rand' is lower than the value indicated by ac-BarringFactor included in ac-BarringForMO- 
Signalling: 

5> consider access to the cell as not barred; 

4> else: 

5> consider access to the cell as barred; 

2> else: 

3> consider access to the cell as not barred; 

1> if access to the cell, as specified above, is not barred: 

2> apply the default physical channel configuration as specified in 9.2.4; 

2> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 
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2> apply the default MAC main configuration as specified in 9.2.2; 

2> apply the CCCH configuration as specified in 9.1.1.2; 

2> apply the timeAlignmentTimerCommon included in SystemlnformationBlockTypel; 

2> start timer T300; 

2> initiate transmission of the RRCConnectionRequest message in accordance with 5.3.3.3; 

NOTE 2: Upon initiating the connection establishment procedure, the UE is not required to ensure it maintains up 
to date system information applicable only for UEs in RRC_1DLE state. However, the UE needs to 
perform system information acquisition upon cell re-selection. 

1> else: 

2> if the UE is establishing the RRC connection for mobile originating calls and if both timers T302 and T303 
are not running: 

3> draw a random number 'rand that is uniformly distributed in the range < rand < 1 ; 

3> start timer T303 with the timer value calculated as follows, using the ac-BarringTime included in ac- 
Ba rringFo rMO-Da ta : 

T303= (0.7+ 0.6 * rand) * ac-BarringTime 

3> inform upper layers about the failure to establish the RRC connection and that access barring for mobile originating 
calls is applicable, upon which the procedure ends; 



Test description 
Pre-test conditions 



8.1.2.5.3 
8.1.2.5.3.1 
System Simulator: 

- Cell 1 and Cell 1 1 (HPLMN in different TA). 
UE: 

None. 
Preamble: 

- The UE is in state Loopback Activated (state 4) with condition UE TEST LOOP MODE B on Cell 1 according 
to [18]. 



8.1.2.5.3.2 



Test procedure sequence 



Table 8.1.2.5.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 8.1.2.5.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 11 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


-91 


The power level values are 
assigned to satisfy SrxlevCell 1 > 
SrxlevCell 1 1 . 


Tl 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


-79 


The power level values are 
assigned to satisfy RCell 1 < RCell 
11. 
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Table 8.1.2.5.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Void 


- 


- 


- 


- 


2 


Void 


- 


- 


- 


- 


2A 


The SS transmits an RRCConnectionRelease 
message on Cell 1. 


<- 


RRCConnectionRelease 


- 


- 


2B 


Wait for 5 s for the UE to enter E-UTRA 
RRC IDLE state. 


- 


- 


- 


- 


3 


The SS changes Cell 1 and Cell 1 1 level 
according to the row "T1 " in table 8.1 .2.5.3.2-1 . 


- 


- 


- 


- 


3A 


Check: Does the UE transmit an 
RRCConnectionRequest or\ Cell 1 1 ? 


-> 


RRCConnectionRequest 


2 


P 


3B- 
3F 


Steps 2 to 6 of the generic test procedure in 
TS 36.508 [18] subclause 6.4.2.7 are 
performed on Cell 1 1 . 

Note: The UE performs a TAU procedure and 
the RRC connection is released. 










4-9 


Void 


- 


- 


- 


- 


10 


Wait for 5 s for the UE to enter E-UTRA 
RRC IDLE state. 


- 


- 


- 


- 


10 
A 


Generic test procedure in TS 36.508 
subclause 4.5.3.3 is performed on Cell 1 1 . 
NOTE: The UE performs the establishment of 
the new data radio bearer associated with the 
default EPS bearer context. 










10 
B 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 1 1 . 










10 
C 


Wait for 1 s after the IP packet has been 
transmitted in step 10B. (Note 1) 


- 


- 


- 


- 


11- 
13 


Void 


- 


- 


- 


- 


14 


The SS transmits an RRCConnectionRelease 
message on Cell 11. 


<- 


RRCConnectionRelease 


- 


- 


15 


Check: Does the UE transmit an 
RRCConnectionRequest message on Cell 1 1 
within 30s? 


-> 


RRCConnectionRequest 


1 


F 


16 


Void 


- 


- 


- 


- 


17- 
26 


Check: Does the test result of steps 1 to 10 
generic test procedure in TS 36.508 subclause 
6.4.2.2 indicate that the UE is in E-UTRA 
RRC IDLE state on Cell 11? 






1,2 






EXCEPTION: Step 27a1 describes behaviour 
that depends on UE implementation; the 
"lower case letter" identifies a step sequence 
that takes place if the UE has user data 
pending. 










27a 

1 


IF the UE has user data pending THEN the UE 
loop backs the IP packet received in step IOC 
on the DRB associated with the default EPS 
bearer context on Cell 1 1 . 










Note 1 : The 1 second delay is used to secure that the UE have received and forwarded the IP Pacl<et transmitted 
by the SS in step 10B to the UE test loop function before the RRCConnectionRelease message is sent by 
the SS in step 14. 
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8.1.2.5.3.3 



Specific message contents 



Table 8.1.2.5.3.3-1 : SystemlnformationBlockType2 \or Cell 11 (preamble and all steps, Table 

8.1.2.5.3.2-2) 



Derivation Path: 36.508, Table 4.4.3.3-1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type2 ::= SEQUENCE { 








ac-Barringlnfo SEQUENCE { 








ac-BarringForEmergency 


FALSE 






ac-BarringForlVIO-Signalling 


Not present 






ac-BarringForlVIQ-Data SEQUENCE { 








ac-BarringFactor 


pOO 






ac-Barringlime 


s512 






ac-BarringForSpecialAC 


'OOOOO'B 






1 








1 








} 









Table 8.1. 2.5.3.3-1 A: CLOSE UE TEST LOOP (preamble, Table 8.1.2.5.3.2-2) 



Derivation Path: 36.508, Table 4.7A-3, condition UE TEST LOOP MODE B 


Information Element 


Value/remark 


Comment 


Condition 


UE test loop mode B LB setup 








IP PDU delay 


'0000 01 01 'B 


5 seconds 





Table 8.1.2.5.3.3-2: RRCConnectionRequest {step 3A, Table 8.1.2.5.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-16 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








establishmentCause 


mo-Signalling 






} 








} 








} 









8.1.2.7 



8.1.2.7.1 



RRC connection establishment / 0% access probability for AC to 9, AC 10 
is barred, AC 1 1 to 1 5 are not barred, access for UE with access class in the 
range 11 to 1 5 is allowed 

Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_IDLE state having an Access Class with a value in the range 11. .15 and 
having received a SystemInformationBlockType2 indicating 0% access probability for AC 0..9 for both 
MO call and MO signalling, access restriction for AC 10 and no restriction for AC 11. .15 for both MO 
call and MO signalling } 
ensure that { 

when { UE has user data pending } 

then { UE transmits an RRCConnectionRequest message } 
} 

(2) 

with { UE in E-UTRA RRC_IDLE state having an Access Class with a value in the range 11.. 15 } 
ensure that { 

when { UE reselects a new cell which belongs to different TA and broadcasts a 
SystemInformationBlockType2 indicating 0% access probability for AC 0. .9 for both MO call and MO 
signalling, access restriction for AC 10 and no restriction for AC 11. .15 for both MO call and MO 
signalling } 

then { UE transmits an RRCConnectionRequest message } 
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8.1.2.7.2 Conformance requirements 

References: The conformance requirements covered in tlie present TC are specified in: TS 36.331, clause 5.3.3.2. 

[TS 36.331, clause 5.3.3.2] 

The UE initiates the procedure when upper layers request establishment of an RRC connection while the UE is in 
RRCJDLE. 

Upon initiation of the procedure, the UE shall: 

1> if the UE is establishing the RRC connection for mobile terminating calls: 

2> if timer T302 is running: 

2> else: 

3> consider access to the cell as not barred; 
1> else if the UE is establishing the RRC connection for emergency calls: 

1> else if the UE is establishing the RRC connection for mobile originating calls: 
2> if timer T302 or T303 is running: 

2> else if SystemInformationBlockType2 includes the ac-Barringlnfo and the ac-BarringForMO-Data is present: 

3> if the UE has one or more Access Classes, as stored on the USIM, with a value in the range 11. .15, which 
is valid for the UE to use according to TS 22.01 1 [10] and TS 23.122 [11], and 

3> for at least one of these Access Classes the corresponding bit in the ac-BarringForSpecialAC contained in 
ac-BarringForMO-Data is set to zero: 

4> consider access to the cell as not barred; 

3> else: 

1> else (the UE is establishing the RRC connection for mobile originating signalling): 
2> if timer T302 or T305 is running: 



2> else if SystemInformationBlockType2 includes the ac-Barringlnfo and the ac-BarringForMO-Signalling is 
present: 

3> if the UE has one or more Access Classes, as stored on the USIM, with a value in the range 11. .15, which 
is valid for the UE to use according to TS 22.01 1 [10] and TS 23. 122 [11], and 

3> for at least one of these Access Classes the corresponding bit in the ac-BarringForSpecialAC contained in 
ac-BarringForMO-Signalling is set to zero: 

4> consider access to the cell as not barred; 

3> else: 



1> if access to the cell, as specified above, is not barred: 
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2> apply the default physical channel configuration as specified in 9.2.4; 

2> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

2> apply the default MAC main configuration as specified in 9.2.2; 

2> apply the CCCH configuration as specified in 9.1.1.2; 

2> apply the timeAlignmentTimerCommon included in SystemlnformationBlockTypel; 

2> start timer T300; 

2> initiate transmission of the RRCConnectionRequest message in accordance with 5.3.3.3; 

NOTE 2: Upon initiating the connection establishment procedure, the UE is not required to ensure it maintains up 
to date system information applicable only for UEs in RRC_IDLE state. However, the UE needs to 
perform system information acquisition upon cell re-selection. 

8.1.2.7.3 Test description 

8.1.2.7.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 and Cell 1 1 (HPLMN in different TA). 
UE: 

- USIM set to Type C in 34.108[5] subclause 8.3.2.15 is inserted. 
Preamble: 

- The UE is in state Loopback Activated (state 4) with condition UE TEST LOOP MODE B on Cell 1 according 
to [18]. 



8.1.2.7.3.2 



Test procedure sequence 



Table 8.1.2.7.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 8.1.2.7.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 11 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


-91 


The power level values are 
assigned to satisfy SrxlevCell 1 > 
SrxlevCell 11. 


11 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


-79 


The power level values are 
assigned to satisfy RCell 1 < RCell 
11. 
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Table 8.1.2.7.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 





The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 1. 










OA 


Wait for 1 s after the IP packet has been 
transmitted in step 0. (Note 1) 


- 


- 


- 


- 


1 


The SS transmits an RRCConnectionRelease 
message on Cell 1. 


<— 


RRCConnectionRelease 


- 


- 


2 


Check: Does the UE transmit an 
RRCConnectionRequest message on the Cell 
1? 


-> 


RRCConnectionRequest 


1 


P 


3 


The SS transmits an RRCConnectionSetup 
message on Cell 1. 


<— 


RRCConnectionSetup 


- 


- 


3A 


The UE transmits an 

RRCConnectionSetupComplete message on 

CelM. 

This message includes a SERVICE REQUEST 

message. 


-> 


RRCConnectionSetupComplete 






SB 


The SS transmits a SecurityModeCommand 
message on Cell 1. 


<— 


SecurityModeCommand 


- 


- 


3C 


The UE transmits a SecurityModeComplete 
message on Cell 1. 


-> 


SecurityModeComplete 


- 


- 


3D 


The SS transmits an 

RRCConnectionReconfiguration message on 
CelM. 


<- 


RRCConnectionReconfiguration 






3E 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationC 
omplete 






3E 
A 


The UE loop backs the IP packet received in 
step on the DRB associated with the default 
EPS bearer context on Cell 1 . 










3F 


The SS transmits an RRCConnectionRelease 
message on Cell 1. 


<- 


RRCConnectionRelease 


- 


- 


3G 


Wait for 5 s for the UE to enter E-UTRA 
RRC IDLE state. 


- 


- 


- 


- 


4 


The SS changes Cell 1 and Cell 1 1 level 
according to the row "T1 " in table 8.1 .2.7.3.2-1 . 


- 


- 


- 


- 


4A 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 11? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






2 




5- 
10 


Void 


- 


- 


- 


- 


11 


Wait for 5 s for the UE to enter E-UTRA 
RRC IDLE state. 


- 


- 


- 


- 


12- 
20 


Void 


- 


- 


- 


- 


21 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.2 
indicate that the UE is in E-UTRA RRCJDLE 
state on Cell 1 1 ? 






1,2 




Note 1 : The 1 second delay is used to secure that the UE have received and forwarded the IP Pacl<et transmitted by 
the SS in step to the UE test loop function before the RRCConnectionRelease message is sent by the SS 
in step 1. 
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8.1.2.7.3.3 



Specific message contents 



Table 8.1.2.7.3.3-1: SystemlnformationBlockType2 ior CeW 1 and Cell 11 (preamble, Table 8.1. 2.7.3.2- 

2) 



Derivation Path: 36.508, Table 4.4.3.3-1 | 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type2 ::= SEQUENCE { 








ac-Barringlnfo SEQUENCE { 








ac-BarringForEmergency 


TRUE 






ac-BarringForlVIQ-Signalling SEQUENCE { 








ac-BarringFactor 


pOO 






ac-Barringlime 


s4 






ac-BarringForSpecialAC 


'OOOOO'B 






} 








ac-BarringForlVIQ-Data SEQUENCE { 








ac-BarringFactor 


pOO 






ac-Barringlime 


s4 






ac-BarringForSpecialAC 


'OOOOO'B 






} 








1 








} 









Table 8.1 .2.7.3.3-1 A: CLOSE UE TEST LOOP (preamble, Table 8.1.2.7.3.2-2) 



Derivation Path: 36.508, Table 4.7A-3, condition UE TEST LOOP MODE B | 


Information Element 


Value/remark 


Comment 


Condition 


UE test loop mode B LB setup 








IP PDU delay 


'0000 1 01 0'B 


1 seconds 





Table 8.1.2.7.3.3-2: RRCConnectionRequest (step 2, Table 8.1.2.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-16 | 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








establishmentCause 


mo-Data 






} 








} 








} 









Table 8.1.2.7.3.3-3: Void 
Table 8.1 .2.7.3.3-4: Void 
Table 8.1 .2.7.3.3-5: Void 
Table 8.1 .2.7.3.3-6: Void 
Table 8.1 .2.7.3.3-7: Void 
Table 8.1.2.7.3.3-8: RRCConnectionReconfiguration (step 3D, Table 8.1.2.7.3.2-2) 
Derivation Path: 36.508 Table 4.6.1-8, condition SRB2-DRB(1, 0) 

8.1 .2.8 RRC connection establishment / Range of access baring time 

Editor's Note: This section is based on 36.331 v8.2.0 i.e. after RAN#40 + R2 -083795. 
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8.1.2.8.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_IDLE state with T303 running } 
ensure that { 

when { UE is requested to make an outgoing call } 

then { UE does not transmit any RRCConnectionRequest message } 

} 

(2) 

with { UE in E-UTRA RRC_IDLE state having received Systeminf ormationBlockType2 with no restriction } 
ensure that { 

when { UE is requested to make an outgoing call } 

then { UE transmits an RRCConnectionRequest message } 
} 

8.1.2.8.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.3.2. 

[TS 36.331, clause 5.3.3.2] 

The UE initiates the procedure when upper layers request establishment of an RRC connection while the UE is in 
RRCJDLE state. 

Upon initiation of the procedure, the UE shall: 

1> if T302 is running and the UE is not establishing the RRC connection for emergency calls: 

2> consider access to the cell as barred; 
1> else if SystemInformationBlockType2 includes the accessBarringlnformation: 

2> if the UE is establishing the RRC connection for emergency calls: 

2> else if the UE is establishing the RRC connection for mobile terminating access: 

2> else if the UE is establishing the RRC connection for mobile originating signalling: 

2> else: 

3> if the accessBarringlnformation includes accessBarringForOriginatingCalls: 

4> if the UE has one or more Access Classes, as stored on the USIM, with a value in the range 11. .15, 
which is vaHd for the UE to use according to TS 22.01 1 [10] and TS 23. 122 [11], and 

4> for at least one of these Access Classes the accessClassBarring in the accessClassBarringList 
contained in accessBarringForOriginatingCalls is set to FALSE : 

5> consider access to the cell as not barred; 

4> else: 

5> if T303 is running: 

6> consider access to the cell as barred; 

5> else: 

6> draw a random number 'rand' uniformly distributed in the range: < rand < 1 

6> if 'rand' is lower than the value indicated by the accessProbability Factor included in 
accessBarringForOriginatingCalls: 
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7> consider access to the cell as not barred; 

6> else: 

7> consider access to the cell as barred; 

3> else: 

4> consider access to the cell as not barred; 

1> else: 

2> consider access to the cell as not barred; 

1> If access to the cell, as specified above, is not barred: 

2> stop acting on Paging messages; 

2> apply the default configuration applicable for the antennalnformation as specified in 9.2.3, until explicitly 
receiving a configuration; 

2> start timer T300; 

2> initiate transmission of the RRCConnectionRequest message in accordance with 5.3.3.3; 

NOTE 2: Upon initiating the connection establishment procedure, the UE is not required to ensure it maintains up 
to date system information applicable only for UEs in RRC_IDLE state. However, the UE needs to 
perform system information acquisition upon re-selection. 

1> else: 

2> if the UE is not establishing the RRC connection for emergency calls; and 

2> if T302 is not running: 

3> if the UE is establishing the RRC connection for mobile originating signalling: 

4> if T305 is not running: 

5> draw a random number 'rand' that is uniformly distributed in the range < rand < 1; 

5> start timer T305 with a timer value calculated as follows, using the accessBarringTime included in 
accessBarringFo rSigna Ring : 

T305= (0.7 + 0.6 * rand) * accessBarringTime 

3> else: 

4> if T303 is not running: 

5> draw a random number 'rand' that is uniformly distributed in the range < rand < 1; 

5> start timer T303 with a timer value calculated as follows, using the accessBarringTime included in 
accessBarringForOriginatingCalls: 

T303= (0.7+ 0.6 * rand) * accessBarringTime 

2> inform upper layers about the failure to establish the RRC connection, upon which the procedure ends. 

8.1.2.8.3 Test description 

8.1.2.8.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
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UE: 

None. 

Preamble: 

The UE is in Registered, Idle mode state (state 2) according to [18]. 
8.1 .2.8.3.2 Test procedure sequence 

Table 8.1.2.8.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits a Paging message including 
systemlnfoModification. 


<— 


Paging 


- 


- 


2 


The SS changes 

SystemlnformationBlockType2 parameters to 
50% access probability for IVIO calls. 










3 


Wait for [15] s for the UE to receive system 
information. 


- 


- 


- 


- 


4 


The SS initializes an internal flag F to TRUE. 


- 


- 


- 


- 


- 


EXCEPTION: Step 5 shall be repeated while 
the flag F is TRUE. 


- 


- 


- 


- 


5 


IVIake the UE initiate an outgoing call. 


- 


- 


- 


- 


5a 


IF the UE does not transmit any 
RRCConnectionRequest message (The UE 
starts T303) (Note 2) THEN the SS sets the 
flag F to FALSE. 






1 




5b 


ELSE IF the UE transmits an 
RRCConnectionRequest message (The UE 
starts T300) (Note 1 ) THEN wait for [5] s to 
ensure that T300 expires. 


-> 


RRCConnectionRequest 






- 


EXCEPTION: Step 6 to 7 shall be repeated 35 
times (every 10 s). 


- 


- 


- 


- 


6 


IVIake the UE initiate an outgoing call. 


- 


- 


- 


- 


7 


Check: Does the UE transmit an 
RRCConnectionRequest message within 5s? 


-> 


RRCConnectionRequest 


1 


F 


8 


Wait for 20 s to ensure that T303 expires. 


- 


- 


- 


- 


9 


The SS transmits a Paging message including 
systemlnfoModification. 


<- 


Paging 


- 


- 


10 


The SS changes 

SystemlnformationBlockType2 parameters to 
those used before the step 1 . 










11 


Wait for [15] s for the UE to receive system 
information. 


- 


- 


- 


- 


12 


IVIake the UE initiate an outgoing call. 


- 


- 


- 


- 


13 


Check: Does the UE transmit an 
RRCConnectionRequest message. The UE 
starts T300.(Note 1)? 


-> 


RRCConnectionRequest 


2 


P 


14 


Wait for [5] s to ensure that T300 expires. 


- 


- 


- 


- 


15 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.2 
indicate that the UE is in E-UTRA RRC IDLE 
state on Cell 1 ? 






1,2 





8.1 .2.8.3.3 Specific message contents 

Editor's Note: To be updated according to agreed RRC message structure. 
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Table 8.1 .2.8.3.3-1: Paging (step 1, Table 8.1.2.8.3.2-1) 

FFS 
Table 8.1.2.8.3.3-2: SystemlnformationBlockType2 (step 2, Table 8.1.2.8.3.2-1) 

FFS 
Table 8.1.2.8.3.3-3: RRCConnectionRequest (step 5b, Table 8.1.2.8.3.2-1) 

FFS 
Table 8.1.2.8.3.3-4: Paging (step 9, Table 8.1.2.8.3.2-1) 

FFS 
Table 8.1.2.8.3.3-5: RRCConnectionRequest (step 13, Table 8.1.2.8.3.2-1) 

FFS 

8.1.2.10 Void 

8.1 .3 RRC connection release 

8.1 .3.1 RRC connection release / Success 

8.1.3.1.1 Test Purpose (IP) 

(1) 

with { UE in RRC_CONNECTED state} 
ensure that { 

when { UE receives an RRCConnectionRelease message } 
then { UE releases the signalling connection, the established EPS bearer and all radio resources 
and enters in RRC_IDLE state } 
} 

8.1 .3.1 .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.331 clause 5.3.8.3 
and 5.3.12. 

[TS 36.331, clause 5.3.8.3] 

The UE shall: 

1> delay the following actions defined in this sub-clause 60ms from the moment the RRCConnectionRelease 
message was received or optionally when lower layers indicate that the receipt of the RRCConnectionRelease 
message has been successfully acknowledged, whichever is earlier; 

1> if the releaseCause received in the RRCConnectionRelease message indicates 'loadBalancingTAURequired' : 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'load 
balancing TAU required'; 

1> else: 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'. 
[TS 36.331, clause 5.3.12] 
Upon leaving RRC_CONNECTED, the UE shall: 

1> reset MAC; 
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1> stop all timers that are running except T320; 

1> release all radio resources, including release of the RLC entity, the MAC configuration and the associated PDCP 
entity for all established RBs; 

1> indicate the release of the RRC connection to upper layers together with the release cause; 

1> if leaving RRC_CONNECTED was not triggered by reception of the MobilityFromEUTRACommand message: 

2> enter RRC_IDLE by performing cell selection in accordance with the cell selection process, defined for the 
case of leaving RRC_CONNECTED, as specified in TS 36.304 [4]. 



Test description 
Pre-test conditions 



8.1.3.1.3 
8.1.3.1.3.1 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 
8.1 .3.1 .3.2 Test procedure sequence 

Table 8.1.3.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS transmits an RRCConnectionRelease 
message to release the RRC connection. 


<— 


RRCConnectionRelease 


- 


- 


2 


SS waits for 5s. 


- 


- 


- 


- 


3 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.2 
indicate that the UE is in E-UTRA RRCJDLE 
state on Cell 1 ? 






1 





8.1.3.1.3.3 
None. 
8.1.3.3 
8.1.3.4 

8.1.3.4.1 
(1) 



Specific message content 



Void 

RRC connection release / Redirection to another E-UTRAN frequency 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an RRCConnectionRelease message including an IE Redirectionlnformation with E- 
UTRA-CarrierFreq different from the frequency UE was on in RRC_CONNECTED state} 

then { UE enters RRC_IDLE state on new frequency included in IE Redirectionlnformation } 



8.1.3.4.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.8.3, 
5.3.12 and TS 36.304, clauses 5.2.4.1, 5.2.7. 
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[TS 36.331, clause 5.3.8.3] 

The UE shall: 

1> delay the following actions defined in this sub-clause 60ms from the moment the RRCConnectionRelease 
message was received or optionally when lower layers indicate that the receipt of the RRCConnectionRelease 
message has been successfully acknowledged, whichever is earlier; 

1> if the RRCConnectionRelease message includes the idleModeMobilityControlInfo: 



1> else: 

2> apply the cell reselection priority information broadcast in the system information; 
1> if the releaseCause received in the RRCConnectionRelease message indicates HoadBalancingTAURequired' : 

1> else: 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'. 
[TS 36.331, clause 5.3.12] 
Upon leaving RRC_CONNECTED, the UE shall: 

1> indicate the release of the RRC connection to upper layers together with the release cause; 

1> if leaving RRC_CONNECTED was not triggered by reception of the MobilityFromEUTRACommand message: 

2> enter RRC_IDLE by performing cell selection in accordance with the cell selection process, defined for the 
case of leaving RRC_CONNECTED, as specified in TS 36.304 [4]. 

[TS 36.304, clause 5.2.4.1] 



UE shall only perform cell reselection evaluation for E-UTRAN frequencies and inter-RAT frequencies that are given 
in system information and for which the UE has a priority provided. 



[TS 36.304, clause 5.2.7] 

On transition from RRC_CONNECTED to RRC_IDLE, UE shall select a suitable cell to camp on according to 
redirectedCarrierlnfo, if included in the RRCConnectionRelease message. Otherwise UE shall select a suitable cell on 
an EUTRA carrier. If no suitable cell is found, the UE shall perform a cell selection starting with Stored Information 
Cell Selection procedure in order to find a suitable cell to camp on. 



8.1.3.4.3 Test description 

8.1.3.4.3.1 Pre-test conditions 

System Simulator: 

2 cells on different E-UTRA frequencies and different tracking areas: 

Cell 1 serving cell 

Cell 23 suitable neighbour inter-frequency cell 

Cell power levels are selected according to [18] so that camping on Cell 1 is guaranteed 
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UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) according to [18] on cell 1. 
8.1 .3.4.3.2 Test procedure sequence 

Table 8.1.3.4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


SS transmits an RRCConnectionRelease 
message (IE redirectionlnformation including 
eutra-CarrierFreq oi Cell 23). 


<— 


RRCConnectionRelease 






2 


Check: does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 23? 






1 





8.1 .3.4.3.3 Specific message contents 

Table 8.1 .3.4.3.3-1 : Conditions for tables 8.1 .3.4.3.3-2 and 8.1 .3.4.3.3-3 



Condition descriptions 


CelM 

This condition applies to system 


information transmitted on Cell 1 . 


Cell 23 

This condition applies 


to system 


information transmitted on Cell 23. 



Table 8.1.3.4.3.3-2: SystemlnformationBlockTypel for cells 1 and 3 (preamble and all steps, Table 

8.1.3.4.3.2-1) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnfoList ::= SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 3 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB5 are 
transmitted 


CelM 
Cell 23 


} 









Table 8.1.3.4.3.3-3: SystemlnformationBlockTypeS ior cells 1 and 3 (preamble and all steps, Table 

8.1.3.4.3.2-1) 



Derivation Path: 36.508 table 4.4.3.3-4 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType5 ::= SEQUENCE { 








interFreqCarrierFreqList SEQUENCE (SIZE 
(1 ..maxFreq)) OF SEQUENCE { 


1 entry 




CelM 
Cell 23 


cellReselectionPriority 


Not present 






} 








} 
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Table 8.1.3.4.3.3-4 RRCConnectionRelease message (step 1, Table 8.1.3.4.3.2-1) 



Derivation Path: 36.508 table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionRelease-r8 SEQUENCE { 








redirectedCarherlnfo ::= CHOICE { 








eutra 


Downlink EARFCN of cell 
23 






} 








} 








} 








1 








} 









8.1.3.5 

8.1.3.5.1 
(1) 



RRC connection release / Success / With priority information 
Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state having received an RRCConnectionRelease message with the 
freqPriorityListEUTRA with higher priority frequency} 
ensure that { 

when { UE detects the cell re-selection criteria are met for the cell which belongs to the higher 
priority frequency } 

then { UE reselects the cell which belongs to the higher priority frequency } 



8.1.3.5.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.8.3 and 
TS 36.304, clause 5.2.4.1, 5.2.4.2 and 5.2.4.5. 

[TS 36.331, clause 5.3.8.3] 

The UE shall: 

1> delay the following actions defined in this sub-clause 60 ms from the moment the RRCConnectionRelease 
message was received or optionally when lower layers indicate that the receipt of the RRCConnectionRelease 
message has been successfully acknowledged, whichever is earlier; 

1> if the RRCConnectionRelease message includes the idleModeMobilityControlInfo: 

2> store the cell reselection priority information provided by the idleModeMobilityControlInfo; 
2> if the t320 is included: 

3> start timer T320, with the timer value set according to the value of t320; 

1> else: 



1> if the releaseCause received in the RRCConnectionRelease message indicates 'loadBalancingTAURequired': 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'load 
balancing TAU required'; 

1> else: 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'; 

[TS 36.304, clause 5.2.4.1] 
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Absolute priorities of different E-UTRAN frequencies or inter-RAT frequencies may be provided to the UE in the 
system information, in the RRCConnectionRelease message, or by inheriting from another RAT at inter-RAT cell 
(re)selection. In the case of system information, an E-UTRAN frequency or inter-RAT frequency may be listed without 
providing a priority (i.e. the field cellReselectionPriority is absent for that frequency). If priorities are provided in 
dedicated signalling, the UE shall ignore all the priorities provided in system information. If UE is in camped on any 
cell state, UE shall only apply the priorities provided by system information from current cell, and the UE preserves 
priorities provided by dedicated signalling unless specified otherwise. When the UE in camped normally state, has only 
dedicated priorities other than for the current frequency, the UE shall consider the current frequency to be the lowest 
priority frequency (i.e. lower than the eight network configured values). While the UE is camped on a suitable CSG 
cell, the UE shall always consider the current frequency to be the highest priority frequency (i.e. higher than the eight 
network configured values), irrespective of any other priority value allocated to this frequency. The UE shall delete 
priorities provided by dedicated signalling when: 

- the UE enters RRC_CONNECTED state; or 

the optional validity time of dedicated priorities (T320) expires; or 

a PLMN selection is performed on request by NAS [5]. 

NOTE: Equal priorities between RATs are not supported. 

The UE shall only perform cell reselection evaluation for E-UTRAN frequencies and inter-RAT frequencies that are 
given in system information and for which the UE has a priority provided. 

The UE shall not consider any black listed cells as candidate for cell reselection. 

The UE shall inherit the priorities provided by dedicated signalling and the remaining validity time (i.e., T320 in E- 
UTRA, T322 in UTRA and T3230 in GERAN), if configured, at inter-RAT cell (re)selection. 

NOTE: The network may assign dedicated cell reselection priorities for frequencies not configured by system 
information. 
[TS 36.304, clause 5.2.4.2] 

When evaluating for reselection purposes cell selection criterion or SnonServingCell,x, the UE shall use parameters 
provided by the serving cell. 

Following rules are used by the UE to limit needed measurements: 

If Sintrasearch IS scnt in the scrving cell and SservingCeii > Sintrasearch, UE may choosc to not perform intra-frequency 
measurements. 

- If SservingCdi <= Sintrasearch, Or Sintrasearch IS Hot scnt in the scrving ccU UE shall perform intra-frequency 
measurements. 

The UE shall apply the following rules for E-UTRAN inter-frequencies and inter-RAT frequencies which are 
indicated in system information and for which the UE has priority provided as defined in 5.2.4. 1 : 

For an E-UTRAN inter-frequency or inter-RAT frequency with a reselection priority higher than the 
reselection priority of the current E-UTRA frequency the UE shall perform measurements of higher priority 
E-UTRAN inter-frequency or inter-RAT frequencies according to [10]. 

For an E-UTRAN inter-frequency with an equal or lower reselection priority than the reselection priority of 
the current E-UTRA frequency and for inter-RAT frequency with lower reselection priority than the 
reselection priority of the current E-UTRAN frequency: 

- If Snonintrasearch IS scnt in the scrving ccll and Sservmgceii > S nonintrasearch UE may choosc not to perform 
measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority. 

- If SservingCell <= Snonintrasearch Or Snonintrasearch IS nOt SCnt in the SCrving CCll the UE shall perform 

measurements of E-UTRAN inter-frequencies or inter-RAT frequency cells of equal or lower priority 
according to [10]. 

Where SservingCeii is the Srxlev-value of the serving cell. 

[TS 36.304, clause 5.2.4.5] 
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Criteria 1 : the SnonServingCeii.x of a cell on evaluated frequency is greater than Thresh^, high during a time interval 
TreselectiouRAT; 

Cell reselection to a cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be perfc)rmed if: 

A cell of a higher priority E-UTRAN frequency or inter-RAT frequency fulfils criteria 1 ; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 

Cell reselection to a cell on an equal priority E-UTRAN frequency shall be based on ranking for Intra-frequency cell 
reselection as defined in sub-clause 5.2.4.6. 

Cell reselection to a cell on a lower priority E-UTRAN frequency or inter-RAT frequency than serving frequency shall 
be performed if: 

No cell on a higher priority E-UTRAN frequency or inter-RAT frequency than serving frequency fulfills the 
criteria 1; and 

No cell on serving frequency or on an equal priority E-UTRAN frequency fulfills the criteria in 5.2.4.6; and 

- SservingCdi < Thrcshserving, low ^ud the SnonServingCeii.x of a ccll of a lowcr priority E-UTRAN frequency or inter-RAT 
frequency is greater than Thresh^, low during a time interval TreselectiouRAx; and 

more than 1 second has elapsed since the UE camped on the current serving cell. 

For GERAN, UTRAN, and E-UTRAN, SnonServmgCeii.x is the Srxlev-value of an evaluated cell. For UTRAN FDD, Squal 
is higher than 0, as defined in [8]. For cdma2000 RATs, SnonServingCeii.x is equal to -FLOOR(-2 x 10 x loglO Ec/Io) in 
units of 0.5 dB, as defined in [18], with Ec/Io referring to the value measured from the evaluated cell. 

For cdma2000 RATs, Threshx, high and Threshx, low are equal to -1 times the values signalled for the corresponding 
parameters in the system information. 

In all the above criteria the value of TreselectiouRAx is scaled when the UE is in the medium or high mobility state as 
defined in subclause 5.2.4.3.1. If more than one cell meets the above criteria, the UE shall reselect a cell ranked as the 
best cell among the cells meeting the criteria on the highest priority frequencies or the highest priority RATif the 
highest priority RAT is E-UTRA according to criteria defined in 5.2.4.6. 

8.1.3.5.3 Test description 

8.1.3.5.3.1 Pre-test conditions 
System Simulator: 

- Cell 1, Cell 3 and Cell 12. 
UE: 

None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.1 .3.5.3.2 Test procedure sequence 

Table 8.1.3.5.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 
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Table 8.1.3.5.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cells 


Cell 12 


Remarl< 


TO 


Cell-specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


"off" 


"off" 


The power level values are 
assigned to satisfy Srxlevceii i > 

Ointrasearch- 


T1 


Cell-specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-73 


-73 


The power level values are 
assigned to satisfy Threshx, high 
< both Srxlevceii 3 and Srxlevceii 

12. 



Table 8.1.3.5.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an RRCConnectionRelease 
message including the freqPriorityListEUTRA 
on Cell 1. 


<- 


RRCConnectionRelease 






2 


Wait for 5 s for the UE to enter E-UTRA 
RRC IDLE state on Cell 1. 


- 


- 


- 


- 


3 


The SS changes Cell 1 , Cell 3 and Cell 12 
level according to the row "T1 " in table 
8.1.3.5.3.2-1. 










4 


Void 


- 


- 


- 


- 


5 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 12? 






1 





8.1 .3.5.3.3 Specific message contents 

Table 8.1 .3.5.3.3-1 : RRCConnectionRelease (step 1 , Table 8.1 .3.5.3.2-2) 



Derivation Path: 36.508 Table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionRelease-r8 SEQUENCE { 








idleModeMobilityControllnfo SEQUENCE { 








freqPriorityListEUTRA SEQUENCE (SIZE 
(1 ..maxFreq)) OF SEQUENCE { 


3 entries 






carrierFreq[1] 


Same downlink EARFCN 
as used for Cell 1 






cellReselectionPriority[1 ] 


4 






carrierFreq[2] 


Same downlink EARFCN 
as used for Cell 3 






cellReselectionPriority[2] 


1 






carrierFreq[3] 


Same downlink EARFCN 
as used for Cell 12 






cellReselectionPriority[3] 


5 






1 








freqPriorityListGERAN 


Not present 






freqPriorityLlstUTRA-FDD 


Not present 






freqPriorityUstUTRA-TDD 


Not present 






bandClassPriorityListHRPD 


Not present 






bandClassPriorityLlstl XRTT 


Not present 






1320 


Not present 






} 








} 








} 








1 








} 
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Table 8.1.3.5.3.3-2: Systemlnformation BlockTypeS ior Cell 1 (preamble and all steps, Table 

8.1.3.5.3.2-2) 



Derivation path: 36.508 table 4.4.3.3-4 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlocl<Type5 ::= SEQUENCE { 








interFreqCarrierFreqList SEQUENCE (SIZE 


2 entries 






(1 ..maxFreq)) OF SEQUENCE { 








dl-CarrierFreq[1] 


Same downlink EARFCN 
as used for Cell 3 






dl-CarrierFreq[2] 


Same downlink EARFCN 
as used for Cell 12 






threshX-High[2] 
} 
} 


11 







8.1.3.6 

8.1.3.6.1 
(1) 



RRC connection release / Redirection from E-UTRAN to UTRAN 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an RRCConnectionRelease message including an IE redirect ionlnformat ion with 
utra-CarrierFreq UTRA frequency } 

then { UE enters RRC_IDLE state on UTRA frequency included in IE redirectionlnformation } 



8.1.3.6.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.331, clause 5.3.8.3, 5.3.12 
and TS 36.304, clause 5.2.7. 

[TS 36.331, clause 5.3.8.3] 

The UE shall: 

1> delay the following actions defined in this sub-clause 60ms from the moment the RRCConnectionRelease 
message was received or optionally when lower layers indicate that the receipt of the RRCConnectionRelease 
message has been successfully acknowledged, whichever is earlier; 

1> if the RRCConnectionRelease message includes the idleModeMobilityControlInfo: 

1> else: 

2> apply the cell reselection priority information broadcast in the system information; 
1> if the releaseCause received in ih& RRCConnectionRelease message indicates 'loadBalancingTAURequired': 

1> else: 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'. 
[TS 36.331, clause 5.3.12] 
Upon leaving RRC_CONNECTED, the UE shall: 

1> indicate the release of the RRC connection to upper layers together with the release cause; 

1> if leaving RRC_CONNECTED was not triggered by reception of the MobilityFromEUTRACommand message: 
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2> enter RRC_IDLE by performing cell selection in accordance with the cell selection process, defined for the 
case of leaving RRC_CONNECTED, as specified in TS 36.304 [4]. 

[TS 36.304, clause 5.2.7] 

On transition from RRC_CONNECTED to RRC_IDLE, UE shall select a suitable cell to camp on according to 
redirectedCarrierlnfo, if included in the RRCConnectionRelease message. Otherwise UE shall select a suitable cell on 
an EUTRA carrier. 



Test description 
Pre-test conditions 



8.1.3.6.3 
8.1.3.6.3.1 
System Simulator: 

2 cells, one E-UTRA and one UTRA cell and different location areas: 

- Cell 1 E-UTRA serving cell 

Cell 5 suitable neighbour UTRA cell 

The parameters settings and power levels for Cell 1 and Cell 5 are selected according to [18], [5] and Table 
8.1.3.6.3.2-0 so that camping on Cell 1 is guaranteed and no cell re-selection to Cell 5 can take place (utra 
priority is lower than serving and S ceii i > Thresh ceii i.iow)- 

UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) on cell 1 according to [18]. 

8.1 .3.6.3.2 Test procedure sequence 

Table 8.1.3.6.3.2-0 shows the cell power levels after the preamble. 

Table 8.1.3.6.3.2-0: Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Cell 5 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-75 


- 


The power levels are such that 
camping on Cell 1 is guaranteed. 


CPICH Ec 


dBm/3.84 MHz 


- 


-70 



Table 8.1.3.6.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS transmits an RRCConnectionRelease 
message (IE redirectionlnformation including 
UTRA-CarherFreq of Cell 5). 


<- 


RRCConnectionRelease 






2 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.8 
indicate that the UE is camped on UTRAN Cell 
5? 






1 
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8.1 .3.6.3.3 Specific message or IE contents 

Table 8.1 .3.6.3.3-1 : Conditions for tables 8.1 .3.6.3.3-2 and 8.1 .3.6.3.3-3 



Condition descriptions 


CelM 

This condition applies 


to system 


information transmitted on Cell 1 . 


Cell 5 

This condition applies 


to system 


information transmitted on Cell 5. 



Table 8.1.3.6.3.3-2: SystemlnformationBlockTypel for cell 1 (preamble and all steps, Table 8.1.3.6.3.2- 

1) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnfoList ::= SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 4 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB6 are 
transmitted 




} 









Table 8.1.3.6.3.3-3: SystemlnformationBlockType6 ior cell 1 (preamble and all steps, Table 8.1.3.6.3.2- 

1) 



Derivation Path: 36.508 table 4.4.3.3-5 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType6 ::= SEQUENCE { 








carrierFreqListUTRA-FDD SEQUENCE (SIZE 
(1 ..maxUTRA-FDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA- 
FDD 


cellReselectionPriority 


3 


Lower priority than 
E-UTRA 




1 








carrierFreqListUTRA-TDD SEQUENCE (SIZE 
(1..maxUTRA-TDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA- 
TDD 


cellReselectionPriority 


3 


Lower priority than 
E-UTRA 




1 








1 








Table 8.1.3.6.3.3-4 RRCConnectionRelease message (step 1, Table 8.1.3.6.3.2-1) 


Derivation Path: 36.508 table 4.6.1.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE { 








rrcConnectionRelease-r8 SEQUENCE { 








redirectedCarrierlnfo ::= CHOICE { 








utra-FDD 


Downlink UARFCN of cell 
5 




UTRA- 
FDD 


utra-TDD 


Downlink UARFCN of cell 
5 




UTRA- 
TDD 


} 








} 








} 









8.1.3.7 
8.1.3.7.1 
(1) 

with I UE in UTRA Idle state 



RRC connection release / Redirection from UTRAN to E-UTRAN 
Test Purpose (TP) 
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ensure that { 

when { UE is requested to make an outgoing PS call } 
then { UE includes in the RRC CONNECTION REQUEST the IE Pre-Redirection info" } 
} 

(2) 

with { UE in UTRA CELL_DCH state } 
ensure that { 

when { UE receives an RRC CONNECTION RELEASE message including an IE J?edirection info with E-UTRA 
target info E-UTRA frequency } 

then { UE enters RRC_IDLE state on E-UTRAN Carrier included in IE Redirection info } 
} 

8.1.3.7.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in; TS 25.331, clause 8.1.3.3, 
8. 1.4.3 and clause 8.5.2. 

[TS 25.331, clause 8.1.3.3] 

The UE shall, in the transmitted RRC CONNECTION REQUEST message: 



1> if the UE supports E-UTRA: 

2> if the variable EUTRA_FREQUENCY_1NF0_L1ST contains no E-UTRA frequencies; 

3> include the IE "Pre-Redirection info"; 

3> if the UE supports E-UTRA FDD: 

4> set the IE "Support of E-UTRA FDD" to TRUE. 

3> if the UE supports E-UTRA TDD: 

4> set the IE "Support of E-UTRA TDD" to TRUE. 

2> if the UE supports any of the bands that the E-UTRA frequencies included in the variable 
EUTRA_FREQUENCY_INFO_LlST belong to; 

3> include the IE "Pre-Redirection info"; 

3> if the UE supports any of the bands that the E-UTRA FDD frequencies included in the variable 
EUTRA_FREQUENCY_INF0_L1ST belong to: 

4> set the IE "Support of E-UTRA FDD" to TRUE. 

3> if the UE supports any of the bands that the E-UTRA TDD frequencies included in the variable 
EUTRA_FREQUENCY_INF0_L1ST belong to: 

4> set the IE "Support of E-UTRA TDD" to TRUE. 

[TS 25.331, clause 8.1.4.3] 

The UE shall receive and act on an RRC CONNECTION RELEASE message in states CELL_DCH and CELL_FACH 
and CELL_PCH (FDD only). Furthermore this procedure can interrupt any ongoing procedures with the UE in the 
above listed states. 

When the UE receives the first RRC CONNECTION RELEASE message; and 

1> if the message is received on the CCCH, and IE "U-RNTI" is present and has the same value as the variable 
U_RNTI; or 

1> if the message is received on DCCH: 

the UE shall perform the RRC connection release procedure as specified below. 
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When the UE receives the first RRC CONNECTION RELEASE message; and 

1> if the message is received on the CCCH, the IE "UTRAN group identity" is present and there is a group identity 
match according to subclause 8.6.3.13: 

the UE shall perform the RRC connection release procedure as specified below. 

The UE shall: 

1> in state CELL_DCH: 

2> initialise the counter V308 to zero; 

2> set the IE "RRC transaction identifier" in the RRC CONNECTION RELEASE COMPLETE message to the 
value of "RRC transaction identifier" in the entry for the RRC CONNECTION RELEASE message in the 
table "Accepted transactions" in the variable TRANSACTIONS; 

2> submit an RRC CONNECTION RELEASE COMPLETE message to the lower layers for transmission using 
UM RLC on the DCCH to the UTRAN; 

2> if the IE "Rplmn information" is present: 

3> the UE may: 

4> store the IE on the ME together with the PLMN id for which it applies; 

3> the UE may then: 

4> utilise this information, typically indicating where a number of BCCH frequency ranges of a RAT 
may be expected to be found, during subsequent Rplmn selections of the indicated PLMN. 

2> if the IE "UE Mobility State Indicator" is present: 

3> consider the High-mobility state to have being detected when entering idle mode. 

2> start timer T308 when the RRC CONNECTION RELEASE COMPLETE message is sent on the radio 
interface. 

1> in state CELL_FACH: 

2> if the RRC CONNECTION RELEASE message was received on the DCCH: 

3> set the IE "RRC transaction identifier" in the RRC CONNECTION RELEASE COMPLETE message to 
the value of "RRC transaction identifier" in the entry for the RRC CONNECTION RELEASE message in 
the table "Accepted transactions" in the variable TRANSACTIONS; 

3> submit an RRC CONNECTION RELEASE COMPLETE message to the lower layers for transmission 
using AM RLC on the DCCH to the UTRAN. 

3> when the successful transmission of the RRC CONNECTION RELEASE COMPLETE message has been 
confirmed by the lower layers: 

4> release all its radio resources; and 

4> indicate the release of the established signalling connections (as stored in the variable 

ESTABLISHED_SIGNALLING_CONNECTIONS) and established radio access bearers (as stored in 
the variable ESTABLISHED_RABS) to upper layers; and 

4> clear any entry for the RRC CONNECTION RELEASE message in the tables "Accepted transactions" 
and "Rejected transactions" in the variable TRANSACTIONS; 

4> clear the variable ESTABLISHED_SIGNALLING_CONNECTIONS; 

4> clear the variable ESTABLISHED_RABS; 

4> pass the value of the IE "Release cause" received in the RRC CONNECTION RELEASE message to 
upper layers; 
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4> enter idle mode; 

4> perform the actions specified in subclause 8.5.2 when entering idle mode. 

3> and the procedure ends. 

2> if the RRC CONNECTION RELEASE message was received on the CCCH: 

3> release all its radio resources; 

3> indicate the release of the established signalling connections (as stored in the variable 

ESTABLISHED_SIGNALLING_CONNECTIONS) and established radio access bearers (as stored in the 
variable ESTABLISHED_RABS) to the upper layers; 

3> clear any entry for the RRC CONNECTION RELEASE message in the tables "Accepted transactions" 
and "Rejected transactions" in the variable TRANSACTIONS; 

3> clear the variable ESTABLISHED_SIGNALLING_CONNECTIONS; 

3> clear the variable ESTABLISHED_RABS; 

3> pass the value of the IE "Release cause" received in the RRC CONNECTION RELEASE message to 
upper layers; 

3> enter idle mode; 

3> perform the actions specified in subclause 8.5.2 when entering idle mode; 

3> and the procedure ends. 

[TS 25.331, clause 8.5.2] 

When entering idle mode from connected mode, the UE shall: 

1> clear or set variables upon leaving UTRA RRC connected mode as specified in subclause 13.4; 

1> if the RRC CONNECTION RELEASE message was received and the IE "Redirection info" was present therein: 

2> if the IE "Frequency info" is present, attempt to camp on a suitable cell on the indicated UTRA carrier 
included in the RRC CONNECTION RELEASE message; 

2> if the IE "GSM target cell info" is present, attempt to camp on a suitable cell of the list of cells for the 

indicated RAT included in the RRC CONNECTION RELEASE message. If no cells were indicated for that 
RAT or no suitable cell of the indicated cells for that RAT is found within 10s, attempt to camp on any 
suitable cell of that RAT; or 

2> if the IE "E-UTRA target info" is present, attempt to camp on any of the frequencies for the indicated RAT 
included in the RRC CONNECTION RELEASE message, excluding any cell indicated in the list of not 
allowed cells for that RAT, if present. If no suitable cell on the indicated frequencies for that RAT is found 
within 10s, attempt to camp on any suitable cell of that RAT, excluding any cell indicated in the list of not 
allowed cells for that RAT; or 

2> if no suitable cell is found on the indicated UTRA carrier or RAT camp on any suitable cell. 

8.1.3.7.3 Test description 

8.1.3.7.3.1 Pre-test conditions 

System Simulator: 

- 2 cells, one UTRA and one E-UTRA cell: 

Cell 5 UTRA serving cell (priority 4 default) 

Cell 1 suitable neighbour E-UTRA cell (priority 3) 
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UE: 

UTRAN Idle state 

Preamble: 

State 3 or state 7 as specified in clause 7.4 of TS 34.108, depending on the CN domain(s) supported by the UE. 
8.1 .3.7.3.2 Test procedure sequence 

Table 8.1.3.7.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Make the UE initiate an outgoing PS call. 


- 


- 


- 


- 


2 


Check: does the UE include the IE Pre- 
redirection info with Support of E-UTRA set to 
TRUE? 


-> 


RRC CONNECTION REQUEST 


1 


P 


3 


The SS transmit a RRC CONNECTION 
SETUP on SRB1 on Cell 5. 


<~ 


RRC CONNECTION SETUP 


- 


- 


4 


The UE transmits an RRC CONNECTION 
SETUP COMPLETE message 


-> 


RRC CONNECTION SETUP 
COMPLETE 


- 


- 


5 


The UE transmits the SERVICE REQUEST 
message for PS data call 


-> 


INITIAL DIRECT TRANSFER 


- 


- 


6 


The SS transmits a PHYSICAL CHANNEL 
RECONFIGURATION message on Cell 5 
including the DPCH compressed mode info. 


<— 


PHYSICAL CHANNEL 
RECONFIGURATION 






7 


The UE transmits a PHYSICAL CHANNEL 
RECONFIGURATION COMPLETE message 
on Cell 5. 


-> 


PHYSICAL CHANNEL 
RECONFIGURATION 
COMPLETE 






8 


The SS configures the Inter-RAT periodic 
measurement with E-UTRA frequency list 
including the DL Carrier frequency of Cell 1 


<- 


MEASUREMENT CONTROL 






9 


The UE starts sending MEASUREMENT 
REPORT messages during the Authentication 
Phase 


-> 


MEASUREMENT REPORT 






10 


The SS starts the Authentication and Ciphering 
Request procedure 


<~ 


DOWNLINK DIRECT TRANSFER 


- 


- 


11 


The UE transmits the Authentication and 
Ciphering Response 


-> 


UPLINK DIRECT TRANSFER 


- 


- 


12 


The SS transmits a SECURITY MODE 
COMMAND message 


<- 


SECURITY MODE COMMAND 


- 


- 


13 


The UE transmits a SECURITY MODE 
COMPLETE message 


~> 


SECURITY MODE COMPLETE 


- 


- 


14 


If the measurement reports is received during 
the authentication and security phase (from 
step 9 to 13) goto next step otherwise the SS 
waits for MEASUREMENT REPORT message. 


-> 


MEASUREMENT REPORT 






15 


The SS transmits an RRC CONNECTION 
RELEASE message (IE E-UTRA target info 
including DL Carrier frequency of Cell 1 ). 


<— 


RRC CONNECTION RELEASE 






16 


The UE transmits a RRC CONNECTION 
RELEASE COMPLETE message 


-> 


RRC CONNECTION RELEASE 
COMPLETE 


- 


- 


17 


The UE transmits a RRC CONNECTION 
RELEASE COMPLETE message 


-> 


RRC CONNECTION RELEASE 
COMPLETE 


- 


- 


18 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7A 
indicate that the UE is camped on E-UTRAN 
Cell 1? 






2 
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8.1.3.7.3.3 



Specific message or IE contents 



Table 8.1.3.7.3.3-1 System Information Block type 19 for cell 5 (preamble and all steps, Table 

8.1.3.7.3.2-1) 



Derivation Path: 36.508 table Table 4.4.4.1-1 


Information Element 


Value/remark 


Comment 


Condition 


SyslnfoType19 ::= SEQUENCE { 








utra-PrioritylnfoList SEQUENCE { 








utra-ServingCell SEQUENCE { 








priority 


4 






1 








eutra-FrequencyAndPrioritylnfoList SEQUENCE 
(SIZE (1 ..maxNumEUTRAFreqs)) OF SEQUENCE 


1 entry 






earfcn[y] 


Downlink EARFCN of 
CelM 






priority[y] 


3 






1 








} 









Table 8.1.3.7.3.3-2: RRC CONNECTION REQUEST (UTRA Rel-8) 



Derivation path: 34.108 default RRC CONNECTIQN REQUEST in section 9.1.1 for UTRA FDD or 9.1.2 for UTRA 
TDD 


Information Element 


Value/Remark 


Comment 


Condition 


Pre-redirection info 

Support of E-UTRA FDD 
Support of E-UTRA TDD 


TRUE 
TRUE 


The presence of 
this IE indicates 
the UE support of 
radio access 
technologies that 
the UE could be 
directed to 


E-UTRA- 
FDD 

E-UTRA- 
TDD 



Table 8.1.3.7.3.3-3: MEASUREMENT CONTROL (UTRA Rel-8) 



Derivation Path: 36.508, clause 4.7B.1 Table 4.7B.1-3 | 


Information Element 


Value/remark 


Comment 


Condition 


CHOICE Measurement type 


Inter-RAT measurement 






CHOICE report criteria 


Inter-RAT measurement 
reporting criteria 






Parameters required for each event 


1 entry 






Inter-RAT event identity 


3c 
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Table 8.1.3.7.3.3-4: RRC CONNECTION RELEASE (UTRA Rel-8) 



Derivation path: 34.1 08 default RRC CONNECTION RELEASE in section 9.1 .1 for UTRA FDD or 9.1 .2 for UTRA TDD 


Information Element 


Value/Remark 


Comment 


Condition 


N308 


1 






Redirection info 








Frequency info 


Omitted 






Inter-RAT info 


E-UTRA 






E-UTRA target info 








E-UTRA Target Frequency Info List 


1 Entry 






FDD 






E-UTRA-FDD 


DL Carrier frequency 


The DL Carrier frequency 
of Cell 1 






Blacklisted cells per freq list 


Omitted 






TDD 






E-UTRA-TDD 


DL Carrier frequency 


The DL Carrier frequency 
of Cell 1 






Blacklisted cells per freq list 


Omitted 







8.1.3.8 
8.1.3.8.1 
(1) 



RRC connection release / Redirection from E-UTRAN to GERAN 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an RRCConnectionRelease message including an IE redirectedCarrierlnfo set to 
geran } 

then { UE enters Idle mode on GERAN Cell included in IE redirectedCarrierlnfo } 



8.1.3.8.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.331, clause 5.3.8.3, 5.3.12 
and TS 36.304, clause 5.2.7. 

[TS 36.331, clause 5.3.8.3] 

The UE shall: 

1> delay the following actions defined in this sub-clause 60ms from the moment the RRCConnectionRelease 
message was received or optionally when lower layers indicate that the receipt of the RRCConnectionRelease 
message has been successfully acknowledged, whichever is earlier; 

1> if the RRCConnectionRelease message includes the idleModeMobilityControlInfo: 

1> else: 

2> apply the cell reselection priority information broadcast in the system information; 
1> if the releaseCause received in the RRCConnectionRelease message indicates 'loadBalancingTAURequired' : 

1> else: 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'. 
[TS 36.331, clause 5.3.12] 
Upon leaving RRC_CONNECTED, the UE shall: 
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1> indicate the release of the RRC connection to upper layers together with the release cause; 

1> if leaving RRC_CONNECTED was not triggered by reception of the MobilityFromEUTRACommand message: 

2> enter RRC_IDLE by performing cell selection in accordance with the cell selection process, defined for the case of 
leaving RRC_CONNECTED, as specified in TS 36.304 [4]. 

[TS 36.304, clause 5.2.7] 

On transition from RRC_CONNECTED to RRC_IDLE, a UE shall attempt to camp on the last cell for which it was in 
RRC_CONNECTED or any cell on a frequency or frequency of RAT assigned by RRC in the state transition message. 



8.1.3.8.3 Test description 

8.1.3.8.3.1 Pre-test conditions 
System Simulator: 

2 cells, one E-UTRA and one GERAN cell and different location areas: 

Cell 1 E-UTRA serving cell (priority 4 default) 

- Cell 24 GERAN neighbouring cell (priority 3) 

The parameters settings and power levels for Cell 1 and Cell 24 are selected according to [18], [5], [25] and 
Table 8.1.3.8.3.2-0 so that camping on Cell 1 is guaranteed and no cell re-selection to Cell 24 can take place 
(GERAN priority is lower than serving and S ceii i > Thresh ceii i.iow) 

UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) on cell 1 according to [18]. 

8.1 .3.8.3.2 Test procedure sequence 

Table 8.1.3.6.3.2-0 shows the cell power levels after the preamble. 

Table 8.1.3.8.3.2-0: Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Cell 24 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-75 


- 


The power levels are such that 
camping on Cell 1 is guaranteed. 


GERAN Cell Power 


dBm 


- 


-70 



Table 8.1.3.8.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS transmits an RRCConnectionRelease 
message (IE redirectedCarherlnfo including 
startingARFCN 0^ Cell 24). 


<— 


RRCConnectionRelease 






2 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.9 

indicate that the UE is camped on GERAN Cell 

24? 

NOTE: The UE performs an RAU procedure 

and the RRC connection is released. 






1 
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8.1.3.8.3.3 



Specific message or IE contents 



Table 8.1.3.8.3.3-1 : SystemlnformationBlockTypel for cell 1 (preamble and all steps, Table 8.1.3.8.3.2- 

1) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type1 ::= SEQUENCE { 








schedulinginfoLlst ::= SEQUENCE (SIZE (L.tnaxSI- 
Message)) OF SEQUENCE {} 


Combination 5 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB7 are 
transmitted 




1 









Table 8.1.3.8.3.3-2: SystemlnformationBlockType? ior cell 1 (preamble and all steps, Table 8.1.3.8.3.2- 

1) 



Derivation Path: 36.508 table 4.4.3.3-6 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType? ::= SEQUENCE { 








carrierPreqslnfoList SEQUENCE (SIZE 
(1 ..maxGNFG)) OF SEQUENCE { 


1 Entry 






commonlnfo SEQUENCE { 








cellReselectionPriority 


3 






} 








} 








} 








Table 8.1.3.8.3.3-3: RRCConnectionRelease message (step 1, Table 8.1.3.8.3.2-1) 


Derivation Path: 36.508 table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE { 








rrcConnectionRelease-r8 SEQUENCE { 








redirectedCarherlnfo CHOICE { 








geran SEQUENCE { 








startingARFCN 


Downlink ARFCN of Cell 
24 






bandlndicator 


The same band indicator 
of the Cell 24 






followingARFCNs CHOICE { 








explicitListOfARFCNs 


Entries 






} 








} 








1 








1 








} 








} 








} 









8.1.3.9 

8.1.3.9.1 
(1) 



RRC connection release / Redirection from E-UTRAN to CDMA2000-HRPD 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an RRCConnectionRelease message including an IE redirectedCarrierlnfo set to 
cdma20 00-HRPD } 

then { UE enters cdma2000-HRPD mode } 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 584 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

8.1.3.9.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clause 5.3.8.3, 5.3.12 
and TS 36.304, clause 5.2.7. 

[TS 36.331, clause 5.3.8.3] 

The UE shall: 

1> delay the following actions defined in this sub-clause 60ms from the moment the RRCConnectionRelease 
message was received or optionally when lower layers indicate that the receipt of the RRCConnectionRelease 
message has been successfully acknowledged, whichever is earlier; 

1> if the RRCConnectionRelease message includes the idleModeMobilityControlInfo: 



1> else: 

2> use the idle mobility parameters broadcast in the system information; 
1> if the releaseCause received in the RRCConnectionRelease message indicates 'loadBalancingTAURequirecT: 

1> else: 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'. 
[TS 36.331, clause 5.3.12] 
Upon leaving RRC_CONNECTED, the UE shall: 

1> indicate the release of the RRC connection to upper layers together with the release cause; 

1> if leaving RRC_CONNECTED was not triggered by reception of the MobilityFromEUTRACommand message: 

2> enter RRC_IDLE by performing cell selection in accordance with the cell selection process, defined for the case of 
leaving RRC_CONNECTED, as specified in TS 36.304 [4]. 

[TS 36.304, clause 5.2.7] 

On transition from RRC_CONNECTED to RRC_1DLE, a UE shall attempt to camp on the last cell for which it was in 
RRC_CONNECTED or any cell on a frequency or frequency of RAT assigned by RRC in the state transition message. 

8.1.3.9.3 Test description 

8.1.3.9.3.1 Pre-test conditions 

System Simulator: 

- 2 cells, one E-UTRA and one HRPD cell: 

- Cell 1 E-UTRA serving cell 

- Cell 15 suitable neighbour HRPD cell 

The parameters settings and power levels for Cell 1 and Cell 15 are selected according to [18], [xx] and Table 
8.1.3.9.3.2-1 so that camping on Cell 1 is guaranteed and no cell re-selection to Cell 15 can take place (hrpd 
priority is lower than serving and S ceii i > Thresh ceii i.iow)- 

UE: 

None. 
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Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 
Note: UE is not pre-registered in Cell 15. 
8.1 .3.9.3.2 Test procedure sequence 

Table 8.1.3.9.3.2-1 shows the cell power levels after the preamble. 

Table 8.1.3.9.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 15 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-75 


- 


The power levels are such that 
camping on Cell 1 is guaranteed. 


lor/loc 


dB 


- 


-5 


loc 


dBm/1.23MHz 


- 


-55 


CPICH Ec/lo(Note1) 


dB 


- 


-6 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other parameters set by the SS. 



Table 8.1.3.9.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS transmits an RRCConnectionRelease 
message (IE redirectedCarrierlnfo including 
cdma2000-HRPD of Cell 15). 


<— 


RRCConnectionRelease 






2 


Check: Does the UE transmit an Access Probe 
on Cell 15 to initiate registration? 


-> 


Access Probe 


1 


P 



8.1.3.9.3.3 



Specific message or IE contents 



Table 8.1.3.9.3.3-1 : SystemlnformationBlockTypel for cell 1 (preamble and all steps, Table 8.1.3.9.3.2- 

2) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnfoList ::= SEQUENCE (SIZE (L.maxSI- 
Messaqe)) OF SEQUENCE {} 


Combination 4 in TS 
36.508 section 4.4.3.1 


SIB2, and SIB3 
are transmitted 




} 









Table 8.1.3.9.3.3-2: RRCConnectionRelease (step 1, Table 8.1.3.9.3.2-2) 



Derivation Path: 36.508 table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionRelease-r8 SEQUENCE { 








redirectedCarrierlnfo CHOICE { 








cdma2000-HRPD 


cdma2000-Carrierlnfo for 
Cell 15 






1 








} 








} 








} 








} 
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8.1 .3.1 RRC connection release / Redirection from E-UTRAN to CDMA2000-1 xRTT 

8.1.3.10.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an RRCConnectionRelease message including an IE redirectedCarrierlnfo set to 
cdma2000-lxRTT } 

then { UE enters cdma2 - IxRTT mode } 



8.1.3.10.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clause 5.3.8.3, 5.3.12 
and TS 36.304, clause 5.2.7. 

[TS 36.331, clause 5.3.8.3] 

The UE shall: 

1> delay the following actions defined in this sub-clause 60ms from the moment the RRCConnectionRelease 
message was received or optionally when lower layers indicate that the receipt of the RRCConnectionRelease 
message has been successfully acknowledged, whichever is earlier; 

1> if the RRCConnectionRelease message includes the idleModeMobilityControlInfo: 



1> else: 

2> apply the cell reselection priority information broadcast in the system information; 
1> if the releaseCause received in \h& RRCConnectionRelease message indicates 'loadBalancingTAURequired': 

1> else: 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'. 
[TS 36.331, clause 5.3.12] 
Upon leaving RRC_CONNECTED, the UE shall: 

1> indicate the release of the RRC connection to upper layers together with the release cause; 

1> if leaving RRC_CONNECTED was not triggered by reception of the MobilityFromEUTRACommand message: 

2> enter RRC_1DLE by performing cell selection in accordance with the cell selection process, defined for the case of 
leaving RRC_CONNECTED, as specified in TS 36.304 [4]. 

[TS 36.304, clause 5.2.7] 

On transition from RRC_CONNECTED to RRC_1DLE, a UE shall attempt to camp on the last cell for which it was in 
RRC_CONNECTED or any cell on a frequency or frequency of RAT assigned by RRC in the state transition message. 
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8.1.3.10.3 Test description 

8.1.3.10.3.1 Pre-test conditions 
System Simulator: 

2 cells, one E-UTRA and one IxRTT cell: 

- Cell 1 E-UTRA serving cell 

Cell 19 suitable neighbour IxRTT cell 

The parameters settings and power levels for Cell 1 and Cell 19 are selected according to [18], [yy] and Table 
8.1.3.10.3.2-1 so that camping on Cell 1 is guaranteed and no cell re-selection to Cell 19 can take place 
(IxRTT priority is lower than serving and S ceii i > Thresh ceii i.iow)- 

UE: 

UE is not pre-registered in Cell 19. 
Preamble: 

The UE is in state Generic RB Established (state 3) on cell 1 according to [18]. 

8.1 .3.1 0.3.2 Test procedure sequence 

Table 8.1.3.10.3.2-1 shows the cell power levels after the preamble. 

Table 8.1.3.10.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 19 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-75 


- 


The power levels are such that 
camping on Cell 1 is guaranteed. 


lor/loc 


dB 


- 





Pilot Ec/ lor 


dB 


- 


-7 


loc 


dBm/1.23MHz 


- 


-75 


CPICH Ec/lo(Note1) 


dB 


- 


-10 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other parameters set by the SS. 



Table 8.1.3.10.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS transmits an RRCConnectionRelease 
message. 


<— 


RRCConnectionRelease 


- 


- 


2 


Check; Does the UE transmit an Access Probe 
on Cell 19 to initiate registration? 


-> 


Access Probe 


1 


P 



8.1.3.10.3.3 



Specific message or IE contents 



Table 8.1.3.10.3.3-1 : SystemlnformationBlockTypel for cell 1 (preamble and all steps, Table 

8.1.3.10.3.2-1) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnfoList ::= SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 6 in TS 
36.508 section 4.4.3.1 


SIB2andSIB3 
are transmitted 




} 
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Table 8.1.3.10.3.3-2: RRCConnectionRelease (step 1, Table 8.1.3.10.3.2-1) 



Derivation Path: 36.508 table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionRelease-r8 SEQUENCE { 








redirectedCarherlnfo CHOICE { 








cdma2000-1xRTT 


cdma2000-Carrierlnfo for 
Cell 19 






} 








} 








} 








1 








} 









8.2 

8.2.1 

8.2.1.1 

8.2.1.1.1 

(1) 



RRC connection reconfiguration 

Radio bearer establishment 

RRC connection reconfiguration / Radio bearer establishment for transition 
from RRC_IDLE to RRC_CONNECTED / Success / Default bearer / Early 
bearer establishment 

Test Purpose (TP) 



with { UE having completed the RRC connection establishment procedure } 
ensure that { 

when { SS sends in sequence a SecurityModeCommand and an RRCConnectionReconfiguration message 
then { UE establishes the initial security configuration in accordance with the received 
securityConfigSMC included in SecurityModeCommand and successfully completes the connection 
reconfiguration } 



8.2.1.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.331 clauses 5.1.2, 
5.3.1.1, 5.3.5.3, 5.3.10.1 and 5.3.10.3. The following represent an extraction of the requirements relevant to the test 
purpose. 

[TS 36.331, clause 5.1.2] 

The UE shall: 

1> process the received messages in order of reception by RRC, i.e. the processing of a message shall be completed 
before starting the processing of a subsequent message; 

NOTE: 1 E-UTRAN may initiate a subsequent procedure prior to receiving the UEs response of a previously 
initiated procedure. 

[TS 36.331, clause 5.3.1.1] 

After having initiated the initial security activation procedure, E-UTRAN initiates the establishment of SRB2 and 
DRBs, i.e. E-UTRAN may do this prior to receiving the confirmation of the initial security activation from the UE. In 
any case, E-UTRAN will apply both ciphering and integrity protection for the RRC connection reconfiguration 
messages used to establish SRB2 and DRBs. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 
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1> if this is the first RRCConnectionReconfiguration message after successful completion of the RRC 
Connection Re-establishment procedure: 



1> else: 

2> \f\hs RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

3> perform the radio resource configuration procedure as specified in 5.3.10; 

NOTE 2: If the RRCConnectionReconfiguration message includes the establishment of radio bearers other than 
SRBl, the UE may start using these radio bearers immediately, i.e. there is no need to wait for an 
outstanding acknowledgment of the SecurityModeComplete message. 



1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission using the new 
configuration, upon which the procedure ends; 

[TS 36.331, clause 5.3.10.1] 

The UE shall: 

1> for each srb-Identity value included in the srb-ToAddModList that is not part of the current UE configuration 
(SRB establishment): 

2> apply the specified configuration defined in 9.1.2 for the corresponding SRB; 

2> establish a PDCP entity and configure it with the current security configuration, if applicable; 

2> establish an RLC entity in accordance with the received rlc-Config; 

2> establish a DCCH logical channel in accordance with the received logicalChannelConfig and with the logical 
channel identity set in accordance with 9.1.2 

[TS 36.331, clause 5.3.10.3] 

The UE shall: 

1> for each drb-Identity value included in the drb-ToAddModList that is not part of the current UE configuration 
(DRB establishment): 

2> establish a PDCP entity and configure it with the current security configuration and in accordance with the 
received pdcp-Config; 

2> establish an RLC entity in accordance with the received rlc-Config; 

2> establish a DTCH logical channel in accordance with the received logicalChannelldentity and the received 
logicalChannelConfig; 

1> indicate the establishment of the DRB(s) and the eps-Bearerldentity of the established DRB(s) to upper layers; 
8.2.1.1.3 Test description 

8.2.1.1.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
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8.2.1.1.3.2 



Test procedure sequence 

Table 8.2.1.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


SS sends a Paging message to the UE on the 
appropriate paging block, and including the UE 
identity in one entry of the IE 
pagingRecordLists. 


<- 


Paging 






2 


UE transmits an RRCConnectionRequest 
message. 


~> 


RRCConnectionRequest 


- 


- 


3 


SS transmit an RRCConnectionSetup 
message 


<— 


RRCConnectionSetup 


- 


- 


4 


The UE transmits an 

RRCConnectionSetupComplete \.o confirm the 
successful completion of the connection 
establishment. (Note 1) 


~> 


RRCConnectionSetupCompiete 






5 


SS transmits a SecurityModeCommand 
message to activate AS security. 


<- 


SecurityModeCommand 


- 


- 


6 


Using the same TTI as the 
SecurityModeCommand message in step 5, 
the SS transmits an 

RRCConnectionReconfiguration message to 
establish a data radio bearer. 


<~ 


RRCConnectionReconfiguration 






7 


Check: Does the UE transmit a 
SecurityModeComplete message? 


-> 


SecurityModeCompiete 


1 


P 


8 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message to confirm the establishment of data 
radio bearer? 


-> 


RRCConnectionReconfigurationC 
omplete 


1 


P 


9 


Check: Does the test result of CALL generic 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that UE is in E-UTRA 
RRC CONNECTED state? 






1 




Note 1 : Contains a SERVICE REQUEST NAS message. 



8.2.1 .1 .3.3 Specific message contents 

Table 8.2.1 .1 .3.3-1 : RRCConnectionReconfiguration (step 6, Table 8.2.1 .1 .3.2-1) 

Derivation Path: 36.508 table 4.6.1-8, condition SRB2-DRB(1. 0) 



8.2.1.2 
8.2.1.3 

8.2.1.3.1 

(1) 



Void 

RRC connection reconfiguration / Radio bearer establishment / Success / 
Dedicated bearer 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { SS sends an RRCConnectionReconfiguration message including a drb-Identity that is not part 
of the current UE configuration and a dedicatedlnfoNASList} 

then { UE successfully establish the radio bearer according to IE radioResourceConfigDedicated } 



8.2.1.3.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.331 clauses 5.3.5.3 
and 5.3.10.3. 

The following represent an extraction of the requirements relevant to the test purpose. 
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[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobility Controllnformation and the UE is able to 
comply with the configuration included in this message, the UE shall: 

1> if this is the first RRCConnectionReconfiguration message after successful completion of the RRC Connection 
Re-establishment procedure: 



1> else: 

2> \f\hQ RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

3> perform the radio resource configuration procedure as specified in 5.3.10; 

NOTE 2: If the RRCConnectionReconfiguration message includes the establishment of radio bearers other than 
SRBl, the UE may start using these radio bearers immediately, i.e. there is no need to wait for an 
outstanding acknowledgment of the SecurityModeComplete message. 

1> if the RRCConnectionReconfiguration message includes the dedicatedlnfoNASList: 

2> forward each element of the dedicatedlnfoNASList to upper layers; 

1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission using the new 
configuration, upon which the procedure ends; 

[TS 36.331, clause 5.3.10.3] 

The UE shall: 

1> for each drb-Identity value included in the drb-ToAddModList that is not part of the current UE configuration 
(DRB establishment): 

2> establish a PDCP entity and configure it with the current security configuration and in accordance with the 
received pdcp-Config; 

2> establish an RLC entity in accordance with the received rlc-Config; 

2> establish a DTCH logical channel in accordance with the received logicalChannelldentity and the received 
logicalChannelConfig; 

1> indicate the establishment of the DRB(s) and the eps-Bearerldentity of the established DRB(s) to upper layers; 
8.2.1.3.3 Test description 

8.2.1.3.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 
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8.2.1.3.3.2 



Test procedure sequence 

Table 8.2.1 .3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
establish a data radio bearer. 


<— 


RRCConnectionReconfiguration 






2 


Checl<: Does the UE transmit an 

RRCConnectionReconfigurationComplete 

message? 


-> 


RRCConnectionReconfigurationC 
omplete 


1 


P 


3 


The UE transmits an ULInformationTransfer 
message. This message includes an 
ACTIVATE DEDICATED EPS BEARER 
CONTEXT ACCEPT message. 


-> 


UL Information Transfer 






4 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 






1 





8.2.1 .3.3.3 Specific message contents 

Table 8.2.1.3.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.2.1.3.3.2-1) 



Derivation Path: 36.508 table 4.6.1-8, condition DRB(1,0) 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEOUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEOUENCE { 








dedicatedlnfoNASList SEOUENCE 
(SIZE(1..maxDRB))0F 


1 entry 






dedicatedlnfoNAS[1] 


ACTIVATE DEDICATED 
EPS BEARER 
CONTEXT REOUEST 
with EPS bearer identity 
corresponding to drb- 
Identity 2 


According 36.508 
table 4.7.3-3 




} 








} 








} 








} 









8.2.1.4 
8.2.1.5 

8.2.1.5.1 
(1) 



Void 

RRC connection reconfiguration / Radio bearer establishment for transition 
from RRC_ldle to RRC CONNECTED / Success / Latency check 

Test Purpose (TP) 



with { UE in E-UTRA RRC_IDLE state and has sent an RRCConnectionRequest message } 
ensure that { 

when { UE receive a RRCConnectionSetup message and start to receive periodic UL grant at 15 
subframes later } 

then { UE successfully transmit RRCConnectionSetupComplete message } 



(2) 



with 



UE in E-UTRA RRC CONNECTED state 
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ensure that { 

when { UE receive a SecurityModeCommand message and start to receive periodic UL grant at 10 
subframes later } 

then { UE successfully establish the initial AS security activation according to IE 
securityConfigSMC } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receive a RRCConnectionReconfiguration message including a drb-Identity that is not part 
of the current UE configuration and a nas-Dedicatedlnformation and start to receive periodic UL 
grant at 15 subframes later } 

then { UE successfully establish the radio bearer according to IE radioResourceConfiguration } 
} 

(4) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an UECapabilityEnquiry message after AS security is activated and start to 
receive periodic UL grant at 10 subframes later } 

then { UE successfully transmits an UECapabilitylnformation message including UE radio access 
capability information corresponding to the ue-RadioAccessCapRequest variable } 
} 

8.2.1 .5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.3.4, 
5.3.4.3, 5.3.5.3, 5.6.3.3 and 11.2. 

[TS 36.331, clause 5.3.3.4] 

The UE shall: 

1> perform the radio resource configuration procedure in accordance with the received 
radioResourceConfigDedicated and as specified in 5.3.10; 

1> if stored, discard the cell reselection priority information provided by the idleModeMobilityControlInfo or 
inherited from another RAT; 

1> stop timer T300; 

1> stop timer T302, if running; 

1> stop timer T303, if running; 

1> stop timer T305, if running; 

1> perform the actions as specified in 5.3.3.7; 

1> stop timer T320, if running; 

1> enter RRC_CONNECTED; 

1> stop the cell re-selection procedure; 

1> set the content of RRCConnectionSetupComplete message as follows: 

2> set the selectedPLMN-Identity to the PLMN selected by upper layers (see TS 23.122 [11], TS 24.301 [35]) 
from the PLMN(s) included in the plmn-IdentityList in SystemlnformationBlockTypel; 

2> if upper layers provide the 'Registered MME', include and set the registeredMME as follows: 

3> if the PLMN identity of the 'Registered MME' is different from the PLMN selected by the upper layers: 

4> include the plmnldentity in the registeredMME and set it to the value of the PLMN identity in the 
'Registered MME' received from upper layers; 
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3> set the mmegi and the mmec to the value received from upper layers; 

2> set the dedicatedlnfoNAS to include the information received from upper layers; 

2> submit the RRCConnectionSetupComplete message to lower layers for transmission, upon which the 
procedure ends; 

[TS 36.331, clause 5.3.4.3] 

The UE shall: 

1> derive the KeNB key, as specified in TS 33.401 [32]; 

1> derive the KRRcint key associated with the integrityProtAlgorithm indicated in the SecurityModeCommand 
message, as specified in TS 33.401 [32]; 

1> request lower layers to verify the integrity protection of the SecurityModeCommand message, using the 

algorithm indicated by the integrityProtAlgorithm as included in the SecurityModeCommand message and the 
KRRCmt key; 

1> if the SecurityModeCommand message passes the integrity protection check: 

2> derive the KRRCenc key and the Kupenc key associated with the cipheringAlgorithm indicated in the 
SecurityModeCommand message, as specified in TS 33.401 [32]; 

2> configure lower layers to apply integrity protection using the indicated algorithm and the KRRCint key 

immediately, i.e. integrity protection shall be applied to all subsequent messages received and sent by the UE, 
including the SecurityModeComplete message; 

2> configure lower layers to apply ciphering using the indicated algorithm, the KRRCenc key and the Kupenc key 
after completing the procedure, i.e. ciphering shall be applied to all subsequent messages received and sent 
by the UE, except for the SecurityModeComplete message which is sent unciphered; 

2> consider AS security to be activated; 

2> submit the SecurityModeComplete message to lower layers for transmission, upon which the procedure ends; 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 

1> if this is the first RRCConnectionReconfiguration message after successful completion of the RRC Connection 
Re-establishment procedure: 



1> else: 

2> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

3> perform the radio resource configuration procedure as specified in 5.3.10; 

NOTE 2: If the RRCConnectionReconfiguration message includes the establishment of radio bearers other than 
SRBl, the UE may start using these radio bearers immediately, i.e. there is no need to wait for an 
outstanding acknowledgment of the SecurityModeComplete message. 

1> if the RRCConnectionReconfiguration message includes the dedicatedlnfoNASList: 

2> forward each element of the dedicatedlnfoNASList to upper layers; 



1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission using the new 
configuration, upon which the procedure ends; 

[TS 36.331, clause 5.6.3.3] 
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The UE shall: 

1> set the contents of UECapabilitylnformation message as follows: 

2> if the ue-CapabilityRequest includes 'eutra' : 

3> include the UE-EUTRA-Capability within a ue-CapabilityRAT-Container and with the rat-Type set to 
'eutra ; 

2> if the ue-CapabilityRequest includes 'geran-cs' and if the UE supports GERAN CS domain: 

3> include the UE radio access capabilities for GERAN CS within a ue-Capability RAT -Container and with 
the rat-Type set to 'geran-cs' ; 

2> if the ue-CapabilityRequest includes 'geran-ps' and if the UE supports GERAN PS domain: 

3> include the UE radio access capabilities for GERAN PS within a ue-CapabilityRAT-Container and with 
the rat-Type set to 'geran-ps'; 

2> if the ue-CapabilityRequest includes 'utra' and if the UE supports UTRA: 

3> include the UE radio access capabilities for UTRA within a ue-CapabilityRAT-Container and with the 
rat-Type set to 'utra'; 



1> submit the UECapabilitylnformation message to lower layers for transmission, upon which the procedure ends; 

[TS 36.331, clause 11.2] 

The UE performance requirements for RRC procedures are specified in the following table, by means of a value N: 

N = the number of 1ms subframes from the end of reception of the E-UTRAN -> UE message on the UE physical layer 
up to when the UE shall be ready for the reception of uplink grant for the UE -> E-UTRAN response message with no 
access delay other than the TTI-alignment (e.g. excluding delays caused by scheduling, the random access procedure or 
physical layer synchronisation). 



DL 



UL 







RRC procedure delay 










RRCDL 

command 


















RRCUL 
response 













Figure 1 1 .2-1 : illustration of RRC procedure delay 



Procedure title: 



E-UTRAN -> UE UE -> E-UTRAN 



N Notes 
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Procedure title: 


E-UTRAN -> UE 


UE -> E-UTRAN 


N 


Notes 


RRC Connection Control Procedures 


RRC connection 
establishment 


RRCConnectionSetu 
P 


RRCConnectionSetupCo 
mplete 


15 




RRC connection re- 
configuration (radio 
resource configuration) 


RRCConnectionReco 
nfiguration 


RRCConnectionReconfigu 
rationComplete 


15 




Initial security 
activation 


SecurityModeComma 
nd 


SecuhtyModeCommandC 
omplete/SecurityModeCo 
mmandFailure 


10 




Other procedures 


UE capability transfer 


UECapabilityEnquiry 


UECapabilitylnformation 


10 





8.2.1.5.3 Test description 

8.2.1.5.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

- The UE is in state Registered, Idle mode (state 2) according to [18]. 
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8.2.1.5.3.2 



Test procedure sequence 

Table 8.2.1 .5.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS sends a Paging message to the UE on 
the appropriate paging block, and including the 
UE identity in one entry of the IE 
pagingRecordLists. 


<- 


Paging 






2 


The UE transmits an RRCConnectionRequest 
message. 


-> 


RRCConnectionRequest 


- 


- 


3 


The SS transmit an RRCConnectionSetup 
message. (Note 3) 


<— 


RRCConnectionSetup 






4 


Check: Does the UE transmit an 
RRCConnectionSetupComplete message 1 9 
subframes after successful completion of step 
3? (Note 2) 


-> 


RRCConnectionSetupCompiete 


1 


P 


5 


The SS transmits a SecurityModeCommand 
message to activate AS security. (Note 3) 


<- 


SecurityModeCommand 






6 


Check: Does the UE transmit a 
SecurityModeComplete message 14 
subframes after successful completion of step 
5? (Note 2) 


~> 


SecurityModeComplete 


2 


P 


7 


The SS transmits an 

RRCConnectionReconfiguration message to 
establish a data radio bearer. (Note 3) 


<— 


RRCConnectionReconfiguration 






8 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message 19 subframes after successful 
completion of step 7? (Note 2) 


-> 


RRCConnectionReconfigurationC 
ompiete 


3 


P 


9 


The SS transmits a UECapabilityEnquiry 
message to request UE radio access capability 
information for E UTRA only. (Note 3) 


<— 


UECapabilityEnquiry 






10 


Check: Does the UE transmit a 
UECapabilitylnformation message 14 
subframes after successful completion of step 
9? (Note 2) 


-> 


UECapabiiitylnformation 


4 


P 


Note 1 : The SS is configured for RRC procedure delay testing according to TS 36.523-3 clause 7.12.1 for FDD and 

clause 7.1 2.3 for TDD. 
Note 2: 4 subframes is added on top of RRC processing delay requirement, because of transmission delay after UL 

grant. 
Note 3: The DL resource allocation sent on PDCCH is big enough to guarantee transmission of all DL RRC PDU in 

single 1 1 1. 



Editors note: TDD part of this test case is FFS. 

8.2.1 .5.3.3 Specific message contents 

Table 8.2.1.5.3.3-1 : RRCConnectionRequest (step 2, Table 8.2.1.5.3.2-1) 



Derivation Path: 36.508, Table 4.6.1-16 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








establishmentCause 


mt-Access 






1 








1 








} 









Table 8.2.1.5.3.3-2: RRCConnectionReconfiguration (step 7, Table 8.2.1.5.3.2-1) 

Derivation Path: 36.508 table 4.6.1-8, condition SRB2-DRB(1, 0) 
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8.2.1 .6 RRC connection reconfiguration / Radio bearer establishment for transition 

from RRCJdIe to RRC CONNECTED / Success / Latency check/ 
SecurityModeCommand and RRCConnectionReconfiguration transmitted in 
the same TTI 

8.2.1 .6.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE received SecurityModeCommand message and RRCConnectionReconfiguration message including 
a drb-Identity that is not part of the current UE configuration and a nas-Dedicatedlnformation in 
the same TTI and start to receive periodic UL grant at 20 subframes later } 

then { UE successfully establish the initial AS security activation according to IE 
securityConfigSMC and the radio bearer according to IE radioResourceConfiguration } 
} 

8.2.1 .6.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.4.3, 
5.3.5.3 and 11.2. 

[TS 36.331, clause 5.3.4.3] 

The UE shall: 

1> derive the KeNB key, as specified in TS 33.401 [32]; 

1> derive the K^RCint key associated with the integrityProtAlgorithm indicated in the SecurityModeCommand 
message, as specified in TS 33.401 [32]; 

1> request lower layers to verify the integrity protection of the SecurityModeCommand message, using the 

algorithm indicated by the integrityProtAlgorithm as included in the SecurityModeCommand message and the 
KRRCmt key; 

1> if the SecurityModeCommand message passes the integrity protection check: 

2> derive the KRRCenc key and the Kypenc key associated with the cipheringAlgorithm indicated in the 
SecurityModeCommand message, as specified in TS 33.401 [32]; 

2> configure lower layers to apply integrity protection using the indicated algorithm and the KRRCint key 

immediately, i.e. integrity protection shall be applied to all subsequent messages received and sent by the UE, 
including the SecurityModeComplete message; 

2> configure lower layers to apply ciphering using the indicated algorithm, the KRRCenc key and the Kupenc key 
after completing the procedure, i.e. ciphering shall be applied to all subsequent messages received and sent 
by the UE, except for the SecurityModeComplete message which is sent unciphered; 

2> consider AS security to be activated; 

2> submit the SecurityModeComplete message to lower layers for transmission, upon which the procedure ends; 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 

1> if this is the first RRCConnectionReconfiguration message after successful completion of the RRC Connection 
Re-establishment procedure: 



1> else: 

2> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 
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3> perform the radio resource configuration procedure as specified in 5.3.10; 

NOTE 2: If the RRCConnectionReconfiguration message includes the establishment of radio bearers other than 
SRBl, the UE may start using these radio bearers immediately, i.e. there is no need to wait for an 
outstanding acknowledgment of the SecurityModeComplete message. 

1> if the RRCConnectionReconfiguration message includes the dedicatedlnfoNASList: 

2> forward each element of the dedicatedlnfoNASList to upper layers; 



1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission using the new 
configuration, upon which the procedure ends; 

[TS 36.331, clause 11.2] 

The UE performance requirements for RRC procedures are specified in the following table, by means of a value N: 

N = the number of 1ms subframes from the end of reception of the E-UTRAN -> UE message on the UE physical layer 
up to when the UE shall be ready for the reception of uplink grant for the UE -> E-UTRAN response message with no 
access delay other than the TTl-alignment (e.g. excluding delays caused by scheduling, the random access procedure or 
physical layer synchronisation). 



DL 



UL 







RRC procedure delay 










RRCDL 

command 


















RRCUL 
response 













Figure 1 1 .2-1 : Illustration of RRC procedure delay 



Procedure title: | E-UTRAN -> UE 


UE -> E-UTRAN 


N 


Notes 1 


RRC Connection Control Procedures 


Initial security 


SecurityModeComma 


RRCConnectionReconfigu 


20 


The two DL messages are 


activation + RRC 


nd, 


rationComplete 




transmitted in the same TTI 


connection re- 


RRCConnectionReco 








configuration (RB 


nfiguration 








establishment) 











8.2.1.6.3 Test description 

8.2.1.6.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
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8.2.1.6.3.2 



Test procedure sequence 

Table 8.2.1 .6.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS sends a Paging message to the UE on 
the appropriate paging block, and including the 
UE identity in one entry of the IE 
pagingRecordLists. 


<- 


Paging 






2 


The UE transmits an RRCConnectionRequest 
message. 


-> 


RRCConnectionRequest 


- 


- 


3 


The SS transmit an RRCConnectionSetup 
message. 


<— 


RRCConnectionSetup 


- 


- 


4 


The UE transmit an 
RRCConnectionSetupComplete m essag e . 


-> 


RRCConnectionSetupCompiete 


- 


- 


5 


The SS transmits a SecurityModeCommand 
message to activate AS security. (Note 3) 


<- 


SecurityModeCommand 


- 


- 


6 


The SS transmits a 

RRCConnectionReconfiguration message to 
establish a data radio bearer. (Note 3) 


<~ 


RRCConnectionReconfiguration 






7 


Check: Does the UE transmit an 
SecurityModeComplete message 24 
subframes after successful completion of step 
5? (Note 2) 


-> 


SecurityModeComplete 


1 


P 


8 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message 24 subframes after successful 
completion of step 6? (Note 2) 


-> 


RRCConnectionReconfigurationC 
omplete 


1 


P 


Note 1 : The SS is configured for RRC procedure delay testing according to TS 36.523-3 clause 7.12.1 for FDD and 

clause 7.12.3 for TDD. 
Note 2: 4 subframes is added on top of RRC processing delay requirement, because of transmission delay after UL 

grant. 
Note 3: The DL resource allocation sent on PDCCH is big enough to guarantee transmission of all DL RRC PDU in 

single 1 1 1. 



Editors note: TDD part of this test case is FFS. 
8.2.1 .6.3.3 Specific message contents 

Table 8.2.1.6.3.3-1 : RRCConnectionRequest (step 2, Table 8.2.1.6.3.2-1) 



Derivation Path: 36.508, Table 4.6.1-16 | 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








establishmentCause 


mt-Access 






} 








1 








1 









Table 8.2.1.6.3.3-2: RRCConnectionReconfiguration (step 6, Table 8.2.1.6.3.2-1) 

Derivation Path: 36.508 table 4.6.1-8, condition SRB2-DRB(1, 0) 



8.2.1.7 



8.2.1.7.1 



RRC connection reconfiguration / Radio bearer establishment / Success / 
SRB2 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state without SRB2 } 
ensure that { 

when { SS sends an RRCConnectionReconfiguration message including SRB2 configuration 
then { UE successfully establish the signalling radio bearer } 
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8.2.1 .7.2 Conformance requirements 

References: The conformance requirements covered in tlie present TC are specified in: 3GPP TS 36.331 clauses 5.3.5.3, 
and 5.3.10.1. 

The following represent an extraction of the requirements relevant to the test purpose. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 

1> if this is the first RRCConnectionReconfiguration message after successful completion of the RRC Connection 
Re-establishment procedure: 



1> else: 

2> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

3> perform the radio resource configuration procedure as specified in 5.3.10; 

NOTE 2: If the RRCConnectionReconfiguration message includes the establishment of radio bearers other than 
SRBl, the UE may start using these radio bearers immediately, i.e. there is no need to wait for an 
outstanding acknowledgment of the SecurityModeComplete message. 

1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission using the new 
configuration, upon which the procedure ends; 

[TS 36.331, clause 5.3.10.1] 

The UE shall: 

1> for each srb-Identity value included in the srb-ToAddModList that is not part of the current UE configuration 
(SRB establishment): 

2> apply the specified configuration defined in 9.1.2 for the corresponding SRB; 

2> establish a PDCP entity and configure it with the current security configuration, if applicable; 

2> establish an RLC entity in accordance with the received rlc-Config; 

• 2> establish a DCCH logical channel in accordance with the received logicalChannelConfig and 
with the logical channel identity set in accordance with 9.1.2; 

8.2.1.7.3 Test description 

8.2.1.7.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 

UE: 

None. 

Preamble: 

The UE is in state Registered, Idle Mode (State 2) according to [18]. 
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8.2.1.7.3.2 



Test procedure sequence 

Table 8.2.1 .7.3.2-1: Main behaviour 



St 


Procedure 


U-S 


Message Sequence 
lUlessage 


TP 


Verdict 


1-7 


Generic Radio Bearer Establisliment (State 3) 
step 1 to 7 in TS 36.508 subclause 4.5.3.3. 






- 


- 


8 


The SS transmits an 

RRCConnectionReconfiguration message to 
establisli SRB2. 


<— 


RRCConnectionReconfiguration 






9 


Checl<: Does the UE transmits an 

RRCConnectionReconfigurationComplete 

message? 


-> 


RRCConnectionReconfigurationC 
ompiete 


1 


P 


10 


Checl<: Does the test result of CALL generic 
procedure in TS 36.508 subclause 6.4.2.3 
indicates that UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 






1 





8.2.1 .7.3.3 Specific message contents 

Table 8.2.1.7.3.3-1 : RRCConnectionReconfiguration (step 8, Table 8.2.1.7.3.2-1)) 



Derivation Path: 36.508 table 4.6.1-6, condition SRB2-DRB(1, 0) 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








CI CHOICE{ 








rrcConnectionReconfiguration-r8 SEQUENCE { 








radioResourceConfigDedicated SEQUENCE { 








srb-ToAddModList SEQUENCE (SIZE (1..2)) 
OF SEQUENCE { 








srb-ToAddMod[1] SEQUENCE! 








rIc-Config CHOICE { 








explicitValue 


RLC-Config-NON- 
DEFAULT-SRB2 






} 








} 








} 








1 








1 








} 








} 








} 








} 
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Table 8.2.1.7.3.3-2: RLC-Config-NON-DEFAULT-SRB2 ( Table 8.2.1.7.3.3-1)) 



Derivation Path: 36.331 clauses 6.3.2, 9.2.1.2 


Information Element 


Value/remark 


Comment 


Condition 


RLC-Config-NON-DEFAULT-SRB2 ::= CHOICE { 








am SEQUENCE { 








ul-AM-RLC SEQUENCE { 








t-PollRetransmit 


ms100 






pollPDU 


p16 






poll Byte 


kbSOO 






maxRetxThreshold 


t6 






} 








dl-AM-RLC SEQUENCE { 








t-Reordering 


ms100 






t-StatusProhibit 


ms200 






} 








} 








} 









8.2.2 Radio resource reconfiguration 

8.2.2.1 RRC connection reconfiguration / Radio resource reconfiguration / Success 

8.2.2.1.1 Test Purpose (IP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a 
radioResourceConfigDedicated with SRB, DRB, transport channel and physical channel reconfiguration 

then { UE reconfigures the data and signalling radio bearers and sends an 
RRCConnectionReconfigurationComplete message } 



8.2.2.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331 clause 5.3.5.3, 
5.3.10.1, 5.3.10.3, 5.3.10.4 and 5.3.10.6. 

The following represent an extraction of the requirements relevant to the test purpose. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 

1> if this is the first RRCConnectionReconfiguration message after successful completion of the RRC Connection 
Re-establishment procedure: 



1> else: 

2> If the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 
3> perform the radio resource configuration procedure as specified in 5.3.10; 



1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission using the new 
configuration, upon which the procedure ends; 

[TS 36.331, clause 5.3.10.1] 

The UE shall: 
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1> for each srb-Identity value included in the srb-ToAddModList that is part of the current UE configuration (SRB 
reconfiguration): 

2> reconfigure the RLC entity in accordance with the received rlc-Config; 

2> reconfigure the DCCH logical channel in accordance with the received logicalChannelConfig; 

[TS 36.331, clause 5.3.10.3] 

1> for each drb-Identity value included in the drb-ToAddModList that is part of the current UE configuration (DRB 
reconfiguration) : 

2> if the pdcp-Config is included: 

3> reconfigure the PDCP entity in accordance with the received pdcp-Config; 

2> if the rlc-Config is included: 

3> reconfigure the RLC entity or entities in accordance with the received rlc-Config; 

2> if the logicalChannelConfig is included: 

3> reconfigure the DTCH logical channel in accordance with the received logicalChannelConfig; 

NOTE: Removal and addition of the same drb-Identity in single radioResourceConfiguration is not supported. 

[TS 36.331, clause 5.3.10.4] 

1> reconfigure the MAC main configuration in accordance with the received mac-MainConfig; 

[TS 36.331, clause 5.3.10.6] 

The UE shall: 

1> reconfigure the physical channel configuration in accordance with the received physicalConfigDedicated; 

8.2.2.1.3 Test description 

8.2.2.1.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

- The condition SRB2-DRB(2, 0) is used for step 8 in 4.5.3.3 according to [18]. 
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8.2.2.1.3.2 



Test procedure sequence 

Table 8.2.2.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits an 

RRCConnectionReconfiguration message 
containing a radioResourceConfigDedicated 
with SRBs, DRB, transport channel and 
physical channel reconfiguration. 


<— 


RRCConnectionReconfiguration 






2 


Check: Does the UE transmit an 

RRCConnectionReconfigurationComplete 

message? 


-> 


RRCConnectionReconfigurationC 
omplete 


1 


P 


3 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 






1 





8.2.2.1 .3.3 Specific message contents 

Table 8.2.2.1.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.2.2.1.3.2-1) 



Derivation Path: 36.508 table 4.6.1-8 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-RECONFIG 






1 








1 








} 








} 









Table 8.2.2.1.3.3-2: RadioResourceConfigDedicated-RECONFIG (Table 8.2.2.1.3.3-1) 



Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated ::= SEQUENCE { 








srb-ToAddlVlodList 


SRB-ToAddModList- 
RECONFIG 


TS 36.508 Table 
4.6.3-22A 




drb-ToAddModList 


DRB-ToAddModList- 
RECONFIG 


TS 36.508 Table 
4.6.3-2A 




drb-ToReleaseList 


Not present 






mac-IVIainConfig CHOICE { 








explicitValue 


MAC-MainConfig- 
RECONFIG 






} 








sps-Config 


Not present 






physicalConfigDedicated 


PhysicalConfigDedicated 
-RECONFIG 






} 
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Table 8.2.2.1.3.3-3: MAC-MainConfig-RECONFIG (Table 8.2.2.1.3.3-2) 



Derivation Path: 36.508 table 4.8.2.1 .5-1 


Information Element 


Value/remark 


Comment 


Condition 


MAC-MainConfig ::= SEQUENCE { 








ul-SCH-Config SEQUENCE { 








periodicBSR-Timer 


sf32 






retxBSR-Timer 


sf2560 






} 








phr-Config CHOICE { 








setup SEQUENCE { 








periodicPHR-Timer 


sf 1 0DD 






proliibitPHR-Timer 


sf500 






} 








1 








} 








Table 8.2.2.1 .3.3-4: PhysicalConfigDedicated-RECONFIG (Table 8.2.2.1 .3.3-2) 


Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


PhysicalConfigDedicated ::= SEQUENCE { 








pdsch-ConfigDedicated 


PDSCH- 
ConfigDedicated- 
RECONFIG 






pucch-ConfigDedicated 


Not present 






pusch-ConfigDedicated 


Not present 






uplinkPowerControlDedicated 


Not present 






tpc-PDCCH-ConfigPUCCH 


Not present 






tpc-PDCCH-ConfigPUSCH 


Not present 






cqi-ReportConflg 


Not present 






soundingRsUL-ConfigDedicated 


Not present 






antennalnfo CHOICE { 








defaultValue 


NULL 






} 








schedulingRequestConfig 


Not present 






} 








Table 8.2.2.1.3.3-5: PDSCH-ConfigDedicated-RECONFIG (Table 8.2.2.1.3.3-4) 


Derivation Path: 36.508 table 4.6.3-6 | 


Information Element 


Value/remark 


Comment 


Condition 


PDSCH-ConfigDedicated ::= SEQUENCE { 








p-a 


dBI 






} 









8.2.2.2 
8.2.2.2.1 

(1) 



RRC connection reconfiguration / SRB/DRB reconfiguration / Success 
Test Purpose (IP) 



with { UE in E-UTRA RRC_CONNECTED state} 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message containing SRB reconfiguration } 

then { UE reconfigures affected SRBs and sends an RRCConnectionReconfigurationComplete message } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state} 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message containing DRB reconfiguration } 

then { UE reconfigures affected DRBs and sends an RRCConnectionReconfigurationComplete message } 
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8.2.2.2.2 Conformance requirements 

References: The conformance requirements covered in the current TC is specified in: TS 36.331, clauses 5.3.5.3, 
5.3.10.1 and 5.3.10.3. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> else: 

2> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 
3>perform the Radio resource configuration procedure as specified in 5.3.10; 
[TS 36.331, clause 5.3.10.1] 
The UE shall: 

1> for each srb-Identity value included in the srb-ToAddModList that is part of the current UE configuration (SRB 
reconfiguration): 

2> reconfigure the RLC entity in accordance with the received rlc-Config; 

2> reconfigure the DCCH logical channel in accordance with the received logicalChannelConfig; 
[TS 36.331, clause 5.3.10.3] 
The UE shall: 

1> for each drb-Identity value included in the drb-ToAddModList that is part of the current UE configuration (DRB 
reconfiguration): 

2> if the pdcp-Config is included: 

3> reconfigure the PDCP entity in accordance with the received pdcp-Config; 

2> if the rlc-Config is included: 

3> reconfigure the RLC entity or entities in accordance with the received rlc-Config; 

2> if the logicalChannelConfig is included: 

3> reconfigure the DTCH logical channel in accordance with the received logicalChannelConfig; 

NOTE: Removal and addition of the same drb-Identity in single radioResourceConfiguration is not supported. 

8.2.2.2.3 Test Description 

8.2.2.2.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 

UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 
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- The condition SRB2-DRB(1, 2) Ois used for step 8 in 4.5.3.3 according to [8]. 
8.2.2.2.3.2 Test procedure sequence 

Table 8.2.2.2.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 
RRConnectionReconfiguration message 
containing a radioResourceConfigDedicated 
with SRB reconfiguration. 


<~ 


RRCConnectionReconfiguration 






2 


Checl<: Does the UE transmit an 

RRCConnectionReconfigurationComplete 

message? 


-> 


RRCConnectionReconfigurationC 
ompiete 


1 


P 


3 


SS transmits RRCConnectionReconfiguration 
message containing a 
radioResourceConfigDedicated with DRB 
reconfiguration. 


<- 


RRCConnectionReconfiguration 






4 


Checl<: Does the UE transmit an 

RRCConnectionReconfigurationComplete 

message? 


-> 


RRCConnectionReconfigurationC 
ompiete 


2 


P 



8.2.2.2.3.3 Specific message contents 

Table 8.2.2.2.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.2.2.2.3.2-1) 



Derivation Path: 36.508 table 4.6.1-8 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-SRBRECQNFIG 






} 








1 








1 








} 









Table 8.2.2.2.3.3-2: RadioResourceConfigDedicated-SRBRECONFIG (Table 8.2.2.2.3.3-1) 



Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated ::= SEQUENCE { 








srb-ToAddlVlodList 


SRB-ToAddModList- 
RECONFIG 


TS 36.508 Table 
4.6.3-22A 




drb-ToAddModList 


Not present 






drb-ToReleaseList 


Not present 






mac-IVIainConfig 


Not present 






sps-Config 


Not present 






physicalConfigDedicated 


Not present 






} 
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Table 8.2.2.2.3.3-3: RRCConnectionReconfiguration (step 3, Table 8.2.2.2.3.2-1) 



Derivation Path: 36.508 table 4.6.1-8 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-DRBRECONFIG 






1 








} 








} 








} 








Table 8.2.2.2.3.3-4: RadioResourceConfigDedicated-DRBRECONFIG (Table 8.2.2.2.3.3-3) 


Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated ::= SEQUENCE { 








srb-ToAddlVlodList 


Not present 






drb-ToAddModLlst 


DRB-ToAddModList- 
RECONFIG 


TS 36.508 Table 
4.6.3-2A 




drb-ToReleaseList 


Not present 






mac-IVIainConfig 


Not present 






sps-Config 


Not present 






physicalConfigDedicated 


Not present 






} 









Table 8.2.2.2.3.3-5: (Void) 



Table 8.2.2.2.3.3-6: (Void) 



8.2.3 

8.2.3.1 

8.2.3.1.1 
(1) 



Radio bearer release 

RRC connection reconfiguration / Radio bearer release / Success 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a drb-ToReleaseList } 

then { for each drb- Identity release the PDCP entity and RLC entity and DTCH logical channel 
and indicate release of the DRB{s) to upper layers } 



8.2.3.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.331 clause 5.3.5.3 
and 5.3.10.2. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 

2> if this is the first RRCConnectionReconfiguration message after successful completion of the RRC Connection 
Re-establishment procedure: 
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1> else: 

2> If the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 
3> perform the radio resource configuration procedure as specified in 5.3.10; 

1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission using the new 
configuration, upon which the procedure ends; 

[TS 36.331, clause 5.3.10.2] 

The UE shall: 

1> for each drb-Identity value included in the drb-ToReleaseList that is part of the current UE configuration (DRB 
release): 

2> release the PDCP entity; 

2> release the RLC entity; 

2> release the DTCH logical channel; 

1> indicate the release of the DRB(s) and the eps-Bearerldentity of the released DRB(s) to upper layers; 

8.2.3.1.3 Test description 

8.2.3.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

- The condition SRB2-DRB(2, 0) is used for step 8 in 4.5.3.3 according to [18]. 

8.2.3.1 .3.2 Test procedure sequence 

Table 8.2.3.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits an 

RRCConnectionReconfiguration message with 
a drb-ToReleaseList. 


<— 


RRCConnectionReconfiguration 






2 


Check: Does the UE transmit an 

RRCConnectionReconfigurationComplete 

message? 


-> 


RRCConnectionReconfigurationC 
ompiete 


1 


P 


2a 


The UE transmits an ULInformationTransfer 
message. 


-> 


ULInformationTransfer 


- 


- 


3 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 






1 
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8.2.3.1 .3.3 Specific message contents 

Table 8.2.3.1.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.2.3.1.3.2-1) 



Derivation Path: 36.508 table 4.6.1-8 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE{ 








rrcConnectionReconfiquration-r8 SEQUENCE { 








dedicatedlnfoNASList SEQUENCE 
(SIZE(1..maxDRB))QF 


1 entry 






DedicatedlnfoNAS[1] 


DEACTIVATE EPS 
BEARER CONTEXT 
REQUEST with EPS 
bearer identity 
corresponding to drb- 
Identity 2 and ESM 
cause #36 


According 36.508 
table 4.7.3-12 and 
regular 

deactivation of a 
second DRB 




radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-DRB-RELEASE 


Table 8.2.3.1. 3.3- 
2 




} 








1 








} 








} 









Table 8.2.3.1.3.3-2: RadioResourceConfigDedicated-DRB-RELEASE{Tab\e 8.2.3.1.3.3-1) 



Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated ::= SEQUENCE { 








srb-ToAddlVlodList 


Not present 






drb-ToAddModList 


Not present 






drb-ToReleaseList SEQUENCE (SIZE (L.maxDRB)) 
OF 


1 entry 






drb-ldentity[1] 


2 






mac-IVIainConfig CHOICE { } 


Not present 






sps-Config 


Not present 






physicalConfigDedicated 


Not present 






} 









8.2.4 
8.2.4.1 

8.2.4.1.1 
(1) 



Handover 

RRC connection reconfiguration / Handover / Success / Dedicated preamble 
Test Purpose (TP) 



with { UE having completed the radio bearer establishment and initial security activation procedure 
and performed the intra frequency measurement} 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a mobilityControlInfo with a 
rach-ConfigDedicated } 

then { UE transmits an RRCConnectionReconfigurationComplete message } 



(2) 

with { UE having completed the radio bearer establishment and initial security activation procedure 
and performed the intra frequency measurement } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a nextHopChainingCount which 
is different from the NCC associated with the currently active Kshb } 
then { UE derives new Kshb key from the nextHopChainingCount } 
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(3) 

with { UE having completed the radio bearer establishment and initial security activation procedure 
and performed the intra frequency measurement } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a nextHopChainingCount which 
is same as the NCC associated with the currently active Kem } 

then { UE derives new Kem key from the currently active Ksnb } 
} 

8.2.4.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.3.5.4, 
5.3.10.4 and 5.3.10.6. 

[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

1> if the carrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 

1> reset MAC; 

1> re-establish PDCP for all RBs that are estabUshed; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HFN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> apply the value of the newUE-Identity as the C-RNTI; 

1> configure lower layers in accordance with the received radioResourceConfigCommon; 

1> configure lower layers in accordance with any additional fields, not covered in the previous, if included in the 
received mobilityControlInfo; 

1> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

2> perform the radio resource configuration procedure as specified in 5.3.10; 

1> if the keyChangelndicator received in the securityConfigHO is set to TRUE: 

2> update the KeNB key based on the fresh Kasme key taken into use with the previous successful NAS SMC 
procedure, as specified in TS 33.401 [32]; 

1> else: 
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2> update the KeNB key based on the current KeNB or the NH, using the nextHopChainingCount value indicated 
in the security ConfigHO, as specified in TS 33.401 [32]; 

1> store the nextHopChainingCount value; 

1> if the securityAlgorithmConfig is included in the securityConfigHO: 

2> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 

2> derive the KsRCenc key and the Kupenc key associated with the cipheringAlgorithm, as specified in TS 33.401 
[32]; 

1> else: 

2> derive the KRRCim key associated with the current integrity algorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kupenc key associated with the current ciphering algorithm, as specified in TS 
33.401 [32]; 

1> configure lower layers to apply the integrity protection algorithm and the KRRcint key, i.e. the integrity protection 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> configure lower layers to apply the ciphering algorithm, the Krrcciic key and the Kupenc key, i.e. the ciphering 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> if the RRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the CQI reporting configuration, the scheduling request configuration and the sounding RS 
configuration that do not require the UE to know the SEN of the target cell, if any; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SEN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SEN of the target cell; 

NOTE 3: Whenever the UE shall setup or reconfigure a configuration in accordance with a field that is received it 
applies the new configuration, except for the cases addressed by the above statements. 

2> the procedure ends; 

NOTE 4: The UE is not required to determine the SEN of the target cell by acquiring system information from that 
cell before performing RACH access in the target cell. 

[TS 36.331, clause 5.3.10.4] 

The UE shall: 

1> reconfigure the MAC main configuration in accordance with the received mac-MainConfig; 
[TS 36.331, clause 5.3.10.6] 
The UE shall: 

1> reconfigure the physical channel configuration in accordance with the received physicalConfigDedicated; 

1> if the antennalnfo is included and set to 'explicitValue': 
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2> if the configured transmissionMode is not 'fmi' or 'tm4' release ri-Configlndex in cqi-ReportPeriodic, if 
previously configured; 

1> else if the antennalnfo is included and set to 'defaultValue': 

2> release ri-Configlndex in cqi-ReportPeriodic, if previously configured; 

8.2.4.1.3 Test description 

8.2.4.1.3.1 Pre-test conditions 
System Simulator: 

- Cell l,Cell4 and Cell 11. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.2.4.1 .3.2 Test procedure sequence 

Table 8.2.4.1.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl", "T2", and "T3" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 

Table 8.2.4.1.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 4 


Cell 11 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-91 


"Off" 


The power level values are such 
that measurement results for 
Cein (Ml) and Cell 4 {M4) 
satisfy exit condition for event 
A3(M4<M1)(NOTE1). 


Tl 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-79 


"Off" 


The power level values are such 
that measurement results for 
Cein (Ml) and Cell 4 (M4) 
satisfy entry condition for event 
A3(M4>M1)(NOTE1). 


T2 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-91 


"Off" 


The power level values are such 
that measurement results for 
Cein (Ml) and Cell 4 (M4) 
satisfy entry condition for event 
A3 (Ml >M4)(N0TE1). 


T3 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


"Off- 


-79 


The power level value are such 
that measurement results for 
Cell 1 (Ml) and Cell 11 (Mil) 
satisfy entry condition for event 
A3 (Mil >M1). 


NOTE 1 : Power level "Off" is defined in TS36.508 Table 6.2.2.1-1 . 
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Table 8.2.4.1.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup intra frequency measurement on Cell 1 . 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


The SS changes Cell 1 , Cell 4 and Cell 1 1 
parameters according to the row "T1" in table 
8.2.4.1.3.2-1. 










4 


The UE transmits a MeasurementReport 
message to report event A3 on Cell 1 with the 
measured RSRP, RSRQ value for Cell 4. 


-> 


MeasurementReport 






5 


The SS transmits an 

RRCConnectionReconfiguration message to 
order the UE to perform intra frequency 
handover to Cell 4. 


<— 


RRCConnectionReconfiguration 






6 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 4 using dedicated preamble 
to confirm the successful completion of the 
intra frequency handover? 
Check2: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
using the security key derived from the 
currently active Ksnb? 


-> 


RRCConnectionReconfigurationC 
omplete 


1,3 


P 


7 


The SS changes Cell 1 , Cell 4 and Cell 1 1 
parameters according to the row "T2" in table 
8.2.4.1.3.2-1. 










8 


The UE transmits a MeasurementReport 
message to report event A3 on Cell 4 with the 
measured RSRP, RSRQ value for Cell 1 . 


-> 


MeasurementReport 






9 


The SS transmits an 

RRCConnectionReconfiguration message to 
order the UE to perform intra frequency 
handover to Cell 1 . 


<— 


RRCConnectionReconfiguration 






10 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 1 using dedicated preamble 
to confirm the successful completion of the 
intra frequency handover? 
Check2: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
using the security key derived from the 
nextl-iopChiainingCount^ 


-> 


RRCConnectionReconfigurationC 
omplete 


1,2 


P 


11 


The SS changes Cell 1 and Cell 1 1 
parameters and switches Cell 4 off according 
to the row "T3" in table 8.2.4.1 .3.2-1 . 










12 


The UE transmits a MeasurementReport 
message to report event A3 on Cell 1 with the 
measured RSRP, RSRQ value for Cell 1 1 . 


-> 


MeasurementReport 






13 


The SS transmits an 

RRCConnectionReconfiguration message to 
order the UE to perform intra frequency 
handover to Cell 1 1 . 


<— 


RRCConnectionReconfiguration 






14 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 1 1 using dedicated preamble 
to confirm the successful completion of the 
intra frequency handover? 
Check2: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
using the security key derived from the 
nextl-lopCfiainingCounfl 


-> 


RRCConnectionReconfigurationC 
omplete 


1,2 


P 


15 


Check: Does the test result of generic test 


- 


- 


1 


- 
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procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1 1 ? 











8.2.4.1 .3.3 Specific message contents 

Table 8.2.4.1.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.2.4.1.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition MEAS 

Table 8.2.4.1 .3.3-2: yWeasConf/g (Table 8.2.4.1 .3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


IdMeasObject-fl 






measObject[1] 


IVIeasObjectEUTRA- 
GENERIC(fl) 






} 








reportConfigToAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE ( 


1 entry 






reportConfigld[1] 


ldReportConfig-A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measObjectld[1] 


IdlVleasObject-fl 






reportConfigld[1] 


ldReportConfig-A3 






} 








} 
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Table 8.2.4.1.3.3-3: MeasurementReport {step 4, Table 8.2.4.1.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 4 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 









Table 8.2.4.1.3.3-4: RRCConnectionReconfiguration (step 5, Table 8.2.4.1.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.2.4.1.3.3-5: MobilityControllnfo (Table 8.2.4.1.3.3-4) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 4 






carrierFreq 


Not present 






rach-ConfigDedicated SEQUENCE { 








ra-Preamblelndex 


63 




FDD 


ra-Preamblelndex 


FFS 




TDD 


ra-PRACH-Masklndex 









} 








} 
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Table 8.2.4.1.3.3-6: MeasurementReport {step 8, Table 8.2.4.1.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
CelH 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 









Table 8.2.4.1.3.3-7: RRCConnectionReconfiguration (step 9, Table 8.2.4.1.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.2.4.1.3.3-8: MobilityControllnfo (Table 8.2.4.1.3.3-7) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
CelM 






carrierFreq 


Not present 






rach-ConfigDedicated SEQUENCE { 








ra-Preamblelndex 


63 




FDD 


ra-Preamblelndex 


FFS 




TDD 


ra-PRACH-Masklndex 









} 








} 









Table 8.2.4.1.3.3-9: SecurityConfigHO (step 9, Table 8.2.4.1.3.2-2) 



Derivation Path: 36.508, Table 4.6.4-1 


Information Element 


Value/remark 


Comment 


Condition 


SecurityConfigHO ::= SEQUENCE { 








handoverlype CHOICE { 








IntraLTE SEQUENCE { 








nextHopChainingCount 


1 






1 








1 








} 
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Table 8.2.4.1.3.3-10: MeasurementReport {step 12, Table 8.2.4.1.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measuredResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 11 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 









Table 8.2.4.1.3.3-11 : RRCConnectionReconfiguration (step 13, Table 8.2.4.1.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.2.4.1.3.3-12: MobilityControllnfo (Table 8.2.4.1.3.3-11) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 11 






carrierFreq 


Not present 






rach-ConfigDedicated SEQUENCE { 








ra-Preamblelndex 


63 




FDD 


ra-Preamblelndex 


FFS 




TDD 


ra-PRACH-Masklndex 









} 








} 









Condition 


Explanation 


FDD 


FDD cell environment 


TDD 


TDD cell environment 
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Table 8.2.4.1 .3.3-13: SecurityConfigHO (Table 8.2.4.1 .3.3-1 1) 



Derivation Path: 36.508, Table 4.6.4-1 


Information Element 


Value/remark 


Comment 


Condition 


SecurityConfigHO ::= SEQUENCE { 








handoverlype CHOICE { 








intraLTE SEQUENCE { 








nextHopChainingCount 


3 






} 








1 








} 









8.2.4.2 

8.2.4.2.1 
(1) 



RRC connection reconfiguration / Handover / Success / Common preamble 
Test Purpose (TP) 



with { UE having completed the radio bearer establishment and initial security activation procedure 
and performed the intra frequency measurement } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a mobilityControlInfo without 
a rach-ConfigDedicated } 

then { UE transmits an RRCConnectionReconfigurationComplete message } 



8.2.4.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.3.5.4, 
5.3.10.4 and 5.3.10.6. 

[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

1> if the carrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 

1> reset MAC; 

1> re-establish PDCP for all RBs that are estabUshed; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HEN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> apply the value of the newUE-Identity as the C-RNTI; 
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1> configure lower layers in accordance with the received radioResourceConfigCommon; 

1> configure lower layers in accordance with any additional fields, not covered in the previous, if included in the 
received mobility Controllnfo; 

1> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

2> perform the radio resource configuration procedure as specified in 5.3.10; 

1> if the keyChangelndicatorieceived in the securityConfigHO is set to TRUE: 

2> update the KeNB key based on the fresh Kasme key taken into use with the previous successful NAS SMC 
procedure, as specified in TS 33.401 [32]; 

1> else: 

2> update the KeNB key based on the current KeNB or the NH, using the nextHopChainingCount value indicated 
in the securityConfigHO, as specified in TS 33.401 [32]; 

1> store the nextHopChainingCount value; 

1> if the securityAlgorithmConfig is included in the securityConfigHO: 

2> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kupenc key associated with the cipheringAlgorithm, as specified in TS 33.401 
[32]; 

1> else: 

2> derive the KRRCim key associated with the current integrity algorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kypenc key associated with the current ciphering algorithm, as specified in TS 
33.401 [32]; 

1> configure lower layers to apply the integrity protection algorithm and the KRRCint key, i.e. the integrity protection 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> configure lower layers to apply the ciphering algorithm, the KRRCenc key and the Kupenc key, i.e. the ciphering 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> if the RRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the CQI reporting configuration, the scheduling request configuration and the sounding RS 
configuration that do not require the UE to know the SEN of the target cell, if any; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SEN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SEN of the target cell; 

NOTE 3: Whenever the UE shall setup or reconfigure a configuration in accordance with a field that is received it 
applies the new configuration, except for the cases addressed by the above statements. 

2> the procedure ends; 
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[TS 36.331, clause 5.3.10.4] 
The UE shall: 

1> reconfigure the MAC main configuration in accordance with the received mac-MainConfig; 
[TS 36.331, clause 5.3.10.6] 
The UE shall: 

1> reconfigure the physical channel configuration in accordance with the received physicalConfigDedicated; 

1> if the antennalnfo is included and set to 'explicitValue': 

2> if the configured transmissionMode is not 'tm3' or 'tm4' release ri-Configlndex in cqi-ReportPeriodic, if 
previously configured; 

1> else if the antennalnfo is included and set to 'defaultValue': 

2> release ri-Configlndex in cqi-ReportPeriodic, if previously configured; 

8.2.4.2.3 Test description 

8.2.4.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.2.4.2.3.2 Test procedure sequence 

Table 8.2.4.2.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 8.2.4.2.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 2 


Remarl< 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-91 


The power level values are such that 
measurement results for Cell 1 (Ml) and 
Cell 2 {M2) satisfy exit condition for event 
A3(M2<M1). 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-79 


The power level values are such that 
measurement results for Cell 1 (Ml) and 
Cell 2 {IVI2) satisfy entry condition for event 
A3(M2>M1). 
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Table 8.2.4.2.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to setup intra frequency measurement. 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


The SS changes Cell 1 and Cell 2 parameters 
according to the row "T1 " in table 8.2.4.2.3.2-1 . 


- 


- 


- 


- 


4 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 with the 
measured RSRP, RSRQ value for Cell 2. 


-> 


MeasurementReport 






5 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to order the UE to perform intra 
frequency handover to Cell 2. 


<~ 


RRCConnectionReconfiguration 






6 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 2 using common preamble to 
confirm the successful completion of the intra 
frequency handover? 


-> 


RRCConnectionReconfigurationC 
ompiete 


1 


P 


7 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 2? 






1 





8.2.4.2.3.3 Specific message contents 

Table 8.2.4.2.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.2.4.2.3.2-2) 

iDerivation Path: 36.508, Table 4.6.1-8, condition MEAS 

Table 8.2.4.2.3.3-2: MeasConlig (Table 8.2.4.2.3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


IdMeasObject-fl 






measObject[1] 


IVIeasObjectEUTRA- 
GENERIC(fl) 






} 








reportConfigToAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measObjectld[1] 


IdMeasObject-fl 






reportConfigld[1] 


ldReportConfig-A3 






} 








} 
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Table 8.2.4.2.3.3-3 MeasurementReport {step 4, Table 8.2.4.2.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 2 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 








Table 8.2.4.2.3.3-4: RRCConnectionReconfiguration (step 5, Table 8.2.4.2.3.2-2) 


Derivation Path: 36.508, Table 4.6.1-8, condition HO 


Table 8.2.4.2.3.3-5: MobilityControllnfo (Table 8.2.4.2.3.3-4) 


Derivation Path: 36.508 clause 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 2 






carrierFreq 


Not present 






} 









8.2.4.3 



8.2.4.3.1 



RRC connection reconfiguration / Handover / Success / Intra-cell / Security 
reconfiguration 

Test Purpose (TP) 



(1) 



with { UE having completed the radio bearer establishment and initial security activation procedure 

} 

ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a securityConfigHO } 

then { UE transmits an RRCConnectionReconfigurationComplete message } 

} 

8.2.4.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.3.5.4. 
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[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

1> if ih&carrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the eutra-CarrierFreq with a physical cell 
identity indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 

1> reset MAC; 

1> re-establish PDCP for all RBs that are established; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HFN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> applythe value of the newUE-Identity; as the C-RNTI 

1> configure lower layers in accordance with the received radioResourceConfigCommon; 

1> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

2> perform the radio resource configuration procedure as specified in 5.3.10; 

1> if the keyChangelndicator received in the securityConfigHO is set to TRUE: 

2> update the KeNB key based on the Kasme key taken into use with the previous successful NAS SMC 
procedure, as specified in TS 33.401 [32]; 

1> else: 

2> update the KeNB key based on the K^sme key to which the current KeNB is associated, using the 
nextHopChainingCount value indicated in the securityConfigHO, as specified in TS 33.401 [32]; 

1> store the nextHopChainingCount value; 

1> if the securityAlgorithmConfig is included in the securityConfigHO: 

2> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 

2> derive the KsRCenc key and the Kupenc key associated with the cipheringAlgorithm, as specified in TS 33.401 
[32]; 

1> else: 

2> derive the KRRcint key associated with the current integrity algorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kupenc key associated with the current ciphering algorithm, as specified in TS 
33.401 [32]; 
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1> configure lower layers to apply the integrity protection algorithm and the KRRCim key, i.e. the integrity protection 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> configure lower layers to apply the ciphering algorithm, the KRRCenc key and the Kupenc key, i.e. the ciphering 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> if the RRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the configuration that do not require the UE to know the SFN of the target cell; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SFN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SFN of the target cell; 

2> the procedure ends; 



8.2.4.3.3 Test description 

8.2.4.3.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 
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8.2.4.3.3.2 



Test procedure sequence 

Table 8.2.4.3.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate tlie EPS 
authentication and AKA procedure. 


<— 


DLInformationTransfer 






2 


The UE transmits an AUTHENTICATION 
RESPONSE message and re-establishes 
mutual authentication. 


-> 


UL Information Transfer 






3 


The SS transmits a NAS SECURITY MODE 
COMMAND message to reactivate NAS 
security. 


<~ 


DL Information Transfer 






4 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and re-establishes the 
security configuration. 


-> 


UL Information Transfer 






5 


The SS transmits an 

RRCConnectionReconfiguration message to 
perform intra cell handover and security 
reconfiguration. 


<— 


RRCConnectionReconfiguration 






6 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message using the security key indicated by 
the keyChangelndicator and 
nextHopChainingCount, as well as the 
indicated algorithms, to confirm the successful 
completion of the intra cell handover and 
security reconfiguration? 


-> 


RRCConnectionReconfigurationC 
ompiete 


1 


P 


7 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state? 






1 





8.2.4.3.3.3 Specific message contents 

Table 8.2.4.3.3.3-1 : RRCConnectionReconfiguration (step 5, Table 8.2.4.3.3.2-1) 

Derivation Path: 36.508. Table 4.6.1-8, condition HO 

Table 8.2.4.3.3.3-2: IViobiiityControilnfo (Table 8.2.4.3.3.3-1) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
CelM 






carrierFreq 


Not present 






} 









Table 8.2.4.3.3.3-3: SecurityConfigHO (Table 8.2.4.3.3.3-1) 



Derivation Path: 36.508, Table 4.6.4-1 


Information Element 


Value/remark 


Comment 


Condition 


SecurityConfigHO ::= SEQUENCE { 








handoverType CHOICE { 








intraLTE SEQUENCE { 








keyChangelndicator 


TRUE 






nextHopChainingCount 









} 








} 








1 
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8.2.4.4 RRC connection reconfiguration / Handover / Failure / Intra-cell / Security 

reconfiguration 

8.2.4.4.1 Test Purpose (TP) 
(1) 

with { UE having completed the radio bearer establishment and initial security activation procedure 
and after receiving an RRCConnectionReconfiguration message including a SecurityConfigHO } 
ensure that { 

when { UE detects handover failure and the initial cell is selectable } 

then { UE performs an RRC connection re-establishment procedure and remains in the E-UTRA 
RRC_CONNECTED state } 
} 

8.2.4.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.3.5.4, 5.3.5.6, 5.3.7.4 and 5.3.7.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 

1> if this is the first RRCConnectionReconfiguration message after successful completion of the RRC Connection 
Re-establishment procedure: 

2> re-establish PDCP for SRB2 and for all DRBs that are established, if any; 

2> re-establish RLC for SRB2 and for all DRBs that are established, if any; 

2> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

3> perform the radio resource configuration procedure as specified in 5.3.10; 

2> resume SRB2 and all DRBs that are suspended, if any; 

NOTE 1: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HFN, is specified in TS 36.323 [8]. 



[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

1> if the carrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 
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1> reset MAC; 

1> re-establish PDCP for all RBs that are estabUshed; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HFN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> apply the value of the newUE-Identity as the C-RNTI; 

1> configure lower layers in accordance with the received radioResourceConfigCommon; 

1> configure lower layers in accordance with any additional fields, not covered in the previous, if included in the 
received mobility Controllnfo; 

1> if the RRCConnectionReconfigumtion message includes the radioResourceConfigDedicated: 

2> perform the radio resource configuration procedure as specified in 5.3.10; 

1> if the keyChangelndicator received in the securityConfigHO is set to TRUE: 

2> update the KeNB key based on the fresh Kasme key taken into use with the previous successful NAS SMC 
procedure, as specified in TS 33.401 [32]; 

1> else: 

2> update the Kbnb key based on the current KeNB or the NH, using the nextHopChainingCount value indicated 
in the securityConfigHO, as specified in TS 33.401 [32]; 

1> store the nextHopChainingCount value; 

1> if the securityAlgorithmConfig is included in the securityConfigHO: 

2> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kupenc key associated with the cipheringAlgorithm, as specified in TS 33.401 
[32]; 

1> else: 

2> derive the KRRCim key associated with the current integrity algorithm, as specified in TS 33.401 [32]; 

2> derive the KsRCenc key and the Kupenc key associated with the current ciphering algorithm, as specified in TS 
33.401 [32]; 

1> configure lower layers to apply the integrity protection algorithm and the KRRCim key, i.e. the integrity protection 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> configure lower layers to apply the ciphering algorithm, the KRRCenc key and the Kupenc key, i.e. the ciphering 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> if the RRCConnectionReconfigumtion message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 
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2> apply the parts of the CQI reporting configuration, the scheduling request configuration and the sounding RS 
configuration that do not require the UE to know the SFN of the target cell, if any; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SFN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SFN of the target cell; 

NOTE 3: Whenever the UE shall setup or reconfigure a configuration in accordance with a field that is received it 
applies the new configuration, except for the cases addressed by the above statements. 

2> the procedure ends; 



[TS 36.331, clause 5.3.5.6] 

The UE shall: 

1> if T304 expires (handover failure): 

NOTE: Following T304 expiry any dedicated preamble, if provided within the rach-ConfigDedicated, is not 
available for use by the UE anymore. 

2> revert back to the configuration used in the source cell, excluding the configuration configured by the 
physicalConfigDedicated, the mac-MainConfig and the sps-Config; 

2> initiate the connection re-establishment procedure as specified in 5.3.7, upon which the RRC connection 
reconfiguration procedure ends; 

[TS 36.331, clause 5.3.7.4] 

The UE shall set the contents of RRCConnectionReestablishmentRequest message as follows: 

1> set the ue-Identity as follows: 

2> set the c-RNTI to the C-RNTI used in the source cell (handover and mobility from E-UTRA failure) or used 
in the cell in which the trigger for the re-establishment occurred (other cases); 

2> set the physCellld to the physical cell identity of the source cell (handover and mobility from E-UTRA 
failure) or of the cell in which the trigger for the re-establishment occurred (other cases); 

2> set the shortMAC-I to the 16 least significant bits of the MAC -I calculated: 

3> over the ASN.l encoded as per section 8 (i.e., a multiple of 8 bits) VarShortMAC-Input; 

3> with the KRRCim key and integrity protection algorithm that was used in the source cell (handover and 
mobility from E-UTRA failure) or of the cell in which the trigger for the re-establishment occurred (other 
cases); and 

3> with all input bits for COUNT, BEARER and DIRECTION set to binary ones; 

1> set the reestablishmentCause as follows: 

2> if the re-establishment procedure was initiated due to reconfiguration failure as specified in 5.3.5.5 (the UE is 
unable to comply with the reconfiguration): 

3> set the reestablishmentCause to the value ' reconfigurationFailure'; 

2> else if the re-establishment procedure was initiated due to handover failure as specified in 5.3.5.6 (intra-LTE 
handover failure) or 5.4.3.5 (inter-RAT mobility from EUTRA failure): 

3> set the reestablishmentCause to the value 'handoverFailure'; 

2> else: 

3> set the reestablishmentCause to the value 'otherFailure'; 

The UE shall submit the RRCConnectionReestablishmentRequest message to lower layers for transmission. 
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[TS 36.331, clause 5.3.7.5] 

NOTE: Prior to this, lower layer signalling is used to allocate a C-RNTI. For further details see TS 36.321 [6]; 
The UE shall: 

1> stop timer T301; 

1> re-establish PDCP for SRBl; 

1> re-establish RLC for SRBl; 

1> perform the radio resource configuration procedure in accordance with the received 
radioResourceConfigDedicated and as specified in 5.3.10; 

1> resume SRBl; 

1> update the KeNB key based on the K^sme key to which the current KeNB is associated, using the 

nextHopChainingCount value indicated in the RRCConnectionReestablishment message, as specified in TS 
33.401 [32]; 

1> store the nextHopChainingCount value; 

1> derive the KRRCim key associated with the previously configured integrity algorithm, as specified in TS 33.401 
[32]; 

1> derive the Rrrcbiic key and the Kupenc key associated with the previously configured ciphering algorithm, as 
specified in TS 33.401 [32]; 

1> configure lower layers to activate integrity protection using the previously configured algorithm and the KRRCint 
key immediately, i.e., integrity protection shall be applied to all subsequent messages received and sent by the 
UE, including the message used to indicate the successful completion of the procedure; 

1> configure lower layers to apply ciphering using the previously configured algorithm, the KRRCenc key and the 
Kupenc key immediately, i.e., ciphering shall be applied to all subsequent messages received and sent by the UE, 
including the message used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> submit the RRCConnectionReestablishmentComplete message to lower layers for transmission, upon which the 
procedure ends; 

8.2.4.4.3 Test description 

8.2.4.4.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 

UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 
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8.2.4.4.3.2 



Test procedure sequence 

Table 8.2.4.4.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
perform intra cell handover and security 
reconfiguration. 


<— 


RRCConnectionReconfiguration 








EXCEPTION: In parallel to the events 
described in step 2 the steps specified in Table 
8.2.4.4.3.2-2 should take place. 










2 


Wait for 1 s to ensure that T304 expires. 


- 


- 


- 


- 


3 


Check: Does the UE transmit an 

RRCConnectionReestablishmentRequest 

message? 


-> 


RRCConnectionReestabiisliment 
Request 


1 


P 


4 


The SS transmits an 

RRCConnectionReestablishment message to 
resume SRB1 operation and reactivate 
security. 


<- 


RRCConnectionReestabiisliment 






5 


The UE transmits an 

RRCConnectionReestablishmentComplete 

message. 


-> 


RRCConnectionReestabiisliment 
Complete 






6 


The SS transmits an 

RRCConnectionReconfiguration message to 
resume the existing radio bearer. 


<- 


RRCConnectionReconfiguration 






7 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






8 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicates that the UE is in E-UTRA 
RRC CONNECTED state? 






1 





Table 8.2.4.4.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


- 


EXCEPTION: The steps 1 and 2 below are 
repeated for the duration of T304. 


- 


- 


- 


- 


1 


The UE attempts to perform the intra cell 
handover using MAC Random Access 
Preamble. 










2 


The SS does not respond. 


- 


- 


- 


- 



8.2.4.4.3.3 Specific message contents 

Table 8.2.4.4.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.2.4.4.3.2-1) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 

Table 8.2.4.4.3.3-2: IViobilityControllnfo (Table 8.2.4.4.3.3-1) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEOUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 1 






carrierFreq 


Not present 






} 
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Table 8.2.4.4.3.3-3: SecurityConfigHO (Table 8.2.4.4.3.3-1) 



Derivation Path: 36.508, Table 4.6.4-1 


Information Element 


Value/remark 


Comment 


Condition 


SecurityConfigHO ::= SEQUENCE { 








handoverlype CHOICE { 








intraLTE SEQUENCE { 








nextHopChainingCount 


1 






} 








1 








} 









Table 8.2.4.4.3.3-4: RRCConnectionReestablishmentRequest (step 3, Table 8.2.4.4.3.2-1) 



Derivation Path: 36.508, Table 4.6.1-13 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablishmentRequest ::= 
SEQUENCE! 








criticalExtensions CHOICE { 








rrcConnectionReestablishmentRequest-r8 
SEQUENCE! 








ue-ldentity SEQUENCE { 








c-RNTI 


the value of the C-RNTI 
oftheUE 






physCellld 


PhysicalCellldentity of 
Celll 






shortMAC-l 


The same value as the 
16 least significant bits of 
the XMAC-I value 
calculated by SS. 






1 








reestablishmentCause 


handoverFailure 






} 








} 








} 









Table 8.2.4.4.3.3-5: RRCConnectionReconfiguration (step 6, Table 8.2.4.4.3.2-1) 



Derivation Path: 36.508, Table 4.6.1-8 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-HO 






} 








} 








1 








1 









8.2.4.5 

8.2.4.5.1 
(1) 



RRC connection reconfiguration / Handover / All parameters included 
Test Purpose (TP) 



with { UE having completed the radio bearer establishment and initial security activation procedure 
and performed the intra frequency measurement } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a mobilityControlInfo is 
provided with all parameters included } 

then { UE transmits an RRCConnectionReconfigurationComplete message } 
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8.2.4.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.3.5.4, 
5.3.10.4 and 5.3.10.6. 

[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

1> if the carrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 

1> reset MAC; 

1> re-establish PDCP for all RBs that are established; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HEN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> apply the value of the newUE-Identity as the C-RNTI; 

1> configure lower layers in accordance with the received radioResourceConfigCommon; 

1> configure lower layers in accordance with any additional fields, not covered in the previous, if included in the 
received mobilityControlInfo; 

1> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

2> perform the radio resource configuration procedure as specified in 5.3.10; 

1> if the keyChangelndicator received in the securityConfigHO is set to TRUE: 

2> update the KeNB key based on the fresh Kasme key taken into use with the previous successful NAS SMC 
procedure, as specified in TS 33.401 [32]; 

1> else: 

2> update the KeNB key based on the current KeNB or the NH, using the nextHopChainingCount value indicated 
in the securityConfigHO, as specified in TS 33.401 [32]; 

1> store the nextHopChainingCount value; 

1> if the securityAlgorithmConfig is included in the securityConfigHO: 

2> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 
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2> derive the KRRCenc key and the Kupenc key associated with the cipheringAlgorithm, as specified in TS 33.401 
[32]; 

1> else: 

2> derive the KRRCim key associated with the current integrity algorithm, as specified in TS 33.401 [32]; 

2> derive the Rrrcehc key and the Kupenc key associated with the current ciphering algorithm, as specified in TS 
33.401 [32]; 

1> configure lower layers to apply the integrity protection algorithm and the KRRCim key, i.e. the integrity protection 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> configure lower layers to apply the ciphering algorithm, the KRRCenc key and the Kupenc key, i.e. the ciphering 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> if the RRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the CQI reporting configuration, the scheduling request configuration and the sounding RS 
configuration that do not require the UE to know the SEN of the target cell, if any; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SEN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SEN of the target cell; 

NOTE 3: Whenever the UE shall setup or reconfigure a configuration in accordance with a field that is received it 
applies the new configuration, except for the cases addressed by the above statements. 

2> the procedure ends; 



[TS 36.331, clause 5.3.10.4] 
The UE shall: 

1> reconfigure the MAC main configuration in accordance with the received mac-MainConfig; 
[TS 36.331, clause 5.3.10.6] 
The UE shall: 

1> reconfigure the physical channel configuration in accordance with the received physicalConfigDedicated; 

1> if the antennalnfo is included and set to 'explicitValue': 

2> if the configured transmissionMode is not 'tm3' or 'tm4' release ri-Configlndex in cqi-ReportPe riodic, if 
previously configured; 

1> else if the antennalnfo is included and set to 'defaultValue': 

2> release ri-Configlndex in cqi-ReportPe riodic, if previously configured; 
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8.2.4.5.3 Test description 

8.2.4.5.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.2.4.5.3.2 Test procedure sequence 

Table 8.2.4.5.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 8.2.4.5.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 2 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-91 


The power level values are such that 
measurement results for Cell 1 (Ml) and 
Cell 2 {M2) satisfy exit condition for event 
A3(M2<M1). 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-79 


The power level values are such that 
measurement results for Cell 1 (IVll) and 
Cell 2 {M2) satisfy entry condition for event 
A3(M2>M1). 



Table 8.2.4.5.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to setup intra frequency measurement. 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1 to confirm the setup of intra 
frequency measurement. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


The SS changes Cell 1 and Cell 2 parameters 
according to the row "Tl " in table 8.2.4.5.3.2-1 . 


- 


- 


- 


- 


4 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 with the 
measured RSRP and RSRQ values for Cell 2. 


-> 


MeasurementReport 






5 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to order the UE to perform intra 
frequency handover to Cell 2. 


<— 


RRCConnectionReconfiguration 






6 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 2 to confirm the successful 
completion of the intra frequency handover? 


-> 


RRCConnectionReconfigurationC 
omplete 


1 


P 


7 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 2? 






1 
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8.2.4.5.3.3 Specific message contents 

Table 8.2.4.5.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.2.4.5.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 


Table 8.2.4.5.3.3-2: MeasConfig (Table 8.2.4.5.3.3-1) 


Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1..maxQbiectld)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldMeasQbject-f1 






measObject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






} 








reportConflgToAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasQbject-f1 






reportConfigld[1] 


ldReportConfig-A3 






} 








1 








Table 8.2.4.5.3.3-3: MeasurementReport {step 4, Table 8.2.4.5.3.2-2) 


Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(L.tnaxCellReport)) QF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 2 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






1 








} 








} 








} 








1 








1 








} 








} 
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Table 8.2.4.5.3.3-4: RRCConnectionReconfiguration (step 5, Table 8.2.4.5.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8, condition HO 


Table 8.2.4.5.3.3-5: MobilityControllnfo (Table 8.2.4.5.3.3-4) 


Derivation Path: 36.331 clause 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 2 






carrierFreq SEQUENCE { 








dl-CarrierFreq 


Same downlink EARFCN 
as used for Cell 2 






ul-CarrierFreq 


Same uplink EARFCN as 
used for Cell 2 




FDD 


ul-CarrierFreq 


Not present 




TDD 


} 








carrierBandwidth SEQUENCE { 








dl-Bandwidth 


Same downlink system 
bandwidth as used for 
Cell 2 






ul-Bandwidth 


Same uplink system 
bandwidth as used for 
Cell 2 




FDD 


ul-Bandwidth 


Not present 




TDD 


1 








additionalSpectrumEmission 


Same 

additionalSpectrumEmis 
sion as used for Cell 2 






t304 


mslOOO 






newUE-ldentity 


SS arbitrarily selects a 
value between '003C'H 
and 'FFF2'H. 






radioResourceConfigCommon SEQUENCE { 








rach-ConfigCommon 


RACH-ConfigCommon- 
DEFAULT 






prach-Config 


PRACH-Config- 
DEFAULT 






pdsch-ConfigCommon 


PDSCH-ConfigCommon- 
DEFAULT 






pusch-ConfiCommon 


PUSCH-ConfigCommon- 
DEFAULT 






phich-Config 


PHICH-Config-DEFAULT 






pucch-ConfigCommon 


PUCCH-ConfigCommon- 
DEFAULT 






soundingRS-UL-ConfigCommon 


SoundingRsUI- 

ConfigCommon- 

DEFAULT 






uplinkPowerControlCommon 


UplinkPowerControlCom 
mon-DEFAULT 






antennalnfoCommon SEQUENCE { 








antennaPortsCount 


ani 






} 








p-Max 


Not present 






tdd-Config 


Not present 




FDD 




TDD-Config-DEFAULT 




TDD 


ul-CyclicPrefixLength 


lent 






} 








rach-ConfiqDedicated 


Not present 






} 
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Condition 


Explanation 


FDD 


FDD cell environment 


TDD 


TDD cell environment 



8.2.4.6 RRC connection reconfiguration / Handover / Success / Inter-frequency 

8.2.4.6.1 Test Purpose (TP) 
(1) 

with { UE having completed the radio bearer establishment and initial security activation procedure 
and performed the inter frequency measurement } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a mobilityControlInfo 
indicating a different E-UTRA frequency} 

then { UE transmits an RRCConnectionReconfigurationComplete message } 
} 

8.2.4.6.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.3.5.4, 
5.3.10.4 and 5.3.10.6. 

[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

1> if the carrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 

1> reset MAC; 

1> re-establish PDCP for all RBs that are estabhshed; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HEN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> apply the value of the newUE-Identity as the C-RNTI; 

1> configure lower layers in accordance with the received radioResourceConfigCommon; 

1> configure lower layers in accordance with any additional fields, not covered in the previous, if included in the 
received mobilityControlInfo; 

1> if thQ RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 
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2> perform the radio resource configuration procedure as specified in 5.3.10; 

1> if the keyChangelndicatorieceived in the securityConfigHO is set to TRUE: 

2> update the KeNB key based on the fresh Kasme key taken into use with the previous successful NAS SMC 
procedure, as specified in TS 33.401 [32]; 

1> else: 

2> update the KeNB key based on the current KeNB or the NH, using the nextHopChainingCount value indicated 
in the securityConfigHO, as specified in TS 33.401 [32]; 

1> store the nextHopChainingCount value; 

1> if the securityAlgorithmConfig is included in the securityConfigHO: 

2> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kypenc key associated with the cipheringAlgorithm, as specified in TS 33.401 
[32]; 

1> else: 

2> derive the KRRCim key associated with the current integrity algorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kupenc key associated with the current ciphering algorithm, as specified in TS 
33.401 [32]; 

1> configure lower layers to apply the integrity protection algorithm and the KRRCim key, i.e. the integrity protection 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> configure lower layers to apply the ciphering algorithm, the KRRCenc key and the Kypenc key, i.e. the ciphering 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> if the RRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the CQI reporting configuration, the scheduling request configuration and the sounding RS 
configuration that do not require the UE to know the SEN of the target cell, if any; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SEN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SEN of the target cell; 

NOTE 3: Whenever the UE shall setup or reconfigure a configuration in accordance with a field that is received it 
applies the new configuration, except for the cases addressed by the above statements. 

2> the procedure ends; 



[TS 36.331, clause 5.3.10.4] 
The UE shall: 

1> reconfigure the MAC main configuration in accordance with the received mac-MainConfig; 
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[TS 36.331, clause 5.3.10.6] 
The UE shall: 

1> reconfigure the physical channel configuration in accordance with the received physicalConfigDedicated; 

1> if the antennalnfo is included and set to 'explicitValue': 

2> if the configured transmissioriMode is not 'fmi' or 'fm4' release ri-Configlndex in cqi-ReportPeriodic, if 
previously configured; 

1> else if the antennalnfo is included and set to 'defaultValue': 

2> release ri-Configlndex in cqi-ReportPeriodic, if previously configured; 

8.2.4.6.3 Test description 

8.2.4.6.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 3. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.2.4.6.3.2 Test procedure sequence 

Table 8.2.4.6.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 8.2.4.6.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cells 


Remarl< 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-97 


The power level values are such that 
measurement results for Cell 1 (Ml) and 
Cell 3 {M3) satisfy exit condition for event 
A3(M3<M1). 


T1 


Cell-specific RS 

EPRE 


dBm/15k 
Hz 


-85 


-73 


The power level values are such that 
measurement results for Cell 1 {IVI1) and 
Cell 3 {M3) satisfy entry condition for event 
A3(M3>M1). 
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Table 8.2.4.6.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to setup inter frequency measurement. 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


The SS changes Cell 1 and Cell 3 parameters 
according to the row "T1 " in table 8.2.4.6.3.2-1 . 


- 


- 


- 


- 


4 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 with the 
measured RSRP, RSRQ value for Cell 3. 


~> 


MeasurementReport 






5 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to order the UE to perform inter 
frequency handover to Cell 3. 


<~ 


RRCConnectionReconfiguration 






6 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 3 to confirm the successful 
completion of the inter frequency handover? 


-> 


RRCConnectionReconfigurationC 
ompiete 


1 


P 


7 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicates that the UE is in E-UTRA 
RRC CONNECTED state on Cell 3? 






1 





8.2.4.6.3.3 Specific message contents 

Table 8.2.4.6.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.2.4.6.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8, condition MEAS 


Table 8.2.4.6.3.3-2: MeasConfig (Table 8.2.4.6.3.3-1) 


Derivation Path: 36.508, Table 4.6.6-1 condition INTER-FREQ 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldMeasObject-f2 






measObject[1] 


MeasObjectEUTRA- 
GENERIC(f2) 






} 








reportConfigToAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






1 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measObjectld[1] 


ldMeasObject-f2 






reportConfigld[1] 


ldReportConfig-A3 






} 








} 
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Table 8.2.4.6.3.3-3: MeasurementReport {step 4, Table 8.2.4.6.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cells 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 









Table 8.2.4.6.3.3-4: RRCConnectionReconfiguration (step 5, Table 8.2.4.6.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.2.4.6.3.3-5: MobilityControllnfo (Table 8.2.4.6.3.3-5) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 3 






carrierFreq SEQUENCE { 








dl-CarrierFreq 


Same downlink EARFCN 
as used for Cell 3 






ul-CarrierFreq 


Not present 






1 








} 









8.2.4.7 RRC connection reconfiguration / Handover / Failure / Re-establishment 

successful 



8.2.4.7.1 

(1) 



Test Purpose (TP) 



with { UE having completed the radio bearer establishment and initial security activation procedure 
and after receiving an RRCConnectionReconfiguration message including a mobilityControlJnfo 
indicating a different E-UTRA cell having attempted intra frequency handover } 
ensure that { 

when { UE detects handover failure and the initial cell is selectable } 

then { UE performs an RRC connection re-establishment procedure and remains in the E-UTRA 
RRC_CONNECTED state } 
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(2) 

with { UE having transmitted an RRCConnectionReestablishmentRequest message } 
ensure that { 

when { UE receives an RRCConnectionReestablishment message with a nextHopChainingCount which is 
different from the NCC associated with the currently active Kshb } 
then { UE derives new Kshb from the nextHopChainingCount } 
} 

(3) 

with { UE having transmitted an RRCConnectionReestablishmentRequest message } 
ensure that { 

when { UE receives an RRCConnectionReestablishment message with a nextHopChainingCount which is 
same as the NCC associated with the currently active Kem } 

then { UE derives new Kem from the currently active KeNs } 
} 

8.2.4.7.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.3.5.4, 
5.3.5.6, 5.3.7.2, 5.3.7.4, 5.3.7.5, 5.3.10.4 and 5.3.10.6. 

[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

1> if the carrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 

1> reset MAC; 

1> re-establish PDCP for all RBs that are estabUshed; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HFN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> apply the value of the newUE-Identity as the C-RNTI; 

1> configure lower layers in accordance with the received radioResourceConfigCommon; 

1> configure lower layers in accordance with any additional fields, not covered in the previous, if included in the 
received mobilityControlInfo; 

1> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

2> perform the radio resource configuration procedure as specified in 5.3.10; 
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1> if the keyChangelndicator Teceived in the securityConfigHO is set to TRUE: 

2> update the Ksnb key based on the fresh Kasme key taken into use with the previous successful NAS SMC 
procedure, as specified in TS 33.401 [32]; 

1> else: 

2> update the KeNB key based on the current KeNB or the NH, using the nextHopChainingCount value indicated 
in the securityConfigHO, as specified in TS 33.401 [32]; 

1> store the nextHopChainingCount value; 

1> if the securityAlgorithmConfig is included in the securityConfigHO: 

2> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kupenc key associated with the cipheringAlgorithm, as specified in TS 33.401 
[32]; 

1> else: 

2> derive the KRRCim key associated with the current integrity algorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kupenc key associated with the current ciphering algorithm, as specified in TS 
33.401 [32]; 

1> configure lower layers to apply the integrity protection algorithm and the KRRcint key, i.e. the integrity protection 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> configure lower layers to apply the ciphering algorithm, the Krrcciic key and the Kupenc key, i.e. the ciphering 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> if the RRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the CQI reporting configuration, the scheduling request configuration and the sounding RS 
configuration that do not require the UE to know the SEN of the target cell, if any; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SEN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SEN of the target cell; 

NOTE 3: Whenever the UE shall setup or reconfigure a configuration in accordance with a field that is received it 
applies the new configuration, except for the cases addressed by the above statements. 

2> the procedure ends; 



[TS 36.331, clause 5.3.5.6] 

The UE shall: 

1> if T304 expires (handover failure): 

NOTE: EoUowing T304 expiry any dedicated preamble, if provided within the rach-ConfiigDedicated, is not 
available for use by the UE anymore. 
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2> revert back to the configuration used in the source cell, excluding the configuration configured by the 
physicalConfigDedicated, the mac-MainConfig and the sps-Config; 

2> initiate the connection re -establishment procedure as specified in 5.3.7, upon which the RRC connection 
reconfiguration procedure ends; 

[TS 36.331, clause 5.3.7.2] 

The UE shall only initiate the procedure when AS security has been activated. The UE initiates the procedure when one 
of the following conditions is met: 



1> upon handover failure, in accordance with 5.3.5.6; or 

Upon initiation of the procedure, the UE shall: 

1> stop timer T310, if running; 

1> start timer T311; 

1> suspend all RBs except SRBO; 

1> reset MAC; 

1> apply the default physical channel configuration as specified in 9.2.4; 

1> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

1> apply the default MAC main configuration as specified in 9.2.2; 

1> perform cell selection in accordance with the cell selection process as specified in TS 36.304 [4]; 
[TS 36.331, clause 5.3.7.4] 
The UE shall set the contents of RRCConnectionReestablishmentRequest message as follows: 

1> set the ue-Identity as follows: 

2> set the c-RNTI to the C-RNTI used in the source cell (handover and mobility from E-UTRA failure) or used 
in the cell in which the trigger for the re-establishment occurred (other cases); 

2> set the physCellld to the physical cell identity of the source cell (handover and mobility from E-UTRA 
failure) or of the cell in which the trigger for the re-establishment occurred (other cases); 

2> set the shortMAC-I io the 16 least significant bits of the MAC -I calculated: 

3> over the ASN. 1 encoded as per section 8 (i.e., a multiple of 8 bits) VarShortMAC-Input; 

3> with the KRRCim key and integrity protection algorithm that was used in the source cell (handover and 
mobility from E-UTRA failure) or of the cell in which the trigger for the re-establishment occurred (other 
cases); and 

3> with all input bits for COUNT, BEARER and DIRECTION set to binary ones; 

1> set the reestablishmentCause as follows: 

2> if the re-establishment procedure was initiated due to reconfiguration failure as specified in 5.3.5.5 (the UE is 
unable to comply with the reconfiguration): 

3> set the reestablishmentCause to the value 'reconfigurationFailure'; 

2> else if the re-establishment procedure was initiated due to handover failure as specified in 5.3.5.6 (intra-LTE 
handover failure) or 5.4.3.5 (inter-RAT mobility from EUTRA failure): 

3> set the reestablishmentCause to the value 'handoverFailure'; 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 647 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

The UE shall submit the RRCConnectionReestablishmentRequest message to lower layers for transmission. 
[TS 36.331, clause 5.3.7.5] 

NOTE: Prior to this, lower layer signalling is used to allocate a C-RNTI. For further details see TS 36.321 [6]; 
The UE shall: 

1> stop timer T301; 

1> re-establish PDCP for SRBl; 

1> re-establish RLC for SRBl; 

1> perform the radio resource configuration procedure in accordance with the received 
radioResourceConfigDedicated and as specified in 5.3.10; 

1> resume SRBl; 

1> update the KeNB key based on the Kasme key to which the current KeNB is associated, using the 

nextHopChainingCount value indicated in the RRCConnectionReestablishment message, as specified in TS 
33.401 [32]; 

1> store the nextHopChainingCount value; 

1> derive the KRRCim key associated with the previously configured integrity algorithm, as specified in TS 33.401 
[32]; 

1> derive the KRRCenc key and the Kypenc key associated with the previously configured ciphering algorithm, as 
specified in TS 33.401 [32]; 

1> configure lower layers to activate integrity protection using the previously configured algorithm and the KRRcint 
key immediately, i.e., integrity protection shall be applied to all subsequent messages received and sent by the 
UE, including the message used to indicate the successful completion of the procedure; 

1> configure lower layers to apply ciphering using the previously configured algorithm, the KRRCenc key and the 
Kupenc key immediately, i.e., ciphering shall be applied to all subsequent messages received and sent by the UE, 
including the message used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> submit the RRCConnectionReestablishmentComplete message to lower layers for transmission, upon which the 
procedure ends; 

[TS 36.331, clause 5.3.10.4] 

The UE shall: 

1> reconfigure the MAC main configuration in accordance with the received mac-MainConfig; 
[TS 36.331, clause 5.3.10.6] 
The UE shall: 

1> reconfigure the physical channel configuration in accordance with the received physicalConfigDedicated; 

1> if the antennalnfo is included and set to 'explicitValue': 

2> if the configured transmissionMode is not 'tm3' or 'tm4' release ri-Configlndex in cqi-ReportPeriodic, if 
previously configured; 

1> else if the antennalnfo is included and set to 'defaultValue': 

2> release ri-Configlndex in cqi-ReportPeriodic, if previously configured; 
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8.2.4.7.3 
8.2.4.7.3.1 
System Simulator: 

- Cell l,Cell4 and Cell 11. 
UE: 
None. 
Preamble: 



Test description 
Pre-test conditions 



The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 



8.2.4.7.3.2 



Test procedure sequence 



Table 8.2.4.7.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl", "T2", "T3", "T4", "T5" and "T6" are to be applied subsequently. The exact instants on which 
these values shall be applied are described in the texts in this clause. 

Table 8.2.4.7.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Cell 4 


Cell 11 


Remark 


TO 


Cell-specific 
RS EPRE 


dBm/15kHz 


-85 


-91 


-91 


The power level values are such that 
measurement results for Cell 1 (Ml) Cell 
4 (M4) and Cell 1 1 (Ml 1 ) satisfy exit 
condition for event A3 (M4 < Ml and Ml 1 
<M1). 


T1 


Cell-specific 
RS EPRE 


dBm/15kHz 


-85 


-79 


-91 


The power level values are such that 
measurement results for Cell 1 (Ml) and 
Cell 4 {M4) satisfy entry condition for 
event A3 {M4> Ml). 


T2 


Cell-specific 
RS EPRE 


dBm/15kHz 


"Off" 


-79 


"Off" 


The power level values are assigned to 
satisfy SrxlevCell 1 < and SrxlevCell 1 1 
< such that selecting Cell 4 is 
guaranteed 
(N0TE1). 


T3 


Cell-specific 
RS EPRE 


dBm/15kHz 


-73 


-79 


"Off" 


The power level values are such that 
measurement results for Cell 1 (Ml) and 
Cell 4 {M4) satisfy entry condition for 
event A3 (Ml >M4). 
(N0TE1). 


T4 


Cell-specific 
RS EPRE 


dBm/15kHz 


-73 


"Off" 


"Off" 


The power level values are assigned to 
satisfy SrxlevCell 4 < and SrxlevCell 1 1 
< such that selecting Cell 1 is 
guaranteed. 
(N0TE1). 


T5 


Cell-specific 
RS EPRE 


dBm/15kHz 


-73 


"Off" 


-67 


The power level values are such that 
measurement results for Cell 1 (Ml) and 
Cell 1 1 (Ml 1 ) satisfy entry condition for 
eventA3(M11>M1). 
(N0TE1). 


T6 


Cell-specific 
RS EPRE 


dBm/15kHz 


"Off" 


"Off" 


-67 


The power level values are assigned to 
satisfy SrxlevCell 1 < and SrxlevCell 4 < 
such that selecting Cell 1 1 is 
guaranteed. 
(N0TE1). 


NOTE 1 : Power level "Off" is defined in TS36.508 Table 6.2.2.1-1 . 
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Table 8.2.4.7.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup intra frequency measurement on Cell 1 . 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


The SS changes Cell 1 , Cell 4 and Cell 1 1 
parameters according to the row "T1" in table 
8.2.4.7.3.2-1. 










4 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 with the 
measured RSRP, RSRQ value for Cell 4. 


-> 


MeasurementReport 






5 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to order the UE to perform intra 
frequency handover to Cell 4. 


<— 


RRCConnectionReconfiguration 








EXCEPTION: In parallel to the events 
described in step 6 the steps specified in Table 
8.2.4.7.3.2-3 should take place. 










6 


The SS changes Cell 1 , Cell 4 and Cell 1 1 
parameters according to the row "T2" in table 
8.2.4.7.3.2-1. 










7 


Check: Does the UE transmit an 
RRCConnectionReestabiishmentRequest 
message on Cell 4? 


~> 


RRCConnectionReestablisiiment 
Request 


1 


P 


8 


The SS transmits an 

RRCConnectionReestabiistiment message to 
resume SRB1 operation and re-activate 
security on Cell 4. 


<- 


RRCConnectionReestablisiiment 






9 


Check: Does the UE transmit an 
RRCConnectionReestabiishmentComplete 
message using the security key derived from 
the currently active KeNson Cell 4? 


-> 


RRCConnectionReestablisiiment 
Complete 


3 


P 


10 


The SS transmits an 

RRCConnectionReconfiguration message to 
resume existing radio bearer on Cell 4. 


<— 


RRCConnectionReconfiguration 






11 


The UE transmits an 

RRCConnectionReconfigurationCompiete 
message on Cell 4. 


-> 


RRCConnectionReconfigurationtC 
ompiete 






12 


The SS changes Cell 1 , Cell 4 and Cell 1 1 
parameters according to the row "T3" in table 
8.2.4.7.3.2-1. 










13 


The UE transmits a MeasurementReport 
message on Cell 4 to report event A3 with the 
measured RSRP, RSRQ value for Cell 1 . 


-> 


MeasurementReport 






14 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 4 to order the UE to perform intra 
frequency handover to Cell 1 . 


<— 


RRCConnectionReconfiguration 








EXCEPTION: In parallel to the events 
described in step 15 the steps specified in 
Table 8.2.4.7.3.2-4 should take place. 










15 


The SS changes Cell 1 , Cell 4 and Cell 1 1 
parameters according to the row "T4" in table 
8.2.4.7.3.2-1. 










16 


Check: Does the UE transmit an 
RRCConnectionReestabiislimentRequest 
message on Cell 1? 


-> 


RRCConnectionReestablisiiment 
Request 


1 


P 


17 


The SS transmits an 

RRCConnectionReestabiistiment message to 
resume SRB1 operation and re-activate 
security on Cell 1. 


<- 


RRCConnectionReestablisiiment 






18 


Check: Does the UE transmit an 


-> 


RRCConnectionReestablisiiment 


2 


P 
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RRCConnectionReestablishmentComplete 
message using the security l<ey derived from 
the nextHopChainingCount on Cell 1? 




Complete 






19 


The SS transmits an 

RRCConnectionReconfiguration message to 
resume existing radio bearer on Cell 1 . 


<— 


RRCConnectionReconfiguration 






20 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationtC 
omplete 






21 


The SS changes Cell 1 , Cell 4 and Cell 1 1 
parameters according to the row "T5" in table 
8.2.4.7.3.2-1. 










22 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 with the 
measured RSRP, RSRQ value for Cell 1 1 . 


-> 


MeasurementReport 






23 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to order the UE to perform intra 
frequency handover to Cell 1 1 . 


<— 


RRCConnectionReconfiguration 








EXCEPTION: In parallel to the events 
described in step 24 the steps specified in 
Table 8.2.4.7.3.2-5 should take place. 










24 


The SS changes Cell 1 , Cell 4 and Cell 1 1 
parameters according to the row "T6" in table 
8.2.4.7.3.2-1. 










25 


Check: Does the UE transmit an 
RRCConnectionReestablislimentRequest 
message on Cell 11? 


-> 


RRCConnectionReestabiishment 
Request 


1 


P 


26 


The SS transmits an 

RRCConnectionReestablisliment message to 
resume SRB1 operation and re-activate 
security on Cell 11. 


<- 


RRCConnectionReestabiisiiment 






27 


Check: Does the UE transmit an 
RRCConnectionReestablishmentComplete 
message using the security key derived from 
the nextl-lopCliainingCount on Cell 1 1 ? 


-> 


RRCConnectionReestabiistiment 
Complete 


2 


P 


28 


The SS transmits an 

RRCConnectionReconfiguration message to 
resume existing radio bearer on Cell 1 1 . 


<— 


RRCConnectionReconfiguration 






29 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1 1 . 


-> 


RRCConnectionReconfigurationtC 
omplete 






30 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
Indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1 1 ? 






1 





Table 8.2.4.7.3.2-3: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


- 


EXCEPTION: The steps 1 and 2 below are 
repeated for the duration of T304. 


- 


- 


- 


- 


1 


The UE attempts to perform the intra 
frequency handover using IVIAC Random 
Access Preamble on Cell 4. 










2 


The SS does not respond. 


- 


- 


- 


- 
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Table 8.2.4.7.3.2-4: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


- 


EXCEPTION: The steps 1 and 2 below are 
repeated for the duration of T304. 


- 


- 


- 


- 


1 


The UE attempts to perform the intra 
frequency handover using IVIAC Random 
Access Preamble on Cell 1 . 










2 


The SS does not respond. 


- 


- 


- 


- 


Table 8.2.4.7.3.2-5: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


- 


EXCEPTION: The steps 1 and 2 below are 
repeated for the duration of T304. 


- 


- 


- 


- 


1 


The UE attempts to perform the intra 
frequency handover using IVIAC Random 
Access Preamble on Cell 1 1 . 










2 


The SS does not respond. 


- 


- 


- 


- 



8.2.4.7.3.3 Specific message contents 

Table 8.2.4.7.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.2.4.7.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 

Table 8.2.4.7.3.3-2: MeasConfig (Table 8.2.4.7.3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldMeasQbject-f1 






measObject[1] 


IVIeasObjectEUTRA- 
GENERIC(fl) 






1 








reportConfigToAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






1 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldlVleasQbject-f1 






reportConfigld[1] 


ldReportConfig-A3 






} 








} 
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Table 8.2.4.7.3.3-3: MeasurementReport {step 4, Table 8.2.4.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 4 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 









Table 8.2.4.7.3.3-4: RRCConnectionReconfiguration (step 5, Table 8.2.4.7.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.2.4.7.3.3-5: MobilityControllnfo (Table 8.2.4.7.3.3-4) 



Derivation Path: 36.308, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 4 






carrierFreq 


Not present 






rach-ConfigDedicated SEQUENCE { 








ra-Preamblelndex 


63 






ra-PRACH-Masklndex 









1 








} 









ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



653 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 8.2.4.7.3.3-6: RRCConnectionReestablishmentRequest (step 7, Table 8.2.4.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-13 | 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablislimentRequest ::= 
SEQUENCE! 








criticalExtensions CHOICE { 








rrcConnectionReestablishmentRequest-r8 
SEQUENCE! 








ue-ldentity SEQUENCE { 








c-RNTI 


the value of the C-RNTI 
of the UE 






physCellld 


PhysicalCellldentity of 
CelM 






shortMAC-l 


The same value as the 
16 least significant bits of 
the XMAC-I value 
calculated by SS. 






} 








reestablishmentCause 


handoverFailure 






} 








1 








1 








Table 8.2.4.7.3.3-7: RRCConnectionReestablishment {step 8, Table 8.2.4.7.3.2-2) 


Derivation Path: 36.508, Table 4.6.1-10 | 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablishment ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICEj 








rrcConnectionReestablishment-r8 SEQUENCE { 








nextHopChainingCount 









} 








1 








1 








} 








Table 8.2.4.7.3.3-8: RRCConnectionReconfiguration (step 10, step 19 and step 28, Table 8.2.4.7.3.2-2) 


Derivation Path: 36.508, Table 4.6.1-8 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICEj 








rrcConnectionReconfiguration-r8 SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-HQ 






1 








1 








} 








} 
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Table 8.2.4.7.3.3-9: MeasurementReport {step 13, Table 8.2.4.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
CelH 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 









Table 8.2.4.7.3.3-10: RRCConnectionReconfiguration (step 14, Table 8.2.4.7.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.2.4.7.3.3-11 : MobilityControllnfo (Table 8.2.4.7.3.3-10) 



Derivation Path: 36.308, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
CelM 






carrierFreq 


Not present 






rach-ConfigDedicated SEQUENCE { 








ra-Preamblelndex 


63 






ra-PRACH-Masklndex 









1 








} 
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Table 8.2.4.7.3.3-12: RRCConnectionReestablishmentRequest (step 16, Table 8.2.4.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-13 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablislimentRequest ::= 
SEQUENCE! 








criticalExtensions CHOICE { 








rrcConnectionReestablishmentRequest-r8 
SEQUENCE! 








ue-ldentity SEQUENCE { 








c-RNTI 


the value of the C-RNTI 
oftheUE 






physCellld 


PhysicalCellldentity of 
Cell 4 






shortMAC-l 


The same value as the 
16 least significant bits of 
the XMAC-I value 
calculated by SS. 






} 








reestablishmentCause 


handoverFailure 






} 








1 








} 









Table 8.2.4.7.3.3-13: RRCConnectionReestablishment {step 17, Table 8.2.4.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-10 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablishment ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICEj 








rrcConnectionReestablishment-r8 SEQUENCE { 








nextHopChainingCount 


1 






} 








1 








1 








} 
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Table 8.2.4.7.3.3-14: MeasurementReport {step 22, Table 8.2.4.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 11 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 









Table 8.2.4.7.3.3-15: RRCConnectionReconfiguration (step 23, Table 8.2.4.7.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.2.4.7.3.3-16: MobilityControllnfo (Table 8.2.4.7.3.3-15) 



Derivation Path: 36.308, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 11 






carrierFreq 


Not present 






rach-ConfigDedicated SEQUENCE { 








ra-Preamblelndex 


63 






ra-PRACH-Masklndex 









1 








} 
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Table 8.2.4.7.3.3-17: RRCConnectionReestablishmentRequest (step 25, Table 8.2.4.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-13 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablislimentRequest ::= 
SEQUENCE! 








criticalExtensions CHOICE { 








rrcConnectionReestablishmentRequest-r8 
SEQUENCE! 








ue-ldentity SEQUENCE { 








c-RNTI 


the value of the C-RNTI 
of the UE 






physCellld 


PhysicalCellldentity of 
CelM 






shortMAC-l 


The same value as the 
16 least significant bits of 
the XMAC-I value 
calculated by SS. 






} 








reestablishmentCause 


handoverFailure 






} 








1 








} 









Table 8.2.4.7.3.3-18: RRCConnectionReestablishment {step 26, Table 8.2.4.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-10 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablishment ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICEj 








rrcConnectionReestablishment-r8 SEQUENCE { 








nextHopChainingCount 


3 






} 








1 








1 








} 









8.2.4.8 



8.2.4.8.1 



RRC connection reconfiguration / Handover / Failure / Re-establishment 
failure 

Test Purpose (TP) 



(1) 

with { UE having completed the radio bearer establishment and initial security activation procedure 
and after receiving an RRCConnectionReconfiguration message including an IE 

mobilityControlInformation indicating a different E-UTRA cell having attempted intra frequency 
handover } 
ensure that { 

when { UE detects handover failure and fails an RRC connection re-establishment procedure } 
then { UE enters the E-UTRA RRC_IDLE state and trigger TAU procedure in order to recover RRC 
connection } 



8.2.4.8.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.331 clauses 5.3.5.4, 
5.3.5.6, 5.3.7.2, 5.3.7.3, 5.3.7.4, 5.3.7.7 and 5.3.12. 

[TS 36.331, clause 5.3.5.4] 



If the RRCConnectionReconfiguration message includes the mobilityControlInformation and the UE is able to comply 
with the configuration included in this message, the UE shall: 
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1> stop timer T310 and T312, if ranning; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInformation; 

1> request PDCP to initiate the PDCP Re-establishment procedure for all RBs that are established; 

NOTE 2: The handling of the radio bearers after the successful completion of the L2 re-establishment, e.g. the re- 
transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling of 
the SN and the HFN, is specified in [8]. 

1> reset MAC and re-establish RLC for all RBs that are established; 

1> If the RRCConnectionReconfiguration message includes the radioResourceConfiguration: 

2> perform the Radio resource configuration procedure as specified in 5.3.10; 

1> set the C-RNTI to the value of the newUE-Identity; 

1> if the eutra-CarrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the eutra-CarrierFreq with a physical cell 
identity indicated by the targetCellldentity; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetCellldentity; 

1> if the dl-Bandwidth is included: 

2> for the target cell, apply the downlink bandwidth indicated by the dl-Bandwidth; 
1> else: 

2> for the target cell, apply the same downlink bandwidth as for the current cell; 
1> if the ul-Bandwidth is included: 

2> for the target cell, apply the uplink bandwidth indicated by the ul-Bandwidth; 
1> else: 

2> for the target cell, apply the same uplink bandwidth as for the current cell; 
1> configure lower layers in accordance with the received radioResourceConfigCommon; 
1> If the RRCConnectionReconfiguration message includes the securityConfiguration: 

2> apply the AS-derived keys associated with the AS-base key indicated by the keylndicator; 

2> configure lower layers to apply the indicated integrity protection algorithm, i.e. the indicated integrity 

protection configuration shall be applied to all subsequent messages received and sent by the UE in the target 
cell, including the message used to indicate the successful completion of the procedure; 

2> configure lower layers to apply the indicated ciphering algorithm, i.e. the indicated ciphering configuration 
shall be applied to all subsequent messages received and sent by the UE in the target cell, including the 
message used to indicate the successful completion of the procedure; 

1> If the RRCConnectionReconfiguration message includes the measurementConfiguration: 

2> perform the Measurement configuration procedure as specified in 5.5.2; 

1> synchronise to the DL of the target cell; 

1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission using the new 
configuration; 

1> If MAC successfully completes the random access procedure: 
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2> stop timer T304; 

2> If the physicalConfigDedicatedis included in the RRCConnectionReconfiguration message: 

3> If the UE needs the SFN of the target cell to apply the PUCCH and Sounding RS configuration: 

4> apply the new PUCCH and Sounding RS configuration upon acquiring the SFN of the target cell; 
3> else: 

4> apply the new PUCCH and Sounding RS configuration; 
2> indicate to PDCP to complete the PDCP Re-establishment procedure for all DRBs that are established, if any; 
2> the procedure ends. 

[TS 36.331, clause 5.3.5.6] 

The UE shall: 

1> If T304 expires (handover failure): 

NOTE 1: Following T304 expiry dedicated preambles, if provided within the rach-ConfigDedicated, are not 
available for use by the UE anymore. 

2> revert back to the configuration used in the source cell, excluding the physical layer configuration; 

NOTE 2: The UE reverts to the RRC configuration as well as the layer 2 configuration (PDCP/RLC/MAC) used in 
the source cell. 

2> initiate the connection re-establishment procedure as specified in 5.3.7, upon which the RRC connection 
reconfiguration procedure ends. 

[TS 36.331, clause 5.3.7.2] 

The UE shall only initiate the procedure when security has been activated. The UE initiates the procedure when one of 
the following conditions is met: 

1> upon handover failure, in accordance with 5.3.5.6; or 

Upon initiation of the procedure, the UE shall: 

1> start timer T311; 

1> request PDCP to initiate the PDCP Re -establishment procedure for all RBs that are established; 

NOTE 1 : The handling of the radio bearers after the successful completion of the L2 re-establishment, e.g. the re- 
transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling of the SN and 
the HEN, is specified in [8]. 

1> reset MAC and re-establish RLC for all RBs that are established; 

1> select a suitable cell in accordance with the cell selection process as specified in [4]; 

[TS 36.331, clause 5.3.7.3] 

2> initiate transmission of the RRCConnectionReestablishmentRequest message in accordance with 5.3.7.4; 
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[TS 36.331, clause 5.3.7.4] 

The UE shall set the contents of RRCConnectionReestablishmentRequest message as follows: 

1> set the IE ue-Identity as follows: 

2> set the c-RNTI to the C-RNTI used in the source cell (handover failure case) or used in the cell in which the 
trigger for the re-establishment occurred (other cases); 

2> set the cellldentity to the Physical layer identity of the source cell (handover failure case) or of the cell in 
which the trigger for the re-establishment occurred (other cases); 

2> set the shortMAC-I to the 16 least significant bits of the MAC-1 calculated: 

3> over the concatenation of the ASN. 1 encoded Cellldentity of the current cell, PhysicalCellldentity of the 
cell the UE was connected to prior to the failure and C-RNTl that the UE had in the cell it was connected 
to prior to the failure; 

3> with the integrity protection key and integrity protection algorithm that was used in the cell the UE was 
connected to prior to the failure; and 

3> with all input bits for COUNT, BEARER and DIRECTION set to binary ones. 

1> set the IE reestablishmentCause as follows: 



2> else if the re-establishment procedure was initiated due to handover failure as specified in 5.3.5.6 (intra-LTE 
handover failure) or 5.4.3.5 (inter-RAT mobility from EUTRA failure): 

3> set the reestablishmentCause to the value 'handoverFailure' ; 



The UE shall submit the RRCConnectionReestablishmentRequest message to lower layers for transmission. 
[TS 36.331, clause 5.3.7.7] 
Upon T3 1 1 expiry, the UE shall: 

1> perform the actions upon moving from RRC_CONNECTED to RRC_IDLE as specified in 5.3.12. 

[TS 36.331, clause 5.3.12] 

Upon moving from RRC_CONNECTED to RRC_1DLE, the UE shall: 
1> reset MAC and re-establish RLC for all RBs that are established; 

1> stop all timers that are running except T320; 

1> release all radio resources, including release of the RLC entity and the associated PDCP entity for all established 
RBs; 

1> indicate the release of the RRC connection to upper layers; 

1> enter RRCJDLE. 
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8.2.4.8.3 Test description 

8.2.4.8.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.2.4.8.3.2 Test procedure sequence 

Table 8.2.4.8.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while columns marked "Tl" 
and "T2" are to be applied subsequently. The exact instants on which these values shall be applied are described in the 
texts in this clause. 

Table 8.2.4.8.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Cell 2 


Remark 


TO 


Cell- 
specific RS 
EPRE 


dBm/15 
kHz 


-85 


-91 


The power level values are such that measurement 
results for Cell 1 (Ml) and Cell 2 (M2) satisfy entry 
condition for event A3 (IVI1 > M2) 


T1 


Cell- 
specific RS 
EPRE 


dBm/15 
kHz 


-85 


-79 


The power level values are such that measurement 
results for Cell 1 (Ml) and Cell 2 (M2) satisfy entry 
condition for event A3 (M2 > M1) 


T2 


Cell- 
specific RS 
EPRE 


dBm/15 
kHz 


-85 


"Off" 


The power level values are such that Srxlevceii i > 
Srxlevceii 2 and Srxlevceii2 <0.(NOTE 1). 


N0TE1: Power level "Off" is defined in TS36.508 Table 6.2.2.1-1. 
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Table 8.2.4.8.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup intra frequency measurement on Cell 1 . 


<~ 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


The SS changes Cell 1 and Cell 2 parameters 
according to the row "T1 " in table 8.2.4.8.3.2-1 . 


- 


- 


- 


- 


4 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 with the 
measured RSRP and RSRQ value for Cell 2. 


-> 


MeasurementReport 






5 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to order the UE to perform intra 
frequency handover to Cell 2. 


<- 


RRCConnectionReconfiguration 








EXCEPTION: In parallel to the events 
described in step 6 the steps specified in Table 
8.2.4.8.3.2-3 should take place. 










6 


The SS changes Cell 1 and Cell 2 parameters 
according to the row "T2" in table 8.2.4.8.3.2-1 . 


- 


- 


- 


- 


7 


The UE transmits an 

RRCConnectionReestablislimentRequest 
message on Cell 1. 


-> 


RRCConnectionReestablisiiment 
Request 






8 


The SS does not respond to any 
RRCConnectionReestablislimentRequest 
message and waits for 2s to ensure that T301 
expires and the UE goes to RRC_IDLE state 
on Cell 1. 










9- 
13 


The UE will perform TAU procedure based on 
steps 1 to 5 of subclause 6.4.2.7 in TS 36.508 
on Cell 1. 

NOTE: The UE performs a TAU procedure due 
to NAS signaling connection recovery. 










14 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 






1 





Table 8.2.4.8.3.2-3: Parallel behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


- 


EXCEPTION: The steps 1 and 2 below are 
repeated for the duration of T304 


- 


- 


- 


- 


1 


The UE attempts to perform the intra 
frequency handover using IVIAC Random 
Access Preamble on Cell 2 










2 


The SS does not respond. 


- 


- 


- 


- 



8.2.4.8.3.3 Specific message contents 

Table 8.2.4.8.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.2.4.8.3.2-2) 

Derivation path: 36.508 Table 4.6.1-8, condition IVIEAS 
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Table 8.2.4.8.3.3-1 A: MeasConfig (Table 8.2.4.8.3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldMeasObject-f1 






measObject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






1 








reportConfigloAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






1 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasQbject-f1 






reportConfigld[1] 


ldReportConfig-A3 






1 








} 









Table 8.2.4.8.3.3-2: MeasurementReport {step 4, Table 8.2.4.8.3.2-2) 



Derivation path: 36.508 Table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 
criticalExtensions CHOICE { 
c1 CHOICE! 
measurementReport-r8 SEQUENCE { 
measResults SEQUENCE { 
measid 
measResultServCell SEQUENCE { 


1 






rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 








measResultNeighCells CHOICE { 
measResultListEUTRA SEQUENCE (SIZE 
(L.tnaxCellReport)) QF SEQUENCE { 
physCellld[1] 

cgi-lnfo[1] 

measResult[1] SEQUENCE! 
rsrpResult 
rsrqResult 
} 
} 
} 
} 
} 
} 
} 
} 


1 entry 

PhysicalCellldentity of 

Cell 2 

Not present 

(0..97) 
(0..34) 







Table 8.2.4.8.3.3-3: RRCConnectionReconfiguration (step 5, Table 8.2.4.8.3.2-2) 

Derivation path: 36.508 Table 4.6.1-8. condition HO 
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Table 8.2.4.8.3.3-3A: MobilityControllnfo (Table 8.2.4.8.3.3-4) 



Derivation Path: 36.508 Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 2 






carrierFreq 


Not present 






} 









Table 8.2.4.8.3.3-4: Void 



Table 8.2.4.8.3.3-5: RRCConnectionReestablishmentRequest (step 7, Table 8.2.4.8.3.2-2) 



Derivation path: 36.508 Table 4.6.1-13 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReestablishmentRequest ::= 
SEQUENCE! 
criticalExtensions CHQICE { 
rrcConnectionReestablishmentRequest-r8 
SEQUENCE! 








ue-ldentity SEQUENCE { 








c-RNTI 


The value of the C-RNTI 
oftheUE. 






physCellld 


PhysicalCellldentity of 
Celll 






shortMAC-l 


The same value as the 
16 least significant bits of 
the XMAC-I value 
calculated by SS 






1 








reestablishmentCause 
} 
} 
} 


handoverFailure 







8.2.4.9 



8.2.4.9.1 



RRC connection reconfiguration / Handover / Inter-band blind handover / 
Success 

Test Purpose (TP) 



(1) 

with { UE having completed the radio bearer establishment and initial security activation procedure 

} 

ensure that { 

when { UE receives an RRCConnectionRecon figuration message including a mobilityControlInfo 
indicating an E-UTRA frequency on different frequency band } 

then { UE transmits an RRCConnectionReconfigurationComplete message } 



8.2.4.9.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.3.5.4, 
5.3.10.4 and 5.3.10.6. 

[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 
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1> if the carrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 

1> reset MAC; 

1> re-establish PDCP for all RBs that are estabhshed; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HEN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> apply the value of the newUE-Identity as the C-RNTI; 

1> configure lower layers in accordance with the received radioResourceConfigCommon; 



1> if the keyChangelndicator received in the securityConfigHO is set to TRUE: 

2> update the KeNB key based on the fresh Kasme key taken into use with the previous successful NAS SMC 
procedure, as specified in TS 33.401 [32]; 

1> else: 

2> update the KeNB key based on the current KeNB or the NH, using the nextHopChainingCount value indicated 
in the securityConfigHO, as specified in TS 33.401 [32]; 

1> store the nextHopChainingCount value; 

1> if the securityAlgorithmConfig is included in the securityConfigHO: 

2> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kupenc key associated with the cipheringAlgorithm, as specified in TS 33.401 
[32]; 

1> else: 

2> derive the KRRCim key associated with the current integrity algorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kupenc key associated with the current ciphering algorithm, as specified in TS 
33.401 [32]; 

1> configure lower layers to apply the integrity protection algorithm and the KRRcint key, i.e. the integrity protection 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> configure lower layers to apply the ciphering algorithm, the KRRCenc key and the Kupenc key, i.e. the ciphering 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 
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1> if the KRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the CQI reporting configuration, the scheduling request configuration and the sounding RS 
configuration that do not require the UE to know the SFN of the target cell, if any; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SFN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SFN of the target cell; 

NOTE 3: Whenever the UE shall setup or reconfigure a configuration in accordance with a field that is received it 
applies the new configuration, except for the cases addressed by the above statements. 

2> the procedure ends; 



[TS 36.331, clause 5.3.10.4] 
The UE shall: 

1> reconfigure the MAC main configuration in accordance with the received mac-MainConfig; 
[TS 36.331, clause 5.3.10.6] 
The UE shall: 

1> reconfigure the physical channel configuration in accordance with the received physicalConfigDedicated; 

1> if the antennalnfo is included and set to ' explicitValue' : 

2> if the configured transmissionMode is not 'fmi' or 'fm4' release ri-Configlndex in cqi-ReportPeriodic, if 
previously configured; 

1> else if the antennalnfo is included and set to 'defaultValue': 

2> release ri-Configlndex in cqi-ReportPeriodic, if previously configured; 
8.2.4.9.3 Test description 

8.2.4.9.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 and Cell 10. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 
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8.2.4.9.3.2 



Test procedure sequence 

Table 8.2.4.9.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to order the UE to perform inter band 
handover to Cell 10. 


<— 


RRCConnectionReconfiguration 






2 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 10? 


-> 


RRCConnectionReconfigurationC 
ompiete 


1 


P 


3 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 10? 






1 





8.2.4.9.3.3 Specific message contents 

Table 8.2.4.9.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.2.4.9.3.2-1) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 

Table 8.2.4.9.3.3-2: h/iobilityControllnfo (Table 8.2.4.9.3.3-1) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 10 






carrierFreq SEQUENCE { 








dl-CarrierFreq 


Same downlink EARFCN 
as used for Cell 10 






ul-CarrierFreq 


Not present 






1 








} 









8.2.4.10 

8.2.4.10.1 
(1) 



RRC connection reconfiguration / Handover (between FDD and TDD) 
Test Purpose (TP) 



with { UE having completed the radio bearer establishment and initial security activation procedure 
and performed the inter frequency measurement in FDD mode} 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including an IE 
mobilityControlInformation with TDD configuration parameters included } 

then { UE transmits an RRCConnectionReconfigurationComplete message } 
} 

(2) 

with { UE having completed the radio bearer establishment and initial security activation procedure 
and performed the inter frequency measurement in TDD mode} 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including an IE 
mobilityControlInformation with FDD configuration parameters included } 

then { UE transmits an RRCConnectionReconfigurationComplete message } 
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8.2.4.10.2 Conformance requirements 

References: The conformance requirements covered in tlie present TC are specified in: 3GPP TS 36.331 clauses 5.3.5.4, 
5.3.10.4 and 5.3.10.6. 

[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

1> if the carrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 

1> reset MAC; 

1> re-establish PDCP for all RBs that are established; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HEN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> apply the value of the newUE-Identity as the C-RNTI; 

1> configure lower layers in accordance with the received radioResourceConfigCommon; 

1> configure lower layers in accordance with any additional fields, not covered in the previous, if included in the 
received mobilityControlInfo; 

1> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

2> perform the radio resource configuration procedure as specified in 5.3.10; 

1> if the keyChangelndicator received in the securityConfigHO is set to TRUE: 

2> update the KeNB key based on the fresh Kasme key taken into use with the previous successful NAS SMC 
procedure, as specified in TS 33.401 [32]; 

1> else: 

2> update the KeNB key based on the current KeNB or the NH, using the nextHopChainingCount value indicated 
in the securityConfigHO, as specified in TS 33.401 [32]; 

1> store the nextHopChainingCount value; 

1> if the securityAlgorithmConfig is included in the securityConfigHO: 

2> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 
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2> derive the KRRCenc key and the Kupenc key associated with the cipheringAlgorithm, as specified in TS 33.401 
[32]; 

1> else: 

2> derive the KRRCim key associated with the current integrity algorithm, as specified in TS 33.401 [32]; 

2> derive the Rrrcehc key and the Kupenc key associated with the current ciphering algorithm, as specified in TS 
33.401 [32]; 

1> configure lower layers to apply the integrity protection algorithm and the KRRCim key, i.e. the integrity protection 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> configure lower layers to apply the ciphering algorithm, the KRRCenc key and the Kupenc key, i.e. the ciphering 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> if the RRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the CQI reporting configuration, the scheduling request configuration and the sounding RS 
configuration that do not require the UE to know the SEN of the target cell, if any; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SEN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SEN of the target cell; 

NOTE 3: Whenever the UE shall setup or reconfigure a configuration in accordance with a field that is received it 
applies the new configuration, except for the cases addressed by the above statements. 

2> the procedure ends; 

NOTE 4: The UE is not required to determine the SEN of the target cell by acquiring system information from that 
cell before performing RACH access in the target cell. 

[TS 36.331, clause 5.3.10.4] 

The UE shall: 

1> reconfigure the MAC main configuration in accordance with the received mac-MainConfig; 
[TS 36.331, clause 5.3.10.6] 
The UE shall: 

1> reconfigure the physical channel configuration in accordance with the received physicalConfigDedicated; 

1> if the antennalnfo is included and set to 'explicitValue': 

2> if the configured transmissionMode is not 'tm3' or 'tm4' release ri-Configlndex in cqi-ReportPeriodic, if 
previously configured; 

1> else if the antennalnfo is included and set to 'defaultValue': 

2> release ri-Configlndex in cqi-ReportPeriodic, if previously configured; 
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8.4.2.10.3 Test description 

8.4.2.10.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 in FDD and Cell 10 in TDD 
UE: 

None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on cell 1 according to [18]. 

8.4.2.1 0.3.2 Test procedure sequence 

Table 8.4.2.10.3.2-1: Main behaviour 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message 
including TDD-Config to order the UE to 
perform inter band handover to Cell 10. 


<- 


RRCConnectionReconfiguration 






2 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 10? 


~> 


RRCConnectionReconfigurationC 
omplete 


1 


P 


3 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
ndicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 10? 






1 




4 


The SS transmits an 

RRCConnectionReconfiguration message 
without including TDD-Config to order the UE 
to perform inter band handover to Cell 1 . 


<- 


RRCConnectionReconfiguration 






5 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 1? 


-> 


RRCConnectionReconfigurationC 
omplete 


2 


P 


6 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1 ? 






2 





8.4.2.10.3.3 Specific message content 

Table 8.2.4.10.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.4.2.10.3.2-1) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 
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Table 8.2.4.10.3.3-2: MobilityControllnfo (Table 8.2.4.10.3.3-1) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo-HO ::= SEQUENCE { 








targetPhysCellld 


PliysicalCellldentity of Cell 10 






carrierFreq SEQUENCE { 








dl-CarrierFreq 


Same downlink EARFCN as used 
for Cell 10 






ul-CarrierFreq 


Not present 






1 








carrierBandwidth SEQUENCE { 








dl-Bandwidth 


Same downlink system bandwidth 
as used for Cell 10 






ul-Bandwidtli 


Not present 






1 








additionalSpectrumEmission 


Same 

additionalSpectrumEmission as 
used for Cell 10 






tdd-Config 


TDD-Config-DEFAULT 






} 









Table 8.2.4.10.3.3-3: RRCConnectionReconfiguration (step 4, Table 8.4.2.10.3.2-1) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.2.4.10.3.3-4: MobilityControllnfo (Table 8.2.4.10.3.3-3) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo-HO ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of Cell 1 






carrierFreq SEQUENCE { 








dl-CarrierFreq 


Same downlink EARFCN as used 
for Cell 1 






ul-CarrierFreq 


Same uplink EARFCN as used for 
Cell 1 






} 








carrierBandwidth SEQUENCE { 








dl-Bandwidth 


Same downlink system bandwidth 
as used for Cell 1 






ul-Bandwidth 


Same uplink system bandwidth as 
used for Cell 1 






} 








additionalSpectrumEmission 


Same 

additionalSpectrumEmission as 
used for Cell 1 






tdd-Config 


Not present 






} 
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8.3 Measurement configuration control and reporting 

8.3.1 Intra E-UTRAN measurements 

8.3.1 .1 Measurement configuration control and reporting / Intra E-UTRAN 

measurements / Event A1 

8.3.1.1.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state and measurement configured for event Al with event based 
periodical reporting } 
ensure that { 

when { Serving cell becomes better than absolute threshold plus hysteresis } 
then { UE sends Measurement J?eport message at regular intervals while entering conditions for 
event Al are satisfied } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and periodical measurement reporting triggered by event Al 

ongoing} 

ensure that { 

when { Serving cell becomes worse than absolute threshold minus hysteresis } 
then { UE stops sending MeasurementReport message } 
} 

8.3.1 .1 .2 Conformance requirements 

References; The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.4.1, 5.5.4.2 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> if the RRCConnectionReconfiguration message includes the measConfig: 
2> perform the measurement configuration procedure as specified in 5.5.2; 

[TS 36.331, clause 5.5.4.1] 
The UE shall: 

1> for each measid included in the measldList within VarMeasConfig: 

2> else: 

3> if the corresponding measObject concerns EUTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the 

concerned cell is not included in the blackCellsToAddModList defined within the VarMeasConfig for 
this measid; 



2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventld of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
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this event within the VarMeasConfig, while the VarMeasReportList does not include an entry for this measid 
(a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during of timeToTrigger defined within the 
VarMeasurementConfiguration for this event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 
4> remove the measurement reporting entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 



2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 



NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 



[TS 36.331, clause 5.5.4.2] 
The UE shall: 

1> consider the entering condition for this event to be satisfied when condition Al-1, as specified below, is fulfilled; 

1> consider the leaving condition for this event to be satisfied when condition Al-2, as specified below, is fulfilled; 
InequalityAl-1 (Entering condition) 
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Ms — Hys > Thresh 

InequalityAl-2 (Leaving condition) 

Ms + Hys < Thresh 

The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfigEUTRA for this event). 

Thresh is the threshold parameter for this event (i.e. al -Threshold as defined within reportConfigEUTRA for this 
event). 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Hys is expressed in dB. 

Thresh is expressed in the same unit as Ms. 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfigf or this measid; 

2> start the periodical reporting timer with the value of reportlnterval as defined within the reportConfig for this 
measid; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends. 
8.3.1.1.3 Test description 

8.3.1.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

8.3.1 .1 .3.2 Test procedure sequence 

Table 8.3.1.1.3.2-1 illustrates the downlink power levels to be applied for Cell 1 at various time instants of the test 
execution. Row marked "TO" denotes the conditions after the preamble, while rows marked "Tl" and "T2" are to be 
applied subsequently. The exact instants on which these values shall be applied are described in the texts in this clause. 
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Table 8.3.1.1.3.2-1: Power levels 





Parameter 


Unit 


CelH 


Remarl< 


TO 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


Power level is such that Ms + Hys < Thresh 


T1 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-59 


Power level is such that entry condition for event 
A1 is satisfied Ms - Hys > Thresh 


T2 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


Power level is such that exit condition for event 
A1 is satisfied Ms + Hys < Thresh 


Note: The total test tolerance used is the sum of downlink signal level uncertainty (TS 36.508 clause 6.2.2.1) 
and absolute UE measurement accuracy (TS 36.133 clause 9). 



Table 8.3.1.1.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including MeasConfigto setup intra LTE 
measurement and reporting for event A1 . 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RCConnectionReconfigrationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


SS re-adjusts the cell-specific reference signal 
level according to row "T1 " in table 8.3.1 .1 .3.2- 
1. 










4 


Check: Does the UE transmit a 
MeasurementReport message to report event 
A1 with the measured RSRP and RSRQ value 
for Cell 1? 


-> 


MeasurementReport 


1 


P 




EXCEPTION: Step 5 below is repeated until 3 
MeasurementReport messages are received 
from the UE 










5 


Check: Does the UE transmit a 
MeasurementReport message, with the 
measured RSRP and RSRQ value for Cell 1? 


-> 


MeasurementReport 


1 


P 


6 


SS re-adjusts the cell-specific reference signal 
level according to row "T2" in table 8.3.1 .1 .3.2- 
1. 










7 


Wait and ignore MeasurementReport 
messages for 5 s to allow change of power 
levels for Cell 1 . 










8 


Check: Does the UE attempt to transmit an 
uplink message within the next 10s? 


- 


- 


2 


F 



8.3.1 .1 .3.3 Specific message contents 

Table 8.3.1 .1 .3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.3.1 .1 .3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



676 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 8.3.1 .1 .3.3-2: MeasConfig (step 1 , Table 8.3.1 .1 .3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/Remark 


Comment 


Condition 


measConfig ::= SEQUENCE { 

measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 

measQbjectld[1] 

measQbject[1] 

} 

reportConfigToAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 

reportConfigld[1] 

reportConfig[1] 

} 

measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 
measld[1] 
measQbjectld[1] 
reportConfigld[1] 
} 
} 


1 entry 

ldMeasQbject-f1 

MeasObjectEUTRA- 

GENERIC(fl) 

1 entry 

ldReportConfig-A1 
ReportConfig-AI-H 

1 entry 

1 

ldMeasQbject-f1 

ldReportConfjg-A1 







Table 8.3.1.1.3.3-3: ReportConfig-A1-H (step 1, Table 8.3.1.1.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-4 ReportConfjgEUTRA-A1 (-72) 


Information Element 


Value/Remark 


Comment 


Condition 


ReportConfigEUTRA ::= SEQUENCE { 
triggerType CHOICE { 
event SEQUENCE { 

hysteresis 
} 
} 
reportAmount 

} 


6 

infinity 


3dB 





Table 8.3.1 .1 .3.3-4: MeasurementReport (steps 4 and 5, Table 8.3.1 .1 .3.2-2) 



Derivation path: 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 
1 


(0..34) 






measResultNeighCells CHOICE {} 
} 
} 
} 
} 
} 


Not present 
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8.3.1 .2 Measurement configuration control and reporting / Intra E-UTRAN 

measurements / Event A2 

8.3.1 .2.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state and measurement configured for event A2 with event based 
periodical reporting } 
ensure that { 

when { Serving cell becomes worse than absolute threshold minus hysteresis } 
then { UE sends MeasurementReport message at regular intervals while entering conditions for 
event A2 are satisfied } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and periodical meausurement reporting triggered by event A2 

ongoing} 

ensure that { 

when { Serving cell becomes better than absolute threshold plus hysteresis } 
then { UE stops sending MeasurementReport message } 
} 

8.3.1 .2.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.4.1, 5.5.4.3 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> if the RRCConnectionReconfiguration message includes the measConfig: 
2> perform the measurement configuration procedure as specified in 5.5.2; 

[TS 36.331, clause 5.5.4.1] 
The UE shall: 

1> for each measid included in the measldList within VarMeasConfiig: 

2> else: 



3> if the corresponding measObject concerns EUTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the concerned 
cell is not included in the blackCellsToAddModList defined within the VarMeasConfiig for this measid; 



2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfiig within VarMeasConfiig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfiig while the VarMeasReportList does not include a measurement reporting 
entry for this measid (a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 
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3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition appHcable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during timeToTrigger defined within the VarMeasConfig for 
this event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 
4> initiate the measurement reporting procedure, as specified in 5.5.5; 

3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 
4> remove the measurement reporting entry within the VarMeasReportList for this measid; 
4> stop the periodical reporting timer for this measid, if running; 



2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 



NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 



[TS 36.331, clause 5.5.4.3] 
The UE shall: 

1> consider the entering condition for this event to be satisfied when condition A2-1, as specified below, is fulfilled; 
1> consider the leaving condition for this event to be satisfied when condition A2-2, as specified below, is fulfilled; 
Inequality A2-1 (Entering condition) 

Ms + Hys < Thresh 
Inequality A2-2 (Leaving condition) 

Ms — Hys > Thresh 
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The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within the reportConfigEUTRA for this 
event). 

Thresh is the threshold parameter for this event (i.e. a2-Threshold as defined within the reportConfigEUTRA for 
this event). 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Hys is expressed in dB. 

Thresh is expressed in the same unit as Ms. 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfigfor this measid : 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends. 
8.3.1.2.3 Test description 

8.3.1.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

8.3.1 .2.3.2 Test procedure sequence 

Table 8.3.1.2.3.2-1 illustrates the downlink power levels to be applied for Cell 1 at various time instants of the test 
execution. Row marked "TO" denotes the conditions after the preamble, while rows marked "Tl" and "T2" are to be 
applied subsequently. The exact instants on which these values shall be applied are described in the texts in this clause. 
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Table 8.3.1.2.3.2-1 : Power levels 





Parameter 


Unit 


CelM 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-70 


Power level is such that Ms > Thresh + Hys 


T1 


-96 


Power level is such that entry condition for event 
A2 is satisfied Ms + Hys < Thresh 


T2 


-70 


Power level is such that exit condition for event 
A2 is satisfied Ms > Thresh + Hys 


Note: The total tolerance used is the sum of downlink signal level uncertainty (TS 36.508 clause 6.2.2.1 ) and 
absolute UE measurement accuracy (TS 36.133 clause 9). 



Table 8.3.1.2.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


■message 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including measConfigXo setup intra LTE 
measurement and reporting for event A2. 


<~ 


RRCConnectionReconfiguration 






2 


The UE transmit an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


SS re-adjusts the cell-specific reference signal 
level according to row "T1 " in table 8.3.1 .2.3.2- 

1. 










4 


Check: Does the UE transmit a 
MeasurementReport message to report event 
A2 with the measured RSRP and RSRQ value 
for Cell 1? 


-> 


MeasurementReport 


1 


P 




EXCEPTION: Step 5 below is repeated until 3 
MeasurementReport messages are received 
from the UE 










5 


Check: Does the UE transmit a 
MeasurementReport message, with the 
measured RSRP and RSRQ value for Cell 1? 


~> 


MeasurementReport 


1 


P 


6 


SS re-adjusts the cell-specific reference signal 
level according to row "T2" in table 8.3.1 .2.3.2- 
1. 










7 


Wait and ignore MeasurementReport 
messages for 5 s to allow change of power 
levels for Cell 1. 










8 


Check: Does the UE attempt to transmit an 
uplink message within the next 10s? 


- 




2 


F 



8.3.1 .2.3.3 Specific message contents 

Table 8.3.1.2.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.3.1.2.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 
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Table 8.3.1.2.3.3-2: MeasConfig (step 1, Table 8.3.1.2.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/Remark 


Comment 


Condition 


measConfig ::= SEQUENCE { 

measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 

measQbjectld[1] 

measQbject[1] 

} 

reportConfigToAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 

reportConfigld[1] 

reportConfig[1] 

} 

measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 
measld[1] 
measQbjectld[1] 
reportConfigld[1] 
} 
} 


1 entry 

ldMeasQbject-f1 

MeasObjectEUTRA- 

GENERIC(fl) 

1 entry 

ldReportConfig-A2 
ReportConfig-A2-H 

1 entry 

1 

ldMeasQbject-f1 

ldReportConfjg-A2 







Table 8.3.1.2.3.3-3: ReportConfig-A2-H (step 1, Table 8.3.1.2.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-5 ReportConfigEUTRA-A2(-83) 


Information Element 


Value/Remark 


Comment 


Condition 


ReportConfigEUTRA ::= SEQUENCE { 
triggerType CHOICE { 
event SEQUENCE { 

hysteresis 
} 
} 
reportAmount 

} 


6 

infinity 


3dB 





Table 8.3.1.2.3.3-4: MeasurementReport {steps 4 and 5, Table 8.3.1.2.3.2-2) 



Derivation path: 36.508 table clause 4.6.1 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 
1 


(0..34) 






measResultNeighCells CHOICE {} 
} 
} 
} 
} 
} 


Not present 
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8.3.1 .3 Measurement configuration control and reporting / Intra E-UTRAN 

measurements / Two simultaneous events A3 (intra and inter-frequency 
measurements) 

8.3.1.3.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state and measurements configured for two event A3 at the same 

time} 

ensure that { 

when { Entry condition for event A3 is not met } 
then { UE does not send MeasurementReport } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and measurements configured for two event A3 at the same 

time} 

ensure that { 

when { Neighbour becomes offset better than serving } 
then { UE sends MeasurementReport with correct measid for event A3 } 
} 

8.3.1.3.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.4.1, 5.5.4.4 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> \f ihe RRCConnectionReconfiguration message includes the measConfig: 
2> perform the Measurement configuration procedure as specified in 5.5.2; 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the corresponding reportConfig includes a purpose set to ' reportStrongestCellsForSON' : 

3> consider any neighbouring cell detected on the associated frequency to be applicable; 

2> else if the corresponding reportConfig includes a purpose set to 'reportCGF: 

3> consider any neighbouring cell detected on the associated frequency/ set of frequencies (GERAN) which 
has a physical cell identity matching the value of the cellForWhichToReportCGI included in the 
corresponding measObject within the VarMeasConfig to be applicable; 

2> else: 

3> if the corresponding measObject concerns E-UTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the 

concerned cell is not included in the blackCellsToAddModList defined within the VarMeasConfig for 
this measid; 

3> else if the corresponding measObject concerns UTRA or CDMA2000: 
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4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 

3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasConfig for this measid; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfig, while the VarMeasReportList does not include an measurement 
reporting entry for this measid (a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during timeToTrigger defined within the VarMeasConfig for 
this event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 

4> remove the measurement reporting entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 

2> if the purpose is included and set to ' reportStrongestCells' or to ' reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 
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NOTE 1: If the purpose is set to 'reportStrongestCells', the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON', the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the purpose is included and set to 'reportCGF and if the UE acquired the information needed to set all 
fields of cellGloballd for the requested cell: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> stop timer T321; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> upon expiry of the T321 for this measid: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

NOTE 3: If the UE is configured with DRX, the UE may delay the measurement reporting for event triggered and 
periodical triggered measurements until the Active Time, which is defined in TS 36.321 [6]. 

[TS 36.331, clause 5.5.4.4] 

The UE shall: 

1> consider the entering condition for this event to be satisfied when condition A3-1, as specified below, is fulfilled; 

1> consider the leaving condition for this event to be satisfied when condition A3-2, as specified below, is fulfilled; 
Inequality A3-1 (Entering condition) 
Mn + Ofn + Ocn - Hys > Ms + Ofs + Ocs + Off 
Inequality A3-2 (Leaving condition) 
Mn + Ofn + Ocn + Hys <Ms + Ofs + Ocs + Off 
The variables in the formula are defined as follows: 

Mn is the measurement result of the neighbouring cell, not taking into account any offsets. 

Ofn is the frequency specific offset of the frequency of the neighbour cell (i.e. offsetFreq as defined within 
measObjectEUTRA corresponding to the frequency of the neighbour cell). 

Ocn is the cell specific offset of the neighbour cell (i.e. celllndividualOffset as defined within measObjectEUTRA 
corresponding to the frequency of the neighbour cell), and set to zero if not configured for the neighbour cell. 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Ofs is the frequency specific offset of the serving frequency (i.e. offsetFreq as defined within measObjectEUTRA 
corresponding to the serving frequency). 

Ocs is the cell specific offset of the serving cell (i.e. celllndividualOffset as defined within measObjectEUTRA 
corresponding to the serving frequency), and is set to zero if not configured for the serving cell. 
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Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfigEUTRA for this event). 
Oj5^is the offset parameter for this event (i.e. a3-0ffset as defined within reportConfigEUTRA for this event). 
Mn, Ms are expressed in dBm in case of RSRP, or in dB in case of RSRQ. 
Ofn, Ocn, Ofs, Ocs, Hys, Off sire expressed in dB. 
[TS 36.331, clause 5.5.5] 



UE 



EUTRAN 



MeasurementReport ^ 



Figure 5.5.5-1 : lUleasurement reporting 



The purpose of this procedure is to transfer measurement results from the UE to E-UTRAN. 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultNeighCells to include the best neighbouring cells up to maxReportCells in accordance with 
the following: 

3> if the triggerType is set to 'evenf: 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResultNeighCells, include the physCellld; 

3> if the triggerType is set to 'event'; or the purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 
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6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 

3> else if the purpose is set to 'reportCGF : 

4> if the mandatory present fields of the cellGloballd for the cell indicated by the 
cellForWhichToReportCGI in the associated measObject have been obtained: 

5> include the cgi-Info containing all the fields that have been successfully acquired; 

1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical' : 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 

1> if the measured results are for CDMA2000 HRPD: 

2> set the preRegistrationStatusHRPD to the UE's CDMA2000 upper layer's HRPD preRegistrationStatus; 

1> if the measured results are for CDMA2000 IxRTT: 

2> set the preRegistrationStatusHRPD to 'FALSE'; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 

8.3.1.3.3 Test description 

8.3.1.3.3.1 Pre-test conditions 
System Simulator: 

- Cell 1, Cell 2 and Cell 3 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.1 .3.3.2 Test procedure sequence 

Table 8.3.1.3.3.2-1 illustrates the downlink power levels to be applied for Cell 1, Cell 2 and Cell 3 at various time 
instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while rows marked "TT'and 
"T2" are to be applied subsequently. The exact instants on which these values shall be applied are described in the texts 
in this clause. 
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Table 8.3.1.3.3.2-1 : Power levels 





Parameter 


Unit 


CelM 


Cell 2 
(DL only) 


Cells 
(DL only) 


Remark 


TO 


Cell-specific 
RS EPRE 


dBm/15kHz 


-85 


-91 


Off 


Power levels are such that entry condition for 
event A3 (measid 1 & 2) is not satisfied: 

Mn + Ofn + Ocn + Hys <Ms + Ofs + Ocs + Ojf 


T1 


Cell-specific 
RS EPRE 


dBm/15kHz 


-85 


-79 


Off 


Power levels are such that entry condition for 
event A3 (measid 1) is satisfied: 

Mn + Ofn + Ocn - Hys > Ms + Ofs + Ocs + Off 


T2 


Cell-specific 
RS EPRE 


dBm/15kHz 


-85 


Off 


-73 


Power levels are such that entry condition for 

event A3 (measid 2) is satisfied: 

Mn + Ofn + Ocn-Hys > Ms + Ofs + Ocs + Ojf 



Table 8.3.1.3.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including MeasConfigto setup intra E-UTRAN 
measurement and reporting for two event A3 
(measid ^ and measid 2) (intra and inter 
frequency measurement). 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RCConnectionReconfigrationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


Check: Does the UE transmit a 
MeasurementReport message within the next 
10s? 


-> 


MeasurementReport 


1 


F 


4 


SS re-adjusts the cell-specific reference signal 
level according to row "T1 " in table 8.3.1 .3.3.2- 
1. 










5 


Check: Does the UE transmit a 
MeasurementReport message to report event 
A3 (measid ^) with the measured RSRP value 
for Cell 2? 


-> 


MeasurementReport 


2 


P 


6 


SS re-adjusts the cell-specific reference signal 
level according to row "T2" in table 8.3.1 .3.3.2- 
1. 










7 


Wait and ignore MeasurementReport 
messages for 5 s to allow change of power 
levels for Cell 2 and Cell 3. 










8 


Check: Does the UE transmit a 
MeasurementReport message to report event 
A3 (measid 2) with the measured RSRP value 
for Cell 3? 


-> 


MeasurementReport 


2 


P 



8.3.1 .3.3.3 Specific message contents 

Table 8.3.1.3.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.3.1.3.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 
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Table 8.3.1.3.3.3-2: MeasConfig (step 1, Table 8.3.1.3.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-1 , condition INTER-FREQ 


Information Element 


Value/Remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 


2 entries 






(1 ..maxQbjectId)) OF SEQUENCE { 








measObjectld[1] 


ldlVleasQbject-f1 






measObject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






measObjectld[2] 


ldMeasQbject-f2 






measObject[2] 


MeasObjectEUTRA- 
GENERIC(f2) 






reportConfigToAddModList SEQUENCE (SIZE 


1 entry 






(1 ..maxReportConfigId)) QF SEQUENCE { 








reportConfigld[1] 


ldReportConfJg-A3 






reportConfig[1] 
1 


ReportConfig-A3-H 






measldToAddModList SEQUENCE (SIZE 


2 entries 






(1 ..maxMeasId)) OF SEQUENCE { 








measld[1] 


1 






measQbjectld[1] 


ldlVleasObject-f1 






reportConfigld[1] 


ldReportConfig-A3 






measld[2] 


2 






measQbjectld[2] 


ldMeasQbject-f2 






reportConfigld[2] 
} 
} 


ldReportConfjg-A3 







Table 8.3.1.3.3.3-3: ReportConfig-A3-H (step 1, Table 8.3.1.3.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-6 ReportConfigEUTRA-A3 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfigEUTRA-A3 ::= SEQUENCE { 








triggerType CHOICE { 








event SEQUENCE { 








eventid CHOICE { 








eventAS SEQUENCE { 








} 








} 








timeToTriqqer 


msO 






1 








} 








reportQuantity 


sameAsTriggerQuantity 






reportAmount 


infinity 






1 
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Table 8.3.1.3.3.3-4: MeasurementReport {step 5, Table 8.3.1.3.3.2-2) 



Derivation path: 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 








MeasResultEUTRA ::= SEQUENCE (SIZE 




Report Cell 2 




(L.tnaxCellReport)) OF SEQUENCE { 








physCellld 


physCellld of the Cell 2. 






measResult SEQUENCE! 








rsrpResult 


{0..97) 






rsrqResult 

} 
} 
} 
} 
} 
} 
} 
} 


Not present 







Table 8.3.1.3.3.3-5: MeasurementReport (step 8, Table 8.3.1.3.3.2-2) 



Derivation path: 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


2 






measResultServCell::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrqResult 
1 


(0..34) 






measResultNeighCells CHOICE { 








MeasResultEUTRA ::= SEQUENCE (SIZE 




Report Cell 3 




(L.maxCellReport)) OF SEQUENCE { 








physCellld 


physCellld of the Cell 3. 






measResult SEQUENCE! 








rsrpResult 


{0..97) 






rsrqResult 
} 
} 
} 
} 
} 
} 
} 
} 


Not present 
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8.3.1 .4 Measurement configuration control and reporting / Intra E-UTRAN 

measurements / Periodic reporting (intra and inter-frequency measurements) 

8.3.1 .4.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state and measurement configured for periodic reporting of intra 
frequency cells and inter frequency cells on specified frequency } 
ensure that { 

when { The UE receives reference signal power for cells on the serving frequency and cells on the 
frequency where measurements are configured } 

then { UE sends MeasurementReport message at regular intervals for these cells } 

} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and a MeasurementReport message for a configured periodic 
measurement reporting of intra and inter frequency cells was sent } 
ensure that { 

when { A previously reported cell become unavailable or the UE receives reference signal power on 
a reported frequency for a cell which was previously not reported } 

then { UE sends MeasurementReport message at regular intervals for the available intra and inter 
frequency cells } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state and periodic measurement reporting ongoing} 
ensure that { 

when { The UE receives a RRCConnectionReconf iguration message removing measlds for periodic 
reporting } 

then { UE stops sending MeasurementReport messages for these measlds } 
} 

8.3.1.4.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.2.2,5.5.4.1 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> If ihQ RRCConnectionReconfiguration message includes the measConfig: 
2> perform the Measurement configuration procedure as specified in 5.5.2; 

[TS 36.331, clause 5.5.2.2] 

The UE shall: 

1> for each measid value included in the received measIdToRemoveList that is part of the current UE configuration 
in varMeasConfig: 

2> remove the entry with the matching measid from the measIdList within the VarMeasConfig; 

2> remove the measurement reporting entry for this measid from the VarMeasReportList, if included; 

2> stop the periodical reporting timer or timer T321, whichever one is running, and reset the associated 
information (e.g. timeToTrigger) for this measid; 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 
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2> else: 

3> if the corresponding measObject concerns E-UTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the 

concerned cell is not included in the blackCellsToAddModList defined within the VarMeasConfig for 
this measid; 



2> if the purpose is included and set to 'reportStrongestCells' or to 'reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1: \f i\\e purpose is set to 'reportStrongestCells', the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON', the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 



NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 



[TS 36.331, clause 5.5.5] 



For the measid for which the measurement reporting procedure was triggered, the UE shall set the measuredResults 
within the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultsNeighCells to include the best neighbouring cells up to maxReportCells in accordance 
with the following: 

3> if the triggerType is set to 'event': 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 
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3> for each cell that is included in the measResultsNeighCells, include the physCellld; 

3> if the triggerType is set to 'evenf; or \h& purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 



1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than to 
reportAmount as defined corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 



1> submit the MEASUREMENT REPORT message to lower layers for transmission, upon which the procedure 
ends. 



Test description 
Pre-test conditions 



8.3.1.4.3 

8.3.1.4.3.1 

System Simulator: 

- Cell 1 , Cell 2, Cell 3, Cell 4 and Cell 6 

UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) according to [18] on Cell 1. 

8.3.1 .4.3.2 Test procedure sequence 

Table 8.3.1.4.3.2-1 illustrates the downlink power levels to be applied for the cells at various time instants of the test 
execution. Row marked "TO" denotes the conditions after the preamble, while rows marked "Tl" and "T2" are to be 
applied subsequently. The exact instants on which these values shall be applied are described in the texts in this clause. 

Table 8.3.1.4.3.2-1 : Power levels 





Parameter 


Unit 


CelM 


Cell 2 

(DL 

only) 


Cells 

(DL 

only) 


CelM 

(DL 

only) 


Cell 6 

(DL 

only) 


Remark 


TO 


Cell-specific 
RS EPRE 


dBm/ 
15kH 

z 


-85 


-91 


8-5 


Off 


Off 




Tl 


Cell-specific 
RS EPRE 


dBm/ 
15kH 

z 


-85 


Off 


8-5 


-91 


Off 




T2 


Cell-specific 
RS EPRE 


dBm/ 
15kH 

z 


-85 


Off 


Off 


-91 


-85 
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Table 8.3.1.4.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including measConfigto setup intra LIE 
measurements and periodical reporting for 
intra and inter frequency cells. 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 








EXCEPTION: In parallel to events described in 
step 3 the steps specified in table 8.3.1 .4.3.2-3 
and table 8.3.1 .4.3.2-4 shall take place 










3 


Wait for 30 s to ensure that the UE performs a 
periodical intra frequency reporting and a 
periodical inter frequency reporting. 






1 




4 


SS sets the cell-specific reference signal levels 
and switches Cell 2 "Off" and Cell 4 "On" 
according to row "T1 " in table 8.3.1 .4.3.2-1 . 










5 


Wait and ignore MeasurementReport 
messages for 5 s to allow for the switching of 
cells. 












EXCEPTION: In parallel to events described in 
step 6 the steps specified in table 8.3.1 .4.3.2-4 
and table 8.3.1 .4.3.2-5 shall take place. 










6 


Wait for 30 s to ensure that the UE performs a 
periodical intra frequency reporting and a 
periodical inter frequency reporting. 






1,2 




7 


SS sets the cell-specific reference signal levels 
and switches Cell 3 "Off" and Cell 6 "On" 
according to row "T2" in table 8.3.1 .4.3.2-1 . 










8 


Wait and ignore MeasurementReport 
messages for 5 s to allow for the switching of 
cells. 












EXCEPTION: In parallel to events described in 
steps 9 to 1 1 the steps specified in table 
8.3.1 .4.3.2-5 and table 8.3.1 .4.3.2-6 shall take 
place 










9 


Wait for 30 s to ensure that the UE performs a 
periodical intra frequency reporting and a 
periodical inter frequency reporting. 






1,2 




10 


SS transmits an 

RRCConnectionReconfiguration message 
including measConfig \o remove measlds for 
periodical reporting. 


<- 


RRCConnectionReconfiguration 






11 


The UE transmits an 

RCConnectionReconfigrationComplete 

message 


-> 


RRCConnectionReconfigurationC 
ompiete 






12 


Check: Does the UE attempt to transmit an 
uplink message for the next 1 0s? 


- 


- 


3 


F 



Table 8.3.1 .4.3.2-3: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: After the 1st message is 
received, step 1 below shall be repeated every 
time the duration indicated in the IE 
reportlnterval has elapsed 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical intra frequency reporting for Cell 2? 


~> 


MeasurementReport 


1 


P 
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Table 8.3.1 .4.3.2-4: Parallel behaviour 



St 



Procedure 



U-S 



Message Sequence 



miessage 



TP 



Verdict 



EXCEPTION: After the 1st message is 
received, step 1 below shall be repeated every 
time the duration indicated in the IE 
reportlnterval has elapsed. 



Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical inter frequency reporting for Cell 3? 



MeasurementReport 



NOTEl : Cell 2 may be included in the MeasurementReport due to UE averages power levels over a period of time. 
N0TE2: Cell 3 may be included in the MeasurementReport due to UE averages power levels over a period of time. 

Table 8.3.1 .4.3.2-5: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Step 1 below shall be repeated 
every time the duration indicated in the IE 
reportlnterval has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical intra frequency reporting for Cell 
4(N0TE1)? 


-> 


MeasurementReport 


1,2 


P 


Table 8.3.1 .4.3.2-6: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Step 1 below shall be repeated 
every time the duration indicated in the IE 
reportlnterval has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical inter frequency reporting for Cell 
6(NOTE2)? 


~> 


MeasurementReport 


1,2 


P 



8.3.1 .4.3.3 Specific message contents 

Table 8.3.1.4.3.3-1 : RRCConnectionReconfiguration (step 1 and step 10, Table 8.3.1.4.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 
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Table 8.3.1.4.3.3-2: MeasConfig (step 1, Table 8.3.1.4.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 , condition INTER-FREQ 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


3 entries 






measObjectld[1] 


ldMeasObject-f1 






measObject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






measObjectld[2] 


Idl\/leas0bject-f2 






measObject[2] 


MeasObjectEUTRA- 
GENERIC(f2) 






measObjectld[2] 


Idl\/leas0bject-f3 






measObject[2] 


MeasObjectEUTRA- 
GENERIC(f3) 






1 








reportConfigToAddModiList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 


1 entry 






reportConfigld[1] 


IdReportConfig- 
PERIODICAL 






reportConfig[1] 


ReportConfigEUTRA- 
PERIODICAL 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


3 entries 






measld[1] 


1 






measObjectld[1] 


ldMeasObject-f1 






reportConfigld[1] 


IdReportConfig- 
PERIODICAL 






measld[2] 


2 






measObjectld[2] 


ldMeasObject-f2 






reportConfigld[2] 


IdReportConfig- 
PERIODICAL 






measld[3] 


3 






measObjectld[3] 


ldMeasObject-f3 






reportConfigld[3] 


IdReportConfig- 
PERIODICAL 






1 








} 









Table 8.3.1.4.3.3-3 ReportConfigEUTRA-PERIODICAL (step 1, Table 8.3.1.4.3.2-2) 



Derivation path: 36.508 table 4.6.6-7 ReportConfigEUTRA-PERIODICAL 


Information Element 


Value/Remark 


Comment 


Condition 


ReportConfigEUTRA-PERIODICAL ::= SEQUENCE { 








maxReportCells 


2 


Report Cell 2, Cell 
3, Cell 4 or Cell 6 




} 









Table 8.3.1.4.3.3-4: MeasConfig (step 10, Table 8.3.1.4.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measldToRemoveList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


3 entries 






Measld[1] 


1 






Measld[2] 


2 






Measld[3] 


3 






1 








} 
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Table 8.3.1.4.3.3-5: MeasurementReport {step 1, Table 8.3.1.4.3.2-3) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 








measResultListEUTRA ::= SEQUENCE (SIZE 




Report Cell 2 




(L.tnaxCellReport)) OF SEQUENCE { 








physCellld[1] 


physicalCellldentity-Cell2 






measResult [1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 
} 
} 
} 
} 
} 
} 
} 
} 


(0..34) 







Table 8.3.1.4.3.3-6: MeasurementReport (step 1, Table 8.3.1.4.3.2-5) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrqResult 
1 


(0..34) 






measResultNeighCells CHOICE { 








measResultListEUTRA ::= SEQUENCE (SIZE 




Report Cell 4 




(L.maxCellReport)) OF SEQUENCE { 








physCellld[1] 


physicalCellldentity-Cell4 






measResult [1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 
} 
} 
} 
} 
} 
} 
} 
} 


(0..34) 
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Table 8.3.1.4.3.3-7: MeasurementReport {step 1, Table 8.3.1.4.3.2-4) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


2 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 








measResultListEUTRA ::= SEQUENCE (SIZE 




Report Cell 3 




(L.tnaxCellReport)) OF SEQUENCE { 








physCellld[1] 


physicalCellldentity-CellS 






measResult [1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 
} 
} 
} 
} 
} 
} 
} 
} 


(0..34) 







Table 8.3.1.4.3.3-8: MeasurementReport (step 1, Table 8.3.1.4.3.2-6) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


3 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrqResult 
1 


(0..34) 






measResultNeighCells CHOICE { 








measResultListEUTRA ::= SEQUENCE (SIZE 




Report Cell 6 




(L.maxCellReport)) OF SEQUENCE { 








physCellld[1] 


physicalCellldentity-Cell6 






measResult [1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 
} 
} 
} 
} 
} 
} 
} 
} 


(0..34) 
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8.3.1 .5 Measurement configuration control and reporting / Intra E-UTRAN 

measurements / Two simultaneous event A3 (intra-frequency measurements) 

8.3.1 .5.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state and measurements configured for two event A3 at the same 

time} 

ensure that { 

when { Entry condition for event A3 is not met } 
then { UE does not send MeasurementReport } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and measurements configured for two event A3 at the same 

time} 

ensure that { 

when { Neighbour becomes offset better than serving } 
then { UE sends MeasurementReport with correct measid for event A3 } 
} 

8.3.1.5.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.4.1, 5.5.4.4 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> If ihQ RRCConnectionReconfiguration message includes the measConfig: 
2> perform the Measurement configuration procedure as specified in 5.5.2; 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the corresponding reportConfig includes a purpose set to ' reportStrongestCellsForSON' : 

3> consider any neighbouring cell detected on the associated frequency to be applicable; 

2> else if the corresponding reportConfig includes a purpose set to 'reportCGF: 

3> consider any neighbouring cell detected on the associated frequency/ set of frequencies (GERAN) which 
has a physical cell identity matching the value of the cellForWhichToReportCGI included in the 
corresponding measObject within the VarMeasConfig to be applicable; 

2> else: 

3> if the corresponding measObject concerns E-UTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the 

concerned cell is not included in the blackCellsToAddModList defined within the VarMeasConfig for 
this measid; 

3> else if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 
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3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasConfig for this measid; 

2> if the triggerType is set to 'evenf and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfig, while the VarMeasReportList does not include an measurement 
reporting entry for this measid (a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during timeToTrigger defined within the VarMeasConfig for 
this event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 

4> remove the measurement reporting entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 

2> if the purpose is included and set to 'reportStrongestCells' or to 'reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1 : If the purpose is set to 'reportStrongestCells', the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON', the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 700 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the purpose is included and set to 'reportCGF and if the UE acquired the information needed to set all 
fields of cellGloballd for the requested cell: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> stop timer T321; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> upon expiry of the T321 for this measid: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

NOTE 3: If the UE is configured with DRX, the UE may delay the measurement reporting for event triggered and 
periodical triggered measurements until the Active Time, which is defined in TS 36.321 [6]. 

[TS 36.331, clause 5.5.4.4] 

The UE shall: 

1> consider the entering condition for this event to be satisfied when condition A3-1, as specified below, is fulfilled; 

1> consider the leaving condition for this event to be satisfied when condition A3-2, as specified below, is fulfilled; 
Inequality A3-1 (Entering condition) 
Mn + Ofn + Ocn - Hys > Ms + Ofs + Ocs + Off 
Inequality A3-2 (Leaving condition) 
Mn + Ofn + Ocn + Hys < Ms + Ofs + Ocs + Off 
The variables in the formula are defined as follows: 

Mn is the measurement result of the neighbouring cell, not taking into account any offsets. 

Ofn is the frequency specific offset of the frequency of the neighbour cell (i.e. offsetFreq as defined within 
measObjectEUTRA corresponding to the frequency of the neighbour cell). 

Ocn is the cell specific offset of the neighbour cell (i.e. celllndividualOffset as defined within measObjectEUTRA 
corresponding to the frequency of the neighbour cell), and set to zero if not configured for the neighbour cell. 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Ofs is the frequency specific offset of the serving frequency (i.e. offsetFreq as defined within measObjectEUTRA 
corresponding to the serving frequency). 

Ocs is the cell specific offset of the serving cell (i.e. celllndividualOffset as defined within measObjectEUTRA 
corresponding to the serving frequency), and is set to zero if not configured for the serving cell. 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfigEUTRA for this event). 

Off'K the offset parameter for this event (i.e. a3-0ffset as defined within reportConfigEUTRA for this event). 

Mn, Ms are expressed in dBm in case of RSRP, or in dB in case of RSRQ. 
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Ofn, Ocn, Ofs, Ocs, Hys, Offctre expressed in dB. 

[TS 36.331, clause 5.5.5] 



UE 



EUTRAN 



MeasurementReport ^ 



Figure 5.5.5-1 : lUleasurement reporting 



The purpose of this procedure is to transfer measurement results from the UE to E-UTRAN. 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultNeighCells to include the best neighbouring cells up to maxReportCells in accordance with 
the following: 

3> if the triggerType is set to 'event': 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResultNeighCells, include the physCellld; 

3> if the triggerType is set to 'evenf; or iht purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 

3> else if the purpose is set to 'reportCGF : 
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4> if the mandatory present fields of the cellGloballd for the cell indicated by the 
cellForWhichToReportCGI in the associated measObject have been obtained: 

5> include the cgi-Info containing all the fields that have been successfully acquired; 

1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical' : 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 

l> if the measured results are for CDMA2000 HRPD: 

2> set the preRegistrationStatusHRPD to the UE's CDMA2000 upper layer's HRPD preRegistrationStatus; 

l> if the measured results are for CDMA2000 IxRTT: 

2> set the preRegistrationStatusHRPD to 'FALSE'; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 

8.3.1.5.3 Test description 

8.3.1.5.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18] 

8.3.1 .5.3.2 Test procedure sequence 

Table 8.3.1.5.3.2-1 illustrates the downlink power levels to be applied for Cell 1 and Cell 2 at various time instants of 
the test execution. Row marked "TO" denotes the conditions after the preamble, while rows marked "Tl"and "T2" are to 
be applied subsequently. The exact instants on which these values shall be applied are described in the texts in this 
clause. 
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Table 8.3.1.5.3.2-1 : Power levels 





Parameter 


Unit 


CelM 


Cell 2 

(DL 

only) 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/1 
5kHz 


-85 


-91 


Power levels are such that entry condition for event A3 
{measid 1 & 2) is not satisfied: 

Mn + Ofn + Ocn + Hys <Ms + Ofs + Ocs + Off 


T1 


Cell-specific RS 
EPRE 


dBm/1 
5kHz 


-85 


-79 


Power levels are such that entry condition for event A3 
[measid \) is satisfied: 

Mn + Ofn + Ocn - Hys > Ms + Ofs + Ocs + Off 


T2 


Cell-specific RS 
EPRE 


dBm/1 
5kHz 


-85 


-79 


Power levels are such that entry condition for event A3 
[measid 2) is satisfied: 

Mn + Ofn + Ocn - Hys > Ms + Ofs + Ocs + Off 



Table 8.3.1.5.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including MeasConfigXo setup intra E-UTRAN 
measurement and reporting for two event A3 
(measid ^ and measid 2) with different 
parameters. 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


Check: Does the UE transmit a 
MeasurementReport message within the next 
10s? 


-> 


MeasurementReport 


1 


F 


4 


SS re-adjusts the cell-specific reference signal 
level according to row "T1 " in table 8.3.1 .5.3.2- 
1. 










5 


Check: Does the UE transmit a 
MeasurementReport message to report event 
A3 [measid "l) with the measured RSRP value 
for Cell 2? 


-> 


MeasurementReport 


2 


P 


6 


SS re-adjusts the cell-specific reference signal 
level according to row "T2" in table 8.3.1 .5.3.2- 

1. 










7 


Check: Does the UE transmit a 
MeasurementReport message to report event 
A3 (measid 2) with the measured RSRP value 
for Cell 2? 


-> 


MeasurementReport 


2 


P 



8.3.1 .5.3.3 Specific message contents 

Table 8.3.1.5.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.3.1.5.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 
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Table 8.3.1.5.3.3-2: MeasConfig (step 1, Table 8.3.1.5.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/Remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldMeasObject-f1 






measQbject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






1 








reportConfigToAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 


2 entries 






reportConfigld[1] 


1 






reportConfig[1] 


ReportConfig-A3- 
Lowerthreshold 






reportConfigld[2] 


2 






reportConfig[2] 


ReportConfig-A3- 
Higherthreshold 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


2 entries 






measld[1] 


1 






measObjectld[1] 


ldlVleasObject-f1 






reportConfigld[1] 


ldReportConfig-A3- 
Lowerthreshold 






measld[2] 


2 






measObjectld[2] 


ldlVleasObject-f1 






reportConfigld[2] 


ldReportConfig-A3- 
Higherthreshold 






} 








} 








Table 8.3.1.5.3.3-3: ReportConfig-A3-Lowerthreshold {step 1, Table 8.3.1.5.3.2-2) 


Derivation path: 36.508 clause 4.6.6 table 4.6.6-6 ReportConfigEUTRA-A3 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfigEUTRA-A3 ::= SEQUENCE { 








triggerType CHOICE { 








event SEQUENCE { 








eventid CHOICE { 








eventAS SEQUENCE { 








a3-0ffset 





OdB 




} 








} 








timeToTrigqer 


msO 






} 








} 








reportQuantity 


sameAsTriggerQuantity 






} 
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Table 8.3.1.5.3.3-4: ReportConfig-A3-Higherthreshold (step 1, Table 8.3.1.5.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-6 ReportConfigEUTRA-A3 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfigEUTRA-A3 ::= SEQUENCE { 








triqqerType CHOICE { 








event SEQUENCE { 








eventid CHQICE { 








eventA3 SEQUENCE { 








a3-0ffset 





OdB 




} 








} 








timeToTrigger 


msO 






} 








1 








reportQuantity 


sameAsTriggerQuantity 






} 









Table 8.3.1.5.3.3-5: MeasurementReport (step 5, Table 8.3.1.5.3.2-2) 



Derivation path: 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


l\/leasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








MeasResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrqResult 
1 


(0..34) 






measResultNeighCells CHQICE { 








MeasResultEUTRA ::= SEQUENCE (SIZE 




Report Cell 2 




(L.tnaxCellReport)) OF SEQUENCE { 








physCellld 


PhysCellld of the Cell 2. 






measResult SEQUENCE! 








rsrpResult 


(0..97) 






rsrqResult 

} 
} 
} 
} 
} 
} 
} 
} 


Not present 
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Table 8.3.1.5.3.3-6: MeasurementReport {step 7, Table 8.3.1.5.3.2-2) 



Derivation path: 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








MeasResults ::= SEQUENCE { 








measid 


2 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 








MeasResultEUTRA ::= SEQUENCE (SIZE 




Report Cell 2 




(L.tnaxCellReport)) OF SEQUENCE { 








physCellld 


PhysCellld of the Cell 2. 






measResult SEQUENCE! 








rsrpResult 


{0..97) 






rsrqResult 

} 
} 
} 
} 
} 
} 
} 
} 


Not present 







8.3.1.6 



8.3.1.6.1 



Measurement configuration control and reporting / Intra E-UTRAN 
measurements / Two simultaneous events A2 and A3 (inter-frequency 
measurements) 

Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_CONNECTED state and measurements configured for event A2 and event A3 
ensure that { 

when { Serving becomes worse than threshold } 
then { UE sends MeasurementReport for event A2 } 



(2) 



with { UE in E-UTRA RRC_CONNECTED state and measurements configured for event A2 and event A3 
ensure that { 

when { Neighbour becomes offset better than serving } 
then { UE sends MeasurementReport for event A3 } 



8.3.1.6.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.4.1, 5.5.4.3, 5.5.4.4 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInformation and the UE is able to 
comply with the configuration included in this message, the UE shall: 



1> If the RRCConnectionReconfiguration message includes the measurementConfiguration: 
2> perform the Measurement configuration procedure as specified in 5.5.2; 
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[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasurementConfiguration: 

2> if the triggerType is set to 'evenf consider a neighbouring cell on the associated frequency/ set of frequencies 
(GERAN) to be applicable as follows: 



3> if the corresponding measObject concerns EUTRA: when the concerned cell is not included in the 
blackListedCellsToAddModifyList defined within the VarMeasurementConfiguration for this measid; 

2> else consider a neighbouring cell on the associated frequency to be applicable as follows: 



3> if the corresponding measObject concerns EUTRA: when the concerned cell is not included in the 
blackListedCellsToAddModifyList defined within the VarMeasurementConfiguration for this measid; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasurementConfiguration, is 
fulfilled for one or more applicable cells for a duration exceeding the value of timeToTrigger defined for this 
event within the VarMeasurementConfiguration or: 

2> if the triggerType is set to 'periodical' and a (first) measurement result is available: 

3> if the VarMeasurementReports does not include an entry for this measid: 

4> include an entry within the VarMeasurementReports for this measid; 

4> set the numberOJReportsSent defined within the VarMeasurementReports for this measid to 0; 

3> include the concerned cell(s) in the cellsToReportList defined within the VarMeasurementReports for this 
measid, if not included; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> Upon expiry of the periodical reporting timer for this: 

3> if the triggerType is set to 'periodical': 

4> clear the cellsToReportList defined within the VarMeasurementReports for this measid and include 
the applicable cell(s) in the cellsToReportList; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the leaving condition applicable for this event is fulfilled for one or more of the cells included in the 
cellsToReportList defined within the VarMeasurementReports for this measid for a duration exceeding the 
value of timeToTrigger defined within the VarMeasurementConfiguration for this event: 

3> remove the concerned cell(s) in the cellsToReportList defined within the VarMeasurementReports for this 
measid; 

[TS 36.331, clause 5.5.4.3] 

The UE shall: 

1> apply inequality A2-1, as specified below, as the entry condition for this event; 

1> apply inequality A2-2, as specified below, as the leaving condition for this event; 
Inequality A2- 1 (Entering condition) 

Ms — Hys < Thresh 
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Inequality A2-2 (Leaving condition) 

Ms +Hys> Thresh 

The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any cell individual offset. 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within the VarMeasurementConfiguration 
for this event) 

Thresh is the threshold parameter for this event (i.e. a2-Threshold as defined within the 
VarMeasurementConfiguration for this event) 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ 

Hys is expressed in dB 

Thresh is expressed in dBm in case Ms is expressed in dBm; otherwise it is expressed in dB 
[TS 36.331, clause 5.5.4.4] 
The UE shall: 

1> apply inequality A3-1, as specified below, as the entry condition for this event; 

1> apply inequality A3 -2, as specified below, as the leaving condition for this event; 
Inequality A3-1 (Entering condition) 

Mn + Ofn + Ocn - Hys > Ms + Ofs + Ocs + Ojf 
Inequality A3-2 (Leaving condition) 

Mn + Ofn + Ocn + Hys < Ms + Ofs + Ocs + Ojf 
The variables in the formula are defined as follows: 

Mn is the measurement result of the neighbouring cell. 

Ofn is the frequency specific offset of the frequency of the neighbour cell (equals Ofs for intra-frequency 

measurements and is included in MeasObjectEUTRA corresponding to the inter frequency as offsetFreq for inter- 
frequency measurements) 

Ocn is the cell specific offset of the neighbour cell. If not configured zero offset shall be applied (included in 
MeasObjectEUTRA of the serving frequency as parameter celllndividualOffset for intra-f measurements and 
included in MeasObjectEUTRA corresponding to the inter frequency as parameter celllndividualOffset for inter- 
frequency measurements). 

Ms is the measurement result of the serving cell, not taking into account any cell individual offset. 

Ofs is the frequency specific offset of the serving frequency (i.e. offsetFreq within the MeasObjectEUTRA 
corresponding to the serving frequency) 

Ocs is the cell specific offset of the serving cell (included in MeasObjectEUTRA of the serving frequency as 
parameter celllndividualOffset) 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within the VarMeasurementConfiguration 
for this event) 

Off is the offset parameter for this event (i.e. a3-Offset as defined within the VarMeasurementConfiguration for this 
event) 

Mn, Ms are expressed in dBm in case of RSRP, or in dB in case of RSRQ 

Ofn, Ocn, Ofs, Ocs, Hys, Off are expressed in dB 
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[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measuredResults 
within the MeasurementReport message as follows: 

1> set the IE measid to the measurement identity that triggered the measurement reporting; 

1> set the mobilityMeasResults to include all cells included in the cellsToReportList as defined within the 
VarMeasurementReports for this measid 

1> for each included cell include the filtered measured results in accordance with the reportConfigList defined in 
variable VarMeasurementConfiguration for that measid, ordered as follows: 

2> If for E-UTRA the reportQuantity is set as 'both': 

3> include the E-UTRA cells in order of decreasing triggerQuantity, i.e. the best cell is included first; 
2> else: 

3> include the cells in order of decreasing reportQuantity, i.e. the best cell is included first. 

Editor's note: It is EPS whether, if multiple cells meet the criteria, ordering is also applied irrespective of the cells 
carrier frequency 

1> increment the numberOfReportsSent as defined within the VarMeasurementReports for this measid hy 1; 

1> if the numberOfReportsSent as defined within the VarMeasurementReports for this measid is less than to 
reportAmount as defined within the reporting configuration for this event as defined in variable 
VarMeasurementConfiguration: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the 
VarMeasurementConfiguration for this measid; 



1> submit the MEASUREMENT REPORT message to lower layers for transmission, upon which the procedure 
ends. 

Editor's note: It is FFS which additional cells may be included in a report, e.g. cells of another type (e.g. best inter- 
frequency cell included in an intra-frequency report. 

8.3.1.6.3 Test description 

8.3.1.6.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 3 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.1 .6.3.2 Test procedure sequence 

Table 8.3.1.6.3.2-1 illustrates the downlink power levels to be applied for Cell 1 and Cell 3 at various time instants of 
the test execution. Row marked "TO" denotes the conditions after the preamble, while rows marked "Tl"and "T2" are to 
be applied subsequently. The exact instants on which these values shall be applied are described in the texts in this 
clause. 
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Table 8.3.1.6.3.2-1 : Power levels 





Parameter 


Unit 


CelM 


Cell 3 

(DL 

only) 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/1 
5kHz 


P01 
(FFS) 


P02 
(FFS) 


P01 and P02 shall be such that entry condition for event 

A2 and event A3 is not satisfied: 

Ms + Hys > Thresh 

AND 

Mn + Ofri+Ocn+Hys<Ms + Ofs + Ocs + Ojf 


T1 


Cell-specific RS 
EPRE 


dBm/1 
5kHz 


P11 

(FFS) 


P12 

(FFS) 


P1 1 shall be such that entry condition for event A2 is 

satisfied: 

Ms- Hys < Thresh 

AND 

P1 1 and PI 2 shall be such that entry condition for event 

A3 is not satisfied: 

Mn + Ofn + Ocn + Hys < Ms + Ofs + Ocs + Ojf 


T2 


Cell-specific RS 
EPRE 


dBm/1 
5kHz 


P21 

(FFS) 


P22(FFS 
) 


P21 and P22 shall be such that entry condition for event 

A3 is satisfied: 

Mn + Ofn + Ocn - Hys > Ms + Ofs + Ocs + Ojf 



Table 8.3.1.6.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including measConfigXo setup intra LTE 
measurement and reporting for event A2 and 
event A3 (inter frequency measurement) 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RCConnectionReconfigrationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


Check: does the UE transmit a 
MeasurementReport message within the next 
10s? 


-> 


MeasurementReport 


1 


F 


4 


SS re-adjusts the cell-specific reference signal 
level according to row "T1" in table 
8.3.1.6.3.2.-1. 










5 


Check: does the UE transmit a 
MeasurementReport message to report event 
A2 with the measured RSRP value for Cell 1 ? 


-> 


MeasurementReport 


1 


P 


6 


SS re-adjusts the cell-specific reference signal 
level according to row "T2" in table 
8.3.1.6.3.2.-1. 










7 


Check: does the UE transmit a 
MeasurementReport message to report event 
A3 with the measured RSRP value for Cell 3? 


-> 


MeasurementReport 


2 


P 


8 


Check: Does the test result of CALL generic 
procedure indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 











Editors note: When test tolerances in TS36.508 will cover measurements steps 4 and 6 above will take them into 
account. 

Editor's note: It is FFS if Cell 3 is included in the MeasurementReport in step 5. 
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8.3.1 .6.3.3 Specific message contents 

Table 8.3.1.6.3.3-1 RRCConnectionReconfiguration (step 1): measConfig test specific information 

elements 

FFS 
Table 8.3.1.6.3.3-2 MeasurementReport (step 5 ): measResults test specific information elements 

FFS 
Table 8.3.1.6.3.3-3 MeasurementReport (step 7 ): measResults test specific information elements 

FFS 

8.3.1 .7 Measurement configuration control and reporting / Intra E-UTRAN 

measurements / Blacklisting 

8.3.1.7.1 Test Purpose (IP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state and meausurement configured for event A3 reporting } 
ensure that { 

when { Blacklisted neighbour cell satisfies entry condition for event A3 } 
then { It is not considered in event evaluation and UE does not send MeasurementReport message } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and meausurement reporting triggered by event A3 is ongoing} 
ensure that { 

when { Blacklisted neighbour cell satisfies entry condition for event A3 } 
then { It is not considered in measurement reporting } 
} 

8.3.1.7.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.5.1, 5.5.4.1, 
and 5.5.5. 

[TS 36.331, clause 5.5.1] 

The UE reports measurement information in accordance with the measurement configuration as provided by E- 
UTRAN. E-UTRAN provides the measurement configuration applicable for a UE in RRC_CONNECTED state by 
means of dedicated signalling, i.e. using the RRCConnectionReconfiguration message. 



For intra-frequency and inter-frequency measurements a measurement object is a single E-UTRA carrier 
frequency. Associated with this carrier frequency, E-UTRAN can configure a list of cell specific offsets and a 
list of 'blacklisted' cells. Blacklisted cells are not considered in event evaluation or measurement reporting. 



[TS 36.331, clause 5.5.4.1] 
The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> else: 

3> if the corresponding measObject concerns EUTRA: 
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4> consider any neighbouring cell detected on the associated frequency to be applicable when the 

concerned cell is not included in the blackCellsToAddModList defined within the VarMeasConfig for 
this measid; 



2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeaConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfig while the VarMeasReportList does not include a measurement reporting 
entry for this measid (a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 



2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 



2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during timeToTrigger defined within the VarMeasConfig for 
this event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 

measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 

4> remove the measurement reporting entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 

[TS 36.331, clause 5.5.5] 



For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the IE measid to the measurement identity that triggered the measurement reporting; 
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1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultsNeighCells to include the best neighbouring cells up to maxReportCells in accordance 
with the following: 

3> if the triggerType is set to 'event': 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 



3> for each cell that is included in the measResultsNeighCells, include the physCellld; 

3> if the triggerType is set to 'event'; or the purpose is set to ' reportStrongestCells' or to 
' reportStrongestCellsForSON' : 

4> for each included cell include the layer 3 filtered measured results in accordance with the 
reportConfigList for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 



1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 
1> stop the periodical reporting timer, if running; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends. 
8.3.1.7.3 Test description 

8.3.1.7.3.1 Pre-test conditions 
System Simulator: 

- Cell 1, Cell 2 and Cell 4: 

Cell 1 is the serving cell 

Cell 2 and Cell 4 are intra-frequency neighbour cells 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

8.3.1 .7.3.2 Test procedure sequence 

Table 8.3.1.7.3.2-1 illustrates the downlink power levels to be applied for Cell 1, Cell 2 and Cell 4 at various time 
instants of the test execution. Row marked "TO" denotes the conditions after the preamble, while rows marked "Tl" and 
"T2" are to be applied subsequently. The exact instants on which these values shall be applied are described in the texts 
in this clause. 
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Table 8.3.1 .7.3.2-1 : Power level 





Parameter 


Unit 


CelM 


Cell 2 
(DL only) 


Cell 4 
(DL only) 


Remark 


TO 






-85 


-97 


-97 


Power levels are such that that exit condition 
for event A3 is satisfied for all cells {M2 + Hys 
<M1 + Off and M4 + Hys < M1 + Off) with all 
offset parameters set to dB. 


T1 


Cell-specific 
RS EPRE 


dBm/ 
15kH 

z 


-85 


-79 


-97 


Power level of Cell 2 is set such that 
measurement results for Cell 1 {M1) and Cell 2 
{M2) satisfy entry condition for event A3 {M2 - 
Hys >I\/I1 + Off). 


T2 






-85 


-79 


-79 


Power level of Cell 4 is set such that 
measurement results for Cell 1 {M1) and Cell 4 
{M4) satisfy entry condition for event A3 (M4 - 
Hys >I\/I1 + Off). 



Table 8.3.1 .7.3.2-2 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including measConfig \o setup IntraLTE 
measurement and reporting for event A3. 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigrationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


SS re-adjusts the cell-specific reference signal 
levels according to row "T1 " in table 
8.3.1.7.3.2.-1. 










4 


Check: does the UE transmit a 
l\/leasurementReport messages within the next 
10s? 




MeasurementReport 


1 


F 


5 


SS re-adjusts the cell-specific reference signal 
levels according to row "T2" in table 
8.3.1.7.3.2.-1. 










6 


Check: does the UE transmit a 
MeasurementReport message to report event 
A3 with the measured RSRP values for Cell 1 
and Cell 4 without Cell 2 results? 


-> 


MeasurementReport 


2 


P 


7 


SS transmits an 

RRCConnectionReconfiguration message 
including meastConfig \o remove Cell 2 from 
the blacklisted cell list. 


<- 


RRCConnectionReconfiguration 






8 


The UE transmits an 

RRCConnectionReconfigrationComplete 

message 


-> 


RRCConnectionReconfigurationC 
ompiete 






9 


Check: does the UE transmit a 
MeasurementReport message to report event 
A3 with the measured RSRP values for Cell 1 , 
Cell 2 and Cell 4? 


-> 


MeasurementReport 


1,2 


P 



8.3.1 .7.3.3 Specific message contents 

Table 8.3.1.7.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.3.1.7.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 
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Table 8.3.1.7.3.3-2: MeasConfig (Table 8.3.1.7.3.3-1) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


measConfig ::= SEQUENCE { 

measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 

measQbjectld[1] 

measQbject[1] 

} 

reportConfigToAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 

reportConfigld[1] 

reportConfig[1] 

} 

measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 
measld[1] 
measQbjectld[1] 
reportConfigld[1] 
} 
} 


1 entry 

ldMeasQbject-f1 

MeasObjectEUTRA- 

GENERIC(fl) 

1 entry 

ldReportConfig-A3 
ReportConfig-A3 

1 entry 

1 

ldMeasQbject-f1 

ldReportConfig-A3 







Table 8.3.1.7.3.3-3; MeasObjectEUTRA-GENERIC (Tab\e 8.3.1.7.3.3-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-3 MeasObjectEUTRA-GENERIC(fl) 



Information Element 



Value/remark 



Comment 



Condition 



MeasObjeGtEUTRA-GENERIC(fl) ::= SEQUENCE { 
blackCellsToAddModList ::= SEQUENCE (SIZE 
(1 ..maxCellMeas)) QF SEQUENCE { 
celllndex[1] 
physCellldRange[1] 
} 
J 



1 entry 



1 



Add Cell 2 



physicalCellldentity-Cell2 



Table 8.3.1.7.3.3-4: ReportConfig-A3 (Jab\e 8.3.1.7.3.3-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-6 ReportConfigEUTRA-A3 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfigEUTRA-A3 ::= SEQUENCE { 
maxReportCells 


3 


Report Cell 1,Cell 
2 and Cell 4 




reportlnterval 


Not present 






} 









Table 8.3.1.7.3.3-5: RRCConnectionReconfiguration (step 7, Table 8.3.1.7.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 



Table 8.3.1.7.3.3-6: MeasConfig (Table 8.3.1.7.3.3-5) 



Derivation Path: 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


measConfig ::= SEQUENCE { 
measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxObjectld)) OF SEQUENCE { 

measObjectld[1] 

measObject[1] 

} 
} 


1 entry 

IdMeasObject-fl 

IVIeasObjectEUTRA- 

GENERIC(fl) 
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Table 8.3.1.7.3.3-7: MeasObjectEUTRA-GENERIC (Jab\e 8.3.1.7.3.3-6) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-3 IVIeasObjectEUTRA-GENERIC(f1 ) 


Information Element 


Value/remark 


Comment 


Condition 


MeasObjectEUTRA-GENERIC{f1) ::= SEQUENCE { 
blackCellsToRemoveList ::= SEQUENCE (SIZE 

(1..maxCellMeas)) QF SEQUENCE { 

Celllndex[1] 
} 

} 


1 entry 
1 


Remove Cell 2 





Table 8.3.1.7.3.3-8: MeasurementReport {step 6, Table 8.3.1.7.3.2-2) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


l\/leasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 








measResultListEUTRA ::= SEQUENCE (SIZE 




Report Cell 4 




(L.tnaxCellReport)) OF SEQUENCE { 








physCellld[1] 


physicalCellldentity-Cell4 






measResult [1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 
} 
} 
} 
} 
} 
} 
} 
} 


(0..34) 
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Table 8.3.1.7.3.3-9: MeasurementReport {step 9, Table 8.3.1.7.3.2-2) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 








measResultListEUTRA ::= SEQUENCE (SIZE 




Report Cell 2 and 




(L.tnaxCellReport)) OF SEQUENCE { 




Cell 4 




physCellld[1] 


physicalCellldentity-Cell2 






measResult [1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 
1 


(0..34) 






physCellld[2] 


physicalCellldentity-Cell4 






measResult [2] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 
} 
} 
} 
} 
} 
} 
} 
} 


(0..34) 







8.3.1.8 

8.3.1.8.1 
(1) 



Measurement configuration control and reporting / Intra E-UTRAN 
measurements / Handover / IE measurement configuration present 

Test Purpose (TP) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the intra frequency measurement } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a mobilityControlInfo and a 
measConfig for removing intra frequency measurement } 

then { UE performs intra frequency handover and stops the intra frequency measurement } 



8.3.1.8.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.5.4, 
5.5.2.2, 5.5.2.6 and 5.5.4.4. 

[TS 36.331, clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

1> if the carrierFreq is included: 
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2> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 

1> reset MAC; 

1> re-establish PDCP for all RBs that are estabhshed; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HEN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> apply the value of the newUE-Identity as the C-RNTI; 

1> configure lower layers in accordance with the received radioResourceConfigCommon; 

1> configure lower layers in accordance with any additional fields, not covered in the previous, if included in the 
received mobilityControlInfo; 

1> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

2> perform the radio resource configuration procedure as specified in 5.3.10; 

1> if the keyChangelndicator received in the securityConfigHO is set to TRUE: 

2> update the KeNB key based on the fresh Kasme key taken into use with the previous successful NAS SMC 
procedure, as specified in TS 33.401 [32]; 

1> else: 

2> update the KeNB key based on the current KeNB or the NH, using the nextHopChainingCount value indicated 
in the securityConfigHO, as specified in TS 33.401 [32]; 

1> store the nextHopChainingCount value; 

1> if the securityAlgorithmConfig is included in the securityConfigHO: 

2> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kypenc key associated with the cipheringAlgorithm, as specified in TS 33.401 
[32]; 

1> else: 

2> derive the KRRCim key associated with the current integrity algorithm, as specified in TS 33.401 [32]; 

2> derive the KRRCenc key and the Kupenc key associated with the current ciphering algorithm, as specified in TS 
33.401 [32]; 

1> configure lower layers to apply the integrity protection algorithm and the KRRCim key, i.e. the integrity protection 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 
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1> configure lower layers to apply the ciphering algorithm, the Rrrcbiic key and the Kupenc key, i.e. the ciphering 
configuration shall be applied to all subsequent messages received and sent by the UE, including the message 
used to indicate the successful completion of the procedure; 

1> perform the measurement related actions as specified in 5.5.6.1; 

1> if the RRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the CQI reporting configuration, the scheduling request configuration and the sounding RS 
configuration that do not require the UE to know the SEN of the target cell, if any; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SEN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SEN of the target cell; 

NOTE 3: Whenever the UE shall setup or reconfigure a configuration in accordance with a field that is received it 
applies the new configuration, except for the cases addressed by the above statements. 

2> the procedure ends; 



[TS 36.331, clause 5.5.2.2] 

The UE shall: 

1> for each measid included in the received measIdToRemoveList that is part of the current UE configuration in 
varMeasConfig: 

2> remove the entry with the matching measid from the measIdList within the VarMeasConfig; 

2> remove the measurement reporting entry for this measid from the VarMeasReportList, if included; 



[TS 36.331, clause 5.5.2.6] 

The UE shall: 

1> for each reportConfigId included in the received reportConfigToRemoveList that is part of the current UE 
configuration in varMeasConfig: 

2> remove the entry with the matching reportConfigId from the reportConfigList within the VarMeasConfig; 

2> remove all measid associated with the reportConfigId from the measIdList within the VarMeasConfig, if any; 

2> if a measid is removed from the measIdList: 

3> remove the measurement reporting entry for this measid from the VarMeasReportList, if included; 

3> stop the periodical reporting timer or timer T321, whichever one is running, and reset the associated 
information (e.g. timeToTrigger) for this measid; 

NOTE: The UE does not consider the message as erroneous if the reportConfigToRemoveList includes any 
reportConfigId value that is not part of the current UE configuration. 

[TS 36.331, clause 5.5.4.4] 

The UE shall: 
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1> consider the entering condition for this event to be satisfied when condition A3-1, as specified below, is fulfilled; 

1> consider the leaving condition for this event to be satisfied when condition A3-2, as specified below, is fulfilled; 
Inequality A3-1 (Entering condition) 
Mn + Ofn + Ocn - Hys > Ms + Ofs + Ocs + Off 
Inequality A3-2 (Leaving condition) 
Mn + Ofn + Ocn + Hys < Ms + Ofs + Ocs + Off 
The variables in the formula are defined as follows: 

Mn is the measurement result of the neighbouring cell, not taking into account any offsets. 

Ofn is the frequency specific offset of the frequency of the neighbour cell (i.e. ojfsetFreq as defined within 
measObjectEUTRA corresponding to the frequency of the neighbour cell). 

Ocn is the cell specific offset of the neighbour cell (i.e. celllndividualOjfset as defined within measObjectEUTRA 
corresponding to the frequency of the neighbour cell), and set to zero if not configured for the neighbour cell. 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Ofs is the frequency specific offset of the serving frequency (i.e. ojfsetFreq as defined within measObjectEUTRA 
corresponding to the serving frequency). 

Ocs is the cell specific offset of the serving cell (i.e. celllndividualOjfset as defined within measObjectEUTRA 
corresponding to the serving frequency), and is set to zero if not configured for the serving cell. 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfigEUTRA for this event). 

Off is, the offset parameter for this event (i.e. a3-0jfset as defined within reportConfigEUTRA for this event). 

Mn, Ms are expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Ofn, Ocn, Ofs, Ocs, Hys, Off sit expressed in dB. 

8.3.1.8.3 Test description 

8.3.1.8.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.1 .8.3.2 Test procedure sequence 

Table 8.3.1.8.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 
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Table 8.3.1.8.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 2 


Remarl< 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-91 


The power level values are such that 
measurement re85sults for Cell 1 (M1) and 
Cell 2 {M2) satisfy exit condition for event 
A3(M2<M1). 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-79 


The power level values are such that 
measurement results for Cell 1 (Ml) and 
Cell 2 {IVI2) satisfy entry condition for event 
A3(M2>M1). 



Table 8.3.1.8.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to setup intra frequency measurement. 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1 to confirm the setup of intra 
frequency measurement. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


The SS changes Cell 1 and Cell 2 parameters 
according to the row "T1 " in table 8.3.1 .8.3.2-1 . 


- 


- 


- 


- 


4 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3. 


~> 


MeasurementReport 


- 


- 


5 


The SS transmits an 

RRCConnectionReconfiguration message with 
a measConfig on Cell 1 for removing event A3 
reporting, to order the UE to perform intra 
frequency handover to Cell 2. 


<- 


RRCConnectionReconfiguration 






6 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 2? 


-> 


RRCConnectionReconfigurationC 
omplete 


1 


P 


7 


The SS changes Cell 1 and Cell 2 parameters 
according to the row "TO" in table 8.3.1 .8.3.2-1 . 


- 


- 


- 


- 


8 


Check: Does the UE transmit a 
MeasurementReport message on Cell 2 to 
perform event A3 reporting during the next 
30s? 


~> 


MeasurementReport 


1 


F 


9 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 2? 






1 





8.3.1 .8.3.3 Specific message contents 

Table 8.3.1.8.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.3.1.8.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition MEAS 
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Table 8.3.1.8.3.3-2: MeasConfig (Table 8.3.1.8.3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldMeasObject-f1 






measObject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






1 








reportConfigloAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






1 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasQbject-f1 






reportConfigld[1] 


ldReportConfig-A3 






1 








} 









Table 8.3.1.8.3.3-3: MeasurementReport {step 4, Table 8.3.1.8.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 2 






cgi-lnfo[1] 


Not present 






measResult SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








} 








1 








1 








} 








} 








} 








} 









Table 8.3.1.8.3.3-4: RRCConnectionReconfiguration (step 5, Table 8.3.1.8.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO and MEAS 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



723 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 8.3.1.8.3.3-5: MeasConfig (Table 8.3.1.8.3.3-4) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToRemoveList SEQUENCE (SIZE (1.. 
maxQbjectId)) QF SEQUENCE { 


1 entry 






I\/Ieas0bjectld[1] 


ldMeasQbject-f1 






} 








reportConfigToRemoveList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






ReportConfigld[1] 


ldReportConfig-A3 






} 








measldJoRemoveList SEQUENCE (SIZE 
(1 ..maxMeasId)) QF SEQUENCE { 


1 entry 






Measld[1] 


1 






1 








} 









Table 8.3.1.8.3.3-6: MobilityControllnfo (Table 8.3.1.8.3.3-4) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 2 






carrierFreq 


Not present 






} 









8.3.1.9 

8.3.1.9.1 

(1) 



Measurement configuration control and reporting / Intra E-UTRAN 
measurements / Intra-frequency handover / IE measurement configuration 
not present 

Test Purpose (TP) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the intra frequency measurement } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a mobilityControlInfo and not 
including a measConfig } 

then { UE performs intra frequency handover and continues the intra frequency measurement } 
} 

(2) 

with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter frequency measurement } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a mobilityControlInfo and not 
including a measConfig } 

then { UE performs intra frequency handover and continues the inter frequency measurement after 
the activation of the measurement gaps } 



8.3.1.9.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.5.4.4 and 
5.5.6.1. 

[TS 36.331, clause 5.5.4.4] 

The UE shall: 

1> consider the entering condition for this event to be satisfied when condition A3-1, as specified below, is fulfilled; 
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1> consider the leaving condition for this event to be satisfied when condition A3-2, as specified below, is fulfilled; 

Inequality A3-1 (Entering condition) 

Mn + Ofn + Ocn - Hys > Ms + Ofs + Ocs + Ojf 

Inequality A3-2 (Leaving condition) 

Mn + Ofn + Ocn + Hys < Ms + Ofs + Ocs + Ojf 

The variables in the formula are defined as follows: 

Mn is the measurement result of the neighbouring cell, not taking into account any offsets. 

Ofn is the frequency specific offset of the frequency of the neighbour cell (i.e. offsetFreq as defined within 
measObjectEUTRA corresponding to the frequency of the neighbour cell). 

Ocn is the cell specific offset of the neighbour cell (i.e. celllndividualOjfset as defined within measObjectEUTRA 
corresponding to the frequency of the neighbour cell), and set to zero if not configured for the neighbour cell. 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Ofs is the frequency specific offset of the serving frequency (i.e. ojfsetFreq as defined within measObjectEUTRA 
corresponding to the serving frequency). 

Ocs is the cell specific offset of the serving cell (i.e. celllndividualOffset as defined within measObjectEUTRA 
corresponding to the serving frequency), and is set to zero if not configured for the serving cell. 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfigEUTRA for this event). 

Oj5^is the offset parameter for this event (i.e. a3-0ffset as defined within reportConfigEUTRA for this event). 

Mn, Ms are expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Ofn, Ocn, Ofs, Ocs, Hys, Offctre expressed in dB. 

[TS 36.331, clause 5.5.6.1] 

E-UTRAN applies the handover procedure as follows: 

when performing the handover procedure, as specified in 5.3.5.4, ensure that a measObjectId corresponding to 
the handover target carrier frequency is configured as a result of the procedures described in this sub-clause and 
in 5.3.5.4; 



The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the triggerType is set to 'periodical: 

3> remove this measid from the measIdList within VarMeasConfig: 

l> if the procedure was triggered due to inter-frequency handover or successful re-establishment to an inter- 
frequency cell, update the measid values in the measIdList within VarMeasConfig as follows: 

2> if a measObjectId value corresponding to the target carrier frequency exists in the measObjectList within 
VarMeasConfig: 

3> for each measid value in the measIdList: 

4> if the measid value is linked to the measObjectId value corresponding to the source carrier frequency: 

5> link this measid value to the measObjectId value corresponding to the target carrier frequency; 

4> else if the measid value is linked to the measObjectId value corresponding to the target carrier 
frequency: 
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5> link this measid value to the measObjectId value corresponding to the source carrier frequency; 

2> else: 

3> remove all measid values that are linked to the measObjectId value corresponding to the source carrier 
frequency; 

1> remove all measurement reporting entries within VarMeasReportList; 

1> reset the periodical reporting timer or timer T321, whichever one is running, as well as associated information 
(e.g. timeToTrigger) for all measid; 

1> release the measurement gaps, if activated; 

NOTE: If the UE requires measurement gaps to perform inter-frequency or inter-RAT measurements, the UE 

resumes the inter-frequency and inter-RAT measurements after the E-UTRAN has setup the measurement 
gaps. 

8.3.1.9.3 Test description 

8.3.1.9.3.1 Pre-test conditions 
System Simulator: 

- Celll,Cell2andCell3. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.1 .9.3.2 Test procedure sequence 

Table 8.3.1.9.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl", "X2","T3" and "T4" are to be applied subsequently. The exact instants on which these values 
shall be applied are described in the texts in this clause. 
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Table 8.3.1.9.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 2 


Cell 3 


Remark 


TO 


Cell-specific 
RS EPRE 


dBm/15k 
Hz 


-85 


"Off" 


-97 


The power level values are such that 
measurement results for Cell 1 (Ml) and Cell 3 
(M3) do not satisfy entry condition for event A3 
(M3< Ml). 
(N0TE1) 


T1 


Cell-specific 
RS EPRE 


dBm/15k 
Hz 


-85 


"Off" 


-73 


The power level values are such that 
measurement results for Cell 1 (Ml) and Cell 3 
(M3) satisfy entry condition for event A3 (M3 > 
Ml). 
(N0TE1) 


T2 


Cell-specific 
RS EPRE 


dBm/15k 
Hz 


-85 


-79 


"Off" 


The power level values are such that 
measurement results for Cell 1 (Ml) and Cell 2 
(M2) satisfy entry condition for event A3 (M2 > 
Ml). 
(N0TE1) 


T3 


Cell-specific 
RS EPRE 


dBm/15k 
Hz 


"Off" 


-85 


-73 


The power level values are such that 
measurement results for Cell 2 (M2) and Cell 3 
(M3) satisfy entry condition for event A3 (M3 > 
M2). 
(N0TE1) 


T4 


Cell-specific 
RS EPRE 


dBm/15k 
Hz 


-79 


-85 


"Off" 


The power level values are such that 
measurement results for Cell 1 (Ml) and Cell 2 
(M2) satisfy entry condition for event A3 (Ml > 
M2). 
(N0TE1) 


N0TE1: Power level "Off" is defined in TS36.508 Table 6.2.2.1-1. 
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Table 8.3.1.9.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup intra and inter frequency measurements 
on Cell 1. 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of intra and inter 
frequency measurements on Cell 1 . 


-> 


RRCConnectionReconfigurationC 
ompiete 








EXCEPTION: Steps 3a1 to 3a2 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that takes place if a capability is 
supported. 










3a1 


IF pc_FeatrGrp_25 THEN the SS changes Cell 
1 , Cell 2 and Cell 3 parameters according to 
the row "T1 " in table 8.3.1 .9.3.2-1 . 










3a2 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 for Cell 
3. 


~> 


MeasurementReport 






4 


The SS changes Cell 1 , Cell 2 and Cell 3 
parameters according to the row "T2" in table 
8.3.1.9.3.2-1. 










5 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 for Cell 
2. 


-> 


MeasurementReport 






6 


The SS transmits an 

RRCConnectionReconfiguration message 
without a measConfig message on Cell 1 , to 
order the UE to perform intra frequency 
handover to Cell 2. 


<- 


RRCConnectionReconfiguration 






7 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 2? 


-> 


RRCConnectionReconfigurationC 
ompiete 


1 


P 




EXCEPTION: Steps 8a1 to 8a4 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that takes place if a capability is 
supported. 










8a1 


IF pc_FeatrGrp_25 THEN the SS transmits an 
RRCConnectionReconfiguration message to 
activate the measurement gaps on Cell 2. 


<— 


RRCConnectionReconfiguration 






8a2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the activation of the 
measurement gaps on Cell 2. 


~> 


RRCConnectionReconfigurationC 
ompiete 






8a3 


The SS changes Cell 1 , Cell 2 and Cell 3 
parameters according to the row "T3" in table 
8.3.1.9.3.2-1. 










8a4 


Check: Does the UE transmit a 
MeasurementReport message on Cell 2 to 
report event A3 for Cell 3? 


-> 


MeasurementReport 


2 


P 


9 


The SS changes Cell 1 , Cell 2 and Cell 3 
parameters according to the row "T4" in table 
8.3.1.9.3.2-1. 










10 


Check: Does the UE transmit a 
MeasurementReport message on Cell 2 to 
report event A3 for Cell 1 ? 


-> 


MeasurementReport 


1 


P 


11 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 2? 






1,2 
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8.3.1 .9.3.3 Specific message contents 

Table 8.3.1.9.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.3.1.9.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 


Table 8.3.1.9.3.3-2: MeasConfig (Table 8.3.1.9.3.3-1) 


Derivation Path: 36.508, Table 4.6.6-1, condition INTER-FREQ 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry or 2 entries 


number of entry 
depending on the 
UE capability 




measObjectld[1] 


IdlVleasQbject-fl 






measObject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






measObjectld[2] 


ldMeasQbject-f2 




pc FeatrGr 
p 25 


measObject[2] 


MeasObjectEUTRA- 
GENERIC(f2) 




pc FeatrGr 
p 25 


} 








reportConfigToAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry or 2 entries 


number of entry 
depending on the 
UE capability 




measld[1] 


1 


Intra frequency 




measQbjectld[1] 


IdlVleasQbject-fl 






reportConfigld[1] 


ldReportConfig-A3 






measld[2] 


2 


Inter frequency 


pc FeatrGr 
p 25 


measObjectld[2] 


ldMeasQbject-f2 




pc FeatrGr 
p 25 


reportConfigld[2] 


ldReportConfig-A3 




pc FeatrGr 
p 25 


} 








} 
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Table 8.3.1.9.3.3-3: MeasurementReport {step 3a2 and 8a4, Table 8.3.1.9.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


2 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 3 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 








Table 8.3.1.9.3.3-4: MeasurementReport (step 5, Table 8.3.1.9.3.2-2) 


Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1.. maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 2 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








} 








} 








1 








1 








} 








} 








} 
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Table 8.3.1.9.3.3-5: RRCConnectionReconfiguration (step 6, Table 8.3.1.9.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.3.1.9.3.3-6: MobilityControllnfo (Table 8.1.3.9.3.3-5) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 2 






carrierFreq 


Not present 






} 









Table 8.3.1.9.3.3-7: RRCConnectionReconfiguration (step 8a1, Table 8.3.1.9.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition MEAS 



Table 8.3.1.9.3.3-8: MeasConfig (Table 8.1.3.9.3.3-7) 

Derivation Path: 36.508, Table 4.6.6-1, condition INTER-FREQ 



Table 8.3.1.9.3.3-9: IVIeasurementReport {step 10, Table 8.3.1.9.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








IVIeasResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(L.tnaxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
CelM 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








} 








} 








1 








1 








} 








} 








} 
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8.3.1 .10 Measurement configuration control and reporting / Intra E-UTRAN 

measurements / Inter-frequency handover / IE measurement configuration 
not present 

8.3.1.10.1 Test Purpose (TP) 
(1) 

with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the intra frequency and inter frequency measurements } 
ensure that { 

when { UE receives an RRCConnectionReconfiguration message including a mobilityControlInfo 
indicating a different E-UTRA frequency and not including a measConfig } 

then { UE performs inter frequency handover, continues the intra frequency measurement and 
continues inter frequency measurement after the activation of the measurement gaps } 
} 

8.3.1.10.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.5.6.1. 

[TS 36.331, clause 5.5.6.1] 

E-UTRAN applies the handover procedure as follows: 

when performing the handover procedure, as specified in 5.3.5.4, ensure that a measObjectId corresponding to 
the handover target carrier frequency is configured as a result of the procedures described in this subclause and 
in 5.3.5.4; 



The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the triggerType is set to 'periodical: 

3> remove this measid from the measIdList within VarMeasConfig: 

1> if the procedure was triggered due to inter-frequency handover or successful re-establishment to an inter- 
frequency cell, update the measid values in the measIdList within VarMeasConfig as follows: 

2> if a measObjectId value corresponding to the target carrier frequency exists in the measObjectList within 
VarMeasConfig 

3> for each measid value in the measIdList: 

4> if the measid value is linked to the measObjectId value corresponding to the source carrier frequency: 

5> link this measid value to the measObjectId value corresponding to the target carrierfrequency; 

4> else if the measid value is linked to the measObjectId value corresponding to the target carrier 
frequency: 

5> link this measid value to the measObjectId value corresponding to the source carrier frequency; 

2> else: 

3> remove all measid values that are linked to the measObjectId value corresponding to the source carrier 
frequency; 

1> remove all measurement reporting entries within VarMeasReportList; 

1> reset the periodical reporting timer or timer T321, whichever one is running, as well as associated information 
(e.g. timeToTrigger) for all measid; 

1> release the measurement gaps, if activated; 
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NOTE: If the UE requires measurement gaps to perform inter-frequency or inter-RAT measurements, the UE 

resumes the inter-frequency and inter-RAT measurements after the E-UTRAN has setup the measurement 
gaps. 



Test description 
Pre-test conditions 



8.3.1.10.3 
8.3.1.10.3.1 
System Simulator: 

- Cell 1, Cell 2, Cell 3 and Cell 12. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 



8.3.1.10.3.2 



Test procedure sequence 



Table 8.3.1.10.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl", "T2","T3", and "T4" are to be applied subsequently. The exact instants on which these values 
shall be applied are described in the texts in this clause. 

Table 8.3.1.10.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 2 


Cell 3 


Cell 12 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


-91 


-97 


"Off" 


The power level values are such 
that measurement results for Cell 1 
(M1) and Cell 2 (M2) do not satisfy 
entry condition for event A3 (M2 < 
Ml). 
(N0TE1). 


Tl 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


-79 


-97 


"Off" 


The power level values are such 
that measurement results for Cell 1 
(M1) and Cell 2 (I\/I2) satisfy entry 
condition for event A3 (M2 > Ml ). 
(N0TE1). 


T2 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


"Off" 


-73 


"Off" 


The power level values are such 
that measurement results for Cell 1 
(M1) and Cell 3 (M3) satisfy entry 
condition for event A3 (M3 > Ml ). 
(N0TE1). 


T3 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-97 


"Off" 


-85 


-79 


The power level values are such 
that measurement results for Cell 3 
(M3) and Cell 12 (Ml 2) satisfy entry 
condition for event A3 (Ml 2 > M3). 
(N0TE1). 


T4 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-73 


"Off" 


-85 


"Off" 


The power level values are such 
that measurement results for Cell 1 
(Ml) and Cell 3 (M3) satisfy entry 
condition for event A3 (Ml > M3). 
(N0TE1). 


N0TE1: Power level "Off" is defined in TS36.508 Table 6.2.2.1-1. 
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Table 8.3.1.10.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup intra and inter frequency measurements 
on Cell 1. 


<~ 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of intra and inter 
frequency measurements on Cell 1 . 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


The SS changes Cell 1 , Cell 2 and Cell 3 
parameters according to the row "T1" in table 
8.3.1.10.3.2-1. 










4 


The UE transmits a MeasurementReport 
message on Cell 1 to perform event A3 intra 
frequency reporting for Cell 2 during the next 
30 s. 




MeasurementReport 






5 


The SS changes Cell 1 and Cell 3 parameters, 
sets the cell-specific reference signal levels 
and switches Cell 2 off according to row "T2" in 
table 8.3.1.10.3.2-1. 










6 


The UE transmits a MeasurementReport 
message on Cell 1 to perform event A3 inter 
frequency reporting for Cell 3 during the next 
30 s. 


-> 


MeasurementReport 






7 


The SS transmits an 

RRCConnectionReconfiguration message 
without a measurementConfig, to order the UE 
to perform inter frequency handover to Cell 3. 


<- 


RRCConnectionReconfiguration 






8 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message to Cell 3? 


-> 


RRCConnectionReconfigurationC 
omplete 


1 


P 


9 


The SS transmits an 

RRCConnectionReconfiguration message to 
activate the measurement gaps on Cell 3. 


<- 


RRCConnectionReconfiguration 






10 


The UE transmits an 

RRCConnectionReconfigurationCompiete 
message to confirm the activation of the 
measurement gaps on Cell 3. 


-> 


RRCConnectionReconfigurationC 
omplete 






11 


The SS changes Cell 1 and Cell 3 
parameters, sets the cell-specific reference 
signal levels and switches Cell 12 on 
according to the row "T3" in table 8.3.1.10.3.2- 
1. 










12 


Check: Does the UE transmit a 
MeasurementReport messaQG on Cell 3 to 
perform event A3 intra frequency reporting for 
Cell 12 during the next 30 s? 


-> 


MeasurementReport 


1 


P 


13 


The SS changes Cell 1 and Cell 3 parameters, 
sets the cell-specific reference signal levels 
and switches Cell 12 off according to row "T4" 
in table 8.3.1.10.3.2-1. 










14 


Check: Does the UE transmit a 
MeasurementReport message on Cell 3 to 
perform event A3 inter frequency reporting for 
Cell 1 during the next 30 s? 


-> 


MeasurementReport 


1 


P 


15 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 3? 






1 
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8.3.1 .1 0.3.3 Specific message contents 

Table 8.3.1.10.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.3.1.10.3.2-1) 

Derivation Path: 36.508, Table 4.6.1-8, condition MEAS 

Table 8.3.1.10.3.3-2: /WeasConf/g (Table 8.3.1.10.3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 , condition INTER-FREQ 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1..maxQbiectld)) OF SEQUENCE { 


2 entries 






measObjectld[1] 


IdlVleasQbject-fl 






measObject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






measObjectld[2] 


ldMeasQbject-f2 






measObject[2] 


IVIeasObjectEUTRA- 
GENERIC(f2) 






1 








reportConfigToAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






1 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


2 entries 






measld[1] 


1 






measQbjectld[1] 


IdlVleasObject-fl 






reportConfigld[1] 


ldReportConfig-A3 






measld[2] 


2 






measObjectld[2] 


ldMeasQbject-f2 






reportConfigld[2] 


ldReportConfig-A3 






} 








} 









Table 8.3.1.10.3.3-3: ReportConfig-kZ (Table 8.3.1.10.3.3-2) 



Derivation path: 36.508, Table 4.6.6-6 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfigEUTRA-A3 ::= SEQUENCE { 








reportQuantity 


sameAsTriggerQuantity 






reportAmount 


r1 






} 
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Table 8.3.1.10.3.3-4: MeasurementReport {step 4, Table 8.3.1.10.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 2 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 








Table 8.3.1.10.3.3-5: MeasurementReport (step 6, Table 8.3.1.10.3.2-2) 


Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


2 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1.. maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 3 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








} 








} 








1 








1 








} 








} 








} 
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Table 8.3.1.10.3.3-6: RRCConnectionReconfiguration (step 7, Table 8.3.1.10.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.3.1.10.3.3-7: MobilityControllnfo (Table 8.3.1.10.3.3-6) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 3 






carrierFreq 


Not present 






} 









Table 8.3.1.10.3.3-8: RRCConnectionReconfiguration (step 9, Table 8.3.1.10.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition MEAS 



Table 8.3.1.10.3.3-9: MeasConlig (Table 8.3.1.10.3.3-8) 

Derivation Path: 36.508, Table 4.6.6-1, condition INTER-FREQ 



Table 8.3.1.10.3.3-10: IVIeasurementReport (step 12, Table 8.3.1.10.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(L.tnaxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 12 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








} 








} 








1 








1 








} 








} 








} 
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Table 8.3.1.10.3.3-11 : MeasurementReport {step 14, Table 8.3.1.10.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE{ 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


2 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








measResultNeighCells CHQICE { 








measResultLlstEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) QF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
CelH 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








1 








1 








} 








} 








} 








1 








} 









8.3.1 .1 1 Measurement configuration control and reporting / Intra E-UTRAN 

measurements / Continuation of the measurements after RRC connection re- 
establishment 



8.3.1.11.1 



(1) 



Test Purpose (TP) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the intra frequency measurement and after receiving an RRCConnectionReconfiguration 
message including a mobilityControlInfo indicating a different E-UTRA cell having attempted intra 
frequency handover} 
ensure that { 

when { UE detects handover failure and the intra frequency cell is selectable } 

then {UE performs RRC Connection Re-establishment, continues the intra frequency measurement } 
} 

(2) 

with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter frequency measurement and after receiving an RRCConnectionReconfiguration 
message including a mobilityControlInfo indicating a different E-UTRA cell having attempted intra 
frequency handover} 
ensure that { 

when { UE detects handover failure and the intra frequency cell is selectable } 

then {UE performs RRC Connection Re-establishment, continues the inter frequency measurement 
after the activation of the measurement gaps } 



8.3.1.11.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.5.4, 
5.3.5.6, 5.3.7.2 and 5.5.6.1. 
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[TS36.331,clause 5.3.5.4] 

If the RRCConnectionReconfiguration message includes the mobilityControlInfo and the UE is able to comply with the 
configuration included in this message, the UE shall: 

1> stop timer T310, if running; 

1> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

1> if the carrierFreq is included: 

2> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

1> else: 

2> consider the target cell to be one on the current frequency with a physical cell identity indicated by the 
targetPhysCellld; 

1> start synchronising to the DL of the target cell; 

NOTE 1: The UE should perform the handover as soon as possible following the reception of the RRC message 

triggering the handover, which could be before confirming successful reception (HARQ and ARQ) of this 

message. 

1> reset MAC; 

1> re-establish PDCP for all RBs that are established; 

NOTE 2: The handling of the radio bearers after the successful completion of the PDCP re-establishment, e.g. the 
re-transmission of unacknowledged PDCP SDUs (as well as the associated status reporting), the handling 
of the SN and the HFN, is specified in TS 36.323 [8]. 

1> re-establish RLC for all RBs that are established; 

1> apply the value of the newUE-Identity as the C-RNTI; 

1> configure lower layers in accordance with the received radioResourceConfigCommon; 

1> if the RRCConnectionReconfiguration message includes the radioResourceConfigDedicated: 

2> perform the radio resource configuration procedure as specified in 5.3.10; 



1> if ihQ RRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
1> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission; 
1> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the configuration that do not require the UE to know the SEN of the target cell; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SEN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SEN of the target cell; 

2> the procedure ends; 

NOTE 3: The UE is not required to determine the SEN of the target cell by acquiring system information from that 
cell before performing RACH access in the target cell. 

[TS36.331,clause 5.3.5.6] 
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The UE shall: 

1> if T304 expires (handover failure): 

NOTE: Following T304 expiry any dedicated preamble, if provided within the rach-ConfigDedicated, is not 
available for use by the UE anymore. 

2> revert back to the configuration used in the source cell, excluding the configuration configured by the 
physicalConfigDedicated, the mac-MainConfig and the sps-Config; 

2> initiate the connection re -establishment procedure as specified in 5.3.7, upon which the RRC connection 
reconfiguration procedure ends; 

[TS36.331,clause 5.3.7.2] 

The UE shall only initiate the procedure when AS security has been activated. The UE initiates the procedure when one 
of the following conditions is met: 

1> upon detecting radio link failure, in accordance with 5.3.1 1; or 

1> upon handover failure, in accordance with 5.3.5.6; or 

1> upon mobility from E-UTRA failure, in accordance with 5.4.3.5; or 

1> upon integrity check failure indication from lower layers; or 

1> upon an RRC connection reconfiguration failure, in accordance with 5.3.5.5; 
Upon initiation of the procedure, the UE shall: 

1> stop timer T310, if running; 

1> start timer T311; 

1> suspend all RBs except SRBO; 

1> reset MAC; 

1> apply the default physical channel configuration as specified in 9.2.4; 

1> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

1> apply the default MAC main configuration as specified in 9.2.2; 

1> perform cell selection in accordance with the cell selection process as specified in TS 36.304 [4]; 

[TS36.331,clause 5.5.6.1] 

E-UTRAN applies the re-establishment procedure as follows: 

when performing the connection re-establishment procedure, as specified in 5.3.7, ensure that a measObjectId 
corresponding to the target carrier frequency is configured as a result of the procedure described in this sub- 
clause and the subsequent connection reconfiguration procedure immediately following the re-establishment 
procedure; 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the triggerType is set to 'periodical' : 

3> remove this measid from the measIdList within VarMeasConfig: 

1> if the procedure was triggered due to inter-frequency handover or successful re-establishment to an inter- 
frequency cell, update the measid values in the measIdList within VarMeasConfig as follows: 

2> if a measObjectId value corresponding to the target carrier frequency exists in the measObjectList within 
VarMeasConfig: 
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3> for each measid value in the measIdList: 

4> if the measid value is linked to the measObjectId value corresponding to the source carrier frequency: 

5> link this measid value to the measObjectId value corresponding to the target carrier frequency; 

4> else if the measid value is linked to the measObjectId value corresponding to the target carrier 
frequency: 

5> link this measid value to the measObjectId value corresponding to the source carrier frequency; 

2> else: 

3> remove all measid values that are linked to the measObjectId value corresponding to the source carrier 
frequency; 

1> remove all measurement reporting entries within VarMeasReportList; 

1> reset the periodical reporting timer or timer T321, whichever one is running, as well as associated information 
(e.g. timeToTrigger) for all measid; 

1> release the measurement gaps, if activated; 

NOTE: If the UE requires measurement gaps to perform inter-frequency or inter-RAT measurements, the UE 

resumes the inter-frequency and inter-RAT measurements after the E-UTRAN has setup the measurement 
gaps. 

8.3.1.11.3 Test description 

8.3.1.11.3.1 Pre-test conditions 
System Simulator: 

- Cell 1, Cell 2 and Cell 3. 
UE: 

None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.1 .1 1 .3.2 Test procedure sequence 

Table 8.3. 1 . 11 .3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while columns marked 
"Tl", "T2","T3", "T4", "T5" are to be applied subsequently. The exact instants on which these values shall be applied 
are described in the texts in this clause. 
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Table 8.3.1.11.3.2-1 : Time instances of cell power levels 





Parameter 


Unit 


CelM 


Cell 2 


Cell 3 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


"off" 


"off" 




T1 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


"off" 


-73 


The power level values are such 
that measurement results for Cell 1 
(IVII) and Cell 3 {M3) satisfy entry 
condition for event A3 {M3 - Hys > 
Ml). 


T2 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-85 


-79 


"off" 


The power level values are such 
that measurement results for Cell 1 
(IVII) and Cell 2 (M2) satisfy entry 
condition for event A3 (M2 - Hys > 
Ml). 


T3 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


"off" 


-79 


"off" 


The power level values are 
assigned values to satisfy 
SrxlevCell 1 < and SrxlevCell 3 < 
such that selecting Cell 2 is 
guaranteed 


T4 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


-79 


-85 


"off" 


The power level values are such 
that measurement results for Cell 2 
(M2) and Cell 1 (Ml) satisfy entry 
condition for event A3 (Ml - Hys > 
M2). 


T5 


Cell-specific RS 
EPRE 


dBm/15 
kHz 


"off" 


-85 


-73 


The power level values are such 
that measurement results for Cell 2 
(M2) and Cell 3 (M3) satisfy entry 
condition for event A3 (M3 - Hys > 
M2). 
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Table 8.3.1.11.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup intra and inter frequency measurements 
on Cell 1. 


<~ 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of intra and inter 
frequency measurements on Cell 1 . 


-> 


RRCConnectionReconfigurationC 
omplete 








EXCEPTION: Steps 3a1 to 3a2 describe 
behaviour that depends on the UE capability; 
the "lower case letter" Identifies a step 
sequence that takes place If a capability is 
supported. 










3a1 


IF pc_FeatrGrp_25 THEN the SS changes Cell 
1 , Cell 2 and Cell 3 power levels according to 
the row "T1 " in Table 8.3.1 .1 1 .3.2-1 . 










3a2 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 for Cell 
3. 


-> 


MeasurementReport 






4 


The SS changes Cell 2 and Cell 3 power levels 
according to the row "T2" in Table 
8.3.1.11.3.2-1. 










5 


The UE transmits a MeasurementReport 
message on Cell 1 to perform event A3 intra 
frequency reporting for Cell 2. 


-> 


MeasurementReport 






6 


The SS transmits an 

RRCConnectionReconfiguration message 
including a mobility Control Info, to order the UE 
to perform intra frequency handover to Cell 2. 


<- 


RRCConnectionReconfiguration 








EXCEPTION: In parallel to the events 
described in step 7 the steps specified in Table 
8.3.1 .1 1 .3.2-3 should take place. 










7 


The SS changes Cell 1 and Cell 3 power levels 
according to the row "T3" in Table 
8.3.1.11.3.2-1. 










8 


Check: Does the UE transmit an 
RRCConnectionReestablishmentRequest 
message on Cell 2? 


~> 


RRCConnectionReestabiishmentR 
equest 


1,2 


P 


9 


The SS transmits an 

RRCConnectionReestablishment message to 
resume SRB1 operation and re-activate 
security on Cell 2. 


<— 


RRCConnectionReestablishment 






10 


The UE transmits an 

RRCConnectionReestablishmentComplete 
message on Cell 2. 


-> 


RRCConnectionReestablishmentC 
omplete 






11 


The SS transmits an 

RRCConnectionReconfiguration message to 
resume existing radio bearer on Cell 2. 


<— 


RRCConnectionReconfiguration 






12 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 2. 


-> 


RRCConnectionReconfigurationC 
omplete 






13 


The SS changes Cell 1 , Cell 2 and Cell 3 
power levels according to the row "T4" in Table 
8.3.1.11.3.2-1. 










14 


Check: Does the UE transmit a 
MeasurementReport message on Cell 2 to 
perform event A3 Intra frequency reporting for 
Cell 1? 


-> 


MeasurementReport 


1 


P 




EXCEPTION: Steps 15a1 to 15a4 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that takes place if a capability is 
supported. 










15a1 


IFpc FeatrGrp 25 THEN the SS transmits an 


<— 


RRCConnectionReconfiguration 


- 


- 
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RRCConnectionReconfiguration message to 
activate the measurement gaps on Cell 2. 










15a2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the activation of the 
measurement gaps on Cell 2. 


-> 


RRCConnectionReconfigurationC 
omplete 






15a3 


The SS changes Cell 1 , Cell 2 and Cell 3 
power levels according to the row "T5" in Table 
8.3.1.11.3.2-1. 










15a4 


Check: Does the UE transmit a 
MeasurementReport message on Cell 2 to 
report event A3 for Cell 3? 


-> 


MeasurementReport 


2 


P 


16 


Check: Does the test result of CALL generic 
test procedure in 36.508 subclause 6.2,4.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 2? 






1,2 





Table 8.3.1.11.3.2-3: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


- 


EXCEPTION: The steps 1 and 2 below are 
repeated for the duration of T304. 


- 


- 


- 


- 


1 


The UE attempts to perform the intra 
frequency handover using IVIAC Random 
Access Preamble on Cell 2. 










2 


The SS does not respond. 


- 


- 


- 


- 



8.3.1 .1 1 .3.3 Specific message contents 

Table 8.3.1 .1 1 .3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.3.1 .1 1 .3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 
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Table 8.3.1 .1 1 .3.3-2: MeasConfig (step 1 , Table 8.3.1 .1 1 .3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1, condition INTER-FREQ 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


2 entries 






measObjectld[1] 


ldlVleasQbject-f1 






measObject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






measObjectld[2] 


ldMeasQbject-f2 




pc FeatrGr 
p 25 


measObject[2] 


IVIeasObjectEUTRA- 
GENERIC(f2) 




pc FeatrGr 
p 25 


} 








reportConfigToAddModUst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


2 entries 






measld[1] 


1 






measQbjectld[1] 


ldlVleasObject-f1 






reportConfigld[1] 


ldReportConfig-A3 






measld[2] 


2 




pc FeatrGr 
p 25 


measQbjectld[2] 


ldMeasQbject-f2 




pc FeatrGr 
p 25 


reportConfigld[2] 


ldReportConfJg-A3 




pc FeatrGr 
p 25 


} 








1 








Table 8.3.1.11.3.3-3: ReportConfig-A3 (step 1, Table 8.3.1.11.3.2-2) 


Derivation path: 36.508 clause 4.6.6 Table 4.6.6-6 ReportConfigEUTRA-A3 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfigEUTRA-A3 ::= SEQUENCE { 








reportQuantity 


sameAsTriggerQuantity 






reportAmount 


r1 






} 
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Table 8.3.1 .1 1 .3.3-4: MeasurementReport (step 3a2,Table 8.3.1 .1 1 .3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


2 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 3 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 








Table 8.3.1 .1 1 .3.3-5: MeasurementReport (step 5, Table 8.3.1 .1 1 .3.2-2) 


Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1.. maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 2 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








} 








} 








1 








1 








} 








} 








} 
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Table 8.3.1 .1 1 .3.3-6: RRCConnectionReconfiguration (step 6,Table 8.3.1 .1 1 .3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 



Table 8.3.1 .1 1 .3.3-7: MobilityControllnfo (step 6, Table 8.1 .3.1 1 .3.2-2) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 2 






carrierFreq 


Not present 






} 









Table 8.3.1 .1 1 .3.3-8: RRCConnectionReestablishmentRequest (step 8, Table 8.3.1 .1 1 .3.2-2) 



Derivation Path: 36.508, Table 4.6.1-13 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablishmentRequest ::= 
SEQUENCE! 








criticalExtensions CHQICE { 








rrcConnectionReestablishmentRequest-r8 
SEQUENCE! 








ue-ldentity SEQUENCE { 








c-RNTI 


the value of the C-RNTI 
oftheUE 






physCellld 


PhysicalCellldentity of 
Cell 2 






shortMAC-l 


The same value as the 
16 least significant bits of 
the XMAC-I value 
calculated by SS. 






} 








reestablishmentCause 


handoverFailure 






1 








} 








} 









Table 8.3.1 .1 1 .3.3-9: RRCConnectionReestablishment (step 9, Table 8.3.1 .1 1 .3.2-2) 



Derivation Path: 36.508, Table 4.6.1-10 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablishment ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICEj 








rrcConnectionReestablishment-r8 SEQUENCE { 








nextHopChainingCount 









1 








1 








} 








} 
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Table 8.3.1 .1 1 .3.3-10: RRCConnectionReconfiguration (step 1 1 , Table 8.3.1 .1 1 .3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-HO 






1 








} 








} 








} 









Table 8.3.1 .1 1 .3.3-1 1 : MeasurementReport (step 1 4,Table 8.3.1 .1 1 .3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1..nnaxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
CelH 






cqi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








rsrpResult 


{0..97) 






rsrqResult 


(0..34) 






1 








1 








} 








} 








} 








1 








} 








} 









Table 8.3.1.11.3.3-12: RRCConnectionReconfiguration (step 15a1, Table 8.3.1.11.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8 condition MEAS 

Table 8.3.1.11.3.3-13: IVIeasConfig {step 15a1, Table 8.3.1.11.3.2-2) 

Derivation Path: 36.508, Table 4.6.6-1 , condition INTER-FREQ 
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Table 8.3.1.11.3.3-14: MeasurementReport {step 15a4, Table 8.3.1.11.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


2 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cells 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


{0..34) 






} 








1 








1 








} 








} 








} 








1 








} 









8.3.2 Inter-RAT measurements 

8.3.2.1 Measurement configuration control and reporting / Inter-RAT measurements / 

Event B2 / Measurement of GERAN cells 



8.3.2.1.1 

(1) 



Test Purpose (TP) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for GERAN cell and not detected entering condition for the event 
B2 is met } 
ensure that { 

when { UE detects entering condition for the event B2 is not met } 
then { UE does not transmit any MeasurementReport } 
} 

(2) 

with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for GERAN cell and not detected entering condition for the event 
B2 is met } 
ensure that { 

when { UE detects entering condition for the event B2 is met } 
then { UE transmits a MeasurementReport } 
} 

(3) 

with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for GERAN cell and detected entering condition for the event B2 
is met } 
ensure that { 

when { UE detects leaving condition for the event B2 is met } 
then { UE does not transmit any MeasurementReport } 
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8.3.2.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.5.4.1, 
5.5.4.8 and 5.5.5. 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 



2> else: 



3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasConfig for this measid; 

2> if the triggerType is set to 'evenf and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfig, while the VarMeasReportList does not include an measurement 
reporting entry for this measid (a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during timeToTrigger defined within the VarMeasConfig for 
this event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 

4> remove the measurement reporting entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 
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2> if the purpose is included and set to 'reportStrongestCells' or to 'reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1: If ihe purpose is set to 'reportStrongestCells', the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON', the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodicaF while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

NOTE 3: If the UE is configured with DRX, the UE may delay the measurement reporting for event triggered and 
periodical triggered measurements until the Active Time, which is defined in TS 36.321 [6]. 

[TS 36.331, clause 5.5.4.8] 

The UE shall: 

1> for UTRA and CDMA2000, only trigger the event for cells included in the corresponding measurement object; 

1> consider the entering condition for this event to be satisfied when both condition B2-1 and condition B2-2, as 
specified below, are fulfilled; 

1> consider the leaving condition for this event to be satisfied when condition B2-3 or condition B2-4, i.e. at least 
one of the two, as specified below, is fulfilled; 

Inequality B2-1 (Entering condition 1) 

Ms+ HysKThresIA 

Inequality B2-2 (Entering condition 2) 

Mn + Ofn - Hys > Thresh! 

Inequality B2-3 (Leaving condition 1) 

Ms-Hys>ThresH 

Inequality B2-4 (Leaving condition 2) 

Mn + Ofn + Hys < Thresh! 

The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Mn is the measurement result of the inter-RAT neighbour cell, not taking into account any offsets. 

Ofn is the frequency specific offset of the frequency of the inter-RAT neighbour cell (i.e. ojfsetFreq as defined 
within the measObject corresponding to the frequency of the inter-RAT neighbour cell). 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfiglnterRAT for this event). 
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Threshl is the threshold parameter for this event (i.e. h2-Thresholdl as defined within reportConfiglnterRAT for 
this event). 

Threshl is the threshold parameter for this event (i.e. b2-Threshold2 as defined within reportConfiglnterRAT for 
this event). 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Mn is expressed in dBm or dB, depending on the measurement quantity of the inter-RAT neighbour cell. 

Ofn, Hys are expressed in dB. 

Threshl is expressed in the same unit as Ms. 

Threshl is expressed in the same unit as Mn. 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultsNeighCells to include the best neighbouring cells up to maxReportCells in accordance 
with the following: 

3> if the triggerType is set to 'evenf: 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResultsNeighCells, include the physCellld; 

3> if the triggerType is set to 'evenf; or \h& purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 



1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 
1> stop the periodical reporting timer, if running; 
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1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 



1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 
8.3.2.1.3 Test description 

8.3.2.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 24. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.2.1 .3.2 Test procedure sequence 

Table 8.3.2.1.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while columns marked "Tl" 
and "T2" are to be applied subsequently. The exact instants on which these values shall be applied are described in the 
texts in this clause. 

Table 8.3.2.1.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 24 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


The power level values are such 
that entering conditions for event B2 
are not satisfied. 


RSSI 


dBm 


- 


[-85] 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-80 




The power level values are such 
that entering conditions for event B2 
are satisfied. 


RSSI 


dBm 


- 


[-65] 


T2 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 




The power level values are such 
that leaving conditions for event B2 
are satisfied. 


RSSI 


dBm 


- 


[-85] 
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Table 8.3.2.1.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup inter RAT measurement on Cell 1 . 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of inter RAT 
measurement on Cell 1 . 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 during the next 10s? 


-> 


MeasurementReport 


1 


F 


4 


The SS changes Cell land Cell 24 parameters 
according to the row "T1 " in table 8.3.2.1 .3.2-1 . 


- 


- 


- 


- 


5 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 for Cell 24? 


-> 


MeasurementReport 


2 


P 


6 


The SS changes Cell 1 and Cell 24 
parameters according to the row "T2" in table 
8.3.2.1.3.2-1. 










7 


Wait and ignore MeasurementReport 
messages for 5 s to allow change of power 
levels for Cells 1 and Cell 24. 










8 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 during the next 10s? 


-> 


MeasurementReport 


3 


F 


9 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 











8.3.2.1 .3.3 Specific message contents 

Table 8.3.2.1.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.3.2.1.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 
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Table 8.3.2.1.3.3-2: /WeasConf/flf (Table 8.3.2.1 .3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 , condition GERAN 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldlVleasQbject-f1 1 






measObject[1] 


MeasObjectGERAN- 
GENERIC(f11) 






1 








reportConfigloAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfJg-B2- 
GERAN 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-GERAN(-69, [-79]) 






} 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasObject-f1 1 






reportConfigld[1] 


ldReportConfig-B2- 
GERAN 






} 








quantityConfig SEQUENCE { 








quantityConfigGERAN SEQUENCE { 








measQuantityGERAN 


rssi 






filterCoefficient 


fcO 






} 








} 








} 
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Table 8.3.2.1.3.3-3: MeasurementReport {step 5, Table 8.3.2.1.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultsNeighCells CHOICE { 








measResultListGERAN SEQUENCE (SIZE 
(L.tnaxCellReport)) OF SEQUENCE { 


1 entry 






carrierFreq[1] SEQUENCE! 








arfcn 


Not checked 






band Indicator 


Not checked 






1 








physCellld[1] 


PhysicalCellldentity of 
Cell 24 






cgi-info[1] 


Not present 






measResult[1l SEQUENCE! 








rssi 


(0..63) 






} 








} 








} 








1 








1 








} 








} 








} 









8.3.2.2 

8.3.2.2.1 

(1) 



Measurement configuration control and reporting / Inter-RAT measurements / 
Periodic reporting / Measurement of GERAN cells 

Test Purpose (TP) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for GERAN cell } 
ensure that { 

when { The UE receives reference signal power for cells on the GERAN frequencies where 
measurements are configured } 

then { UE sends Measurement J?eport message at regular intervals for these GERAN cells } 



(2) 

with { UE in E-UTRA RRC_CONNECTED state and a MeasurementJ?eport message for a configured periodic 
measurement reporting of GERAN cells on a configured frequency were sent } 
ensure that { 

when { A previously reported cell become unavailable and the UE receives reference signal power on 
a reported GERAN frequency for a cell which was previously not reported } 

then { UE sends MeasurementJ?eport message at regular intervals for the available GERAN cells } 



(3) 

with { UE in E-UTRA RRC_CONNECTED state and periodic measurement reporting of GERAN cells ongoing 
ensure that { 

when { The UE receives a RRCConnectionReconfiguration message removing the measid of periodic 
reporting of GERAN cells } 

then { UE stops sending MeasurementJ^eport message for GERAN cells } 
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8.3.2.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.5.3, 
5.5.2.2,5.5.4.1 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> if thQ RRCConnectionReconfiguration message includes the measConfig: 
2> perform the measurement configuration procedure as specified in 5.5.2; 
[TS 36.331, clause 5.5.2.2] 
The UE shall: 

1> for each measid included in the received measIdToRemoveList that is part of the current UE configuration in 

varMeasConfig: 

2> remove the entry with the matching measid from the measIdList within the VarMeasConfig; 

2> remove the measurement reporting entry for this measid from the VarMeasReportList, if included; 

2> stop the periodical reporting timer or timer T321, whichever one is running, and reset the associated 
information (e.g. timeToTrigger) for this measid; 

NOTE: The UE does not consider the message as erroneous if the measIdToRemoveList includes any measid 
value that is not part of the current UE configuration. 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 



2> else: 



3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasConfig for this measid; 



2> if \h& purpose is included and set to 'reportStrongestCells' or to 'reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1: If fht purpose is set to 'reportStrongestCells', the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON', the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 
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2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 



NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodicaF while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

NOTE 3: If the UE is configured with DRX, the UE may delay the measurement reporting for event triggered and 
periodical triggered measurements until the Active Time, which is defined in TS 36.321 [6]. 

[TS 36.331, clause 5.5.5] 

The purpose of this procedure is to transfer measurement results from the UE to E-UTRAN. 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResuUNeighCells to include the best neighbouring cells up to maxReportCells in accordance with 
the following: 



3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResuUNeighCells, include the physCellld; 

3> if the triggerType is set to 'event'; or iht purpose is set to ' reportStrongestCells' or to 
'reportStrongestCellsForSON': 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 



1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 
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2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical: 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 



Test description 
Pre-test conditions 



8.3.2.2.3 

8.3.2.2.3.1 

System Simulator: 

- Celll, Cell 25 and Cell 26. 

UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.2.2.3.2 Test procedure sequence 

Table 8.3.2.2.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" and "T2" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 

Table 8.3.2.2.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 25 


Cell 26 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


- 


The power level values are such 
that camping on Cell 1 is guarantee. 


RSSI 


dBm 


- 


Off 


Off 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


- 


The power level values are such 
that Cell 25 is satisfied for periodic 
reporting. 


RSSI 


dBm 


- 


[-70] 


Off 


T2 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 




- 


The power level values are such 
that Cell 26 is satisfied for periodic 
reporting and Cell 25 become 
unavailable. 


RSSI 


dBm 


- 


Off 


[-70] 
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Table 8.3.2.2.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup inter-RAT measurement. 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of inter-RAT 
measurement. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


The SS power "On" Cell 25 according to the 
row "T1" in table 8.3.2.2.3.2-1. 


- 


- 


- 


- 


4 


Wait and ignore MeasurementReport 
messages for 5s to allow power "On" for Cell 
25. 












EXCEPTION: In parallel to events described in 
steps 5 to 6 the steps specified in table 
8.3.2.2.3.2-3 shall take place 










5 


Wait for 30 s to ensure that the UE performs a 
inter-RAT periodical reporting. 


- 


- 


- 


- 


6 


The SS power "Off" Cell 25 and power "On" 
Cell 26 according to the row "T2" in table 
8.3.2.2.3.2-1. 










7 


Wait and ignore MeasurementReport 
messages for 5s to allow power "Off" and 
power "On" for Cell 25 and Cell 26 
respectively. 












EXCEPTION: In parallel to events described in 
steps 8 to 9 the steps specified in table 
8.3.2.2.3.2-4 shall take place 










8 


Wait for 30 s to ensure that the UE performs a 
inter-RAT periodical reporting. 


- 


- 


- 


- 


9 


The SS transmits an 

RRCConnectionReconfiguration message to 
remove inter-RAT measurement. 


<— 


RRCConnectionReconfiguration 






10 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the remove of inter-RAT 
measurement. 


-> 


RRCConnectionReconfigurationC 
omplete 






11 


Check: Does the UE attempt to transmit an 
uplink message for the next 1 0s? 


- 


- 


3 


F 


Table 8.3.2.2.3.2-3: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: After the 1st message is 
received, step 1 below shall be repeated every 
time the duration indicated in the IE 
reportlntervai has elapsed 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical reporting for Cell 25? 


-> 


MeasurementReport 


1 


P 
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Table 8.3.2.2.3.2-4: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


■message 




EXCEPTION: After the 1st message is 
received, step 1 below shall be repeated every 
time the duration indicated in the IE 
reportlnterval has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical reporting for Cell 26{NOTE1)? 


-> 


MeasurementReport 


1,2 


P 



NOTEl: Cell 25 may be included in the MeasurementReport due to UE averages power levels over a period of time. 



8.3.2.2.3.3 Specific message contents 

Table 8.3.2.2.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.3.2.2.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 


Table 8.3.2.2.3.3-2: MeasConfig (Table 8.3.2.2.3.3-1) 


Derivation Path: 36.508, Table 4.6.6-1, condition GERAN 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbiectId)) OF SEQUENCE { 


2 entries 






measObjectld[1] 


ldlVleasObject-f12 






measObject[1] 


MeasObjectGERAN- 
GENERIC(f12) 






measObjectld[2] 


ldlVleasObject-f13 






measObject[2] 


MeasObjectGERAN- 
GENERIC(f13) 






} 








reportConfigToAddModUst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 


1 entry 






reportConfigld[1] 


IdReportConfiglnterRAT - 
PERIODICAL 






reportConfig[1] 


ReportConfiglnterRAT- 
PERIODICAL 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


2 entries 






measld[1] 


1 






measObjectld[1] 


ldlVleasObject-f12 






reportConfigld[1] 


IdReportConfiglnterRAT - 
PERIODICAL 






measld[2] 


2 






measObjectld[2] 


ldMeasObject-f13 






reportConfigld[2] 


IdReportConfiglnterRAT - 
PERIODICAL 






} 








} 
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Table 8.3.2.2.3.3-3: MeasurementReport {step 1, Table 8.3.2.2.3.2-3) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultsNeighCells CHOICE { 








measResultListGERAN SEQUENCE (SIZE 
(L.tnaxCellReport)) OF SEQUENCE { 


1 entry 






carrierFreq[1] SEQUENCE! 








arfcn 


Not checked 






band Indicator 


Not checked 






1 








physCellld[1] 


PhysicalCellldentity of 
Cell 25 






cgi-info[1] 


Not present 






measResult[1l SEQUENCE! 








rssi 


(0..63) 






} 








} 








} 








1 








1 








} 








} 








} 
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Table 8.3.2.2.3.3-4: MeasurementReport {step 1, Table 8.3.2.2.3.2-4) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


2 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultsNeighCells CHOICE { 








measResultListGERAN SEQUENCE (SIZE 
(L.tnaxCellReport)) OF SEQUENCE { 


1 entry 






carrierFreq[1] SEQUENCE! 








arfcn 


Not checked 






band Indicator 


Not checked 






1 








physCellld[1] 


PhysicalCellldentity of 
Cell 26 






cgi-info[1] 


Not present 






measResult[1l SEQUENCE! 








rssi 


(0..63) 






} 








} 








} 








1 








1 








} 








} 








} 









Table 8.3.2.2.3.3-5: RRCConnectionReconfiguration (step 9, Table 8.3.2.2.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 



Table 8.3.2.2.3.3-6: MeasConfig (Table 8.3.2.2.3.3-5) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measldJoRemoveList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


2 entries 






measld[1] 


1 






measld[2] 


2 






} 








} 









8.3.2.3 Measurement configuration control and reporting / Inter-RAT measurements / 

Event B2 / Measurement of UTRAN cells 



8.3.2.3.1 



(1) 



Test Purpose (TP) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for UTRA cell and not detected entering condition for the event 
B2 is met } 
ensure that { 

when { UE detects entering condition for the event B2 is not met } 
then { UE does not transmit any MeasurementReport } 
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(2) 

with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for UTRA cell and not detected entering condition for the event 
B2 is met } 
ensure that { 

when { UE detects entering condition for the event B2 is met } 
then { UE transmits a Measurement J?eport } 
} 

(3) 

with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for UTRA cell and detected entering condition for the event B2 
is met } 
ensure that { 

when { UE detects leaving condition for the event B2 is met } 
then { UE does not transmit any Measurement J?eport } 
} 

8.3.2.3.2 Conformance requirements 

References: The conformance requirements covered in ttie present TC are specified in: TS 36.331, clause 5.5.4.1, 
5.5.4.8 and 5.5.5. 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the corresponding reportConfig includes a purpose set to ' reportStrongestCellsForSON': 

2> else: 

3> if the corresponding measObject concerns E-UTRA: 

3> else if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 

3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the for this measid; 

2> if the triggerType is set to 'event and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfig, while the VarMeasReportList does not include an measurement 
reporting entry for this measld:(a first cell triggers the event) 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 764 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 



2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportListfoT this measid for 
all measurements after layer 3 filtering taken duiingtimeToTrigger defined within the VarMeasConfigfoi this 
event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 

4> remove the measurement reporting entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 

2> if the purpose is included and set to ' reportStrongestCells' or to 'reportStrongestCellsForSON and if a (first) 
measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1 : If the purpose is set to 'reportStrongestCells' , the UE initiates a first measurement report immediately 

after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON' , the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the purpose is included and set to 'reportCGF and if the UE acquired the information needed to set all 
fields of cellGloballd for the requested cell: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> stop timer T321; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> upon expiry of the T321 for this measid: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 

corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

[TS 36.331, clause 5.5.4.8] 
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The UE shall: 

1> for UTRA and CDMA2000, only trigger the event for cells included in the corresponding measurement object; 

1> consider the entering condition for this event to be satisfied when both condition B2-1 and condition B2-2, as 
specified below, are fulfilled; 

1> consider the leaving condition for this event to be satisfied when condition B2-3 or condition B2-4, i.e. at least 
one of the two, as specified below, is fulfilled; 

Inequality B2-1 (Entering condition 1) 

Ms+ Hys< r/ireiMlnequahty B2-2 (Entering condition 2) 

Mn + Ofn - Hys > Thresh! 

Inequality B2-3 (Leaving condition 1) 

Ms-Hys>Thresh[ 

Inequality B2-4 (Leaving condition 2) 

Mn + Ofn + Hys < Thresh! 
The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Mn is the measurement result of the inter-RAT neighbour cell, not taking into account any offsets. 

Ofn is the frequency specific offset of the frequency of the inter-RAT neighbour cell (i.e. ojfsetFreq as defined 
within the measObject corresponding to the frequency of the inter-RAT neighbour cell) 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfiglnterRAT for this event) 

Threshl is the threshold parameter for this event (i.e. b2-Thresholdl as defined within reportConfiglnterRAT for 
this event) 

Threshl is the threshold parameter for this event (i.e. b2-Threshold2 as defined within reportConfiglnterRAT for 
this event) 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ 

Mn is expressed in dBm or dB, depending on the measurement quantity of the inter-RAT neighbour cell 

Ofn, Hys are expressed in dB 

Threshl is expressed in the same unit as Ms 

Threshl is expressed in the same unit as Mn 

[TS 36.331, clause 5.5.5] 

The purpose of this procedure is to transfer measurement results from the UE to E-UTRAN. 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultNeighCells to include the best neighbouring cells up to maxReportCells in accordance with the 
following: 
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3> if the triggerType is set to 'event': 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this measid 

3> else; 

4> include the applicable calls for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliabiUty of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResultNeighCells include the physCellld; 

3> if the triggerType is set to 'event'; or the purpose is set to ' reportStrongestCells' or to 
'reportStrongestCellsForSON': 

4> for each included cell include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 



5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 



1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical': 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 

1> if the measured results are for CDMA2000 HRPD: 

2> set the preRegistrationStatusHRPD to the UE's CDMA2000 upper layer's HRPD preRegistrationStatus; 

l> if the measured results are for CDMA2000 IxRTT: 

2> set the preRegistrationStatusHRPD to 'FALSE; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 

8.3.2.3.3 Test description 

8.3.2.3.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 and Cell 7. 
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UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.2.3.3.2 Test procedure sequence 

Table 8.3.2.3.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" and "T2" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 

Table 8.3.2.3.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 7 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


The power level values are such 
that entering conditions for event B2 
are not satisfied. 


CPICH Ec/lo 
(Note1) 
CPICH Ec= - 
83.5[dBm/3.84 
MHz] 


dB 


- 


-23.5 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-80 


- 


The power level values are such 
that entering conditions for event B2 
are satisfied. 


CPICH Ec/lo 
(Note1) 
CPICH Ec= - 
72.3[dBm/3.84 
MHz] 


dB 


- 


-12.3 


T2 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


The power level values are such 
that leaving conditions for event B2 
are satisfied. 


CPICH Ec/lo 
(Note1) 
CPICH Ec= - 
83.5[dBm/3.84 
MHz] 


dB 


- 


-23.5 



NOTE 1 : This parameter is not directly settable, but are derived by calculation from the other parameters set by the 
SS. 
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Table 8.3.2.3.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup inter RAT measurement on Cell 1 . 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of inter RAT 
measurement on Cell 1 . 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


Check: Does the UE transmit a 
MeasurementReport message on Cell 1 to 
report the event B2 during the next 10s? 


-> 


MeasurementReport 


1 


F 


4 


The SS changes Cell 1 and Cell 7 parameters 
according to the row "T1 " in table 8.3.2.3.3.2-1 . 


- 


- 


- 


- 


5 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 for Cell 7? 


-> 


MeasurementReport 


2 


P 


6 


The SS changes Cell 1 and Cell 7 parameters 
according to the row "T2" in table 8.3.2.3.3.2-1 . 


- 


- 


- 


- 


7 


Check: Does the UE transmit a 
MeasurementReport message on Cell 1 to 
report the event B2 during the next 10s? 


-> 


MeasurementReport 


3 


F 


8 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 






1,2, 
3 





8.3.2.3.3.3 Specific message contents 

Table 8.3.2.3.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.3.2.3.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8, condition MEAS 


Table 8.3.2.3.3.3-2: MeasConfig (Table 8.3.2.3.3.3-1) 


Derivation Path: 36.508, Table 4.6.6-1, condition UTRAN 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldMeasObject-f8 






measObject[1] 


IVIeasObjectUTRA- 
GENERIC(f8) 






} 








reportConfigToAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-B2-UTRA 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-UTRA(-69, -18) 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measObjectld[1] 


ldMeasObject-f8 






reportConfigld[1] 


ldReportConfig-B2-UTRA 






} 








} 
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Table 8.3.2.3.3.3-2 A: QuantityConfig (Table 8.3.2.3.3.3-1) 



Derivation Path: 36.508, Table 4.6.6-3A, condition UTRAN 


Information Element 


Value/remark 


Comment 


Condition 


QuantityConfig SEQUENCE { 








quantityConfigUTRA SEQUENCE { 








measQuantityUTRA-FDD 


cpich-EcNO 




UTRA-FDD 


measQuantityUTRA-TDD 


pccpcli-RSCP 




UTRA-TDD 


filterCoefficient 


fcO 






} 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 



Table 8.3.2.3.3.3-3: Void 



Table 8.3.2.3.3.3-4: MeasurementReport (step 5, Table 8.3.2.3.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListUTRA SEQUENCE (SIZE 
(L.maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 7 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








utra-RSCP 


(-5..91) 




UTRA-TDD 


utra-EcNO 


(0..49) 




UTRA-FDD 


} 








} 








} 








1 








} 








} 








} 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 
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8.3.2.4 Measurement configuration control and reporting / Inter-RAT measurements / 

Periodic reporting / Measurement of UTRAN cells 

8.3.2.4.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state and measurement configured for periodic reporting of UTRA 
cells } 
ensure that { 

when { The UE receives reference signal power for cells on the UTRA frequency where measurements 
are configured } 

then { UE sends MeasurementReport message at regular intervals for these UTRA cells } 

} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and a Measurement Report message for a configured periodic 
measurement reporting of UTRA cells on a configured frequency were sent } 
ensure that { 

when { A previously reported cell become unavailable or the UE receives reference signal power on 
a reported UTRA frequency for a cell which was previously not reported } 

then { UE sends MeasurementJ^eport message at regular intervals for the available UTRA cells } 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state and periodic measurement reporting of UTRA cells ongoing} 
ensure that { 

when { The UE receives a RRCConnectionReconfiguration message removing the measid of periodic 
reporting of UTRA cells } 

then { UE stops sending MeasurementReport message for UTRA cells } 
} 

8.3.2.4.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.2.2,5.5.4.1 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> If the RRCConnectionReconfiguration message includes the measConfig: 
2> perform the Measurement configuration procedure as specified in 5.5.2; 

[TS 36.331, clause 5.5.2.2] 

The UE shall: 

1> for each measid value included in the received measIdToRemoveList that is part of the current UE configuration 
in varMeasConfig: 

2> remove the entry with the matching measid from the measIdList within the VarMeasConfig; 

2> remove the measurement reporting entry for this measid from the VarMeasReportList, if included; 

2> stop the periodical reporting timer or timer T321, whichever one is running, and reset the associated 
information (e.g. timeToTrigger) for this measid; 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 
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2> else: 

3> if the corresponding measObject concerns E-UTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the 

concerned cell is not included in the blackCellsToAddModList defined within the VarMeasConfig for 
this measid; 

3> else if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 

2> if l\\t purpose is included and set to 'reportStrongestCells' or to 'reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1: If \he purpose is set to ' reportStrongestCells', the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to ' reportStrongestCellsForSON', the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 



NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measuredResults 
within the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultsNeighCells to include the best neighbouring cells up to maxReportCells in accordance 
with the following: 

3> if the triggerType is set to 'event': 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 
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3> for each cell that is included in the measResultsNeighCells, include the physCellld; 

3> if the triggerType is set to 'evenf; or \h& purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 

1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid by 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than to 
reportAmount as defined corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 



1> submit the MEASUREMENT REPORT message to lower layers for transmission, upon which the procedure 
ends. 

8.3.2.4.3 Test description 

8.3.2.4.3.1 Pre-test conditions 
System Simulator: 

- Celll,Cell5andCell7 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18] on Cell 1. 

8.3.2.4.3.2 Test procedure sequence 

Table 8.3.2.4.3.2-1 illustrates the downlink power levels to be applied for the cells at various time instants of the test 
execution. Row marked "TO" denotes the initial conditions after preamble, while rows marked "Tl" and "T2" are to be 
applied subsequently. The exact instants on which these values shall be applied are described in the texts in this clause. 

Table 8.3.2.4.3.2-1 : Power levels 





Parameter Unit 


CelM 


Parameter | Unit | Cell 5 


Cell 7 


Remark 




E-UTRA Cell 


UTRA Cells 




TO 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-75 


CPICH Ec 


dBm/ 
3.84 
MHz 


-85 


Off 


Power levels shall be such that 
camping on Cell 1 is guaranteed 


T1 


-75 


-85 


-85 




T2 


-75 


Off 


-85 
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Table 8.3.2.4.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message 
including measConfigXo setup measurements 
and periodical reporting for UTRA cells. 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


— > 


RRCConnectionReconfigurationC 
ompiete 








EXCEPTION: In parallel to events described in 
steps 3 to 4 the steps specified in table 
8.3.2.4.3.2-3 shall take place 










3 


Wait for 30 s to ensure that the UE performs a 
periodical reporting of UTRA cells. 


- 


- 


1 


- 


4 


The SS sets the cell-specific reference signal 
levels and switches Cell 7 on according to row 
"T1" in table 8.3.2.4.3.2-1. 










5 


Wait and ignore MeasurementReport 
messages for 5 s to allow for the switching of 
cells. 












EXCEPTION: In parallel to events described in 
steps 6 to 7 the steps specified in table 
8.3.2.4.3.2-4 shall take place 










6 


Wait for 30 s to ensure that the UE performs a 
periodical reporting of UTRA cells. 


- 


- 


1,2 


- 


7 


The SS sets the cell-specific reference signal 
levels and switches Cell 5 "Off" according to 
row "T2" in table 8.3.2.4.3.2-1 . 










8 


Wait and ignore MeasurementReport 
messages for 5 s to allow for the switching of 
cells. 












EXCEPTION: In parallel to events described in 
steps 9 to 10 the steps specified in table 
8.3.2.4.3.2-5 shall take place 










9 


Wait for 30 s to ensure that the UE performs a 
periodical reporting of UTRA cells. 


- 


- 


1,2 


- 


10 


The SS transmits an 

RRCConnectionReconfiguration message 
including measConfigXo remove meas/c/ for 
periodic reporting. 


<— 


RRCConnectionReconfiguration 






11 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message 


— > 


RRCConnectionReconfigurationC 
ompiete 






12 


Check: Does the UE attempt to transmit an 
uplink message for the next 10s? 


- 


- 


3 


F 


Table 8.3.2.4.3.2-3: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: After the 1st message is 
received, step 1 below shall be repeated every 
time the duration indicated in the IE 
reportlnterval has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical reporting for Cell 5? 


-> 


MeasurementReport 


1 


P 
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Table 8.3.2.4.3.2-4: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Step 1 below shall be repeated 
every time the duration indicated in the IE 
reportlnterval has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical reporting for Cell 5 and Cell 7? 


~> 


MeasurementReport 


1,2 


P 


Table 8.3.2.4.3.2-5: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Step 1 shall be repeated every 
time the duration indicated in the IE 
reportlnterval has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical reporting for Cell 7(N0TE1)? 


~> 


MeasurementReport 


1,2 


P 



NOTEl : Cell 5 may be included in the MeasurementReport due to UE averages power levels over a period of time. 
8.3.2.4.3.3 Specific message contents 

Table 8.3.2.4.3.3-1 RRCConnectionReconfiguration (step 1 and step 10, Table 8.3.2.4.3.2-2) 

Derivation path: 36.508 table table 4.6.1-8 with condition MEAS | 

Table 8.3.2.4.3.3-2 MeasConfig (step 1, Table 8.3.2.4.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 with condition UTRAN | 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxObjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldMeasObject-f8 






measObject[1] 


MeasObjectUTRA-f8 


UTRA frequency 




} 








reportConfigToAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 


1 entry 






reportConfigld[1] 


IdReportConfig- 
PERIODICAL 






reportConfig[1] 


ReportConfiglnterRAT- 
PERIODICAL-UTRA 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measObjectld[1] 


ldMeasObject-f8 






reportConfigld[1] 


IdReportConfig- 
PERIODICAL 






} 








quantityConfig SEQUENCE { 








quantityConfigUTRA SEQUENCE { 








measQuantityUTRA-FDD 


cpich-EcNO 




UTRA-FDD 


measQuantityUTRA-TDD 


pccpch-RSCP 




UTRA-TDD 


} 








1 











Condition 



Explanation 
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UTRA-FDD 



UTRA FDD cell environment 



UTRA-TDD 



UTRA TDD cell environment 



Table 8.3.2.4.3.3-3 MeasObjectUTRA-f8 (step 1, Table 8.3.2.4.3.2-2) 



Derivation path: 36.508 table 4.6.6-3 IVIeasObjectUTRA-GENERIC(f8) 


Information Element 


Value/Remark 


Comment 


Condition 


MeasObiectUTRA-GENERIC(f8) ::= SEQUENCE { 








carrierFreq 




UTRA DL carrier 
frequency of Cell 
5 and Cell 7 




cellsToAddModList CHOICE { 








cellsToAddModListUTRA-FDD ::= SEQUENCE 
(SIZE (1 .. maxCellMeas)) QF SEQUENCE { 






UTRA- 
FDD 


celllndex [1] 


1 






physCellld[1] 


physicalCellldentity- 
Cell5 






celllndex [2] 


2 






physCellld [2] 


physicalCellldentity- 
Cell7 






1 








cellsToAddModListUTRA-TDD ::= SEQUENCE 
(SIZE (L.maxMeasId)) QF SEQUENCE { 






UTRA- 
TDD 


celllndex [1] 


1 






physCellld [1] 


physicalCellldentity- 
Cell5 






celllndex [2] 


2 






physCellld [2] 


physicalCellldentity- 
Cell7 






} 








1 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 



Table 8.3.2.4.3.3-4 ReportConfiglnterRAT-PERIODICAL-UTRA (step 1, Table 8.3.2.4.3.2-2) 



Derivation path: 36.508 table 4.6.6-9 ReportConfiglnterRAT-PERIQDICAL 


Information Element 


Value/Remark 


Comment 


Condition 


ReportConfiglnterRAT-PERIQDICAL-UTRA::= 
SEQUENCE! 








maxReportCells 


2 


Report Cell 5 and 
Cell 7 




} 









Table 8.3.2.4.3.3-5: MeasConfig (step 10, Table 8.3.2.4.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measldToRemoveList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






} 








} 
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Table 8.3.2.4.3.3-6: MeasurementReport {step 1, Table 8.3.2.4.3.2-3) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 








measResultListUTRA ::= SEQUENCE (SIZE 








(L.tnaxCellReport)) OF SEQUENCE { 








physCellld[1] CHOICE! 








fdd 


physicalCellldentity - Cell 


Report Cell 5 


UTRA- 




5 




FDD 


tdd 


physicalCellldentity - Cell 


Report Cell 5 


UTRA- 


1 


5 




TDD 


1 

measResult [1] ::= SEQUENCE { 








utra-RSCP 


(-5..91) 




UTRA- 
TDD 


utra-EcNO 


(0..49) 




UTRA- 


} 
} 
} 
} 
} 
} 
} 






FDD 



Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 
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Table 8.3.2.4.3.3-7: MeasurementReport {step 1, Table 8.3.2.4.3.2-4) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 








measResultListUTRA ::= SEQUENCE (SIZE 








(L.tnaxCellReport)) OF SEQUENCE { 








physCellld[1] CHOICE! 








fdd 


physicalCellldentity - Cell 


Report Cell 5 


UTRA- 




5 




FDD 


tdd 


physicalCellldentity - Cell 


Report Cell 5 


UTRA- 


1 


5 




TDD 


1 

measResult [1] ::= SEQUENCE { 








utra-RSCP 


(-5..91) 




UTRA- 
TDD 


utra-EcNO 

1 


(0..49) 




UTRA- 
FDD 


physCellld[2] CHOICE { 








fdd 


physicalCellldentity - Cell 


Report Cell 7 


UTRA- 




7 




FDD 


tdd 


physicalCellldentity - Cell 


Report Cell 7 


UTRA- 


1 


7 




TDD 


measResult [2] ::= SEQUENCE { 








utra-RSCP 


(-5..91) 




UTRA- 
TDD 


utra-EcNO 


(0..49) 




UTRA- 


} 

} 
} 
} 
} 
} 
} 






FDD 



Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 
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Table 8.3.2.4.3.3-8: MeasurementReport {step 1, Table 8.3.2.4.3.2-5) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 








measResultListUTRA ::= SEQUENCE (SIZE 








(L.tnaxCellReport)) OF SEQUENCE { 








physCellld[1] CHOICE! 








fdd 


physicalCellldentity - Cell 


Report Cell 7 


UTRA- 




7 




FDD 


tdd 


physicalCellldentity - Cell 


Report Cell 7 


UTRA- 


1 


7 




TDD 


1 

measResult [1] ::= SEQUENCE { 








utra-RSCP 


(-5..91) 




UTRA- 
TDD 


utra-EcNO 


(0..49) 




UTRA- 


} 
} 
} 
} 
} 
} 
} 






FDD 



Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 



8.3.2.5 

8.3.2.5.1 
(1) 



Measurement configuration control and reporting / Inter-RAT measurements / 
Periodic reporting / Measurements of E-UTRAN, UTRAN and GERAN cells 

Test Purpose (TP) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for UTRAN and GERAN cells } 
ensure that { 

when { The UE receives reference signal power for cells on either UTRAN or GERAN frequency where 
measurements are configured } 

then { UE sends MeasurementReport message at regular intervals for UTRAN or GERAN cell } 



(2) 

with { UE in E-UTRA RRC_CONNECTED state and a MeasurementReport message for a configured periodic 
measurement reporting of UTRAN or GERAN cell on a configured frequency was sent } 
ensure that { 

when { A previously reported cell become unavailable and the UE receives reference signal power on 
a reported UTRAN or GERAN frequency for a cell which was previously not reported } 

then { UE sends MeasurementReport message at regular intervals for the available UTRAN or GERAN 
cell } 
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(3) 

with { UE in E-UTRA RRC_CONNECTED state and periodic measurement reporting of UTRAN or GERAN cells 

ongoing } 

ensure that { 

when { The UE receives reference signal power on a reported UTRAN or GERAN frequency for a cell 

which was previously not reported } 

then { UE sends Measurement JJeport messages at regular intervals for the available UTRAN and 
GERAN cells | 



(4) 

with { UE in E-UTRA RRC_CONNECTED state and periodic measurement reporting of UTRAN and GERAN cells 
ongoing } 
ensure that { 

when { The UE receives a RRCConnectionReconfiguration message removing the measid of periodic 
reporting of UTRAN and GERAN cells } 

then { UE stops sending MeasurementReport message for UTRAN and GERAN cells } 
} 

8.3.2.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.3.5.3, 
5.5.2.2, 5.5.4.1 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityContwlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> if the RRCConnectionReconfiguration message includes the measConfig: 

3> perform the measurement configuration procedure as specified in 5.5.2; 

[TS 36.331, clause 5.5.2.2] 

The UE shall: 

1> for each measid included in the received measIdToRemoveList that is part of the current UE configuration in 
varMeasConfig: 

2> remove the entry with the matching measid from the measIdList within the VarMeasConfig; 

2> remove the measurement reporting entry for this measid from the VarMeasReportList, if included; 

2> stop the periodical reporting timer or timer T321, whichever one is running, and reset the associated 
information (e.g. timeToTrigger) for this measid; 

NOTE: The UE does not consider the message as erroneous if the measIdToRemoveList includes any measid 
value that is not part of the current UE configuration. 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 



2> else: 



3> else if the corresponding measObject concerns UTRA or CDMA2000: 
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4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 

3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasConfig for this measid; 



2> if the purpose is included and set to 'reportStrongestCells' or to ' reportStrongestCellsForSON' and if a (first) 
measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1 : If the purpose is set to 'reportStrongestCells\ the UE initiates a first measurement report immediately 

after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to ' reportStrongestCellsForSON^ , the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 



NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event or to 'periodical' while the 

corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

NOTE 3: If the UE is configured with DRX, the UE may delay the measurement reporting for event triggered and 
periodical triggered measurements until the Active Time, which is defined in TS 36.321 [6]. 

[TS 36.331, clause 5.5.5] 

The purpose of this procedure is to transfer measurement results from the UE to E-UTRAN. 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultNeighCells to include the best neighbouring cells up to maxReportCells in accordance with 
the following: 



3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResultNeighCells, include the physCellld; 
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3> if the triggerType is set to 'event'; or the purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON': 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 



1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical': 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 
8.3.2.5.3 Test description 

8.3.2.5.3.1 Pre-test conditions 
System Simulator: 

- Cell 1, Cell 5 and Cell 24. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.2.5.3.2 Test procedure sequence 

Table 8.3.2.5.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" and "T2" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 
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Table 8.3.2.5.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 5 


Cell 24 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


- 


The power level values are such 
that camping on Cell 1 is guarantee. 


CPICH Ec/lo 


dB 


- 


Off 


- 


RSSI 


dBm 


- 


- 


Off 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


- 


The power level values are such 
that Cell 5 is satisfied for periodic 
reporting. 


CPICH Ec/lo 


dB 


- 


[-181 


- 


RSSI 


dBm 


- 




Off 


T2 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


- 


The power level values are such 
that Cell 24 is satisfied for periodic 
reporting and Cell 5 become 
unavailable. 


CPICH Ec/lo 


dB 


- 


Off 


- 


RSSI 


dBm 


- 


- 


[-70] 


T3 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


- 


The power level values are such 
that Cell 5 and Cell 24 are satisfied 
for periodic reporting. 


CPICH Ec/lo 


dB 


- 


[-181 


- 


RSSI 


dBm 


- 




[-70] 
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Table 8.3.2.5.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup inter-RAT measurement. 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of inter-RAT 
measurement. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


The SS power "On" Cell 5 according to the row 
"T1" in table 8.3.2.5.3.2-1. 


- 


- 


- 


- 


4 


Wait and ignore MeasurementReport 
messages for 5s to allow power "On" for Cell 
5. 












EXCEPTION: In parallel to events described in 
steps 5 to 6 the steps specified in table 
8.3.2.5.3.2-3 shall take place 










5 


Wait for 30 s to ensure that the UE performs a 
inter-RAT periodical reporting. 


- 


- 


- 


- 


6 


The SS power "Off" Cell 5 and power "On" Cell 
24 according to the row "T2" in table 
8.3.2.5.3.2-1. 










7 


Wait and ignore MeasurementReport 
messages for 5s to allow power "Off" and 
power "On" for Cell 5 and Cell 24 respectively. 












EXCEPTION: In parallel to events described in 
steps 8 to 9 the steps specified in table 
8.3.2.5.3.2-4 shall take place 










8 


Wait for 30 s to ensure that the UE performs a 
inter-RAT periodical reporting. 


- 


- 


- 


- 


9 


The SS power "On" for Cell 5 according to the 
row "T3" in table 8.3.2.5.3.2-1 . 


- 


- 


- 


- 


10 


Wait and ignore MeasurementReport 
messages for 5s to allow power "On" for Cell 
5. 












EXCEPTION: In parallel to events described in 
steps 1 1 to 1 2 the steps specified in table 
8.3.2.5.3.2-3 and 8.3.2.5.3.2-4 shall take 
place 










11 


Wait for 30 s to ensure that the UE performs a 
inter-RAT periodical reporting. 


- 


- 


- 


- 


12 


The SS transmits an 

RRCConnectionReconfiguration message to 
remove inter-RAT measurement. 


<— 


RRCConnectionReconfiguration 






13 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the remove of inter-RAT 
measurement. 


-> 


RRCConnectionReconfigurationC 
omplete 






14 


Check: Does the UE attempt to transmit an 
uplink message for the next 1 0s? 


- 


- 


4 


F 


Table 8.3.2.5.3.2-3: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: After the 1st message is 
received, step 1 below shall be repeated every 
time the duration indicated in the IE 
reporf/nten/a/ has elapsed 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical reporting for Cell 5? 


-> 


MeasurementReport 


1,3 


P 
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Table 8.3.2.5.3.2-4: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


■message 




EXCEPTION: After the 1st message is 
received, step 1 below shall be repeated every 
time the duration indicated in the IE 
reportlnterval has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical reporting for Cell 24? 


-> 


MeasurementReport 


1,2, 
3 


P 



8.3.2.5.3.3 Specific message contents 

Table 8.3.2.5.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.3.2.5.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 
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Table 8.3.2.5.3.3-2: MeasConfig (Table 8.3.2.5.3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


2 entry 






measObjectld[1] 


ldMeasObject-f8 






measObject[1] 


IVIeasObjectUTRA- 
GENERIC(f8) 






measObjectld[2] 


ldMeasObject-f1 1 






measObject[2] 


IVleasObjectGERAN- 
GENERIC(f11) 






} 








reportConfigloAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


IdReportConfiglnterRAT - 
PERIODICAL 






reportConfig[1] 


ReportConfiglnterRAT- 
PERIODICAL 






} 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


2 entry 






measld[1] 


1 






measQbjectld[1] 


ldlVleasObject-f8 






reportConfigld[1] 


IdReportConfiglnterRAT - 
PERIODICAL 






measld[2] 


2 






measQbjectld[2] 


ldlVleasObject-f1 1 






reportConfigld[1] 


IdReportConfiglnterRAT - 
PERIODICAL 






} 








quantityConfig SEQUENCE { 








quantityConfigUTRA SEQUENCE { 








measQuantityUTRA-FDD 


cpich-EcNO 




UTRA-FDD 


measQuantityUTRA-TDD 


pccpch-RSCP 




UTRA-TDD 


} 








quantityConfigGERAN SEQUENCE { 








measQuantityGERAN 


rssi 






} 








} 








measGapConfig CHOICE { 








setup SEQUENCE { 








gapOffset CHOICE { 








gpi 









} 








1 








1 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 
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Table 8.3.2.5.3.3-3: MeasurementReport {step 1, Table 8.3.2.5.3.2-3) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultsNeighCells CHOICE { 








measResultListUTRA SEQUENCE (SIZE 
(1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] CHOICE! 








fdd 


PhysicalCellldentity of 
Cell 5 




UTRA-FDD 


tdd 


PhysicalCellldentity of 
Cell 5 




UTRA-TDD 


} 








cgi-info[1] 


Not present 






measResult[1] SEQUENCE { 








utra-RSCP 


(-5..91) 






utra-EcNO 


{0..49) 




UTRA-FDD 


} 








} 








1 








1 








} 








} 








} 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 
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Table 8.3.2.5.3.3-4: MeasurementReport {step 1, Table 8.3.2.5.3.2-4) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


2 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultsNeighCells CHOICE { 








measResultListGERAN SEQUENCE (SIZE 
(L.tnaxCellReport)) OF SEQUENCE { 


1 entry 






carrierFreq[1] SEQUENCE! 








arfcn 


Not checked 






band Indicator 


Not checked 






1 








physCellld[1] 


PhysicalCellldentity of 
Cell 24 






cgi-info[1] 


Not present 






measResult[1l SEQUENCE! 








rssi 


(0..63) 






} 








} 








} 








1 








1 








} 








} 








} 









Table 8.3.2.5.3.3-5: RRCConnectionReconfiguration (step 12, Table 8.3.2.5.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 



Table 8.3.2.5.3.3-6: MeasConfig (Table 8.3.2.5.3.3-5) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measldToRemoveList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


2 entries 






measld[1] 


1 






measld[2] 


2 






} 








} 









8.3.2.6 Measurement configuration control and reporting / Inter-RAT measurements / 

Simultaneous A2 and two B2 / Mmeasurements of E-UTRAN, UTRAN and 
GERAN cells 



8.3.2.6.1 

(1) 



Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state and measurements configured for A2 on E-UTRAN, B2 on UTRAN 
and B2 on GERAN at the same time } 
ensure that { 

when { UE detects entering condition for the events A2 and B2 are not met } 
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then { UE does not transmit any MeasurementReport messages} 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and measurements configured for A2 on E-UTRAN, B2 on UTRAN 
and B2 on GERAN at the same time } 
ensure that { 

when { UE detects entering condition for the event A2 is met } 
then { UE transmits a MeasurementReport message} 
} 

(3) 

with { UE in E-UTRA RRC_CONNECTED state and measurements configured for A2 on E-UTRAN, B2 on UTRAN 
and B2 on GERAN at the same time } 
ensure that { 

when { UE detects entering condition for the event B2 for UTRAN is met } 
then { UE transmits a MeasurementReport message } 
} 

(4) 

with { UE in E-UTRA RRC_CONNECTED state and measurements configured for A2 on E-UTRAN, B2 on UTRAN 
and B2 on GERAN at the same time } 
ensure that { 

when { UE detects entering condition for the event B2 for GERAN is met } 
then { UE transmits a Measurenienti?eport message } 



8.3.2.6.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.5.4.1, 
5.5.4.3, 5.5.4.8 and 5.5.5. 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the corresponding reportConfig includes a purpose set to ' reportStrongestCellsForSON' : 

2> else: 

3> if the corresponding measObject concerns E-UTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the 

concerned cell is not included in the blackCellsToAddModList defined within the VarMeasConfig for 
this measid; 

3> else if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 

3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasConfig for this measid; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfig, while the VarMeasReportList does not include an measurement 
reporting entry for this measid (a first cell triggers the event): 
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3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

[TS 36.331, clause 5.5.4.3] 

The UE shall: 

1> consider the entering condition for this event to be satisfied when condition A2-1, as specified below, is fulfilled; 

1> consider the leaving condition for this event to be satisfied when condition A2-2, as specified below, is fulfilled; 
Inequality A2- 1 (Entering condition) 
Ms +Hys< Thresh 

Inequality A2-2 (Leaving condition) 
Ms-Hys>Thresh 
The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfigEUTRA for this event). 

Thresh is the threshold parameter for this event (i.e. a2-Threshold as defined within reportConfigEUTRA for this 
event). 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Hys is expressed in dB. 

Thresh is expressed in the same unit as Ms. 
[TS 36.331, clause 5.5.4.8] 
The UE shall: 

1> for UTRA and CDMA2000, only trigger the event for cells included in the corresponding measurement object; 

1> consider the entering condition for this event to be satisfied when both condition B2-1 and condition B2-2, as 
specified below, are fulfilled; 

1> consider the leaving condition for this event to be satisfied when condition B2-3 or condition B2-4, i.e. at least 
one of the two, as specified below, is fulfilled; 

Inequality B2-1 (Entering condition 1) 

Ms+ Hys<Thresh[ 

Inequality B2-2 (Entering condition 2) 

Mn + Ofn - Hys > Thresh! 

Inequality B2-3 (Leaving condition 1) 

Ms-Hys>Thresh!L 

Inequality B2-4 (Leaving condition 2) 

Mn + Ofn + Hys < Thresh! 
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The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Mn is the measurement result of the inter-RAT neighbour cell, not taking into account any offsets. 

Ofn is the frequency specific offset of the frequency of the inter-RAT neighbour cell (i.e. ojfsetFreq as defined 
within the measObject corresponding to the frequency of the inter-RAT neighbour cell). 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfiglnterRAT for this event). 

Threshl is the threshold parameter for this event (i.e. h2-Thresholdl as defined within reportConfiglnterRAT for 
this event). 

Threshl is the threshold parameter for this event (i.e. b2-Threshold2 as defined within reportConfiglnterRAT for 
this event). 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Mn is expressed in dBm or dB, depending on the measurement quantity of the inter-RAT neighbour cell. 

Ofn, Hys are expressed in dB. 

Threshl is expressed in the same unit as Ms. 

Threshl is expressed in the same unit as Mn. 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultsNeighCells to include the best neighbouring cells up to maxReportCells in accordance 
with the following: 

3> if the triggerType is set to 'evenf: 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 



3> for each cell that is included in the measResultsNeighCells, include the physCellld; 

3> if the triggerType is set to 'event'; or the purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 
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1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 
8.3.2.6.3 Test description 

8.3.2.6.3.1 Pre-test conditions 
System Simulator: 

- Celll,Cell5andCell24. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.2.6.3.2 Test procedure sequence 

Table 8.3.2.6.3.2-1 illustrates the downlink power levels to be applied for the cells at various time instants of the test 
execution. Row marked "TO" denotes the initial conditions, while columns marked "Tl" is to be applied subsequently. 
The exact instants on which these values shall be applied are described in the texts in this clause. 

Table 8.3.2.6.3.2-1 : Power levels 





Parameter 


Unit 


Cein 


Cell 5 


Cell 24 


Remark 


TO 


RS EPRE 


dBm/15kHz 


-85 


- 


- 


Entry conditions for A2 and B2 events are 
not fulfilled. 


CPICH Ec/ 

PCCPCH 

RSCP 


dBm/3.84 
MHz/dBm 




-80 




GERAN Cell 
Power 


dBm 


- 


- 


-85 


11 


RS EPRE 


dBm/15kHz 


-105 


- 


- 


Entry conditions for A2 and B2 events are 
fullfilled. 


CPICH Ec/ 

PCCPCH 

RSCP 


dBm/3.84 
MHz/dBm 




-60 




GERAN Cell 
Power 


dBm 


- 


- 


-65 
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Table 8.3.2.6.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup intra and inter RAT measurements on 
Cell 1. 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


Check: Does the UE transmit any 
MeasurementReport messages during the next 
10s? 


-> 


MeasurementReport 


1 


F 


4 


The SS changes Cell 1 , Cell 5 and Cell 24 
parameters according to row "T1" in table 
8.3.2.6.3.2-1. 












EXCEPTION: In parallel to step 5 the steps 
specified in Table 8.3.2.6.3.2-3 shall take 
place. 










5 


The SS waits for 10s. 


- 


- 


- 


- 


6 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 










Table 8.3.2.6.3.2-3: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


- 


EXCEPTION: The steps 1-3 may occur in any 
order. 


- 


- 


- 


- 


1 


Check: Does the UE transmit a 
MeasurementReport message to report event 
A2 for Cell 1 . 


~> 


MeasurementReport 


2 


P 


2 


Check: Does the UE transmit a 
MeasurementReport message to report event 
B2 for Cell 5. 


-> 


MeasurementReport 


3 


P 


3 


Check: Does the UE transmit a 
MeasurementReport message to report event 
B2 for Cell 24. 


-> 


MeasurementReport 


4 


P 



8.3.2.6.3.3 Specific message contents 

Table 8.3.2.6.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.3.2.6.3.2-2) 

Derivation Path: 36.508 table 4.6.1-8 with condition IVIEAS 
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Table 8.3.2.6.3.3-2: MeasConfig (Table 8.3.2.6.3.3-1) 



Derivation path: 36.508 table 4.6.6-1 witli condition INTER-RAT 


Information Element 


Value/Remark 


Comment 


Condition 


measConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 


3 entries 






(1 ..maxQbjectId)) OF SEQUENCE { 








measQbjectld[1] 


IdMeasObject-EUTRA 






measQbject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






measQbjectld[2] 


IdMeasObject-UTRA 






measQbject[2] 


MeasObjectUTRA- 
GENERIC(f8) 






measQbjectld[2] 


IdMeasObject-GERAN 






measQbject[2] 
1 


MeasObjectGERAN- 
GENERIC(f11) 






reportConflgToAddModList SEQUENCE (SIZE 


3 entries 






(1 ..maxReportConfigId)) QF SEQUENCE { 








reportConfigld[1] 


ldReportConfig-A2 






reportConfig[1] 


ReportConfigEUTRA- 
A2(-95) 






reportConfigld[2] 


ldReportConfig-B2-UTRA 






reportConfig[2] 


ReportConfiglnterRAT- 
B2-UTRA(-95, -70) 






reportConfigld[3] 


ldReportConfig-B2- 
GERAN 






reportConfig[3] 


ReportConfiglnterRAT- 
B2-GERAN(-95,-75) 






measldToAddModList SEQUENCE (SIZE 


3 entries 






(1 ..maxMeasId)) OF SEQUENCE { 








measld[1] 


1 






measQbjectld[1] 


IdMeasObject-EUTRA 






reportConfigld[1] 


ldReportConfig-A2 






measld[2] 


2 






measQbjectld[2] 


IdMeasObject-UTRA 






reportConfigld[2] 


ldReportConfig-B2-UTRA 






measld[3] 


3 






measQbjectld[3] 


IdlVleasObject-GERAN 






reportConfigld[3] 
1 


ldReportConfjg-B2- 
GERAN 






i 
quantityConfig SEQUENCE { 








quantityConfigEUTRA SEQUENCE { 








filterCoefficientRSRP 


fc4 






filterCoefficientRSRQ 
1 


fc4 






i 
quantityConfigUTRA SEQUENCE { 








measQuantityUTRA-FDD 


cpich-EcNG 




UTRA- 
FDD 


measQuantityUTRA-TDD 


pccpch-RSCP 




UTRA- 
TDD 


filterCoefficient 
1 


fc4 






1 
quantityConfigGERAN SEQUENCE { 








measQuantityG E RAN 


rssi 






filterCoefficient 
1 


fc2 






1 
quantityConfigCDMA2000 

} 

1 


Not present 







Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



794 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 8.3.2.6.3.3-3: Void 
Table 8.3.2.6.3.3-4: Void 
Table 8.3.2.6.3.3-5: Void 

Table 8.3.2.6.3.3-6: MeasurementReport (step 1 Table 8.3.2.6.3.2-3) 



Derivation path: 36.508 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


MeasurementReport ;:= SEQUENCE { 








criticalExtensions CHOICE { 








C1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






measResultNeighCells CHOICE {} 

} 
} 
} 
} 
} 


Not present 







Table 8.3.2.6.3.3-7: MeasurementReport {step 2 Table 8.3.2.6.3.2-3) 



Derivation path: 36.508 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








CI CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


2 






measResultServCell ::= SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 
1 


(0..34) 






measResultNeighCells CHOICE { 




Report Cell 5 




measResultListUTRA SEQUENCE (SIZE 


1 entry 






(1 ..maxCellReport)) OF MeasResultUTRA 








SEQUENCE! 








physCellld[1] 


physCellld of cell 5 






cgi-lnfo [1] 


Not present 






measResult [1] SEQUENCE { 








utra-RSCP 


(-5..91) 




UTRA- 
TDD 


utra-EcNO 


(0..49) 




UTRA- 


} 
} 

} 
} 
} 
} 
} 
} 






FDD 
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Table 8.3.2.6.3.3-8: MeasurementReport {step 3 Table 8.3.2.6.3.2-3) 



Derivation path: 36.508 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








C1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


3 






measResultServCell ::= SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 




Report Cell 24 




measResultListGERAN SEQUENCE (SIZE 


1 entry 






(1 ..maxCellReport)) OF MeasResultGERAN 








SEQUENCE! 








carrierFreq [1] 


Not checked 






physCellld[1] 


physCellldofcell24 






cgi-lnfo [1] 


Not present 






measResult [1] SEQUENCE { 








rssi 
} 
} 
} 
} 
} 
} 
} 
} 


(0..63) 







8.3.2.7 



8.3.2.7.1 



Measurement configuration control and reporting / Inter-RAT measurements / 
Event B2 (measurement HRPD cells) 

Test Purpose (TP) 



(1) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for HRPD cell and not detected entering condition for the event 
B2 is met } 
ensure that { 

when { UE detects entering condition for the event B2 is not met } 
then { UE does not transmit any MeasurementReport } 



(2) 

with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for HRPD cell and not detected entering condition for the event 
B2 is met } 
ensure that { 

when { UE detects entering condition for the event B2 is met } 
then { UE transmits a MeasurementReport } 



(3) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for HRPD cell and detected entering condition for the event B2 
is met } 
ensure that { 

when { UE detects leaving condition for the event B2 is met } 
then { UE does not transmit any MeasurementReport } 
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8.3.2.7.2 Conformance Requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36.331 clauses 5.5.4.1, 
5.5.4.8, and 5.5.5. 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: . . . 

2>else: 



3> if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModifyList defined within the VarMeasurementConfiguration for this 
measid (i.e. the cell is included in the white-list); 



2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasurementConfiguration, is 
fulfilled for one or more applicable cells for a duration exceeding the value of timeToTrigger defined for this 
event within the VarMeasurementConfiguration while the VarMeasurementReports does not include an entry 
for this measid (a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOJReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOJReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during timeToTrigger defined within the VarMeasConfig for 
this event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 

4> remove the entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 
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NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodicaF while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup . 

[TS 36.331, clause 5.5.4.8] 

The UE shall: 

1> for UTRA and CDMA2000, only trigger the event for cells included in the corresponding measurement object; 

1> apply inequality B2-1 and inequality B2-2 i.e. both have to be fulfilled, as specified below, as the entry condition 
for this event; 

1> apply inequality B2-3 and inequality B2-4 i.e. at least one of the two has to be fulfilled, as specified below, as 
the leaving condition for this event; 

Inequality B2-1 (Entering condition 1) 

Ms+ HysKThreshl 

Inequality B2-2 (Entering condition 2) 

Mn + Ofn - Hys > Thresh! 

Inequality B2-3 (Leaving condition 1) 

Ms-Hys>ThresH 

Inequality B2-4 (Leaving condition 2) 

Mn + Ofn + Hys < Thresh! 

The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any offset. 

Mn is the measurement result of the inter-RAT neighbour cell, not taking into account any offsets. 

Ofn is the frequency specific offset of the frequency of the inter-RAT neighbour cell (i.e. ojfsetFreq as defined 
within the measObject corresponding to the frequency of the inter-RAT neighbour cell). 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfiglnterRAT for this event). 

Threshl is the threshold parameter for this event (i.e. h2-Thresholdl as defined within reportConfiglnterRAT for 
this event). 

Threshl is the threshold parameter for this event (i.e. b2-Threshold2 as defined within reportConfiglnterRAT foT 
this event). 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Mn is expressed in dBm or dB, depending on the measurement quantity of the inter RAT neighbour cell. 

Ofn, Hys are expressed in dB. 

Threshl is expressed in the same unit as Ms. 

Threshl is expressed in the same unit as Mn. 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 
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1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResuUNeighCells to include the best neighbouring cells up to maxReportCells in accordance with the 
following: 

3> if the triggerType is set to 'event': 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasurementReports for this 
measid; 



> for each cell that is included in the measResultNeighCells, include the physCellld; 

3> if the triggerType is set to 'event'; or the purpose is set to ' reportStrongestCells' or to 
' reportStrongestCellsForSON' : 

4> for each included cell include the layer 3 filtered measured results in accordance with the reportConfig 
for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing triggerQuantity, i.e. the best cell is included first; 



1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfigf or this measid : 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 



1> if the measured results are for CDMA2000 IxRTT: 
2> set the preRegistrationStatusHRPD to ^ FALSE"; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends. 
8.3.2.7.3 Test description 

8.3.2.7.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 is high quality cell on E-UTRA 

- Cell 15 and Cell 16 are high quality cell on HRPD. 
UE: 

None. 
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Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.2.7.3.2 Test procedure sequence 

Table 8.3.2.7.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while columns marked 
"Tl", "T2" "T3" and "T4" are to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 8.3.2.7.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Cell 15 


Cell 16 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-60 


- 


- 


The power level values are 
such that entering conditions 
for event B2 are not satisfied. 


lor/loc 


dB 


- 


-20 


-20 


loc 


dBm/1.23MHz 


- 


-55 


-55 


Pilot Ec/lo(Note1) 


dB 


- 


-20 


-20 


T1 


Cell-specific RS EPRE 


dBm/15kHz 


-80 


- 


- 


The power level values are 
such that entering conditions 
for event B2 are satisfied. 


lor/loc 


dB 


- 


-5 


-20 


loc 


dBm/1.23MHz 


- 


-55 


-55 


Pilot Ec/lo(Note1) 


dB 


- 


-6 


-20 


T2 


Cell-specific RS EPRE 


dBm/15kHz 


-60 


- 


- 


The power level values are 
such that leaving conditions for 
event B2 are satisfied. 


lor/loc 


dB 


- 


-20 


-20 


loc 


dBm/1.23MHz 


- 


-55 


-55 


Pilot Ec/lo(Note1) 


dB 


- 


-20 


-20 


T3 


Cell-specific RS EPRE 


dBm/15kHz 


-80 


- 


- 


The power level values are 
such that entering conditions 
for event B2 are satisfied. 


lor/loc 


dB 


- 


-5 


-20 


loc 


dBm/1.23MHz 


- 


-55 


-55 


Pilot Ec/lo(Note1) 


dB 


- 


-8 


-20 


T4 


Cell-specific RS EPRE 


dBm/15kHz 


-60 


- 


- 


The power level values are 
such that leaving conditions for 
event B2 are satisfied. 


lor/loc 


dB 


- 


-20 


-20 


loc 


dBm/1.23MHz 


- 


-55 


-55 


Pilot Ec/lo(Note1) 


dB 


- 


-20 


-20 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other parameters set by the 
SS. 
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Table 8.3.2.7.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup inter RAT measurement on Cell 1 . 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of inter RAT 
measurement on Cell 1 . 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 during the next 10s? 


-> 


MeasurementReport 


1 


F 


4 


The SS changes Cell 1 , Cell 1 5 and Cell 1 6 
parameters according to row "T1" in table 
8.3.2.7.3.2-1. 










5 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 for Cell 15, not including Cell 16? 


-> 


MeasurementReport 


2 


P 


6 


Void 


- 


- 


- 


- 


7 


The SS changes Cell 1 , Cell 1 5 and Cell 1 6 
parameters according to row "T2" in table 
8.3.2.7.3.2-1. 










8 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 during the next 10s? 


-> 


MeasurementReport 


3 


F 


9 


The SS changes Cell 1, Cell 15 and Cell 16 
parameters according to row "T3" in table 
8.3.2.7.3.2-1. 










10 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event 82 for Cell 15, not including Cell 16? 


-> 


MeasurementReport 


2 


P 


11 


Void 


- 


- 


- 


- 


12 


The SS changes Cell 1, Cell 15 and Cell 16 
parameters according to row "T4" in table 
8.3.2.7.3.2-1. 










13 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 during the next 10s? 


-> 


MeasurementReport 


3 


F 


14 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 











8.3.2.7.3.3 Specific Message Contents 

Table 8.3.2.7.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.3.2.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 


Information Element 


Value/remaric 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








radioResourceConfiguration 


Not present 






} 








1 








1 








} 
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Table 8.3.2.7.3.3-2: MeasConfig (Table 8.3.2.7.3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldlVleasObject-f14 






measObject[1] 


MeasObjectCDMA2000- 
GENERIC 






1 








reportConfigloAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-CDMA2000(-69, -18) 






} 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasObject-f14 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






} 








quantityConfig SEQUENCE { 








quantityConfigCDMA2000 SEQUENCE { 








measQuantityCDIVIA2000 


pilotStrength 






} 








} 








measGapConfig SEQUENCE { 








gapActivation CHOICE { 








activate SEQUENCE { 








gapPattern CHOICE { 








gp1 SEQUENCE { 








gapOffset 









1 








1 








} 








} 








} 








} 








Table 8.3.2.7.3.3-3: MeasObjectCDMA2000-GENERIC(Tab\e 8.3.2.7.3.3-2) 


Derivation Path: 36.508, Table 4.6.6-1 C 


Information Element 


Value/remark 


Comment 


Condition 


MeasObjectCDMA2000-GENERIC ::= SEQUENCE { 








cdma2000-Type 


TypeHRPD 






carrierFreq SEQUENCE { 








bandClass 


Band Class of frequency 
under test 






arfcn 


f14 






} 








searchWindowSize 


15 






offsetFreq 


dbO 






cellsToRemoveList 


Not present 






cellsToAddModList CHOICE {} 


[Not present] 






cellForWhichToReportCGI 


Not present 






} 
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Table 8.3.2.7.3.3-4: MeasurementReport {steps 5 and 10, Table 8.3.2.7.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultsCDMA2000 :=SEQUENCE { 








preRegistrationStatusHRPD 


FALSE 






measResultUstCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 15 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








pilotStrength 


(0..63) 






1 








1 








} 








} 








} 








1 








1 








} 








} 









8.3.2.8 



8.3.2.8.1 



Measurement configuration control and reporting / Inter-RAT measurements / 
Periodic reporting / Measurement of HRPD cells) 

Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_CONNECTED state and measurement configured for periodic reporting of HRPD 
cells } 
ensure that { 

when { The UE receives reference signal power for cells on the HRPD frequency where measurements 
are configured } 

then { UE sends MeasurementReport message at regular intervals for these HRPD cells } 

} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and a Measurement Report message for a configured periodic 
measurement reporting of HRPD cells on a configured frequency were sent } 
ensure that { 

when { A previously reported cell become unavailable or the UE receives reference signal power on 
a reported HRPD frequency for a cell which was previously not reported } 

then { UE sends MeasurementReport message at regular intervals for the available HRPD cells } 



(3) 

with { UE in E-UTRA RRC_CONNECTED state and periodic measurement reporting of HRPD cells ongoing} 
ensure that { 

when { The UE receives a RRCConnectionReconfiguration message removing the measID of periodic 
reporting of HRPD cells } 

then { UE stops sending MeasurementReport message for HRPD cells } 
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8.3.2.8.2 Conformance Requirements 

References: The conformance requirements covered in tlie present TC are specified in: 3GPP TS 36.331 clauses 5.3.5.3, 
5.5.2.2,5.5.4.1 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInformation and the UE is able to 
comply with the configuration included in this message, the UE shall: 



1> if the RRCConnectionReconfiguration message includes the measurementConfiguration: 
2> perform the measurement configuration procedure as specified in 5.5.2; 
[TS 36.331, clause 5.5.2.2] 
The UE shall: 

1> for each measid value included in the measIdToRemoveList: 

2> remove the entry, from the parameter measIdList within VarMeasurementConfiguration, with the 
corresponding measid value; 

2> remove the entry within the VarMeasurementReports for this measid, if included; 

2> reset the periodical reporting timer or timer T321, whichever one is running, as well as associated 
information (e.g. timeToTrigger) for this measid. 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasurementConfiguration: 

2> if the triggerType is set to 'event': 

3> if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModifyList defined within the VarMeasurementConfiguration for this 
measid (i.e. the cell is included in the white-list); 

3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasurementConfiguration for this measid; 

3> else if the corresponding measObject concerns EUTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the 
concerned cell is not included in the blackListedCellsToAddModiJyList defined within the 
VarMeasurementConfiguration for this measid; 

2> else consider a neighbouring cell on the associated frequency/ set of frequencies (GERAN) to be applicable 
as follows: 

3> if the corresponding reportingConfig includes a purpose set to 'reportStrongestCellsForSON': 

4> consider any neighbouring cell detected on the associated frequency to be applicable 

3> if the corresponding reportingConfig includes a purpose set to ' reportCGF : 
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4> consider any neighbouring cell detected on the associated frequency/ set of frequencies (GERAN) 
which has a physicalCellldentity matching the value of the cellForWhichToReportCGI included in 
the corresponding measObject within the VarMeasurementConfiguration to be applicable 

3> else: 

4> if the corresponding measObject concerns UTRA or CDMA2000: 

5> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell 
is included in the cellsToAddModifyList defined within the VarMeasurementConfiguration for this 
measid (i.e. the cell is included in the white-list); 



2> if the triggerType is set to 'periodical' and a (first) measurement result is available for one or more 
applicable cells: 

3> include an entry within the VarMeasurementReports for this measid; 

3> set the numberOfReportsSent defined within the VarMeasurementReports for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1: If the purpose is set to 'reportStrongestCells' or to ' reportStrongestCellsForSON', the UE initiates a first 
measurement report immediately after the requested reportQuantity becomes available for at least either 
serving cell or one of the applicable cells 

2> Upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> upon expiry of the T321 for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measuredResults 
within the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the neighbouringMeasResults to include the best neighbouring cells up to maxReportCells in accordance with 
the following: 

2> if the triggerType is set to 'evenf: 

3> include the cells included in the cellsTriggeredList as defined within the VarMeasurementReports for this 
measid; 

2> else: 

3> set the neighbouringMeasResults to include the applicable cells for which the requested reportQuantity 
has been available since the last periodical reporting or since the measurement was initiated or reset; 

2> for each cell that is included in the neighbouringMeasResults, include the physicalCellldentity; 

1> increment the numberOfReportsSent as defined within the VarMeasurementReports for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasurementReports for this measid is less than the 
reportAmount as defined within the corresponding reportingConfiguration as defined in the 
VarMeasurementConfiguration: 

2> stop the periodical reporting timer, if running; 
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2> start the periodical reporting timer with the value of reportlnterval as defined within the 
VarMeasurementConfiguration for this measid; 

1> else if the numberOfReportsSent as defined within the V arMeasurementReports for this measid is equal to the 
reportAmount as defined within the corresponding reportingConfiguration as defined in the 
VarMeasurementConfiguration: 

2> if the triggerType is set to 'periodical' : 

3> remove the entry within the VarMeasurementReports for this measid; 

1> if the measured results are for CDMA HRPD: 

2> set the hrpdPreRegistrationStatus to the UE's CDMA upper layer's HRPD preRegistrationStatus; 

1> if the measured results are for CDMA IxRTT: 

2> set the hrpdPreRegistrationStatus to "0' ; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends. 

8.3.2.8.3 Test description 

8.3.2.8.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 is high quality cell on E-UTRA 

- Cell 15 and Cell 16 are high quahty cell on HRPD 
UE: 

None. 
Preamble: 

The UE is brought to state Generic RB Established (state 3) according to [18] on Cell 1 

8.3.2.8.3.2 Test procedure sequence 

Table 8.3.2.8.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while columns marked "Tl" 
and "T2" are to be applied subsequently. The exact instants on which these values shall be applied are described in the 
texts in this clause. 
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Table 8.3.2.8.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 15 


Cell 16 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15kHz 


-60 


- 


- 


Power levels shall be such 
that camping on Cell 1 is 
guaranteed. 


lor/loc 


dB 


- 


-5 


-20 


loc 


dBm/1.23 
MHz 


- 


-55 


-55 


CPICH Ec/lo 
(Note1) 


dB 


- 


-6 


-20 


T1 


Cell-specific RS 
EPRE 


dBm/15kHz 


-60 


- 


- 




lor/loc 


dB 


- 


-5 


-5 


loc 


dBm/1.23 
MHz 


- 


-55 


-55 


CPICH Ec/lo 
(Note1) 


dB 


- 


-6 


-6 


T2 


Cell-specific RS 
EPRE 


dBm/15kHz 


-60 


- 


- 




lor/loc 


dB 


- 


-20 


-5 


loc 


dBm/1.23 
MHz 


- 


-55 


-55 


CPICH Ec/lo 
(Note1) 


dB 


- 


-20 


-6 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other parameters 
set by the SS. 
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Table 8.3.2.8.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message 
including measConfig to setup measurements 
and periodical reporting for HRPD cells. 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm measurement on Cell 15. 


— > 


RRCConnectionReconfigurationC 
ompiete 








EXCEPTION: In parallel to events described in 
steps 3 and 4, the steps specified in table 
8.3.2.8.3.2-3 shall take place 










3 


Wait for 30 s to ensure that the UE performs a 
periodical reporting of HRPD cells. 


- 


- 


- 


- 


4 


SS sets the cell-specific reference signal levels 
for Cell 1 , Cell 1 5 and Cell 1 6 according to row 
"T1" in table 8.3.2.8.3.2-1. 










5 


Wait and ignore MeasurementReport 
messages for 5 s to allow for the switching of 
cells. 












EXCEPTION: In parallel to events described in 
steps 6 to 7 the steps specified in table 
8.3.2.8.3.2-4 shall take place 










6 


Wait for 30 s to ensure that the UE performs a 
periodical reporting of HRPD cells. 


- 


- 


- 


- 


7 


SS sets the cell-specific reference signal levels 
for Cell 1 , Cell 15 according to row "T2" in 
table 8.3.2.4.3.2-1. 










8 


Wait and ignore MeasurementReport 
messages for 5 s to allow for the switching of 
cells. 












EXCEPTION: In parallel to events described in 
steps 9 to 10 the steps specified in table 
8.3.2.8.3.2-5 shall take place 










9 


Wait for 30 s to ensure that the UE performs a 
periodical reporting of HRPD cells. 


- 


- 


- 


- 


10 


SS transmits an 

RRCConnectionReconfiguration message 
including measConfig \o remove measid for 
periodic reporting. 


<— 


RRCConnectionReconfiguration 






11 


The UE transmits an 

RRCConnectionReconfigrationCompiete 

message 


— > 


RRCConnectionReconfigurationC 
ompiete 






Table 8.3.2.8.3.2-3: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: After the 1st message is 
received, step 1 below shall be repeated every 
time the duration indicated in the IE 
reportlntervai has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical intra frequency reporting for Cell 15? 


~> 


MeasurementReport 


1 


P 
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Table 8.3.2.8.3.2-4: Parallel behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Step 1 below shall be repeated 
every time the duration indicated in the IE 
reportlnterval has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical intra frequency reporting for Cell 15 
and Cell 16? 


-> 


MeasurementReport 


1,2 


P 



Table 8.3.2.8.3.2-5: Parallel behaviour 



St 



Procedure 



U-S 



miessage Sequence 



Message 



TP 



Verdict 



EXCEPTION: Step 1 shall be repeated every 
time the duration indicated in the IE 
reportlnterval has elapsed. 



Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical intra frequency reporting for Cell 16? 



MeasurementReport 



1,2 



8.3.2.8.3.3 Specific message contents 

Table 8.3.2.8.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.3.2.8.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8, condition MEAS 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








radioResourceConfiguration 


Not present 






1 








1 








} 








} 
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Table 8.3.2.8.3.3-2: MeasConfig (Table 8.3.2.8.3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


measConfig ::= SEQUENCE { 








measObjectToAddModifyUst SEQUENCE (SIZE 
(1 ..maxObjectId)) QF SEQUENCE { 


1 entry 






measQbjectld[1] 


ldlVleasQbject-f14 






measQbject[1] 


MeasQbjectCDMA2000- 
GENERIC 






1 








reportConfigloAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






reportConfig[1] 


ReportConfiglnterRAT- 
PERIQDICAL 






} 








measidloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasQbject-f14 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






} 








quantityConfig SEQUENCE { 








quantityConfigCDMA2000 SEQUENCE { 








measQuantityCDIVIA2000 


pilotStrength 






} 








} 








measGapConfig SEQUENCE { 








gapActivation CHQICE { 








activate SEQUENCE { 








gapPattern CHQICE { 








gp1 SEQUENCE { 








gapQffset 









1 








1 








} 








} 








} 








} 








Table 8.3.2.8.3.3-3: MeasObjectCDMA2000-GENERIC(Tab\e 8.3.2.4.3.3-2) 


Derivation Path: 36.508, Table 4.6.6-1 C 


Information Element 


Value/remark 


Comment 


Condition 


MeasQbjectCDMA2000-GENERIC ::= SEQUENCE { 








cdma2000-Type 


TypeHRPD 






carrier Freq SEQUENCE { 








bandClass 


Band Class of frequency 
under test 






bandClassfrequency 


f14 






} 








searchWindowSize 


15 






offsetFreq 


dbO 






cellsToRemoveList 


Not present 






cellsToAddModifyList CHQICE {} 


Not present 






cellForWhichToReportCGI 


Not present 






} 
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Table 8.3.2.8.3.3-4: MeasurementReport {step 1 Table 8.3.2.8.3.2-3, Table 8.3.2.8.3.2-4, Table 

8.3.2.8.3.2-5) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








G1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultsCDMA2000 :=SEQUENCE { 








preRegistrationStatusHRPD 


FALSE 






measResultListCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 




Table 

8.3.2.8.3.2- 

3 


physCellld[1] 


PhysicalCellldentity of 
Cell 15 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








pilotStrength 


(0..63) 






1 








1 








measResultListCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


2 entries 




Table 

8.3.2.8.3.2- 

4 


physCellld[1] 


PhysicalCellldentity of 
Cell 15 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








pilotStrength 


(0..63) 






} 








physCellld[2] 


PhysicalCellldentity of 
Cell 16 






cgi-lnfo[2] 


Not present 






measResult[1] SEQUENCE { 








pilotStrength 


(0..63) 






1 








1 








measResultUstCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 




Table 

8.3.2.8.3.2- 

5 


physCellld[1] 


PhysicalCellldentity of 
Cell 16 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








pilotStrength 


(0..63) 






} 








1 








1 








} 








} 








} 








1 








1 








} 
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Table 8.3.2.8.3.3-5: RRCConnectionReconfiguration (step 10, Table 8.3.2.8.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 



Table 8.3.2.8.3.3-6: MeasConfig (Table 8.3.2.8.3.3-5) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measldToRemoveList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






1 








1 









8.3.2.9 



8.3.2.9.1 



Measurement configuration control and reporting / Inter-RAT measurements / 
Event B2 / Measurement of 1xRTT cells) 

Test Purpose (TP) 



(1) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for IxRTT cell and not detected entering condition for the event 
B2 is met } 
ensure that { 

when { UE detects entering condition for the event B2 is not met } 
then { UE does not transmit any MeasurementReport } 
} 

(2) 

with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for IxRTT cell and not detected entering condition for the event 
B2 is met } 
ensure that { 

when { UE detects entering condition for the event B2 is met } 
then { UE transmits a MeasurementReport } 



(3) 

with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for IxRTT cell and detected entering condition for the event B2 
is met } 
ensure that { 

when { UE detects leaving condition for the event B2 is met } 
then { UE does not transmit any MeasurementReport } 



8.3.2.9.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.5.4.1, 
5.5.4.8 and 5.5.5. 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig 



2>else : 
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3> if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 



2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfig, while the VarMeasReportList does not include an measurement 
reporting entry for this measid (a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during timeToTrigger defined within the VarMeasConfign for 
this event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 

4> remove the measurement reporting entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 

2> if the purpose is included and set to 'reportStrongestCells' or to 'reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1: If i\\t purpose is set to 'reportStrongestCells', the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON', the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 
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[TS 36.331, clause 5.5.4.8] 

The UE shall: 

1> for UTRA and CDMA2000, only trigger the event for cells included in the corresponding measurement object; 

1> consider the entering condition for this event to be satisfied when both condition B2-1 and condition B2-2, as 
specified below, are fulfilled; 

1> consider the leaving condition for this event to be satisfied when condition B2-3 or condition B2-4, i.e. at least 
one of the two, as specified below, is fulfilled; 



Inequality B2-1 (Entering condition 1) 



Inequality B2-2 (Entering condition 2) 



Inequality B2-3 (Leaving condition 1) 



Ms+ Hys<Threshl 



Mn + Ofn - Hys > Thresh! 



Ms-Hys>Thresh\ 

Inequality B2-4 (Leaving condition 2) 

Mn + Ofn + Hys < Thresh! 

The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any offsets. 

Mn is the measurement result of the inter-RAT neighbour cell, not taking into account any offsets. 

Ofn is the frequency specific offset of the frequency of the inter-RAT neighbour cell (i.e. ojfsetFreq as defined 
within the measObject corresponding to the frequency of the inter-RAT neighbour cell). 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfiglnterRAT for this event). 

Threshl is the threshold parameter for this event (i.e. h2-Thresholdl as defined within reportConfiglnterRAT for 
this event). 

Threshl is the threshold parameter for this event (i.e. b2-Threshold2 as defined within reportConfiglnterRAT for 
this event). 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Mn is expressed in dBm or dB, depending on the measurement quantity of the inter-RAT neighbour cell. 

Ofn, Hys are expressed in dB. 

Threshl is expressed in the same unit as Mn. 

Threshl is expressed in the same unit as Mn. 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measuredResults 
within the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultsNeighCells to include the best neighbouring cells up to maxReportCells in accordance 
with the following: 
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3> if the triggerType is set to 'event': 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResultsNeighCells, include the physCellld; 

3> if the triggerType is set to 'evenf; or iht purpose is set to 'reportStrongestCells' or to 
'reportStrongestCelLsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 

3> else if the purpose is set to 'reportCGF : 

4> if the mandatory present fields of the globalCellldentity for the cell indicated by the 
cellForWhichToReportCGI in the associated measObject have been obtained: 

5> include the cgi-Info containing all the fields that have been successfully acquired; 

1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical' : 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 

1> if the measured results are for CDMA2000 HRPD: 

2> set the preRegistrationStatusHRPD to the UE's CDMA2000 upper layer's HRPD preRegistrationStatus; 

l> if the measured results are for CDMA2000 IxRTT: 

2> set the preRegistrationStatusHRPD to 'FALSE'; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 
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8.3.2.9.3 Test description 

8.3.2.9.3.1 Pre-test conditions 
System Simulator: 

- Cell 1, Cell 19 and Cell 20. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.2.9.3.2 Test procedure sequence 

Table 8.3.2.9.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while rows marked "Tl", 
"T2", "T3" and "T4" are to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 
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Table 8.3.2.9.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Celll 


Cell 
19 


Cell 20 


Remark 


TO 


Cell-specific 
RS EPRE 


dBm/15 
kHz 


-60 


- 


- 


The power level values are such 
that entering conditions for 
event B2 are not satisfied. 


lor/loc 


dB 


- 


-15 


-15 


Pilot Ec/lor 


dB 


- 


-7 


-7 


loc 


dBm/1.2 
3 MHz 


- 


-75 


-75 


Pilot Ec/lo 
(Note 1 ) 


dB 


- 


-22 


-22 


T1 


Cell-specific 
RS EPRE 


dBm/15 
kHz 


-80 


- 


- 


The power level values are such 
that entering conditions for 
event B2 are satisfied. 


lor/loc 


dB 


- 





-15 


Pilot Ec/lor 


dB 


- 


-7 


-7 


loc 


dBm/1.2 
3 MHz 


- 


-75 


-75 


Pilot Ec/lo 
(Notel) 


dB 


- 


-10 


-22 


12 


Cell-specific 
RS EPRE 


dBm/15 
kHz 


-60 


- 


- 


The power level values are such 
that leaving conditions for event 
B2 are satisfied. 


lor/loc 


dB 


- 


-15 


-15 


Pilot Ec/lor 


dB 


- 


-7 


-7 


loc 


dBm/1.2 
3 MHz 


- 


-75 


-75 


Pilot Ec/lo 
(Note 1) 


dB 


- 


-22 


-22 


13 


Cell-specific 
RS EPRE 


dBm/15 
kHz 


-80 


- 


- 


The power level values are such 
that entering conditions for 
event B2 are satisfied. 


lor/loc 


dB 


- 





-15 


Pilot Ec/lor 


dB 


- 


-7 


-7 


loc 


dBm/1.2 
3 MHz 


- 


-75 


-75 


Pilot Ec/lo 
(Note 1) 


dB 


- 


-10 


-22 


14 


Cell-specific 
RS EPRE 


dBm/15 
kHz 


-60 


- 


- 


The power level values are such 
that leaving conditions for event 
B2 are satisfied. 


lor/loc 


dB 


- 


-15 


-15 


Pilot Ec/lor 


dB 


- 


-7 


-7 


loc 


dBm/1.2 
3 MHz 


- 


-75 


-75 


Pilot Ec/lo 
(Note 1) 


dB 


- 


-22 


-22 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other 
parameters set by the SS. 
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Table 8.3.2.9.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup inter RAT measurement on Cell 1 . 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of inter RAT 
measurement on Cell 1 . 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 during the next 10s? 


-> 


MeasurementReport 


1 


F 


4 


The SS changes Cell 1 , Cell 1 9 and Cell 20 
parameters according to row "T1" in table 
8.3.2.9.3.2-1. 










5 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 for Cell 19, not including Cell 20? 


-> 


MeasurementReport 


2 


P 


6 


Void 


- 


- 


- 


- 


7 


The SS changes Cell 1 , Cell 1 9 and Cell 20 
parameters according to row "T2" in table 
8.3.2.9.3.2-1. 










8 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 during the next 10s? 


-> 


MeasurementReport 


3 


F 


9 


The SS changes Cell 1, Cell 19 and Cell 20 
parameters according to row "T3" in table 
8.3.2.9.3.2-1. 










10 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event 82 for Cell 19, not including Cell 20? 


-> 


MeasurementReport 


2 


P 


11 


Void 


- 


- 


- 


- 


12 


The SS changes Cell 1, Cell 19 and Cell20 
parameters according to row "T4" in table 
8.3.2.9.3.2-1. 










13 


Check: Does the UE transmit a 
MeasurementReport message to report the 
event B2 during the next 10s? 


-> 


MeasurementReport 


3 


F 


14 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 











8.3.2.9.3.3 Specific message contents 

Table 8.3.2.9.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.3.2.9.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 
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Table 8.3.2.9.3.3-2: MeasConfig (Table 8.3.2.9.3.3-1) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldlVleasObject-f1 7 






measObject[1] 


MeasObjectCDMA2000- 
GENERIC 






1 








reportConfigloAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-CDMA2000(-69, -18) 






} 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


IdMeasObject-fl 7 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






} 








quantityConfig SEQUENCE { 








quantityConfigCDMA2000 SEQUENCE { 








measQuantityCDIVIA2000 


pilotStrength 






} 








} 








measGapConfig SEQUENCE { 








gapActivation CHOICE { 








activate SEQUENCE { 








gapPattern CHOICE { 








gp1 SEQUENCE { 








gapOffset 









1 








1 








} 








} 








} 








} 








Table 8.3.2.9.3.3-3: MeasObjectCDMA2000-GENERIC(Tab\e 8.3.2.9.3.3-2) 


Derivation Path: 36.508, Table 4.6.6-1 C 


Information Element 


Value/remark 


Comment 


Condition 


MeasObjectCDMA2000-GENERIC ::= SEQUENCE { 








cdma2000-Type 


TypelXRTT 






CarrierFreqCDMA2000 SEQUENCE { 








bandClass 


Band Class of frequency 
under test 






arfcn 


f17 






} 








searchWindowSize 


15 






offsetFreq 


dbO 






cellsToRemoveList 


Not present 






cellsToAddModList CHOICE {} 


[Not present] 






cellForWhichToReportCGI 


Not present 






} 
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Table 8.3.2.9.3.3-3: MeasurementReport {steps 5 and 10, Table 8.3.2.9.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResults NeighCells CHOICE { 








measResultsCDMA2000 :=SEQUENCE { 








preRegistrationStatusHRPD 


FALSE 






measResultUstCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 19 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








pilotStrength 


(0..63) 






1 








1 








} 








} 








} 








1 








1 








} 








} 









8.3.2.10 

8.3.2.10.1 
(1) 



Measurement configuration control and reporting / Inter-RAT measurements / 
Periodic reporting / Measurement of IxRTT cells 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state and measurement configured for periodic reporting of IxRTT 
cells } 
ensure that { 

when { The UE receives reference signal power for cells on the IxRTT frequency where measurements 
are configured } 

then { UE sends MeasurementReport message at regular intervals for these IxRTT cells } 



(2) 

with { UE in E-UTRA RRC_CONNECTED state and a Measurement Report message for a configured periodic 
measurement reporting of IxRTT cells on a configured frequency was sent } 
ensure that { 

when { A previously reported cell become unavailable or the UE receives reference signal power on 
a reported IxRTT frequency for a cell which was previously not reported } 

then { UE sends MeasurementReport message at regular intervals for the available IxRTT cells } 



(3) 

with { UE in E-UTRA RRC_CONNECTED state and periodic measurement reporting of IxRTT cells ongoing} 
ensure that { 

when { The UE receives an RRCConnectionReconfiguration message removing the measID of periodic 
reporting of IxRTT cells } 

then { UE stops sending MeasurementReport message for IxRTT cells } 
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8.3.2.10.2 Conformance requirements 

References: The conformance requirements covered in tlie current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.2.2,5.5.4.1 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> If the RRCConnectionReconfiguration message includes the measConfig: 

2> perform the Measurement configuration procedure as specified in 5.5.2; 

[TS 36.331, clause 5.5.2.2] 

The UE shall: 

1> for each measid included in the received measIdToRemoveList that is part of the current UE configuration in 
varMeasConfig: 

2> remove the entry with the matching measid from the measIdList within the VarMeasConfig; 

2> remove the measurement reporting entry for this measid from the VarMeasReportList, if included; 

2> stop the periodical reporting timer or timer T321, whichever one is running, and reset the associated 
information (e.g. timeToTrigger) for this measid; 

NOTE: The UE does not consider the message as erroneous if the measIdToRemoveList includes any measid 
value that is not part of the current UE configuration. 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the corresponding reportConfig includes a purpose set to ' reportStrongestCellsForSON' : 

2> else if the corresponding reportConfig includes a purpose set to 'reportCGF: 

2> else: 

3> if the corresponding measObject concerns E-UTRA: 

3> else if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 

2> if the purpose is included and set to 'reportStrongestCells' or to 'reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOJReportsSent defined within the VarMeasReportList for this measid to 0; 
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3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1: If the purpose is set to ' reportStrongestCells\ the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON\ the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 



2> upon expiry of the T321 for this measid: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'evenf or to 'periodicaF while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

NOTE 3: If the UE is configured with DRX, the UE may delay the measurement reporting for event triggered and 
periodical triggered measurements until the Active Time, which is defined in TS 36.321 [6]. 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultsNeighCells to include the best neighbouring cells up to maxReportCells in accordance 
with the following: 

3> if the triggerType is set to 'event': 



3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResultsNeighCells, include the physCellld; 

3> if the triggerType is set to 'event'; or the purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 



5> else: 
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6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 

3> else if the purpose is set to 'reportCGF : 

1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measldhy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical' : 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 
1> if the measured results are for CDMA2000 HRPD: 

1> if the measured results are for CDMA2000 IxRTT: 
2> set the preRegistrationStatusHRPD to 'FALSE'; 
1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 
8.3.2.10.3 Test description 

8.3.2.10.3.1 Pre-test conditions 
System Simulator: 

- Cell l,Celll9 and Cell 20. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18] on Cell 1. 

8.3.2.1 0.3.2 Test procedure sequence 

Table 8.3.2. 10.3.2-1 illustrates the downlink power levels to be applied for the cells at various time instants of the test 
execution. Row marked "TO" denotes the initial conditions, while rows marked "Tl" and "T2" are to be applied 
subsequently. The exact instants on which these values shall be applied are described in the texts in this clause. 
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Table 8.3.2.10.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 19 


Cell 20 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


- 


Power levels shall be such that 
camping on Cell 1 is guaranteed. 


lor/loc 


dB 


- 





-15 


Pilot Ec/ lor 


dB 


- 


-7 


-7 


loc 


dBm/1.2 
3 MHz 


- 


-75 


-75 


Pilot Ec/lo 
(Note 1) 


dB 


- 


-10 


-22 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


- 




lor/loc 


dB 


- 








Pilot Ec/ lor 


dB 


- 


-7 


-7 


loc 


dBm/1.2 
3 MHz 


- 


-75 


-75 


Pilot Ec/lo 
(Note 1) 


dB 


- 


-10 


-10 


T2 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


- 




lor/loc 


dB 


- 


-15 


-0 


Pilot Ec/ lor 


dB 


- 


-7 


-7 


loc 


dBm/1.2 
3 MHz 


- 


-75 


-75 


Pilot Ec/lo 
(Note 1) 


dB 


- 


-22 


-10 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other parameters 
set by the SS. 
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Table 8.3.2.10.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including measurementConfiguration to setup 
measurements and periodical reporting for 
IxRTT cells. 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RCConnectionReconfigrationComplete 

message. 


— > 


RRCConnectionReconfigurationC 
omplete 








EXCEPTION: In parallel to the events 
described in steps 3 to 4, the steps specified in 
table 8.3.2.10.3.2-3 shall take place. 










3 


Wait for 30 s to ensure that the UE performs a 
periodical reporting of IxRTT cells. 


- 


- 


1 


- 


4 


SS sets the cell-specific reference signal levels 
and switches Cell 20 on according to row "T1" 
in table 8.3.2.1 0.3.2-1. 










5 


Wait and ignore MeasurementReport 
messages for 5 s to allow for the switching of 
cells. 












EXCEPTION: In parallel to the events 
described in steps 6 to 7, the steps specified In 
table 8.3.2.10.3.2-4 shall take place. 










6 


Wait for 30 s to ensure that the UE performs a 
periodical reporting of IxRTT cells. 


- 


- 


1,2 


- 


7 


SS sets the cell-specific reference signal levels 
and switches Cell 19 off according to row "T2" 
in table 8.3.2.1 0.3.2-1. 










8 


Wait and ignore MeasurementReport 
messages for 5 s to allow for the switching of 
cells. 












EXCEPTION: In parallel to the events 
described in steps 9 to 10, the steps specified 
in table 8.3.2.10.3.2-5 shall take place. 










9 


Wait for 30 s to ensure that the UE performs a 
periodical reporting of IxRTT cells. 


- 


- 


1,2 


- 


10 


SS transmits an 

RRCConnectionReconfiguration message 
including measurementConfiguration to 
remove measid for periodic reporting. 


<— 


RRCConnectionReconfiguration 






11 


The UE transmits an 

RCConnectionReconfigrationCompiete 

message 


— > 


RRCConnectionReconfigurationC 
omplete 







Table 8.3.2.10.3.2-3: Parallel behaviour 



St 



Procedure 



U-S 



imessage Sequence 



Message 



TP 



Verdict 



EXCEPTION: After the 1st message is 
received, step 1 below shall be repeated every 
time the duration indicated in the IE 
reportlntervai has elapsed. 



Check: Does the UE transmit a 
l\/leasurementReport message to perform 
periodical intra frequency reporting for Cell 19? 



MeasurementReport 
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Table 8.3.2.10.3.2-4: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Step 1 below shall be repeated 
every time the duration indicated in the IE 
reportlnterval has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical intra frequency reporting for Cell 20 
and Cell20? 


~> 


MeasurementReport 


1,2 


P 


Table 8.3.2.10.3.2-5: Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Step 1 shall be repeated every 
time the duration indicated in the IE 
reportlnterval has elapsed. 










1 


Check: Does the UE transmit a 
MeasurementReport message to perform 
periodical intra frequency reporting for Cell 20? 


-> 


MeasurementReport 


1,2 


P 



8.3.2.10.3.3 Specific message contents 

Table 8.3.2.10.3.3-1: RRCConnectionReconfiguration (step 1, Table 8.3.2.10.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 
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Table 8.3.2.10.3.3-2: MeasConfig (step 1, Table 8.3.2.10.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldlVleasObject-f1 7 






measObject[1] 


MeasObjectCDMA2000 






) 








reportConfigloAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-f17 






reportConfig[1] 


ReportConfiglnterRAT- 
PERIODICAL 






1 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasObject-f1 7 






reportConfigld[1] 


ldReportConfig-f17 






1 








quantityConfig SEQUENCE { 








quantityConfigEUTRA 


Not present 






quantityConfigUTRA 


Not present 






quantityConfigGERAN 


Not present 






quantityConfigCDMA2000 SEQUENCE { 


Not present 






measQuantityCDMA2000 


pilotStrength 






} 








} 








measGapConfig SEQUENCE { 








gapActivation CHOICE { 








activate SEQUENCE { 








gapPattern CHOICE { 








gp1 SEQUENCE { 








gapOffset 









1 








} 








} 








} 








1 








} 








Table 8.3.2.10.3.3-3: MeasObjectCDMA2000 (step 1, Table 8.3.2.10.3.2-2) 


Derivation Path: 36.508, Table 4.6.6-1 C 


Information Element 


Value/remark 


Comment 


Condition 


MeasObjectCDMA2000-GENERIC ::= SEQUENCE { 








cdma2000-Type 


TypelXRTT 






CarrierFreqCDMA2000 SEQUENCE { 








bandClass 


Band Class of frequency 
under test 






arfcn 


f17 






1 








SearchWindowSize 


15 






offsetFreq 


dbO 






cellsToRemoveList 


Not present 






cellsToAddModList CHOICE {} 


Not present 






cellForWhichToReportCGI 


Not present 






} 









ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



827 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 8.3.2.10.3.3-4: RRCConnectionReconfiguration (step 10, Table 8.3.2.10.3.2-2) 



Derivation path: 36.508 table 4.6.1-6 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








measurementConfiguration ::= SEQUENCE { 








measldToRemoveList::= SEQUENCE (SIZE 
(1..maxMeasld)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






} 








} 








1 








1 








} 








} 
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Table 8.3.2.10.3.3-5: MeasurementReport (step 1, Table 8.3.2.10.3.2-3, Table 8.3.2.10.3.2-4, Table 

8.3.2.10.3.2-5) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








G1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultsCDMA2000 :=SEQUENCE { 








preRegistrationStatusHRPD 


FALSE 






measResultUstCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 




Table 

8.3.2.10.3. 

2-3 


physCellld[1] 


PhysicalCellldentity of 
Cell 19 




cfg-lnfo[1] 


Not present 




measResult[1] SEQUENCE { 






pilotStrength 


(0..63) 




} 






1 






measResultUstCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


2 entries 




Table 

8.3.2.10.3. 

2-4 


physCellld[1] 


PhysicalCellldentity of 
Cell 19 




cqi-lnfo[1] 


Not present 




measResultfH SEQUENCE! 






pilotStrength 


(0..63) 




} 






physCellld[2] 


PhysicalCellldentity of 
Cell 20 




cgi-lnfo[2] 


Not present 




measResult[1] SEQUENCE { 






pilotStrength 


(0..63) 




} 






1 






measResultUstCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 




Table 

8.3.2.10.3. 

2-5 


physCellld[1] 


PhysicalCellldentity of 
Cell 20 




cgi-lnfo[1] 


Not present 




measResultfH SEQUENCE! 






pilotStrength 


(0..63) 




} 






} 






} 








1 








1 








} 








} 








} 








1 
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8.3.3 Measurements for self optimized networl^s 

8.3.3.1 Measurement configuration control and reporting / SON / ANR / CGI 

reporting of E-UTRAN cell 

8.3.3.1 .1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { Neighbour becomes offset better than serving } 
then { UE sends MeasurementReport for event A3 } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is commanded to report the global cell identity of the neighbour cell } 
then { UE determines the global cell identity of the cell included in the associated measurement 
object by acquiring the relevant system information from the concerned cell and reports the global 
cell identity in the MeasurementReport } 
} 

8.3.3.1.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.2.3, 5.5.3.1, 5.5.4.1 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> If the RRCConnectionReconfiguration message includes the measConfig: 
2> perform the Measurement configuration procedure as specified in 5.5.2; 

[TS 36.331, clause 5.5.2.3] 
The UE shall: 

The UE shall: 

1> for each measid included in the received measIdToAddModList: 

2> if an entry with the matching measid exists in the measIdList within the VarMeasConfig: 

3> replace the entry with the value received for this measid; 

2> else: 

3> add a new entry for this measid within the VarMeasConfig ; 

2> remove the measurement reporting entry for this measid from the VarMeasReportList, if included; 

2> stop the periodical reporting timer or timer T321, whichever one is running, and reset the associated 
information (e.g. timeToTrigger) for this measid; 

2> if the triggerType is set to 'periodicaF and the purpose is set to 'reportCGF in the reportConfig associated 
with this measid: 

3> if the measObject associated with this measid concerns E-UTRA: 
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4> start timer T321 with the timer value set to 1 second for this measid; 

3> else: 

4> start timer T321 with the timer value set to 8 seconds for this measid; 

[TS 36.331, clause 5.5.3.1] 

The UE supports measurements using a reporting configuration with the purpose set to ' reportCGF , if the network 
provides sufficient idle periods. 

The UE applies the layer 3 filtering as specified in 5.5.3.2, before using the measured results for evaluation of reporting 
criteria or for measurement reporting. 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if a measurement gap configuration is setup; or 

2> the UE does not require measurement gaps to perform the concerned measurement: 

3> if s-Measure is not configured; or 

3> if s-Measure is configured and the serving cell RSRP, after layer 3 filtering, is lower than this value; or 

3> if the purpose for the associated reportConfig is set to 'reportCGF: 

4> perform the corresponding measurements of neighbouring cells on the frequencies and RATs 
indicated in the concerned measObject; 

2> perform the evaluation of reporting criteria as specified in section 5.5.4; 

1> if a measid is configuredfor which the purpose within the associated reportConfig is set to 'reportCGI': 

2> try to acquire the global cell identity of the cell indicated by the cellForWhichToReportCGI in the associated 
measObject by acquiring the relevant system information from the concerned cell; 

2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is an E-UTRAN 
cell: 

3> try to acquire the list of additional PLMN Identities, as included in the plmn-IdentityList, if multiple 
PLMN identities are broadcast in the concerned cell; 

NOTE: The 'primary' PLMN is part of the global cell identity. 

2> if the cell indicated by the cellForWhichFoReportCGI included in the associated measObject is a UTRAN 
cell: 

3> try to acquire the LAC, the RAC and the Ust of additional PLMN Identities, if multiple PLMN identities 
are broadcast in the concerned cell; 

2> if the cell indicated by the cellForWhichFoReportCGI included in the associated measObject is a GERAN 
cell: 

3> try to acquire the RAC in the concerned cell; 

2> if the cell indicated by the cellForWhichFoReportCGI included in the associated measObject is a 
CDMA2000 cell and the cdma2000-Fype included in the measObject is 'typeHRPD': 

3> try to acquire the Sector ID in the concerned cell; 

2> if the cell indicated by the cellForWhichFoReportCGI included in the associated measObject is a 
CDMA2000 cell and the cdma2000-Fype included in the measObject is 'typelXRFF': 

3> try to acquire the BASE ID, SID and NID in the concerned cell; 
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[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the corresponding reportConfig includes a purpose set to ' reportStrongestCellsForSON' : 

3> consider any neighbouring cell detected on the associated frequency to be applicable; 

2> else if the corresponding reportConfig includes a purpose set to 'reportCGF: 

3> consider any neighbouring cell detected on the associated frequency/ set of frequencies (GERAN) which 
has a physical cell identity matching the value of the cellForWhichToReportCGI included in the 
corresponding measObject within the VarMeasConfig to be applicable; 

2> else: 

3> if the corresponding measObject concerns E-UTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the 

concerned cell is not included in the blackCellsToAddModList defined within the VarMeasConfig for 
this measid; 

3> else if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 

3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasConfig for this measid; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfig, while the VarMeasReportList does not include an measurement 
reporting entry for this measid (a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during timeToTrigger defined within the VarMeasConfig for 
this event: 
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3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOiiLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 

4> remove the measurement reporting entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 

2> if \ht purpose is included and set to 'reportStrongestCells' or to 'reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1: If the purpose is set to 'reportStrongestCells', the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON', the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the purpose is included and set to ' reportCGT and if the UE acquired the information needed to set all 
fields of cellGloballd for the requested cell: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> stop timer T321; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> upon expiry of the T321 for this measid: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

NOTE 3: If the UE is configured with DRX, the UE may delay the measurement reporting for event triggered and 
periodical triggered measurements until the Active Time, which is defined in TS 36.321 [6]. 

[TS 36.331, clause 5.5.5] 
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UE 



EUTRAN 



MeasurementReport ^ 



Figure 5.5.5-1 : lUleasurement reporting 



The purpose of this procedure is to transfer measurement results from the UE to E-UTRAN. 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResuUNeighCells to include the best neighbouring cells up to maxReportCells in accordance with 
the following: 

3> if the triggerType is set to 'evenf: 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResuUNeighCells, include the physCellld; 

3> if the triggerType is set to 'event'; or the purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 

3> else if the purpose is set to ' reportCGF : 

4> if the mandatory present fields of the cellGloballd for the cell indicated by the 
cellForWhichToReportCGI in the associated measObject have been obtained: 

5> include the cgi-Info containing all the fields that have been successfully acquired; 
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1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measldhy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical' : 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 

1> if the measured results are for CDMA2000 HRPD: 

2> set the preRegistrationStatusHRPD to the UE's CDMA2000 upper layer's HRPD preRegistrationStatus; 

l> if the measured results are for CDMA2000 IxRTT: 

2> set the preRegistrationStatusHRPD to 'FALSE'; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 

8.3.3.1.3 Test description 

8.3.3.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 2 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.3.1 .3.2 Test procedure sequence 

Table 8.3.3.1.3.2-1 illustrates the downlink power levels to be applied for Cell 1 and Cell 2 at various time instants of 
the test execution. Row marked "TO" denotes the conditions after the preamble, while row marked "Tl" is to be applied 
subsequently. The exact instants on which these values shall be applied are described in the texts in this clause. 

Table 8.3.3.1.3.2-1 : Power levels 





Parameter 


Unit 


CelH 


Cell 2 
(DL only) 


Remark 


TO 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-91 


Power levels shall be such that entry condition for event A3 
is not satisfied : Mn + Ofn + Ocn + Hys < Ms + Ofs + Ocs + Off 


T1 


Cell- 
specific RS 
EPRE 


dBm/ 
15kH 

z 


-85 


-79 


Power levels shall be such that entry condition for event A3 
is satisfied : Mn + Ofn + Ocn - Hys > Ms + Ofs + Ocs + Off 
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Table 8.3.3.1.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including MeasConfigto setup intra LIE 
measurement and reporting for event A3 (intra 
frequency measurement). 


<~ 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RCConnectionReconfigrationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


SS re-adjusts the cell-specific reference signal 
level according to row "T1" in table 
8.3.3.1.3.2.-1. 










4 


Check: Does the UE transmit a 
MeasurementReport message to report event 
A3 with the measured RSRP value for Cell 2. 


-> 


MeasurementReport 


1 


P 


5 


SS transmits an 

RRCConnectionReconfiguration message 
including /WeasCon/ygt including reportCG/ for 
Cell 2 and sufficient idle periods for UE to 
acquire the relevant system information from 
Cell 2. 


<- 


RRCConnectionReconfiguration 






6 


The UE transmits an 

RCConnectionReconfigrationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






7 


Check: Does the UE transmit a 
MeasurementReport message with 
cellGloballd of Cell 2 within 1 sec. 


-> 


MeasurementReport 


2 


P 



8.3.3.1.3.3 



Specific message contents 



Table 8.3.3.1.3.3-1 : SystemlnformationBlockType2 for Cell 1 (preamble and all the steps in Table 

8.3.3.1.3.2-2) 



Derivation Path: 36.508 clause 4.4.3.3-1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








RadioResourceConfigCommonSIB-DEFAULT ::= 
SEQUENCE! 








pcch-Config 


PCCH-Config- 
LQNGCYCLE 






} 








PCCH-Config-LQNGCYCLE::= SEQUENCE { 








defaultPagingCycle 


rf256 






nB 


oneT 






1 








} 
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Table 8.3.3.1.3.3-2: RRCConnectionReconfiguration (step 1, Table 8.3.3.1.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 



Table 8.3.3.1.3.3-3 MeasConfig (step 1, Table 8.3.3.1.3.2-2) 



Derivation Path: 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








MeasldToAddModList ::= SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measid 


1 






measQbjectId 


IdMeasObject-fl 






reportConfigId 


ldReportConfig-A3 






} 








MeasObjectToAddModList ::= SEQUENCE (SIZE 
(1 ..maxQbiectId)) OF SEQUENCE { 


1 entry 






measObjectId 


IdlVleasObject-fl 






measObject CHOICE { 








measObjectEUTRA 


MeasObjectEUTRA- 
GENERIC(fl) 






} 








ReportConfigToAddModList ::= SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 


1 entry 






reportConfigId 


ldReportConfig-A3 






reportConfig CHOICE { 








reportConfigEUTRA 


ReportConfig-A3-H 






1 








} 








} 









Table 8.3.3.1.3.3-4 ReportConfig-A3-H (step 1, Table 8.3.3.1.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-6 ReportConfigEUTRA-A3 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfigEUTRA-A3 ::= SEQUENCE { 








triggerType CHOICE { 








event SEQUENCE { 








eventid CHOICE { 








eventAS SEQUENCE { 








1 








} 








timeToTrigger 


msO 






} 








1 








reportOuantity 


sameAsTriggerOuantity 






} 
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Table 8.3.3.1.3.3-5 MeasurementReport (step 4, Table 8.3.3.1.3.2-2) 



Derivation path: 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








MeasResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






measResultServCell CHOICE {} 








MeasResultEUTRA ::= SEQUENCE (SIZE 




Report Cell 2 




(L.tnaxCellReport)) OF SEQUENCE { 








physCellld 


PhysCellld of the Cell 2. 






measResult SEQUENCE! 








rsrpResult 


{0..97) 






rsrqResult 

} 
} 
} 
} 
} 
} 
} 


Not present 







Table 8.3.3.1.3.3-6: RRCConnectionReconfiguration (step 5, Table 8.3.3.1.3.2-2) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-DRX 






} 
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Table 8.3.3.1.3.3-7 MeasConfig (step 5, Table 8.3.3.1.3.2-2) 



Derivation Path: 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








MeasldToAddModList ::= SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measid 


2 






measQbjectId 


IdMeasObject-fl-CGI 






reportConfigId 


ReportConfigld-CGI 






1 








MeasObjectToAddModList ::= SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectId 


IdMeasObject-fl-CGI 






measObject CHOICE { 








measObjectEUTRA 


MeasObjectEUTRA-CGI 






} 








ReportConfigToRemoveList ::= SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 








reportConfigId 


ldReportConfig-A3 






1 








ReportConfigToAddModLlst ::= SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 








reportConfigId 


ReportConfigld-CGI 






reportConfig CHOICE { 








reportConfigEUTRA 


ReportConfig-CGI 






1 








} 








Table 8.3.3.1.3.3-8: MeasObjectEUTRA-CGI (step 5, Table 8.3.3.1.3.2-2) 


Derivation Path: 36.508 clause 4.6.6 table 4.6.6-2 


Information Element 


Value/remark 


Comment 


Condition 


MeasObiectEUTRA-CGI ::= SEQUENCE { 








carrierFreq SEQUENCE {} 


Downlink EARFCN for f1 






cellForWhichToReportCGI 


PhysCellldoftheCell2. 






} 








Table 8.3.3.1.3.3-9: ReportConfig-CGI (step 5, Table 8.3.3.1.3.2-2) 


Derivation Path: 36.331 clause 6.3.5 IE ReportConfigEUTRA 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfigEUTRA ::= SEQUENCE { 








triggerType CHOICE { 








periodical SEQUENCE { 








purpose CHOICE { 








reportCGI 








1 








} 








} 
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Table 8.3.3.1.3.3-10: RadioResourceConfigDedicated-DRX (step 5, Table 8.3.3.1.3.2-2) 



Derivation Path: 36.508 clause 4.6.3.1 9 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated-DRX ::= 
SEQUENCE! 








mac-IVIainConfig CHOICE { 








explicitValue 


IVIAC-lVlainConfiguration- 
RBC using condition 
DRX L 


See sub clause 
4.8.2.1.5 of [18]. 


DRX_L 


1 








physicalConfigDedicated 


Not present 






} 









Table 8.3.3.1.3.3-11 : MeasurementReport (step 7, Table 8.3.3.1.3.2-2) 



Derivation path: 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasResults::= SEQUENCE! 








measid 


2 






measResultServCell SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






1 








1 








MeasResultEUTRA ::= SEQUENCE (SIZE 
(L.tnaxCellReport)) QF SEQUENCE { 








physCellld 


PhysCellld of Cell 2 






cgi-lnfo SEQUENCE { 








cellGloballd 


cellGloballdof Cell 2 






trackingAreaCode 


Not checked 






pImn-ldentityList 


Not checked 






} 








1 









8.3.3.2 

8.3.3.2.1 

(1) 



Measurement configuration control and reporting / SON / ANR / CGI 
reporting of UTRAN cell 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state and measurement configured for periodic reporting of UTRA 
cells with the purpose of SON } 
ensure that { 

when { The UE receives reference signal power for cells on the UTRA frequency where measurements 
are configured } 

then { UE sends MeasurementReport message at regular intervals for these UTRA cells } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is commanded to report the global cell identity of the inter-rat (UTRAN) neighbour cell 
then { UE determines the global cell identity of the inter-rat (UTRAN) cell included in the 
associated measurement object by acquiring the relevant system information from the concerned cell 
and reports the global cell identity in the MeasurementReport message} 
} 



8.3.3.2.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.2.3, 5.5.3, 5.5.4.1and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 
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If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> if the RRCConnectionReconfiguration message includes the measConfig: 
2> perform the measurement configuration procedure as specified in 5.5.2; 

[TS 36.331, clause 5.5.2.3] 
The UE shall: 

2> if the triggerType is set to 'periodicaF and the purpose is set to ' reportCGF in the reportConfig associated 
with this measid: 

3> if the measObject associated with this measid concerns E-UTRA: 

4> start timer T321 with the timer value set to 1 second for this measid; 
3> else: 

4> start timer T321 with the timer value set to 8 seconds for this measid; 

[TS 36.331, clause 5.5.3] 

The UE supports measurements using a reporting configuration with the purpose set to 'reportCGF, if the network 
provides sufficient idle periods. 

The UE applies the layer 3 filtering as specified in 5.5.3.2, before using the measured results for evaluation of reporting 
criteria or for measurement reporting. 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if a measurement gap configuration is setup; or 

2> the UE does not require measurement gaps to perform the concerned measurement: 

3> if s-Measu re is not configured; or 

3> if s-Measu re is configured and the serving cell RSRP, after layer 3 filtering, is lower than this value; or 

3> if the purpose for the associated reportConfig is set to 'reportCGF: 

4> perform the corresponding measurements of neighbouring cells on the frequencies and RATs 
indicated in the concerned measObject; 

2> perform the evaluation of reporting criteria as specified in section 5.5.4; 

1> if a measid is configuredfor which the purpose within the associated reportConfig is set to 'reportCGI': 



2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is a UTRAN 
cell: 

3> try to acquire the LAC, the RAC and the list of additional PLMN Identities, if multiple PLMN identities 
are broadcast in the concerned cell; 



[TS 36.331, clause 5.5.4.1] 
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The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the corresponding reportConfig includes a purpose set to ' reportStrongestCellsForSON' : 

3> consider any neighbouring cell detected on the associated frequency to be applicable; 

2> else if the corresponding reportConfig includes a purpose set to 'reportCGF: 

3> consider any neighbouring cell detected on the associated frequency/ set of frequencies (GERAN) which 
has a physical cell identity matching the value of the cellForWhichToReportCGI included in the 
corresponding measObject within the VarMeasConfig to be applicable; 

2> else: 

3> if the corresponding measObject concerns E-UTRA: 

3> else if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 

3> else if the corresponding measObject concerns GERAN: 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the purpose is included and set to ' reportCGF and if the UE acquired the information needed to set all 
fields of cellGloballd for the requested cell: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> stop timer T321; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> upon expiry of the T321 for this measid: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

NOTE 3: If the UE is configured with DRX, the UE may delay the measurement reporting for event triggered and 
periodical triggered measurements until the Active Time, which is defined in TS 36.321 [6]. 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 
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1> if there is at least one applicable neighbouring cell to report: 

2> set the measResuUNeighCells to include the best neighbouring cells up to maxReportCells in accordance with 
the following: 

3> if the triggerType is set to 'event': 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResuUNeighCells, include the physCellld; 

3> if the triggerType is set to 'evenf; or ih& purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 

3> else if the purpose is set to ' reportCGF : 

4> if the mandatory present fields of the cellGloballd for the cell indicated by the 
cellForWhichToReportCGI in the associated measObject have been obtained: 

5> include the cgi-Info containing all the fields that have been successfully acquired; 

1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

l> else: 

2> if the triggerType is set to 'periodical' : 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 
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8.3.3.2.3 Test description 

8.3.3.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 5. 
UE: 

None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.3.2.3.2 Test procedure sequence 

Table 8.3.3.2.3.2-1 illustrates the downlink power levels to be applied for cells at various time instants of the test 
execution. Row marked "TO" denotes the conditions after the preamble, while row marked "Tl" is to be applied 
subsequently. The exact instants on which these values shall be applied are described in the texts in this clause. 

Table 8.3.3.2.3.2-1 : Time instance of cell power levels 





Parameter 


Unit 


CelM 


Cell 5 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-80 


- 




CPICH_Ec 


dBm/3.8 
4MHz 


- 


Off 


For Cell 5 is a UTRA FDD Cell 


P-CCPCH 


dBm/1.2 
8 MHz 




Off 


For Cell 5 is a UTRA TDD Cell 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 




CPICH_Ec 


dBm/3.8 
4MHz 


- 


-75 


For Cell 5 is a UTRA FFDD Cell 


P-CCPCH 


dBm/1.2 
8 MHz 




-78 


For Cell 5 is a UTRA TDD Cell 
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Table 8.3.3.2.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


lUlessage 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including measConfigto setup inter RAT 
measurement for tlie purpose of SON. 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigrationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


The SS changes Cell 5 power level according 
to the row "T1 " in table 8.3.3.2.3.2-1 . 


- 


- 


- 


- 


4 


Check: Does the UE transmit a 
MeasurementReport message to report the 
measured result for Cell 5? 


-> 


MeasurementReport 


1 


P 


5 


SS transmits an 

RRCConnectionReconfiguration message 
including measCon/ygt including reportCG/ for 
Cell 5 and sufficient idle periods for UE to 
acquire the relevant system information from 
Cell 5. 


<— 


RRCConnectionReconfiguration 






6 


The UE transmits an 

RRCConnectionReconfigrationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






7 


Check: Does the UE transmit a 
MeasurementReport message with 
globalCellldentity of Cell 5 within 8 sec? 


-> 


MeasurementReport 


2 


P 



8.3.3.2.3.3 Specific message contents 

Table 8.3.3.2.3.3-1 : SystemlnformationBlockType2 for Cell 1 (preamble and all the steps in Table 

8.3.3.2.3.2-2) 



Derivation Path: 36.508 clause 4.4.3.3-1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








RadioResourceConfigCommonSIB-DEFAULT ::= 
SEQUENCE! 








pcch-Configuration 


PCCH- 

Configuration- 

LQNGCYCLE 






1 








PCCH-Configuration-LONGCYCLE::= 
SEQUENCE! 








defaultPagingCycle 


rf256 






1 








1 









Table 8.3.3.2.3.3-2: RRCConnectionReconfiguration (step 1, Table 8.3.3.2.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 
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Table 8.3.3.2.3.3-3 MeasConfig (step 1 , Table 8.3.3.2.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 condition UTRAN 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldMeasObject-f8 






measObject[1] 


MeasObjectUTRA-fS 


UTRA frequency 




) 








reportConfigloAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


IdReportConfig-P-UTRA 






reportConfig[1] 


ReportConfiglnterRAT-P- 
UTRA 






1 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


IdMeasObject-fS 






reportConfigld[1] 


IdReportConfig-P-UTRA 






1 








quantityConfig SEQUENCE { 








quantityConfigUTRA SEQUENCE { 








measQuantityUTRA-FDD 


cpich-EcNO 




UTRA-FDD 


measQuantityUTRA-TDD 


pccpch-RSCP 




UTRA-TDD 


filterCoefficient 


fcO 






} 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA-FDD cell environment 


UTRA-TDD 


UTRA-TDD cell environment 



Table 8.3.3.2.3.3-4 MeasObjectUTRA-f8 (step 1, Table 8.3.3.2.3.2-2) 



Derivation path: 36.508 table 4.6.6-3 IVIeasObjectUTRA-GENERIC(f8) 


Information Element 


Value/Remark 


Comment 


Condition 


MeasQbiectUTRA-GENERIC(f8) ::= SEQUENCE { 








carrierFreq 


UTRA DL carrier 
frequency of the cell 5 






} 








} 









Table 8.3.3.2.3.3-5: ReportConfiglnterRAT-P-UTRA (step 1, Table 8.3.2.3.3.2-2) 



Derivation Path: 36.331 clause 6.3.5 IE ReportConfiglnterRAT 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfiglnterRAT ::= SEQUENCE { 








triggerType CHOICE { 








periodical SEQUENCE { 








purpose CHOICE { 








reportStrongestCellsForSON 








} 








} 








reportAmount 


r1 






} 
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Table 8.3.3.2.3.3-6 MeasurementReport {step 4, Table 8.3.3.2.3.2-2) 



Derivation path: 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/Remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








CI CHOICE! 








measurementReport-r8 SEQUENCE { 








MeasResults ::= SEQUENCE { 








measid 


1 






measResultServCell ::= SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 

measResultNeighCells CHOICE { 








measResultListUTRA ::= SEQUENCE (SIZE 


1 entry 


Report Cell 5 




(L.tnaxCellReport)) OF SEQUENCE { 








physCellld 


PhysicalCellldentity of 
the Cell 5. 






measResult SEQUENCE! 








utra-RSCP 


(-5..91) 




UTRA- 
TDD 


utra-EcNO 


(0..49) 




UTRA- 


} 
} 
} 
} 
} 
} 
} 
} 






FDD 



Condition 


Explanation 


UTRA-FDD 


UTRA-FDD cell environment 


UTRA-TDD 


UTRA-TDD cell environment 



Table 8.3.3.2.3.3-7: RRCConnectionReconfiguration (step 5, Table 8.3.3.2.3.2-2) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








radioResourceConfiguration 


RadioResourceConfigDe 
dicated-DRX 






} 
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Table 8.3.3.2.3.3-8 MeasConfig (step 5, Table 8.3.3.2.3.2-2) 



Derivation Path: 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementConfiguration ::= SEQUENCE { 








MeasObjectToAddModifyLlst ::= SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measQbjectId 


IdlVleasObject-fS-CGI 






measQbject CHQICE { 








measObjectUTRA 


MeasObjectUTRA-CGI 






1 








ReportConfigToAddModifyList ::= SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 








reportConfigId 


ReportConfigld-CGI 






reportConfig CHOICE { 








reportConfigUTRA 


ReportConfigUTRA-CGI 






} 








MeasldToAddModifyList ::= SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measid 


2 






measObjectId 


ldMeasQbject-f8-CGI 






reportConfigId 


ReportConfigld-CGI 






} 








} 








Table 8.3.3.2.3.3-9: MeasObjectUTRA-CGI (step 5, Table 8.3.3.2.3.2-2) 


Derivation Path: 36.508 clause 4.6.6 table 4.6.6-3 


Information Element 


Value/remark 


Comment 


Condition 


MeasObjectUTRA-CGI ::= SEQUENCE { 








carrierFreq 


Downlink UARFCN of f8 






cellForWhichToReportCGI 


PhysicalCellldentity of 
the Cell 5. 






1 








Table 8.3.3.2.3.3-10: ReportConfig-CGI (step 5, Table 8.3.3.2.3.2-2) 


Derivation Path: 36.331 clause 6.3.5 IE ReportConfig InterRAT 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfiglnterRAT ::= SEQUENCE { 








triggerType CHOICE { 








periodical SEQUENCE { 








purpose CHOICE { 








reportCGI 








} 








} 








1 








reportAmount 


r1 






} 
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Table 8.3.3.2.3.3-11 : RadioResourceConfigDedicated-DRX (step 5, Table 8.3.3.2.3.2-2) 



Derivation Path: 36.508 clause 4.6.3.19 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated-DRX ::= 
SEQUENCE! 








mac-IVIainConfig CHOICE { 








explicitValue 


IVIAC-MainConfiguration- 
RBC using condition 
DRX L 


See sub clause 
4.8.2 of [18]. 




1 








physicalConfigDedicated 


Not present 






} 








Table 8.3.3.2.3.3-12: MeasurementReport {step 7, Table 8.3.3.2.3.2-2) 


Derivation path: 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE{ 








measurementReport-r8 SEQUENCE { 








measResults ::= SEQUENCE { 








measid 


2 






measResultServCell SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHQICE { 








measResultListUTRA ::= SEQUENCE (SIZE 
(1..maxCellReport)) QF SEQUENCE { 


1 entry 






physCellld 


PhysicalCellldentity of 
Cell 5 






cgi-lnfo SEQUENCE { 








cellGloballd 


GlobalCellld of Cell 5 






locationAreaCode 


Not checked 






routingAreaCode 


Not checked 






pImn-ldentityList 


Not checked 






} 








1 








} 








} 








} 








1 








1 








} 









8.3.3.3 



8.3.3.3.1 



(1) 



Measurement configuration control and reporting / SON / ANR / CGI 
reporting of GERAN cell 

Test Purpose (IP) 



with { UE having completed the radio bearer establishment, initial security activation procedure and 
performed the inter RAT measurement for GERAN cell and not detected entering condition for the event 
B2 is met } 
ensure that { 

when { UE detects entering condition for the event B2 is met } 
then { UE transmits a MeasurementReport } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 
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when { UE is commanded to report the global cell identity of the inter-RAT (GERAN) neighbour cell } 
then { UE determines the global cell identity of the inter-RAT (GERAN) cell included in the 
associated measurement object by acquiring the relevant system information from the concerned cell 
and reports the global cell identity in the Measurement JJeport } 
} 

8.3.3.3.2 Conformance requirements 

References: The conformance requirements covered in tlie current TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.2.3,5.5.3,5.5.4.1 and 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 



1> if the RRCConnectionReconfiguration message includes the measConfig: 
2> perform the measurement configuration procedure as specified in 5.5.2; 
[TS 36.331, clause 5.5.2.3] 
The UE shall: 

2> if the triggerType is set to 'periodicaF and the purpose is set to 'reportCGF in the reportConfig associated 
with this measid: 

3> if the measObject associated with this measid concerns E-UTRA: 

4> start timer T321 with the timer value set to 1 second for this measid; 
3> else: 

4> start timer T321 with the timer value set to 8 seconds for this measid; 

[TS 36.331, clause 5.5.3] 

The UE supports measurements using a reporting configuration with 1\\q purpose set to 'reportCGF , if the network 
provides sufficient idle periods. 

The UE applies the layer 3 filtering as specified in 5.5.3.2, before using the measured results for evaluation of reporting 
criteria or for measurement reporting. 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if a measurement gap configuration is setup; or 

2> the UE does not require measurement gaps to perform the concerned measurement: 

3> if s-Measu re is not configured; or 

3> if s-Measu re is configured and the serving cell RSRP, after layer 3 filtering, is lower than this value; or 

3> if the purpose for the associated reportConfig is set to 'reportCGF: 

4> perform the corresponding measurements of neighbouring cells on the frequencies and RATs 
indicated in the concerned measObject; 

2> perform the evaluation of reporting criteria as specified in section 5.5.4; 

1> if a measid is configuredfor which the purpose within the associated reportConfig is set to 'reportCGI': 
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2> try to acquire the global cell identity of the cell indicated by the cellForWhichToReportCGI in the associated 
measObject by acquiring the relevant system information from the concerned cell; 

2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is an E-UTRAN 
cell: 

3> try to acquire the list of additional PLMN Identities, as included in the plmn-IdentityList, if multiple 
PLMN identities are broadcast in the concerned cell; 

NOTE: The 'primary' PLMN is part of the global cell identity. 

2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is a UTRAN 
ceU: 

3> try to acquire the LAC, the RAC and the list of additional PLMN Identities, if multiple PLMN identities 
are broadcast in the concerned cell; 

2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is a GERAN 
cell: 

3> try to acquire the RAC in the concerned cell; 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the corresponding reportConfig includes a purpose set to ' reportStrongestCellsForSON' : 

3> consider any neighbouring cell detected on the associated frequency to be applicable; 

2> else if the corresponding reportConfig includes a purpose set to 'reportCGT: 

3> consider any neighbouring cell detected on the associated frequency/ set of frequencies (GERAN) which 
has a physical cell identity matching the value of the cellForWhichToReportCGI included in the 
corresponding measObject within the VarMeasConfig to be applicable; 

2> else: 

3> if the corresponding measObject concerns E-UTRA: 



3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasConfig for this measid; 



2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the purpose is included and set to 'reportCGT and if the UE acquired the information needed to set all 
fields of cellGloballd for the requested cell: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> stop timer T321; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> upon expiry of the T321 for this measid: 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 851 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodicaF while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

NOTE 3: If the UE is configured with DRX, the UE may delay the measurement reporting for event triggered and 
periodical triggered measurements until the Active Time, which is defined in TS 36.321 [6]. 

[TS 36.331, clause 5.5.5] 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultNeighCells to include the best neighbouring cells up to maxReportCells in accordance with 
the following: 

3> if the triggerType is set to 'event': 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResultNeighCells, include the physCellld; 

3> if the triggerType is set to 'event'; or Ihe purpose is set to ' reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measReSUlt to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measReSUltto the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 

3> else if the purpose is set to ' reportCGT : 

4> if the mandatory present fields of the cellGloballd for the cell indicated by the 
cellForWhichToReportCGI in the associated measObject have been obtained: 

5> include the cgi-Info containing all the fields that have been successfully acquired; 
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1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measldhy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical' : 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 
8.3.3.3.3 Test description 

8.3.3.3.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 24. 
UE: 

None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.3.3.3.3.2 Test procedure sequence 

Table 8.3.3.3.3.2-1 illustrates the downlink power levels to be applied for Cell 1 and Cell 24 at various time instants of 
the test execution. Row marked "TO" denotes the conditions after the preamble, while row marked "Tl" is to be applied 
subsequently. The exact instants on which these values shall be applied are described in the texts in this clause. 

Table 8.3.3.3.3.2-1 : Time instances of cell power levels 





Parameter 


Unit 


CelM 


Cell 24 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


Power levels are shall be such that 
entry condition for event B2 is not 
satisfied: 


RSSI 


dBm 


- 


-85 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


[-80] 


- 


Power levels are shall be such that 
entry condition for event B2 is 
satisfied: 


RSSI 


dBm 


- 


-65 
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Table 8.3.3.3.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message 
including measConfigto setup inter-RAT 
measurements and reporting for event B2. 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigrationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


The SS re-adjusts the cell-specific reference 
signal level according to row "T1" in table 
8.3.3.3.3.2-1. 










4 


Check: Does the UE transmit a 
MeasurementReport message to report event 
B2 for Cell 24? 


-> 


MeasurementReport 


1 


P 


5 


The SS transmits an 

RRCConnectionReconfiguration message 
including measConf/gf including reportCG/ for 
Cell 24 and sufficient idle periods for UE to 
acquire the relevant system information from 
Cell 24. 


<— 


RRCConnectionReconfiguration 






6 


The UE transmits an 

RRCConnectionReconfigrationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






7 


Check: Does the UE transmit a 
MeasurementReport message with 
ceilGloballd o\ Cell 24 within 8 sec? 


-> 


MeasurementReport 


2 


P 



8.3.3.3.3.3 



Specific message contents 



Table 8.3.3.3.3.3-1 : SystemlnformationBlockType2 ior Cell 1 (preamble and all the steps in Table 

8.3.3.3.3.2-2) 



Derivation Path: 36.508 clause 4.4.3.3-1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








RadioResourceConfigCommonSIB-DEFAULT ::= 
SEQUENCE! 








pcch-Configuration 


PCCH- 

Configuration- 

LQNGCYCLE 






} 








PCCH-Configuration-LONGCYCLE::= 
SEQUENCE! 








defaultPagingCycle 


rf256 






1 








} 









Table 8.3.3.3.3.3-2: RRCConnectionReconfiguration (step 1, Table 8.3.3.3.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 
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Table 8.3.3.3.3.3-3: MeasConfig (step 1, Table 8.3.3.3.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 with condition GERAN 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


IdMeasObject-fl 1 






measObject[1] 


MeasObjectGERAN- 
GENERIC(fll) 






1 








reportConfigToAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






ReportConfigld[1] 


ldReportConfig-B2- 
GERAN 






reportConfig[1] 


ReportConfJglnterRAT- 
B2-GERAN(-69, -79) 


EUTRA-Thres = - 
69; 

GERAN-Thres = - 
79; 

threshold-RSRP = 
EUTRA- 

Thres+140 = 71; 
b2- 

Threshold2GERA 
N= GERAN- 
Thres -1- 110 = 31. 




} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


IdMeasObject-fl 1 






reportConfigld[1] 


ldReportConfig-B2- 
GERAN 






} 








quantityConfig SEQUENCE { 








quantityConfigGERAN SEQUENCE { 








measQuantityGERAN 


rssi 






filterCoefficient 


fcO 






} 








} 









Table 8.3.3.3.3.3-4: MeasObjectGERAN-GENERIC(fll) (step 1, Table 8.3.3.3.3.2-2) 



Derivation Path: 36.508 Table 4.6.6-2A 


Information Element 


Value/remark 


Comment 


Condition 


MeasObjectGERAN-GENERIC(Freq) ::= SEQUENCE 
{ 








carrierFreqs SEQUENCE { 








startingARFCN 


Same as Cell 24 






bandlndicator 


Same as Cell 24 






followingARFCNs CHOICE { 








explicitListOfARFCNs 


Same as Cell 24 






} 








1 








ncc-Permitted 


11111111 






} 
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Table 8.3.3.3.3.3-5: Void 



Table 8.3.3.3.3.3-6: MeasurementReport {step 4, Table 8.3.3.3.3.2-2) 



Derivation path: 36.508, Table 4.6.1-5 | 


Information Element 


Value/Remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListGERAN SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 


Report Cell 24 




carrierFreq[1] SEQUENCE { 




CarrierPreq of Cell 
24 




Arcfn 


Downlink arcfn of Cell 24 






bandlndicator 


Same bandlndicator as 
Cell 24 






} 








physCellld[1] 


PhysicalCellldentity of 
Cell 24. 






cgi-info[1] 


Not present 






measResult[1] SEQUENCE! 








rssi 


(0..63) 






} 








} 








} 








1 








1 








} 








} 








} 








Table 8.3.3.3.3.3-7: RRCConnectionReconfiguration (step 5, Table 8.3.3.3.3.2-2) 


Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-DRX 






1 
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Table 8.3.3.3.3.3-8: MeasConfig (step 5, Table 8.3.3.3.3.2-2) 



Derivation Path: 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList ::= SEQUENCE (SIZE 
(1 ..maxQbjectId)) QF SEQUENCE { 


1 entry 






measQbjectld[1] 


IdlVleasObject-fn-CGI 






measQbject[1] CHOICE! 








measQbjectGERAN 


MeasQbjectGERAN-CGI 






I 








reportConfigToAddModList ::= SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ReportConfigld-CGI 






reportConfig[1] CHOICE! 








reportConfigGERAN 


ReportConfigGERAN- 
CGI 






} 








measldToAddModLlst ::= SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


2 






measQbjectld[1] 


ldMeasQbject-f11-CGI 






reportConfigld[1] 


ReportConfigld-CGI 






} 








} 









Table 8.3.3.3.3.3-9: MeasObjectGERAN-CGI (step 5, Table 8.3.3.3.3.2-2) 



Derivation Path: 36.308, Table 4.6.6-2A 


Information Element 


Value/remark 


Comment 


Condition 


MeasQbjectGERAN-GENERIC(Freq) ::= SEQUENCE 
{ 








carrierFreqs SEQUENCE { 








startingARFCN 


Same as Cell 24 






bandlndicator 


Same as Cell 24 






followingARFCNs CHOICE { 








explicitLlstOfARFCNs 


Same as Cell 24 






} 








} 








offsetFreq 


Not present 






ncc-Permitted 


11111111 






cellForWhichToReportCGI 


PhysicalCellldentity of 
Cell 24. 






} 









Table 8.3.3.3.3.3-10: ReportConfigGERAN-CGI (step 5, Table 8.3.3.3.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-9 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfiglnterRAT ::= SEQUENCE { 








triggerType CHOICE { 








periodical SEQUENCE { 








purpose CHOICE { 








reported 


NULL 






} 








} 








} 








reportAmount 


r1 






} 
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Table 8.3.3.3.3.3-11 : RadioResourceConfigDedicated-DRX (step 5, Table 8.3.3.3.3.2-2) 



Derivation Path: 36.508 clause 4.6.3.19 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated-DRX ::= 
SEQUENCE! 








mac-IVIainConfig CHOICE { 








explicitValue 


IVIAC-MainConfiguration- 
RBC using condition 
DRX L 


See sub clause 
4.8.2.1.5 of [18]. 


DRX_L 


1 








physicalConfigDedicated 


Not present 






} 








Table 8.3.3.3.3.3-12: MeasurementReport (step 7, Table 8.3.3.3.3.2-2) 


Derivation path: 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE { 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


2 






measResultServCell SEQUENCE { 




Report Cell 1 




rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








measResultNeighCells CHQICE { 








measResultListGERAN ::= 
SEQUENCE (SIZE (L.maxCellReport)) OF 
SEQUENCE! 


1 entry 


Report Cell 24 




carrierFreq[1] SEQUENCE! 




CarrierPreq of Cell 
24 




arcfn 


Downlink arcfn of Cell 24 






bandlndicator 


Same bandlndicator as 
Cell 24 






} 








physCellld[1] 


PhysicalCellldentity of 
Cell 24 






cgi-lnfo[11 SEQUENCE! 








cellGloballd SEQUENCE { 


CellGloballdentityof Cell 
24 






pimn-ldentity 


PLMN Identity of Cell 24 






locationAreaCode 


Location Area Code of 
Cell 24 






cellldentity 


Cell Identity of Cell 24 






} 








routingAreaCode 


Routing Area Code of 
Cell 24 






} 








measResult[1] SEQUENCE { 








rssi 


(0..63) 






} 








} 








} 








1 








} 








} 








} 








} 
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8.3.3.4 Measurement configuration control and reporting / SON / ANR / CGI 

reporting of HRPD cell 

8.3.3.4.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE detects that entering conditions for event B2 are met } 
then { UE sends MeasurementReport for event B2 } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is commanded to report the global cell identity of the 
neighbour cell } 
then { UE determines the global cell identity of the cell included 
in the associated measurement object by acquiring the 
relevant system information from the concerned cell and 
reports the global cell identity in the MeasurementReport } 
} 

8.3.3.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.2.3, 5.5.3.1 , 5.5.4.1, 5.5.4.8, 5.5.5. 

[TS 36.331, clause 5.3.5.3] 

If the RRCConnectionReconfiguration message does not include the mobilityControlInfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 

1> if the RRCConnectionReconfiguration message includes the measConfig: 

2> perform the measurement configuration procedure as specified in 5.5.2; 
[TS 36.331, clause 5.5.2.3] 
The UE shall: 

1> for each measid included in the received measIdToAddModList: 

2> if the triggerType is set to 'periodicaF and the purpose is set to 'reportCGF in the reportConfig associated 
with this measid: 

3> if the measObject associated with this measid concerns E-UTRA: 

4> start timer T321 with the timer value set to 1 second for this measid; 
3> else: 

4> start timer T321 with the timer value set to 8 seconds for this measid; 

[TS 36.331, clause 5.5.3.1] 

The UE supports measurements using a reporting configuration with i\\e purpose set to 'reportCGF , if the network 
provides sufficient idle periods. 

The UE applies the layer 3 filtering as specified in 5.5.3.2, before using the measured results for evaluation of reporting 
criteria or for measurement reporting. 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if a measurement gap configuration is setup; or 
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2> the UE does not require measurement gaps to perform the concerned measurement: 

3> if s-Measu re is not configured; or 

3> if s-Measure is configured and the serving cell RSRP, after layer 3 filtering, is lower than this value; or 

3> if the purpose for the associated reportConfig is set to 'reportCGF: 

4> perform the corresponding measurements of neighbouring cells on the frequencies and RATs 
indicated in the concerned measObject; 

2> perform the evaluation of reporting criteria as specified in section 5.5.4; 

1> if a measid is configuredfor which the purpose within the associated reportConfig is set to 'reportCGI': 

2> try to acquire the global cell identity of the cell indicated by the cellForWhichToReportCGI in the associated 
measObject by acquiring the relevant system information from the concerned cell; 

2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is an E-UTRAN 
cell: 

3> try to acquire the list of additional PLMN Identities, as included in the plmn-IdentityList, if multiple 
PLMN identities are broadcast in the concerned cell; 

NOTE: The 'primary' PLMN is part of the global cell identity. 

2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is a UTRAN 
cell: 

3> try to acquire the LAC, the RAC and the list of additional PLMN Identities, if multiple PLMN identities 
are broadcast in the concerned cell; 

2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is a GERAN 
cell: 

3> try to acquire the RAC in the concerned cell; 

2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is a 
CDMA2000 cell and the cdma2000-Type included in the measObject is 'typeHRPD': 

3> try to acquire the Sector ID in the concerned cell; 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the corresponding reportConfig includes a purpose set to ' reportStrongestCellsForSON' : 

3> consider any neighbouring cell detected on the associated frequency to be applicable; 

2> else if the corresponding reportConfig includes a purpose set to 'reportCGT: 

3> consider any neighbouring cell detected on the associated frequency/ set of frequencies (GERAN) which 
has a physical cell identity matching the value of the cellForWhichToReportCGI included in the 
corresponding measObject within the VarMeasConfig to be applicable; 

2> else: 

3> if the corresponding measObject concerns E-UTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the 

concerned cell is not included in the blackCellsToAddModList defined within the VarMeasConfig for 
this measid; 

3> else if the corresponding measObject concerns UTRA or CDMA2000: 
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4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 

3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasConfig for this measid; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfig, while the VarMeasReportList does not include an measurement 
reporting entry for this measid (a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during timeToTrigger defined within the VarMeasConfig for 
this event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 

4> remove the measurement reporting entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 

2> if the purpose is included and set to ' reportStrongestCells' or to ' reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 
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NOTE 1: If the purpose is set to 'reportStrongestCells', the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON', the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the purpose is included and set to ' reportCGF and if the UE acquired the information needed to set all 
fields of cellGloballd for the requested cell: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> stop timer T321; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> upon expiry of the T321 for this measid: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 

[TS 36.331, clause 5.5.4.8] 

The UE shall: 

1> for UTRA and CDMA2000, only trigger the event for cells included in the corresponding measurement object; 

1> consider the entering condition for this event to be satisfied when both condition B2-1 and condition B2-2, as 
specified below, are fulfilledapply inequality B2-1 and inequality B2-2 i.e. both have to be fulfilled, as specified 
below, as the entry condition for this event; 

1> consider the leaving condition for this event to be satisfied when condition B2-3 or condition B2-4, i.e. at least 
one of the two, as specified below, is fulfilledapply inequality B3-3 and inequality B2-4 i.e. at least one of the 
two has to be fulfilled, as specified below, as the leaving condition for this event; 



Inequality B2-1 (Entering condition 1) 



Inequality B2-2 (Entering condition 2) 



Inequality B2-3 (Leaving condition 1) 



Ms + Hys < Thresh 1 



Mn + Ofn - Hys > Thresh! 



Ms - Hys > Thresh 1 
Inequality B2-4 (Leaving condition 2) 

Mn + Ofn + Hys < Thresh! 
The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any cell individual offsets. 
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Mil is the measurement result of the inter-RAT neighbour cell, not taking into account any offsetsneighbouring inter 
RAT cell. 

Ofn is the frequency specific offset of the frequency of the inter-RAT neighbour cell (i.e. ojfsetFreq as defined 
within the measObject corresponding to the frequency of the inter-RAT neighbour cell)neighbour cell. 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfiglnterRAT the 
VarMeasurementConfiguration for this event). 

Threshl is the threshold parameter for this event (i.e. h2-Thresholdl as defined within reportConfiglnterRATthe 
VarMeasurementConfiguration for this event). 

Threshl is the threshold parameter for this event (i.e. b2-Threshold2 as defined within reportConfiglnterRAT the 
VarMeasurementConfiguration for this event). 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Mn is expressed in dBm or dB, depending on the measurement quantity of the inter-RAT neighbourneighbouring 
inter RAT cell. 

Ofn, Hys are expressed in dB. 

Threshl is expressed in the same unit as AfndBm in case Ms is expressed in dBm; otherwise it is expressed in dB. 

Threshl is expressed in the same unit as MndBm in case Mn is expressed in dBm; otherwise it is expressed in dB. 

[TS 36.331, clause 5.5.5] 

The purpose of this procedure is to transfer measurement results from the UE to E-UTRAN. 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 

1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultNeighCells to include the best neighbouring cells up to maxReportCells in accordance with 
the following: 

3> if the triggerType is set to 'event': 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResultNeighCells, include the physCellld; 

3> if the triggerType is set to 'event'; or the purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 
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6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 

3> else if the purpose is set to ' reportCGF : 

4> if the mandatory present fields of the cellGloballd for the cell indicated by the 
cellForWhichToReportCGI in the associated measObject have been obtained: 

5> include the cgi-Info containing all the fields that have been successfully acquired; 

1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical' : 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 

1> if the measured results are for CDMA2000 HRPD: 

2> set the preRegistrationStatusHRPD to the UE's CDMA2000 upper layer's HRPD preRegistrationStatus; 

1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 

8.3.3.4.3 Test description 

8.3.3.4.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 15 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 
UE: 

None. 

8.3.3.4.3.2 Test procedure sequence 

Table 8.3.3.4.3.2-1 illustrates the downlink power levels to be applied for Cell 1 and Cell 15 at various time instants of 
the test execution. Row marked "TO" denotes the conditions after the preamble, while row marked "Tl" is to be applied 
subsequently. The exact instants on which these values shall be applied are described in the texts in this clause. 
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Table 8.3.3.4.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Celll 


Cell 15 


Remaric 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-60 


- 


The power level values are 

such that entering conditions 

for event B2 are not satisfied: 

Inequality B2-1 (Entering 

condition 1) 

Ms + Hys > ThresM 

Inequality B2-2 (Entering 

condition 2) 

Mn +Ofn - Hys < ThreshZ 


lor/loc 


dB 


- 


-20 


loc 


dBm/1 .23MHz 


- 


-55 


Pilot_Ec/lo(Note1) 


dB 


- 


-20 


T1 


Cell-specific RS EPRE 


dBm/1 5kHz 


-80 


- 


The power level values are 

such that entering conditions 

for event B2 are satisfied: 

Inequality B2-1 (Entering 

condition 1) 

Ms + Hys< ThresM 

Inequality B2-2 (Entering 

condition 2) 

Mn -nOfn - Hys > Thresh2 


lor/loc 


dB 


- 


-5 


loc 


dBm/1 .23MHz 


- 


-55 


Pilot_Ec/lo(Note1) 


dB 


- 


-6 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other parameters 
set by the SS 



Table 8.3.3.4.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including MeasConfigXo setup inter RAT 
measurement and reporting for event B2. 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


SS re-adjusts the cell-specific reference signal 
level according to row "T1" in table 8.3.3.4.3.2- 
1. 










4 


Check: Does the UE transmit a 
MeasurementReport message to report event 
B2 on Cell 15? 


-> 


MeasurementReport 


1 


P 


5 


SS transmits an 

RRCConnectionReconfiguration message 
including MeasConf/gf including reportCG/ for 
Cell 15 and sufficient idle periods for UE to 
acquire the relevant system information from 
Cell 15. 


<- 


RRCConnectionReconfiguration 






6 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






7 


Check: Does the UE transmit a 
MeasurementReport message with 
cellGloballd of Cell 15 within 8 sec? 


-> 


MeasurementReport 


2 


P 
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8.3.3.4.3.3 



Specific message contents 



Table 8.3.3.4.3.3-1 : SystemlnformationBlockType2 for Cell 1 (preamble and all the steps in Table 

8.3.3.4.3.2-2) 



Derivation Path: TS 36.508 clause 4.4.3.3-1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type2 ::= SEQUENCE { 








RadioResourceConfigCommonSIB-DEFAULT ::= 
SEQUENCE! 








pcch-Config 


PCCH-Config- 
LQNGCYCLE 






1 








PCCH-Config-LQNGCYCLE::= SEQUENCE { 








defaultPagingCycle 


rf256 






nB 


oneT 






1 








} 
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Table 8.3.3.4.3.3-2: RRCConnectionReconfiguration (step 1, Table 8.3.3.4.3.2-2) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 


Table 8.3.3.4.3.3-3: MeasConfig (step 1, Table 8.3.3.4.3.2-2) 


Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldlVleasObject-f14 






measObject[1] 


MeasObjectCDMA2000- 
GENERIC 






} 








reportConfigToAddModLlst SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-CDMA2000(-69, -18) 






1 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measObjectld[1] 


ldMeasObject-f14 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






1 








quantityConfig SEQUENCE { 








quantityConfigCDMA2000 SEQUENCE { 








measQuantityCDIVIA2000 


pilotStrength 






1 








1 








measGapConfig SEQUENCE { 








gapActivation CHOICE { 








activate SEQUENCE { 








qapPattern CHOICE { 








gpl SEQUENCE { 








gapOffset 









} 








} 








1 








1 








} 








} 
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Table 8.3.3.4.3.3-4: MeasObjectCDMA2000-GENERIC (step 1, Table 8.3.3.4.3.2-2) 



Derivation Path: TS 36.508, Table 4.6.6-1 C | 


Information Element 


Value/remark 


Comment 


Condition 


MeasObjectCDMA2000-GENERIC ::= SEQUENCE { 








cdma2000-Type 


TypeHRPD 






CarrierFreqCDI\/IAcdma2000 SEQUENCE { 








bandClass 


Band Class of frequency 
under test 






arfcn 


f14 






1 








searcliWindowSize 


15 






offsetFreq 


dbO 






cellsToRemoveList 


Not present 






cellsToAddModList CHOICE {} 


[Not present] 






cellForWhicliToReportCGI 


PhysCellldoftheCell 15 






} 








Table 8.3.3.4.3.3-5 MeasurementReport (step 4, Table 8.3.3.4.3.2-2) 


Derivation Path: TS 36.508, Table 4.6.1-5 | 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults::= SEQUENCE { 








measid 


1 






measResultServCell::= SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultsCDMA2000::=SEQUENCE { 








preRegistrationStatusHRPD 


TRUE 






measResultUstCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysCellldofCell 15 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








pilotStrength 


{0..63) 






} 








1 








1 








} 








} 








} 








1 








1 








} 








Table 8.3.3.4.3.3-6: RRCConnectionReconfiguration (step 5, Table 8.3.3.4.3.2-2) 


Derivation Path: TS 36.508 clause 4.6.1 table 4.6.1-8 with condition IVIEAS 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-DRX 






} 
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Table 8.3.3.4.3.3-7 MeasConfig (step 5, Table 8.3.3.4.3.2-2) 



Derivation Path: TS 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








MeasldToAddModList ::= SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measid 


2 






measQbjectId 


ldMeasObject-f14-CGI 






reportConfigId 


ReportConfigld-CGI 






1 








MeasObjectToAddModList ::= SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measQbjectId 


ldMeasObject-f14-CGI 






measObject CHOICE { 








measObjectCDMA2000 


MeasObjectCDMA2000- 
CGI 






} 








ReportConfigloRemoveList ::= SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 








reportConfigId 


ldReportConfig-B2 






1 








ReportConfigloAddModList ::= SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 








reportConfigId 


ReportConfigld-CGI 






reportConfig CHOICE { 








reportConfigCDIVIA2000 


ReportConfig-CGI 






} 








} 








Table 8.3.3.4.3.3-8: ReportConfig-CGI (step 5, Table 8.3.3.4.3.2-2) 


Derivation Path: TS 36.331 clause 6.3.5 IE ReportConfig InterRAT 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfiglnterRAT ::= SEQUENCE { 








triggerlype CHOICE { 








periodical SEQUENCE { 








purpose CHOICE { 








reportCGI 








1 








} 








} 








Table 8.3.3.4.3.3-9: RadioResourceConfigDedicated-DRX (step 5, Table 8.3.3.4.3.2-2) 


Derivation Path: TS 36.508 clause 4.6.3.19 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated-DRX ::= 
SEQUENCE! 








mac-IVIainConfig CHOICE { 








explicitValue 


MAC-MainConfiguration- 
RBC using condition 
DRX L 


See sub clause 
4.8.2.1.5 of [18]. 


DRX_L 


1 








physicalConfigDedicated 


Not present 






} 
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Table 8.3.3.4.3.3-10: MeasurementReport {step 7, Table 8.3.3.4.3.2-2) 



Derivation path: TS 36.508 4.6.1 table 4.6.1-5 | 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measuredResults ::= SEQUENCE { 








measid 


2 






measResultServing SEQUENCE { 




Report Cell 15 




rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultsCDMA2000::=SEQUENCE { 








preRegistrationStatusHRPD 


TRUE 






measResultUstCDMA2000 ::= SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 15 






cgi-lnfo[1] 


GlobalCellldofCell15 






measResult[1] SEQUENCE { 








pilotStrength 


(0..63) 






1 








1 








} 








} 








} 








1 








1 








} 








} 









8.3.3.5 

8.3.3.5.1 
(1) 



Measurement configuration control and reporting / SON / ANR / CGI 
reporting of 1xRTT cell 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE detects that entering conditions for event B2 are met 
then { UE sends MeasurementReport for event B2 } 



(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is commanded to report the global cell identity of the 
neighbour cell } 
then { UE determines the global cell identity of the cell included 
in the associated measurement object by acquiring the 
relevant system information from the concerned cell and 
reports the global cell identity in the MeasurementReport } 



8.3.3.5.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.3.5.3, 
5.5.2.3, 5.5.3.1 , 5.5.4.1, 5.5.4.8, 5.5.5. 

[TS 36.331, clause 5.3.5.3] 
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If the RRCConnectionReconfiguration message does not include the mobility Controllnfo and the UE is able to comply 
with the configuration included in this message, the UE shall: 

1> if the RRCConnectionReconfiguration message includes the measConfig: 
2> perform the measurement configuration procedure as specified in 5.5.2; 
[TS 36.331, clause 5.5.2.3] 
The UE shall: 

1> for each measid included in the received measIdToAddModList: 

2> if the triggerType is set to 'periodicaF and the purpose is set to ' reportCGF in the reportConfig associated 
with this measid: 

3> if the measObject associated with this measid concerns E-UTRA: 

4> start timer T321 with the timer value set to 1 second for this measid; 
3> else: 

4> start timer T321 with the timer value set to 8 seconds for this measid; 

[TS 36.331, clause 5.5.3.1] 

The UE supports measurements using a reporting configuration with l\\e purpose set to 'reportCGF, if the network 
provides sufficient idle periods. 

The UE applies the layer 3 filtering as specified in 5.5.3.2, before using the measured results for evaluation of reporting 
criteria or for measurement reporting. 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfiig: 

2> if a measurement gap configuration is setup; or 

2> the UE does not require measurement gaps to perform the concerned measurement: 

3> if s-Measure is not configured; or 

3> if s-Measure is configured and the serving cell RSRP, after layer 3 filtering, is lower than this value; or 

3> if the purpose for the associated reportConfig is set to 'reportCGF: 

4> perform the corresponding measurements of neighbouring cells on the frequencies and RATs 
indicated in the concerned measObject; 

2> perform the evaluation of reporting criteria as specified in section 5.5.4; 

1> if a measid is configuredfor which the purpose within the associated reportConfig is set to 'reportCGI': 

2> try to acquire the global cell identity of the cell indicated by the cellForWhichToReportCGI in the associated 
measObject by acquiring the relevant system information from the concerned cell; 

2> if the cell indicated by the cellForWhichFoReportCGI included in the associated measObject is an E-UTRAN 
cell: 

3> try to acquire the list of additional PLMN Identities, as included in the plmn-IdentityList, if multiple 
PLMN identities are broadcast in the concerned cell; 

NOTE: The 'primary' PLMN is part of the global cell identity. 

2> if the cell indicated by the cellForWhichFoReportCGI included in the associated measObject is a UTRAN 
cell: 
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3> try to acquire the LAC, the RAC and the list of additional PLMN Identities, if multiple PLMN identities 
are broadcast in the concerned cell; 

2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is a GERAN 
cell: 

3> try to acquire the RAC in the concerned cell; 

2> if the cell indicated by the cellForWhichToReportCGI included in the associated measObject is a 
CDMA2000 cell and the cdma2000-Type included in the measObject is 'typelXRTT: 

3> try to acquire the BASE ID, SID and NID in the concerned cell; 

[TS 36.331, clause 5.5.4.1] 

The UE shall: 

1> for each measid included in the measIdList within VarMeasConfig: 

2> if the corresponding reportConfig includes a purpose set to ' reportStrongestCellsForSON' : 

3> consider any neighbouring cell detected on the associated frequency to be applicable; 

2> else if the corresponding reportConfig includes a purpose set to 'reportCGF: 

3> consider any neighbouring cell detected on the associated frequency/ set of frequencies (GERAN) which 
has a physical cell identity matching the value of the cellForWhichToReportCGI included in the 
corresponding measObject within the VarMeasConfig to be applicable; 

2> else: 

3> if the corresponding measObject concerns E-UTRA: 

4> consider any neighbouring cell detected on the associated frequency to be applicable when the 

concerned cell is not included in the blackCellsToAddModList defined within the VarMeasConfig for 
this measid; 

3> else if the corresponding measObject concerns UTRA or CDMA2000: 

4> consider a neighbouring cell on the associated frequency to be applicable when the concerned cell is 
included in the cellsToAddModList defined within the VarMeasConfig for this measid (i.e. the cell is 
included in the white-list); 

3> else if the corresponding measObject concerns GERAN: 

4> consider a neighbouring cell on the associated set of frequencies to be applicable when the concerned 
cell matches the ncc-Permitted defined within the VarMeasConfig for this measid; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells for all measurements after layer 3 filtering taken during timeToTrigger defined for 
this event within the VarMeasConfig, while the VarMeasReportList does not include an measurement 
reporting entry for this measid (a first cell triggers the event): 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOJReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the entry condition applicable for this event, i.e. the event 

corresponding with the eventid of the corresponding reportConfig within VarMeasConfig, is fulfilled for one 
or more applicable cells not included in the cellsTriggeredList for all measurements after layer 3 filtering 
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taken during timeToTrigger defined for this event within the VarMeasConfig (a subsequent cell triggers the 
event): 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> include the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the triggerType is set to 'event' and if the leaving condition applicable for this event is fulfilled for one or 
more of the cells included in the cellsTriggeredList defined within the VarMeasReportList for this measid for 
all measurements after layer 3 filtering taken during timeToTrigger defined within the VarMeasConfig for 
this event: 

3> remove the concerned cell(s) in the cellsTriggeredList defined within the VarMeasReportList for this 
measid; 

3> if reportOnLeave is set to TRUE for the corresponding reporting configuration: 

4> initiate the measurement reporting procedure, as specified in 5.5.5; 
3> if the cellsTriggeredList defined within the VarMeasReportList for this measid is empty: 

4> remove the measurement reporting entry within the VarMeasReportList for this measid; 

4> stop the periodical reporting timer for this measid, if running; 

2> if the purpose is included and set to 'reportStrongestCells' or to 'reportStrongestCellsForSON' and if a 
(first) measurement result is available for one or more applicable cells: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 1: If ihs purpose is set to 'reportStrongestCells', the UE initiates a first measurement report immediately 
after the quantity to be reported becomes available for at least either serving cell or one of the applicable 
cells. If the purpose is set to 'reportStrongestCellsForSON', the UE initiates a first measurement report 
when it has determined the strongest cells on the associated frequency. 

2> upon expiry of the periodical reporting timer for this measid: 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> if the purpose is included and set to 'reportCGT and if the UE acquired the information needed to set all 
fields of cellGloballd for the requested cell: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> stop timer T321; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

2> upon expiry of the T321 for this measid: 

3> include a measurement reporting entry within the VarMeasReportList for this measid; 

3> set the numberOfReportsSent defined within the VarMeasReportList for this measid to 0; 

3> initiate the measurement reporting procedure, as specified in 5.5.5; 

NOTE 2: The UE does not stop the periodical reporting with triggerType set to 'event' or to 'periodical' while the 
corresponding measurement is not performed due to the serving cell RSRP being equal to or better than s- 
Measure or due to the measurement gap not being setup. 
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[TS 36.331, clause 5.5.4.8] 

The UE shall: 

1> for UTRA and CDMA2000, only trigger the event for cells included in the corresponding measurement object; 

1> consider the entering condition for this event to be satisfied when both condition B2-1 and condition B2-2, as 
specified below, are fulfilledapply inequality B2-1 and inequality B2-2 i.e. both have to be fulfilled, as specified 
below, as the entry condition for this event; 

1> consider the leaving condition for this event to be satisfied when condition B2-3 or condition B2-4, i.e. at least 
one of the two, as specified below, is fulfilledapply inequality B3-3 and inequality B2-4 i.e. at least one of the 
two has to be fulfilled, as specified below, as the leaving condition for this event; 



Inequality B2-1 (Entering condition 1) 



Inequality B2-2 (Entering condition 2) 



Inequality B2-3 (Leaving condition 1) 



Ms + Hys < Thresh 1 



Mn + Ofn - Hys > Thresh! 



Ms - Hys > Thresh 1 

Inequality B2-4 (Leaving condition 2) 

Mn + Ofn + Hys < Thresh! 

The variables in the formula are defined as follows: 

Ms is the measurement result of the serving cell, not taking into account any cell individual offsets. 

Mn is the measurement result of the inter-RAT neighbour cell, not taking into account any offsetsneighbouring inter 
RAT cell. 

Ofn is the frequency specific offset of the frequency of the inter-RAT neighbour cell (i.e. ojfsetFreq as defined 
within the measObject corresponding to the frequency of the inter-RAT neighbour cell)neighbour cell. 

Hys is the hysteresis parameter for this event (i.e. hysteresis as defined within reportConfiglnterRAT \he 
VarMeasurementConfiguration for this event). 

Threshl is the threshold parameter for this event (i.e. h2-Thresholdl as defined within reportConfiglnterRATthe 
VarMeasurementConfiguration for this event). 

Threshl is the threshold parameter for this event (i.e. b2-Threshold2 as defined within reportConfiglnterRAT ih& 
VarMeasurementConfiguration for this event). 

Ms is expressed in dBm in case of RSRP, or in dB in case of RSRQ. 

Mn is expressed in dBm or dB, depending on the measurement quantity of the inter-RAT neighbourneighbouring 
inter RAT cell. 

Ofn, Hys are expressed in dB. 

Threshl is expressed in the same unit as M«dBm in case Ms is expressed in dBm; otherwise it is expressed in dB. 

Threshl is expressed in the same unit as MndBm in case Mn is expressed in dBm; otherwise it is expressed in dB. 

[TS 36.331, clause 5.5.5] 

The purpose of this procedure is to transfer measurement results from the UE to E-UTRAN. 

For the measid for which the measurement reporting procedure was triggered, the UE shall set the measResults within 
the MeasurementReport message as follows: 
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1> set the measid to the measurement identity that triggered the measurement reporting; 

1> set the measResultServCell to include the quantities of serving cell; 

1> if there is at least one applicable neighbouring cell to report: 

2> set the measResultNeighCells to include the best neighbouring cells up to maxReportCells in accordance with 
the following: 

3> if the triggerType is set to 'evenf: 

4> include the cells included in the cellsTriggeredList as defined within the VarMeasReportList for this 
measid; 

3> else: 

4> include the applicable cells for which the new measurement results became available since the last 
periodical reporting or since the measurement was initiated or reset; 

NOTE: The reliability of the report (i.e. the certainty it contains the strongest cells on the concerned frequency) 
depends on the measurement configuration i.e. the reportlnterval. The related performance requirements 
are specified in TS 36.133 [16]. 

3> for each cell that is included in the measResultNeighCells, include the physCellld; 

3> if the triggerType is set to 'evenf; or \h& purpose is set to 'reportStrongestCells' or to 
'reportStrongestCellsForSON' : 

4> for each included cell, include the layer 3 filtered measured results in accordance with the 
reportConfig for this measid, ordered as follows: 

5> if the measObject associated with this measid concerns E-UTRA: 

6> set the measResult to include the quantity(ies) indicated in the reportQuantity within the 
concerned reportConfig in order of decreasing triggerQuantity, i.e. the best cell is included 
first; 

5> else: 

6> set the measResult to the quantity as configured for the concerned RAT within the 
quantityConfig in order of decreasing quantity, i.e. the best cell is included first; 

3> else if the purpose is set to 'reportCGF : 

4> if the mandatory present fields of the cellGloballd for the cell indicated by the 
cellForWhichToReportCGI in the associated measObject have been obtained: 

5> include the cgi-Info containing all the fields that have been successfully acquired; 

1> increment the numberOfReportsSent as defined within the VarMeasReportList for this measid hy 1; 

1> stop the periodical reporting timer, if running; 

1> if the numberOfReportsSent as defined within the VarMeasReportList for this measid is less than the 
reportAmount as defined within the corresponding reportConfig for this measid: 

2> start the periodical reporting timer with the value of reportlnterval as defined within the corresponding 
reportConfig for this measid; 

1> else: 

2> if the triggerType is set to 'periodical' : 

3> remove the entry within the VarMeasReportList for this measid; 

3> remove this measid from the measIdList within VarMeasConfig; 
1> if the measured results are for CDMA2000 IxRTT: 
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2> set the preRegistrationStatusHRPD to 'FALSE'; 
1> submit the MeasurementReport message to lower layers for transmission, upon which the procedure ends; 
8.3.3.5.3 Test description 

8.3.3.5.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 19 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 
UE: 

None. 

8.3.3.5.3.2 Test procedure sequence 

Table 8.3.3.5.3.2-1 illustrates the downlink power levels to be applied for Cell 1 and Cell 19 at various time instants of 
the test execution. Row marked "TO" denotes the conditions after the preamble, while row marked "Tl" is to be applied 
subsequently. The exact instants on which these values shall be applied are described in the texts in this clause. 

Table 8.3.3.5.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cein 


Cell 19 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-75 


- 


The power level values are 
such that entering conditions 
for event B2 are not satisfied: 
Inequality B2-1 (Entering 
condition 1) 
Ms + Hys > Threshl 

Inequality B2-2 (Entering 
condition 2) Mn +Ofn - Hys 
< Thresh2 


lor/loc 


dB 


- 


-15 


Pilot Ec/ lor 


dB 


- 


-7 


loc 


dBm/1.23MHz 


- 


-75 


CPICH_Ec/lo (Note 1) 


dB 


- 


-22 


T1 


Cell-specific RS EPRE 


dBm/15kHz 


-75 


- 


The power level values are 
such that entering conditions 
for event B2 are satisfied: 
Inequality B2-1 (Entering 
condition 1) 
Ms + Hys< Threshl 

Inequality B2-2 (Entering 
condition 2) IVIn +Ofn - Hys 
> Thresh2 


lor/loc 


dB 


- 





Pilot Ec/ lor 


dB 


- 


-7 


loc 


dBm/1.23MHz 


- 


-75 


CPICH_Ec/lo (Note 1) 


dB 


- 


-10 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other parameters 
set by the SS 
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Table 8.3.3.5.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS transmits an 

RRCConnectionReconfiguration message 
including MeasConfigto setup inter RAT 
measurement and reporting for event B2. 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


SS re-adjusts the cell-specific reference signal 
level according to row "T1" in table 8.3.3.5.3.2- 
1. 










4 


Check: Does the UE transmit a 
MeasurementReport message to report event 
B2 on Cell 19? 


-> 


MeasurementReport 


1 


P 


5 


SS transmits an 

RRCConnectionReconfiguration message 
including MeasConf/gf including reportCG/ for 
Cell 19 and sufficient idle periods for UE to 
acquire the relevant system information from 
Cell 19. 


<— 


RRCConnectionReconfiguration 






6 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






7 


Check: Does the UE transmit a 
MeasurementReport message with 
cellGloballd of Cell 19 within 8 sec? 


-> 


MeasurementReport 


2 


P 



8.3.3.5.3.3 



Specific message contents 



Table 8.3.3.5.3.3-1 : SystemlnformationBlockType2 for Cell 1 (preamble and all the steps in Table 

8.3.3.5.3.2-2) 



Derivation Path: TS 36.508 clause 4.4.3.3-1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








RadioResourceConfigCommonSIB-DEFAULT ::= 
SEQUENCE! 








pcch-Config 


PCCH-Config- 
LQNGCYCLE 






1 








PCCH-Config-LQNGCYCLE::= SEQUENCE { 








defaultPagingCycle 


rf256 






nB 


oneT 






1 








} 









Table 8.3.3.5.3.3-2: RRCConnectionReconfiguration (step 1, Table 8.3.3.5.3.2-2) 

Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



877 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 8.3.3.5.3.3-3: MeasConfig (step 1, Table 8.3.3.5.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


IdlVleasObject-fl 7 






measObject[1] 


MeasObjectCDMA2000- 
GENERIC 






1 








reportConfigloAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-CDMA2000(-69, -18) 






} 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


IdMeasObject-fl 7 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






} 








quantityConfig SEQUENCE { 








quantityConfigCDMA2000 SEQUENCE { 








measQuantityCDIVIA2000 


pilotStrength 






} 








} 








measGapConfig SEQUENCE { 








gapActivation CHOICE { 








activate SEQUENCE { 








gapPattern CHOICE { 








gp1 SEQUENCE { 








gapOffset 









1 








1 








} 








} 








} 








} 








Table 8.3.3.5.3.3-4: MeasObjectCDMA2000-GENERIC (step 1, Table 8.3.3.5.3.2-2) 


Derivation Path: TS 36.508, Table 4.6.6-1 C 


Information Element 


Value/remark 


Comment 


Condition 


MeasObjectCDMA2000-GENERIC ::= SEQUENCE { 








cdma2000-Type 


TypelXRTT 






CarrJerFreqCDMAcdma2000 SEQUENCE { 








bandClass 


Band Class of frequency 
under test 






arfcn 


f17 






} 








SearchWindowSize 


15 






offsetFreq 


dbO 






cellsToRemoveList 


Not present 






cellsToAddModList CHOICE {} 


[Not present] 






cellForWhichToReportCGI 


PhysCellldoftheCell 19 






} 
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Table 8.3.3.5.3.3-5 MeasurementReport {step 4, Table 8.3.3.5.3.2-2) 



Derivation Path: TS 36.508, Table 4.6.1-5 | 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults::= SEQUENCE { 








measid 


1 






measResultServCell::= SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultsCDMA2000::=SEQUENCE { 








preRegistrationStatusHRPD 


FALSE 






measResultUstCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1l 


PhysCellldofCell 19 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








pilotStrength 


(0..63) 






} 








1 








1 








} 








} 








} 








1 








} 








} 








Table 8.3.3.5.3.3-6: RRCConnectionReconfiguration (step 5, Table 8.3.3.5.3.2-2) 


Derivation Path: TS 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-DRX 






} 
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Table 8.3.3.5.3.3-7 MeasConfig (step 5, Table 8.3.3.5.3.2-2) 



Derivation Path: TS 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








MeasldToAddModList ::= SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measid 


2 






measQbjectId 


ldMeasObject-f17-CGI 






reportConfigId 


ReportConfigld-CGI 






1 








MeasObjectToAddModList ::= SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measQbjectId 


ldMeasObject-f17-CGI 






measObject CHOICE { 








measObjectCDMA2000 


MeasObjectCDMA2000- 
CGI 






} 








ReportConfigloRemoveList ::= SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 








reportConfigId 


ldReportConfig-B2 






1 








ReportConfigloAddModList ::= SEQUENCE (SIZE 
(1 ..maxReportConfigId)) OF SEQUENCE { 








reportConfigId 


ReportConfigld-CGI 






reportConfig CHOICE { 








reportConfigCDIVIA2000 


ReportConfig-CGI 






} 








} 








Table 8.3.3.5.3.3-8: ReportConfig-CGI (step 5, Table 8.3.3.5.3.2-2) 


Derivation Path: TS 36.331 clause 6.3.5 IE ReportConfigCDI\/IA2000 


Information Element 


Value/remark 


Comment 


Condition 


ReportConfigCDMA2000 ::= SEQUENCE { 








triggerlype CHOICE { 








periodical SEQUENCE { 








purpose CHOICE { 








reportCGI 








1 








} 








} 








Table 8.3.3.5.3.3-9: RadioResourceConfigDedicated-DRX (step 5, Table 8.3.3.5.3.2-2) 


Derivation Path: TS 36.508 clause 4.6.3.19 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated-DRX ::= 
SEQUENCE! 








mac-IVIainConfig CHOICE { 








explicitValue 


MAC-MainConfiguration- 
RBC using condition 
DRX L 


See sub clause 
4.8.2.1.5 of [18]. 


DRX_L 


1 








physicalConfigDedicated 


Not present 






} 
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Table 8.3.3.5.3.3-10: MeasurementReport {step 7, Table 8.3.3.5.3.2-2) 



Derivation path: TS 36.508 4.6.1 table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasureclResults ::= SEQUENCE { 








measid 


2 






measResultServing SEQUENCE { 




Report Cell 19 




rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








} 








MeasResultListEUTRA ::= SEQUENCE (SIZE 
(L.tnaxCellReport)) QF SEQUENCE { 








physicalCell Identity 


PhysicalCellldentity of 
Cell19 






globalCellldentity SEQUENCE { 








globalCelllD-CDMA2000 


GlobalCellldofCell19 






tac-ID 


Not checked 






pImn-ldentityList 


Not checked 






} 








} 









8.4 Inter-RAT handover 

8.4.1 .2 Inter-RAT handover / From E-UTRA to UTRA PS / Data 

8.4.1 .2.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a MobilityFromEUTRACommand message and a DPCH PS RAB combination is configured 
for an UTRA cell} 

then { UE transmits a HANDOVER TO UTRAN COMPLETE message on the utra cell} 
} 

8.4.1 .2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.4.3.3. 

[TS 36.331, clause 5.4.3.3] 

The UE shall be able to receive a MobilityFromEUTRACommand message and perform a cell change order to GERAN, 
even if no prior UE measurements have been performed on the target cell. 

The UE shall: 

1> stop timer T310, if running; 

1> if the MobilityFromEUTRACommand message includes the purpose set to 'handover' : 

2> if the targetRAT-Type is set to 'utra' or 'geran': 

3> consider inter-RAT mobility as initiated towards the RAT indicated by the targetRAT-Type included in 
the MobilityFromEUTRACommand message; 

3> forward the nas-SecurityParamFromEUTRA to the upper layers; 

3> access the target cell indicated in the inter-RAT message in accordance with the specifications of the 
target RAT; 
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8.4.1.2.3 Test description 

8.4.1.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 5. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.4.1 .2.3.2 Test procedure sequence 

Table 8.4.1 .2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures UTRA cell 5 to reference 
configuration according 36.508 table 4.8.3-1 , 
condition UTRA PS RB. 










2 


The SS transmits a 

MobilityFromEUTRACommand message on 
CelM. 


<- 


MobilityFromEUTRACommand 






3 


Check: Does the UE transmit a HANDOVER 
TO UTRAN COMPLETE message on cell 5? 


-> 


HANDOVER TO UTRAN 
COMPLETE 


1 


P 



8.4.1 .2.3.3 Specific message contents 

Table 8.4.1 .2.3.3-1 : MobilityFromEUTRACommand (step 2, Table 8.4.1 .2.3.2-1) 



Derivation Path: 36.508t able 4.6.1-6 


Information Element 


Value/remark 


Comment 


Condition 


MobilityFromEUTRACommand ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








mobilityFromEUTRACommand-r8 SEQUENCE { 








purpose CHOICE { 








handover SEQUENCE { 








targetRAT-Type 


utra 






targetRAT-MessageContainer 


HANDOVER TO UTRAN 
COMMAND 






nas-SecurityParamPromEUTRA 


The 4 least significant 
bits of the NAS downlink 
COUNT value 






systemlnformation 


Not present 






1 








} 








} 








} 








1 








1 









Table 8.4.1.2.3.3-2: HANDOVER TO UTRAN COMMAND (Table 8.4.1.2.3.3-1) 

Derivation Path: 36.508 table 4.7B. 1-1, condition UTRA PS RB 
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8.4.1 .4 Inter-RAT handover / From E-UTRA to UTRA HSDPA / Data 

8.4.1 .4.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a MobilityFromEUTRACommand message and a DPCH and HS-PDSCH PS RAB combination 
is configured for an UTRA cell} 

then { UE transmits a HANDOVER TO UTRAN COMPLETE message on the utra cell} 

} 

8.4.1.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.4.3.3. 

[TS 36.331, clause 5.4.3.3] 

The UE shall be able to receive a MobilityFromEUTRACommand message and perform a cell change order to GERAN, 
even if no prior UE measurements have been performed on the target cell. 

The UE shall: 

1> stop timer T310, if running; 

1> if the MobilityFromEUTRACommand message includes the purpose set to 'handover' : 

2> if the targetRAT-Type is set to 'utra' or 'geran': 

3> consider inter-RAT mobility as initiated towards the RAT indicated by the targetRAT-Type included in 
the MobilityFromEUTRACommand message; 

3> forward the nas-SecurityParamFromEUTRA to the upper layers; 

3> access the target cell indicated in the inter-RAT message in accordance with the specifications of the 
target RAT; 

8.4.1.4.3 Test description 
8.4.1.4.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 5. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 
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8.4.1.4.3.2 



Test procedure sequence 

Table 8.4.1 .4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures UTRA cell 5 to reference 
configuration according 36.508 table 4.8.3-1 , 
condition UTRA HSDPA RB.. 










2 


The SS transmits a 

MobilityFromEUTRACommand message on 
Cell 1. 


<— 


MobilityFromEUTRACommand 






3 


Check: Does the UE transmit a HANDOVER 
TO UTRAN COMPLETE message on cell 5? 


-> 


HANDOVER TO UTRAN 
COMPLETE 


1 


P 



8.4.1 .4.3.3 Specific message contents 

Table 8.4.1 .4.3.3-1 : MobilityFromEUTRACommand (step 2, Table 8.4.1 .4.3.2-1) 



Derivation Path: 36.508t able 4.6.1-6 


Information Element 


Value/remark 


Comment 


Condition 


MobilityFromEUTRACommand ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








mobilityFromEUTRACommand-r8 SEQUENCE { 








purpose CHOICE { 








handover SEQUENCE { 








targetRAT-Type 


utra 






targetRAT-MessageContainer 


HANDOVER TO UTRAN 
COMMAND 






nas-SecurityParamPromEUTRA 


The 4 least significant 
bits of the NAS downlink 
COUNT value 






systemlnformation 


Not present 






} 








1 








1 








} 








} 








} 









Table 8.4.1.4.3.3-2: HANDOVER TO UTRAN COMMAND (Table 8.4.1.4.3.3-1) 

Derivation Path: 36.508 table 4.7B. 1-1, condition UTRA HSDPA RB 



8.4.2.2 



8.4.2.2.1 



Inter-RAT handover / From UTRA PS to E-UTRA / Data 
Test Purpose (TP) 



(1) 



with { UE in UTRA CELL_DCH {PS-DCCH+DTCH_DCH) state } 
ensure that { 

when { UE receives a HANDOVER FROM UTRAN COMMAND message including the eutra-Message } 
then { UE transmits an RRCConnectionReconfigurationComplete message and enters E-UTRA 
RRC CONNECTED state } 



8.4.2.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.4.2.3. 

[TS 36.331, clause 5.4.2.3] 
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If the UE is able to comply with the configuration included in the RRCConnectionReconfiguration message, the UE 
shall: 

> apply the default physical channel configuration as specified in 9.2.4; 

> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

> apply the default MAC main configuration as specified in 9.2.2; 

> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

> start synchronising to the DL of the target cell; 

> set the C-RNTI to the value of the newUE-Identity; 

> for the target cell, apply the downlink bandwidth indicated by the dl-Bandwidth; 

> for the target cell, apply the uplink bandwidth indicated by (the absence or presence of) the ul-Bandwidth; 

> perform the radio resource configuration procedure as specified in 5.3.10; 

> forward the nas-SecurityParaniToEUTRA to the upper layers; 

> derive the KeNB key, as specified in TS 33.401 [32]; 

> store the nextHopChainingCount value; 

> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 

> derive the Rrrcbiic key and the Kypenc key associated with the cipheringAlgorithm, as specified in TS 33.401 [32]; 

> configure lower layers to apply the indicated integrity protection algorithm and the KRRCint key immediately, i.e. 
the indicated integrity protection configuration shall be applied to all subsequent messages received and sent by 
the UE, including the message used to indicate the successful completion of the procedure; 

> configure lower layers to apply the indicated ciphering algorithm, the Rrrcchc key and the Kupenc key 
immediately, i.e. the indicated ciphering configuration shall be applied to all subsequent messages received and 
sent by the UE, including the message used to indicate the successful completion of the procedure; 

> if the RRCConnectionReconfiguration message includes the measConfig: 
2> perform the measurement configuration procedure as specified in 5.5.2; 

> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission using the new 
configuration; 

> use the default values specified in 9.2.5 for timer T310, T311 and constant N310, N31 1; 

> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the configuration that do not require the UE to know the SEN of the target cell; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SEN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SEN of the target cell; 

2> enter E-UTRA RRC_CONNECTED, upon which the procedure ends; 
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8.4.2.2.3 Test description 

8.4.2.2.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 5. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

8.4.2.2.3.2 Test procedure sequence 

Table 8.4.2.2.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" and "T2" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 

Table 8.4.2.2.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 5 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-70 


- 


The power level values are 
assigned to satisfy Srxlevceii i > 
and Srxlevceii 5 <= 0. 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-115 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-90 


- 


The power level values are 
assigned to satisfy Threshx,high < 
Srxlevceii 5- 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-65 


T2 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-70 


- 


The power level values are such 
that entering conditions for event 3a 
are satisfied. 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-115 
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Table 8.4.2.2.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes Cell 1 and Cell 5 level 
according to the row "T1" in table 8.4.2.2.3.2- 

1. 










2 


Generic test procedure in TS 36.508 
subclause 6.4.2.8 is performed on Cell 5. 
NOTE: The UE performs an RAU procedure 
and the RRC connection is released. 










3 


Make the UE initiate an outgoing call. 


- 


- 


- 


- 


4 


Generic test procedure in TS 34.108 
subclause 7.2.4.2.3 is performed on Cell 5. 
NOTE: The UE performs Radio Bearer 
Establishment in a UTRAN cell. 










5 


The SS transmits a PHYSICAL CHANNEL 
RECONFIGURATION message on Cell 5 
including the DPCH compressed mode info. 


<— 


PHYSICAL CHANNEL 
RECONFIGURATION 






6 


The UE transmits a PHYSICAL CHANNEL 
RECONFIGURATION COMPLETE message 
on Cell 5. 


— > 


PHYSICAL CHANNEL 
RECONFIGURATION 
COMPLETE 






7 


Void 


- 


- 


- 


- 


8 


The SS transmits a MEASUREMENT 
CONTROL message to setup inter-RAT 
measurement on Cell 5. 


<— 


MEASUREMENT CONTROL 






9 


The SS changes Cell 1 and Cell 5 level 
according to the row "T2" in table 8.4.2.2.3.2- 
1. 










10 


The UE transmits a MEASUREMENT 
REPORT message on Cell 5 including the E- 
UTRA event results. 


-> 


MEASUREMENT REPORT 






11 


The SS transmits a HANDOVER FROM 
UTRAN COMMAND message on Cell 5. 


<— 


HANDOVER FROM UTRAN 
COMMAND 


- 


- 


12 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 1 using the security key 
derived from the new Ksnb? 


— > 


RRCConnectionReconfigurationC 
omplete 


1 


P 


12 
A 


Generic test procedure in TS 36.508 
subclause 6.4.2.10 is performed on Cell 1. 
NOTE: The UE performs tracking area 
updating procedure without ISR and security 
reconfiguration after successful completion 
of handover from UTRA. 










13- 
19 


Void 


- 


- 


- 


- 


20 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA RRC 
CONNECTED state on Cell 1 ? 






1 





8.4.2.2.3.3 Specific message contents 

Table 8.4.2.2.3.3-1 : SystemlnformationBlockTypel for Cell 1 (preamble, Table 8.4.2.2.3.2-2) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remarl< 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








SchedulinglnfoListSEOUENCE (SIZE (L.maxSI- 
Message)) OF SEOUENCE {} 


Combination 4 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB6 are 
transmitted 




} 
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Table 8.4.2.2.3.3-2: SystemlnformationBlockType6 ior Cell 1 (preamble, Table 8.4.2.2.3.2-2) 



Derivation Path: 36.508, Table 4.4.3.3-5 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type6 ::= SEQUENCE { 








carrierFreqLlstUTRA-FDD SEQUENCE (SIZE 
(1 ..maxUTRA-FDD-Carrier)) OF SEQUENCE { 


The same number of 
entries as the configured 
UTRA FDD carriers 




UTRA-FDD 


camerFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


5 






p-MaxUTRA[1l 









} 








carrierFreqLlstUTRA-TDD SEQUENCE (SIZE 
(1..maxUTRA-TDD-Carrier)) OF SEQUENCE { 


The same number of 
entries as the configured 
UTRA TDD carriers 




UTRA-TDD 


camerFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


5 






p-MaxUTRA[1] 









} 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 



Table 8.4.2.2.3.3-3: Void 
Table 8.4.2.2.3.3-4: Void 

Table 8.4.2.2.3.3-5: HANDOVER FROM UTRAN COMMAND (step 1 1 , Table 8.4.2.2.3.2-2) 

Derivation Path: 36.508, Table 4.7B.1-2 

Table 8.4.2.2.3.3-6: RRCConnectionReconfiguration (Table 8.4.2.2.3.3-5) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO-TO-EUTRA(1,0) 

Table 8.4.2.2.3.3-7: MobilityControllnfo (Table 8.4.2.2.3.3-5) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
CelM. 






carrierFreq SEQUENCE { 








dl-CarrierFreq 


Same downlink EARFCN 
as used for Cell 1. 






ul-CarrierFreq 


Not present 






} 








carrierBandwidth SEQUENCE { 








dl-Bandwidth 


Downlink system 
bandwidth under test. 






ul-Bandwidth 


Uplink Bandwidth under 
test. 




FDD 


ul-Bandwidth 


Not present 




TDD 


} 








additionalSpectrumEmission 


1 






} 
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Condition 


Explanation 


FDD 


FDD cell environment 


TDD 


TDD cell environment 



Table 8.4.2.2.3.3-8: SecurityConfigHO (Table 8.4.2.2.3.3-5) 



Derivation Path: 36.508, Table 4.6.4-1 


Information Element 


Value/remark 


Comment 


Condition 


SecurityConfigHO ::= SEQUENCE { 








handoverType CHOICE { 








interRATSEOUENCE{ 








securityAlgorithmConfig SEQUENCE { 








cipheringAlgorithm 


Set according to PIXIT 
parameter for default 
integrity protection 
algorithm 






integrityProtAlgorithm 


Set according to PIXIT 
parameter for default 
ciphering algorithm 






1 








nas-SecurityParamToEUTRA 


Octets 1 to 4 are 
arbitrarily selected. 

Bits 1 to 3 of octet 5 are 
set according to PIXIT 
parameter for default 
integrity protection 
algorithm. 

Bits 5 to 7 of octet 5 are 
set according to PIXIT 
parameter for default 
ciphering algorithm. 

Bits 1 to 3 of octet 6 are 
arbitrarily selected 
between 'OOO'B and 
'110'B, different from the 
valid NAS key set 
identifier of the UE if such 
a value exists. 

Bit 4 of octet 6 is set to 1 . 


Octets 1 to 4 
include the 
NonceMME value. 

Bits 1 to 3 of octet 
5 include the Type 
of integrity 
protection 
algorithm 

Bits 5 to 7 of octet 

5 include the Type 
of ciphering 
algorithm. 

Bits 1 to 4 of octet 

6 include the NAS 
key set identifier. 




1 








} 








} 









8.4.2.4 



8.4.2.4.1 



Inter-RAT handover / From UTRA HSPA to E-UTRA / Data 
Test Purpose (TP) 



(1) 



with { UE in UTRA CELL_DCH {PS-DCCH+DTCH_HS-DSCH) state } 
ensure that { 

when { UE receives a HANDOVER FROM UTRAN COMMAND message including the eutra-Message } 
then { UE transmits an RRCConnectionReconfigurationComplete message and enters E-UTRA 
RRC CONNECTED state } 



8.4.2.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.4.2.3. 

[TS 36.331, clause 5.4.2.3] 
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If the UE is able to comply with the configuration included in the RRCConnectionReconfiguration message, the UE 
shall: 

> apply the default physical channel configuration as specified in 9.2.4; 

> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

> apply the default MAC main configuration as specified in 9.2.2; 

> start timer T304 with the timer value set to t304, as included in the mobilityControlInfo; 

> consider the target cell to be one on the frequency indicated by the carrierFreq with a physical cell identity 
indicated by the targetPhysCellld; 

> start synchronising to the DL of the target cell; 

> set the C-RNTI to the value of the newUE-Identity; 

> for the target cell, apply the downlink bandwidth indicated by the dl-Bandwidth; 

> for the target cell, apply the uplink bandwidth indicated by (the absence or presence of) the ul-Bandwidth; 

> perform the radio resource configuration procedure as specified in 5.3.10; 

> forward the nas-SecurityParaniToEUTRA to the upper layers; 

> derive the KeNB key, as specified in TS 33.401 [32]; 

> store the nextHopChainingCount value; 

> derive the KRRCim key associated with the integrityProtAlgorithm, as specified in TS 33.401 [32]; 

> derive the Rrrcbiic key and the Kypenc key associated with the cipheringAlgorithm, as specified in TS 33.401 [32]; 

> configure lower layers to apply the indicated integrity protection algorithm and the KRRCint key immediately, i.e. 
the indicated integrity protection configuration shall be applied to all subsequent messages received and sent by 
the UE, including the message used to indicate the successful completion of the procedure; 

> configure lower layers to apply the indicated ciphering algorithm, the Rrrcchc key and the Kupenc key 
immediately, i.e. the indicated ciphering configuration shall be applied to all subsequent messages received and 
sent by the UE, including the message used to indicate the successful completion of the procedure; 

> if the RRCConnectionReconfiguration message includes the measConfig: 
2> perform the measurement configuration procedure as specified in 5.5.2; 

> submit the RRCConnectionReconfigurationComplete message to lower layers for transmission using the new 
configuration; 

> use the default values specified in 9.2.5 for timer T310, T311 and constant N310, N31 1; 

> if MAC successfully completes the random access procedure: 

2> stop timer T304; 

2> apply the parts of the configuration that do not require the UE to know the SEN of the target cell; 

2> apply the parts of the measurement and the radio resource configuration that require the UE to know the SEN 
of the target cell (e.g. measurement gaps, periodic CQI reporting, scheduling request configuration, sounding 
RS configuration), if any, upon acquiring the SEN of the target cell; 

2> enter E-UTRA RRC_CONNECTED, upon which the procedure ends; 
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8.4.2.4.3 Test description 

8.4.2.4.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 5. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

8.4.2.4.3.2 Test procedure sequence 

Table 8.4.2.4.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" and "T2" are to be applied subsequently. The exact instants on which these values shall be 
applied are described in the texts in this clause. 

Table 8.4.2.4.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 5 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-70 


- 


The power level values are 
assigned to satisfy Srxlevceii i > 
and Srxlevceii 5 <= 0. 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-115 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-90 


- 


The power level values are 
assigned to satisfy Threshx,high < 
Srxlevceii 5- 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-65 


T2 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-70 


- 


The power level values are such 
that entering conditions for event 3a 
are satisfied. 


CPICH Ec 


dBm/3.8 
4 MHz 


- 


-115 
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Table 8.4.2.4.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS changes Cell 1 and Cell 5 level 
according to the row "T1" in table 8.4.2.4.3.2- 
1. 










2 


Generic test procedure in TS 36.508 
subclause 6.4.2.8 is performed on Cell 5. 
NOTE: The UE performs an RAU procedure 
and the RRC connection is released. 










3 


Make the UE initiate an outgoing call. 


- 


- 


- 


- 


4 


Generic test procedure in TS 34.108 
subclause 7.2.4.2.3 is performed on Cell 5. 
NOTE: The UE performs Radio Bearer 
Establishment in a UTRAN cell. 










5 


The SS transmits a PHYSICAL CHANNEL 
RECONFIGURATION message on Cell 5 
including the DPCH compressed mode info. 


<— 


PHYSICAL CHANNEL 
RECONFIGURATION 






6 


The UE transmits a PHYSICAL CHANNEL 
RECONFIGURATION COMPLETE message 
on Cell 5. 


— > 


PHYSICAL CHANNEL 
RECONFIGURATION 
COMPLETE 






7 


Void 


- 


- 


- 


- 


8 


The SS transmits a MEASUREMENT 
CONTROL message to setup inter-RAT 
measurement on Cell 5. 


<— 


MEASUREMENT CONTROL 






9 


The SS changes Cell 1 and Cell 5 level 
according to the row "T2" in table 8.4.2.4.3.2- 
1. 










10 


The UE transmits a MEASUREMENT 
REPORT message on Cell 5 including the E- 
UTRA event results. 


-> 


MEASUREMENT REPORT 






11 


The SS transmits a HANDOVER FROM 
UTRAN COMMAND message on Cell 5. 


<— 


HANDOVER FROM UTRAN 
COMMAND 


- 


- 


12 


Check: Does the UE transmit an 
RRCConnectionReconfigurationComplete 
message on Cell 1 using the security key 
derived from the new Ksnb? 


— > 


RRCConnectionReconfigurationC 
omplete 


1 


P 


12 
A 


Generic test procedure in TS 36.508 
subclause 6.4.2.10 is performed on Cell 1. 
NOTE: The UE performs tracking area 
updating procedure without ISR and security 
reconfiguration after successful completion 
of handover from UTRA. 










13- 
19 


Void 


- 


- 


- 


- 


20 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA RRC 
CONNECTED state on Cell 1 ? 






1 





8.4.2.4.3.3 Specific message contents 

Table 8.4.2.4.3.3-1 : SystemlnformationBlockTypel for Cell 1 (preamble, Table 8.4.2.4.3.2-2) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remarl< 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








SchedulinglnfoListSEOUENCE (SIZE (L.maxSI- 
Message)) OF SEOUENCE {} 


Combination 4 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB6 are 
transmitted 




} 
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Table 8.4.2.4.3.3-2: SystemlnformationBlockType6 ior Cell 1 (preamble, Table 8.4.2.4.3.2-2) 



Derivation Path: 36.508, Table 4.4.3.3-5 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type6 ::= SEQUENCE { 








carrierFreqLlstUTRA-FDD SEQUENCE (SIZE 
(1 ..maxUTRA-FDD-Carrier)) OF SEQUENCE { 


The same number of 
entries as the configured 
UTRA FDD carriers 




UTRA-FDD 


camerFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


5 






p-MaxUTRA[1l 









} 








carrierFreqLlstUTRA-TDD SEQUENCE (SIZE 
(1..maxUTRA-TDD-Carrier)) OF SEQUENCE { 


The same number of 
entries as the configured 
UTRA TDD carriers 




UTRA-TDD 


camerFreq[1] 


Same downlink ARFCN 
as used for Cell 5 






cellReselectionPriority[1 ] 


5 






p-MaxUTRA[1] 









} 








} 









Condition 


Explanation 


UTRA-FDD 


UTRA FDD cell environment 


UTRA-TDD 


UTRA TDD cell environment 



Table 8.4.2.4.3.3-3: Void 

Table 8.4.2.4.3.3-4: Void 

Table 8.4.2.4.3.3-5: HANDOVER FROM UTRAN COMMAND (step 1 1 , Table 8.4.2.4.3.2-2) 

Derivation Path: 36.508, Table 4.7B.1-2 

Table 8.4.2.4.3.3-6: RRCConnectionReconfiguration (Table 8.4.2.4.3.3-5) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO-TO-EUTRA(1,0) 

Table 8.4.2.4.3.3-7: MobilityControllnfo (Table 8.4.2.4.3.3-5) 



Derivation Path: 36.508, Table 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 1. 






carrierFreq SEQUENCE { 








dl-CarrierFreq 


Same downlink EARFCN 
as used for Cell 1 . 






ul-CarrierFreq 


Not present 






1 








carrierBandwidth SEQUENCE { 








dl-Bandwidth 


Downlink system 
bandwidth under test. 






ul-Bandwidth 


Uplink Bandwidth under 
test. 




FDD 


ul-Bandwidth 


Not present 




TDD 


1 








additionalSpectrumEmission 


1 






} 









Condition 



Explanation 
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FDD 



FDD cell environment 



TDD 



TDD cell environment 



Table 8.4.2.4.3.3-8: SecurityConfigHO (Table 8.4.2.4.3.3-5) 



Derivation Path: 36.508, Table 4.6.4-1 


Information Element 


Value/remark 


Comment 


Condition 


SecurityConfigHO ::= SEQUENCE { 








handoverType CHOICE { 








InterRAT SEOUENCE { 








securityAlgorithmConfig SEQUENCE { 








cipheringAlgorithm 


Set according to PIXIT 
parameter for default 
integrity protection 
algorithm [FFS] 






integrityProtAlgorithm 


Set according to PIXIT 
parameter for default 
ciphering algorithm 






} 








nas-SecurityParamToEUTRA 


Octets 1 to 4 are 
arbitrarily selected. 

Bits 1 to 3 of octet 5 are 
set according to PIXIT 
parameter for default 
integrity protection 
algorithm. 

Bits 5 to 7 of octet 5 are 
set according to PIXIT 
parameter for default 
ciphering algorithm. 

Bits 1 to 3 of octet 6 are 
arbitrarily selected 
between 'OOO'B and 
'110'B, different from the 
valid NAS key set 
identifier of the UE if such 
a value exists. 

Bit 4 of octet 6 is set to 1 . 


Octets 1 to 4 
include the 
NonceMME value. 

Bits 1 to 3 of octet 
5 include the Type 
of integrity 
protection 
algorithm 

Bits 5 to 7 of octet 

5 include the Type 
of ciphering 
algorithm. 

Bits 1 to 4 of octet 

6 include the NAS 
key set identifier. 




} 








1 








} 









8.4.2.6 
8.4.3. 
8.4.3.2 

8.4.3.2.1 
(1) 



Void 



Inter-RAT cell change order / From E-UTRA data RRC_CONNECTED to 
GPRS/ Without NACC 

Test Purpose (TP) 



with { UE in E-UTRA (data) RRC_CONNECTED state } 
ensure that { 

when { UE receives a MobilityFromEUTRACommand message including information facilitating access of 
the target cell } 

then { UE successfully completing the cell change order and leaves the RRC_CONNECTED, enter the 
GPRS Paccket Idle} 
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8.4.3.2.2 Conformance requirements[D] 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.4.3.3, 
5.4.3.4. 

[TS 36.331, clause 5.4.3.3] 

The UE shall be able to receive a Mobility FromEUTRACommand message and perform a cell change order to GERAN, 
even if no prior UE measurements have been performed on the target cell. 

The UE shall: 

1> stop timer T310, if running; 

1> if the MobilityFromEUTRACommand message includes the purpose set to 'handover' : 

2> if the targetRAT-Type is set to 'utra' or 'geran': 

3> consider inter-RAT mobility as initiated towards the RAT indicated by the targetRAT-Type included in 
the MobilityFromEUTRACommand message; 

3> forward the nas-SecurityParamFromEUTRA to the upper layers; 

3> access the target cell indicated in the inter-RAT message in accordance with the specifications of the 
target RAT; 

3> if the targetRAT-Type is set to 'geran': 

4> use the contents of systemlnformation, if provided for PS Handover, as the system information to 
begin access on the target GERAN cell; 

NOTE 1: If there are DRBs for which no radio bearers are established in the target RAT as indicated in the 

targetRAT-MessageContainer in the message, the E-UTRA RRC part of the UE does not indicate the 
release of the concerned DRBs to the upper layers. Upper layers may derive which bearers are not 
established from information received from the AS of the target RAT. 

2> else if the targetRAT-Type is set to 'cdma2000-lXRTT or 'cdma2000-HRPD': 

3> forward the targetRAT-Type and the targetRAT-MessageContainer to the CDMA2000 upper layers for 
the UE to access the cell indicated in the inter-RAT message in accordance with the specifications of the 
CDMA2000 target-RAT; 

1> else if the MobilityFromEUTRACommand message includes the purpose set to 'cellChangeOrder': 

2> start timer T304 with the timer value set to t304, as included in the MobilityFromEUTRACommand message; 

2> if the targetRAT-Type is set to 'geran': 

3> if networkControlOrder is included in the MobilityFromEUTRACommand message: 

4> apply the value as specified in TS 44.060 [36]; 

3> else: 

4> acquire networkControlOrder and apply the value as specified in TS 44.060 [36]; 

3> use the contents of systemlnformation, if provided, as the system information to begin access on the target 
GERAN cell; 

NOTE 2: The systemlnformation is constructed in the same way as in 2G to 2G NACC, i.e. the PSl messages are 
encoded as such, whereas the SI messages exclude 2 octets of headers, see TS 44.060[36]. 

2> establish the connection to the target cell indicated in the CellChangeOrder; 

NOTE 3: The criteria for success or failure of the cell change order to GERAN are specified in TS 44.060[36]. 

[TS 36.331, clause 5.4.3.4] 
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Upon successfully completing the handover or the cell change order, the UE shall: 

1> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'; 

1> stop timer T304, if running; 
8.4.3.2.3 Test description 

8.4.3.2.3.1 Pre-test conditions 
System Simulator: 

- Cell land Cell 24 - Cell 1 is an E-UTRAN cell. Cell 24 is a GERAN cell. 

- All cells belong to the same PLMN. 
UE: 

None. 
Preamble: 

UE is in state3 (Generic RB Established)in cell 1 as specified in clause 4.5.3 of TS 36.508. 

8.4.3.2.3.2 Test procedure sequence 

Table 8.4.3.2.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial condition after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 8.4.3.2.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 24 


Remaric 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 


- 


RSSI 


dBm 


- 


[-85] 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-80 




— 


RSSI 


dBm 


- 


[-65] 



Table 8.4.3.2.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup inter RAT measurement on Cell 1 . 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of inter RAT 
measurement on Cell 1. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


The SS changes Cell land Cell 24 parameters 
according to the row "T1 " in table 8.4.3.2.3.2-1 . 


- 


- 


- 


- 


4 


The UE transmit a MeasurementReport 
message to report the event B2 for Cell 24. 


-> 


MeasurementReport 


- 


- 


5 


The SS transmits a 

MobilityFromEUTRACommand message on 
Cell 1. 


<~ 


MobiiityFromEUTRACommand 






6 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.9 

indicate that the UE is camped on GERAN Cell 

24? 

NOTE: The UE performs an RAU procedure 

and the RRC connection is released. 






1 


P 
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8.4.3.2.3.3 Specific message contents 

Table 8.4.3.2.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.4.3.2.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 


Table 8.4.3.2.3.3-2: MeasConfig (step 1, Table 8.4.3.2.3.2-2) 


Derivation Path: 36.508, Table 4.6.6-1, condition GERAN 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(L.maxQbiectld)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldlVleasQbject-f1 1 






measObject[1] 


MeasObjectGERAN- 
GENERIC(fll) 






} 








reportConflgToAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-B2- 
GERAN 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-GERAN(-69, [-79]) 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldlVleasObject-f1 1 






reportConfigld[1] 


ldReportConfig-B2- 
GERAN 






1 








quantityConfig SEQUENCE { 








quantityConfigGERAN SEQUENCE { 








measQuantityGERAN 


rssi 






filterCoefficient 


fcO 






1 








} 








} 









ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



897 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 8.4.3.2.3.3-3: MobilityFromEUTRACommand (step 5, Table 8.4.3.2.3.2-2) 



Derivation Path: 36.508 table 4.6.1-6 


Information Element 


Value/remark 


Comment 


Condition 


MobilityFromEUTRACommand ::= SEQUENCE { 








rrc-Transaction Identifier 


RRC- 

Transactionldentifi 

er-DL 






criticalExtensions CHOICE { 








c1 CHOICE! 








mobilityFromEUTRACommand-r8::=SEOUENCE{ 








csFallbacklndicator 


False 






purpose CHOICE { 








cellChangeOrder::= SEQUENCE { 








t304 


mslOOO 






targetRAT-Type CHOICE{ 








geran::= SEQUENCE { 








physCellld 


0001 H 






carrierFreq::= SEQUENCE { 








arfcn 


Downlink ARFCN 
of Cell 24 






bandlndicator 


The same band 
indicator of the 
Cell 24 






} 








1 








1 








} 








} 








} 








1 








1 








} 









8.4.3.3 

8.4.3.3.1 
(1) 



Inter-RAT cell change order / From E-UTRA data to GPRS / With NACC 
Test Purpose (TP) 



with { UE in E-UTRA (data) RRC_CONNECTED state } 
ensure that { 

when { UE receives a MobilityFromEUTRACommand message including information facilitating access of 
the target cell } 

then { UE successfully completing the cell change order and leaves the RRC_CONNECTED, enter the 
GPRS Paccket Idle} 



8.4.3.3.2 



Conformance requirements[D] 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.4.3.3, 
5.4.3.4. 

[TS 36.331, clause 5.4.3.3] 

The UE shall be able to receive a MobilityFromEUTRACommand message and perform a cell change order to GERAN, 
even if no prior UE measurements have been performed on the target cell. 

The UE shall: 

1> stop timer T310, if running; 

1> if the MobilityFromEUTRACommand message includes the purpose set to 'handover' : 

2> if the targetRAT-Type is set to 'utra' or 'geran': 
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3> consider inter-RAT mobility as initiated towards the RAT indicated by the targetRAT-Type included in 
the MobilityFromEUTRACommand message; 

3> forward the nas-SecurityParamFroniEUTRA to the upper layers; 

3> access the target cell indicated in the inter-RAT message in accordance with the specifications of the 
target RAT; 

3> if the targetRAT-Type is set to 'gerarC: 

4> use the contents of systemlnformation, if provided for PS Handover, as the system information to 
begin access on the target GERAN cell; 

NOTE 1 : If there are DRBs for which no radio bearers are established in the target RAT as indicated in the 

targetRAT-MessageContainer in the message, the E-UTRA RRC part of the UE does not indicate the 
release of the concerned DRBs to the upper layers. Upper layers may derive which bearers are not 
established from information received from the AS of the target RAT. 

2> else if the targetRAT-Type is set to 'cdma2000-lXRTT or 'cdma2000-HRPD': 

3> forward the targetRAT-Type and the targetRAT-MessageContainer to the CDMA2000 upper layers for 
the UE to access the cell indicated in the inter-RAT message in accordance with the specifications of the 
CDMA2000 target-RAT; 

1> else if the MobilityFromEUTRACommand message includes the purpose set to 'cellChangeOrder' : 

2> start timer T304 with the timer value set to t304, as included in the MobilityFromEUTRACommand message; 

2> if the targetRAT-Type is set to 'geran': 

3> if networkControlOrder is included in the MobilityFromEUTRACommand message: 

4> apply the value as specified in TS 44.060 [36]; 

3> else: 

4> acquire networkControlOrder and apply the value as specified in TS 44.060 [36]; 

3> use the contents of systemlnformation, if provided, as the system information to begin access on the target 
GERAN cell; 

NOTE 2: The systemlnformation is constructed in the same way as in 2G to 2G NACC, i.e. the PSI messages are 
encoded as such, whereas the SI messages exclude 2 octets of headers, see TS 44.060[36]. 

2> establish the connection to the target cell indicated in the CellChangeOrder; 

NOTE 3: The criteria for success or failure of the cell change order to GERAN are specified in TS 44.060[36]. 
[TS 36.331, clause 5.4.3.4] 
Upon successfully completing the handover or the cell change order, the UE shall: 

1> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'; 

1> stop timer T304, if running; 
8.4.3.3.3 Test description 

8.4.3.3.3.1 Pre-test conditions 

System Simulator: 

- Cell land Cell 24 - Cell 1 is an E-UTRAN cell. Cell 24 is a GERAN cell. 

- All cells belong to the same PLMN. 
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UE: 

None. 
Preamble: 

UE is in state3 (Generic RB Established)in cell 1 as specified in clause 4.5.3 of TS 36.508. 

8.4.3.3.3.2 Test procedure sequence 

Table 8.4.3.3.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 8.4.3.3.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 24 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-60 


- 




RSSI 


dBm 


- 


[-85] 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-80 






RSSI 


dBm 


- 


[-65] 



Table 8.4.3.3.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message to 
setup inter RAT measurement on Cell 1 . 


<- 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message to confirm the setup of inter RAT 
measurement on Cell 1. 


-> 


RRCConnectionReconfigurationC 
omplete 






3 


The SS changes Cell land Cell 24 parameters 
according to the row 'T1 " in table 8.4.3.3.3.2-1 . 






- 


- 


4 


The UE transmit a MeasurementReport 
message to report the event B2 for Cell 24. 


~> 


MeasurementReport 


- 


- 


5 


The SS transmits a 

MobilityFromEUTRACommand message on 
Cell 1. 


<— 


MobilityFromEUTRACommand 






6 


Check: Does the test result of generic test 

procedure in TS 36.508 subclause 6.4.2.9 

indicate that the UE is camped on GERAN Cell 

24? 

NOTE: The UE performs an RAU procedure 

and the RRC connection is released. 






1 


P 



8.4.3.3.3.3 Specific message contents 

Table 8.4.3.3.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.4.3.3.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 
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Table 8.4.3.3.3.3-2: MeasConfig (step 1, Table 8.4.3.3.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 , condition GERAN 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldlVleasQbject-f1 1 






measObject[1] 


MeasObjectGERAN- 
GENERIC(f11) 






1 








reportConfigloAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfJg-B2- 
GERAN 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-GERAN(-69, [-79]) 






} 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasObject-f1 1 






reportConfigld[1] 


ldReportConfig-B2- 
GERAN 






} 








quantityConfig SEQUENCE { 








quantityConfigGERAN SEQUENCE { 








measQuantityGERAN 


rssi 






filterCoefficient 


fcO 






} 








} 








} 
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Table 8.4.3.3.3.3-3: MobilityFromEUTRACommand (step 5, Table 8.4.3.3.3.2-2) 



Derivation Path: 36.508 table 4.6.1-6 


Information Element 


Value/remark 


Comment 


Condition 


MobilityFromEUTRACommand ::= SEQUENCE { 








rrc-Transaction Identifier 


RRC- 

Transactionldentifi 

er-DL 






criticalExtensions CHOICE { 








c1 CHOICE { 








mobilityFromEUTRACommand-r8::=SEOUENCE{ 








csFallbacklndicator 


False 






purpose CHOICE { 








cellChangeOrder::= SEQUENCE { 








t304 


mslOOO 






targetRAT-Type CHOICE{ 








geran::= SEQUENCE { 








physCellld 


0001 H 






carrierFreq ::= SEQUENCE { 








arfcn 


Downlink ARFCN 
of Cell 24 






bandlndicator 


The same band 
indicator of the 
Cell 24 






} 








networkControlOrder 


00 


NCO: MS 
controlled cell re- 
selection, no 
measurement 
reporting 




systemlnformation 


FFS 


As specified in TS 
44.060 




1 








1 








} 








} 








} 








1 








1 








} 









8.4.5 
8.4.5.4 

8.4.5.4.1 

(1) 



Inter-RAT handover E-UTRA to HRPD 

Pre-registration at HRPD and inter-RAT handover / From E-UTRA to HRPD 
Active / Data 

Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state and UE has performed pre-registration on HRPD neighbor cell 

} 

ensure that { 

when { UE receives a HandoverFromEUTRAPreparationRequest message with cdma2 - type set to 'HRPD' 

} 

then { UE transmits a ULHandoverPreparationTransfer message containing a tunneled HRPD 
ConnectionRequest message } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state and UE has performed pre-registration on HRPD neighbor cell 

} 

ensure that { 

when { UE receives a MobilityFromEUTRACommand message containing a tunneled HRPD 
TrafficChannelAssignment message } 

then { UE transmits a TrafficChannelComplete message on the target HRPD cell } 
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8.4.5.4.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.4.3.3, 
5.4.4.3, 5.4.5.1 and 5.4.5.3, TS 23.402, clause 9.3.2 and 3GPP2 X.S0057-0, clause 13.1.2. 

[TS 36.331, clause 5.4.3.3] 

The UE shall be able to receive a Mobility FromEUTRACommand message and perform a cell change order to GERAN, 
even if no prior UE measurements have been performed on the target cell. 

The UE shall: 

1> stop timer T310, if running; 

1> if the Mobility FromEUTRACommand message includes the purpose set to 'handover' : 

2> if the targetRAT-Type is set to 'utra' or 'geran': 



2> else if the targetRAT-Type is set to 'cdma2000-lXRTT or 'cdma2000-HRPD' : 

3> forward the targetRAT-Type and the targetRAT-MessageContainer to the CDMA2000 upper layers for 
the UE to access the cell indicated in the inter-RAT message in accordance with the specifications of the 
CDMA2000 target-RAT; 

[TS 36.331, clause 5.4.4.3] 

Upon reception of the HandoverFromEUTRAPreparationRequest message, the UE shall: 

1> indicate the request to prepare handover and forward the cdma2000-Type to the CDMA2000 upper layers; 

1> if cdma2000-Type is set to 'typelXRTT: 

2> forward the rand and the mobilityParametersCDMA2000 to the CDMA2000 upper layers; 
[TS 36.331, clause 5.4.5.1] 



UE 



EUTRAN 



ULHandoverPreparationTransfer 



Figure 5.4.5.1-1 : UL handover preparation transfer 

The purpose of this procedure is to tunnel the handover related CDMA2000 dedicated information from UE 
to E-UTRAN when requested by the higher layers. The procedure is triggered by the higher layers on 
receipt of HandoverFromEUTRAPreparationRequest message. This procedure applies to CDMA2000 
capable UEs only. 

[TS 36.331, clause 5.4.5.3] 

The UE shall set the contents of the ULHandoverPreparationTransfer message as follows: 

1> include the cdma2000-Type and the dedicatedInfoCDMA2000; 

1> if the cdma2000-Type is set to 'typelXRTT: 

2> include the meid and set it to the value received from the CDMA2000 upper layers; 
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1> submit the ULHandoverPreparationTransfer message to lower layers for transmission, upon which the 
procedure ends; 

[TS 23.402, clause 9.3.2] 

Figure 9.3.2-1 illustrates a high-level call flow for the optimised E-UTRAN to HRPD handover procedure. Handover 
phase. The prerequisite of the handover phase is the successfully performed Pre-registration phase as it is specified in 
clause 9.3.1. 



UE 



E-UTRAN 



MME 



HRPD Access 
Network 



HSGW 



S-GW 



PDN 
GW 



PGRF AAA 



0. UE connected via E-UTRAN 



1 . CDMA mea surements 



2. Handover 
decision 



3. Handover frc m E-UTRA prep aration request 



4. UL liandover preparation trarsfer 



1 1 . Mobility frorji E-UTRA 

■* 



5. Uplinl< S1 C DIVIA2000 Tunne ling 



6. Direct Trans' 

H 



9a. Create 



9b. Create 



10. Downlink SI CDMA2000 Ti nneling 



11 



er Request 

7. All SignalliHig 
■* ► 



8. Direct Transfer Request 

forwarding tunnils Request 



forwarding tunnols Response 



Data Forwarding 



12. HRPDANacauiresUE 



13. HRPDTCC 



15b. Notification Response 



16. UE Context Release 



17a 



17b 



14a. All Reqijest Signalling 
14b. Proxy Bi 



15a. Notification Request (HO Complete) 



Delete Bearer F equest 



Delete Bearer F esponse 



14d.A11 Response Signalling 



ndin g Upda :e 



14c. Proxy Bi iding Ackncwiedge 



14e. PCIEF Initiated P-CAN Session 
Modification, Piocedure 



18. P-GW initiates resource allocation deactivation procedure at E-UTRAN 



n \ \ \ 

Figure 9.3.2-1 : E-UTRAN to HRPD handover 



T 
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[3GPP2 X.S0057-0, clause 13.1.2] 



UE 



eAN/ePCF 



HSGW 



S-GW 



I 



P-GW 



3GPP2 
AAA 

\ 



Roaming 



3GPP AAA 
Proxy 



vPCRF 



hPCRF 



HSS/ 
AAA 



0. Attached to E-UTRAN (UE has preregistered on HRPD) 



I 



I 



1a. Decision to 

handover to 

HRPD 



1b. HRPC 



4b. HRPC TCA 



Conn. Rf q. 



1c. !!101(HRPD 
Req., P-GV 
A idress(es)^ 



3, 
HSG\ 



Conn. 



Key(s) ) 



SI 01 (HRPD TCA, 



"Address, C RE Key) 



RE 



-RRQ (P- 
Add lress(es), GRE 



Key(s) ) 
2b. Al1-RRP(HSd3W 



Adcress, GRE Ke/) 



■GA/ 



4a. Create fora/arding tunnel (HSGW 
Address, GRE Key) 



5^1 ndjrec data_fqrwar( [n^ ove|^S1 o; -U (ogtionaj) 



6a. UE acquires HRPD Radio 



-6b. HRPC TCC- 



8d. S101 "Hp 
^complet^ 



k 



lndication/A(;l< 



9. IP Packets Flowing 



7a.A11-RRQ 



RQ 
art) 



(Active Stai 
7b.A11-RRP 



Y\- 



8a. Proxy Bi iding Update 



8b. Proxy Bi iding Update 
Acl< (UE IP\ 4 address or 



IPv6 jrefix) 



9. IP Packets Flowing 



1 0. 3GPP EPS Resource Release 



8c. Mod fy IP-CAN Ses iion/Ack 



<>- 



9. IP Packets Flowing 



Figure 9.3.2-2 

8.4.5.4.3 Test description 

8.4.5.4.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 and Cell 15. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 
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The UE has performed HRPD pre-registration on Cell 15. 

8.4.5.4.3.2 Test procedure sequence 

Table 8.4.5.4.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while row marked "Tl" is to 
be applied subsequently. The exact instants on which these values shall be applied are described in the texts in this 
clause. 

Table 8.4.5.4.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell15 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-75 


- 


The power level values are such 
that camping on Cell 1 is 
guaranteed. 


lor/loc 


dB 


- 


-20 


loc 


dBm/1.23 
MHz 


- 


-55 


Pilot Ec/lo (Note 
1) 


dB 


- 


-20 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-80 


- 


The power level values are such 
that entering conditions for event B2 
on Cell 15 are satisfied. 


lor/loc 


dB 


- 


-5 


loc 


dBm/1.23 
MHz 


- 


-55 


Pilot Ec/lo (Note 
1) 


dB 


- 


-6 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other 
parameters set by the SS. 



Table 8.4.5.4.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to setup inter RAT measurement on 
Cell 15. 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1 to confirm the setup of 
inter RAT measurement. 


— > 


RRCConnectionReconfigurationC 
ompiete 






3 


The SS changes Cell 1 and Cell 15 
parameters according to row "Tl" in table 
8.4.5.4.3.2-1. 










4 


The UE transmits a MeasurementReport 
message on Cell 1 to report event B2 for Cell 
15, 


— > 


MeasurementReport 






5 


The SS transmits a 

HandoverFromEUTRAPreparationRequest 
on Cell 1. 


<— 


HandoverFromEUTRAPreparation 
Request 






6 


Check: Does the UE transmit a tunneled 
HRPD Connection Request message 
contained in an 

ULHandoverPreparation Transfer m essag e 
on Cell 1? 


— > 


ULHandoverPreparationTransfer 


1 


P 


7 


The SS transmits a tunneled HRPD Traffic 
Channel Assignment message contained in 
a r\/lobiiityFromEUTRACommand on Celll to 
order the UE to perform inter RAT handover 
to Cell 15. 


<— 


MobiiityFromEUTRACommand 






8 


The UE tunes to HRPD radio. 


- 


- 


- 


- 


9 


Check: Does the UE transmit a Traffic 
Cfiannei Compiete message on Cell 1 5? 


— > 


Traffic Cfiannei Compiete 


2 


P 
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8.4.5.4.3.3 Specific message contents 

Table 8.4.5.4.3.3-1 : RRCConnectionReconfiguration (step 1 , Table 8.4.5.4.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-8, condition IVIEAS 


Table 8.4.5.4.3.3-2: MeasConfig (step 1, Table 8.4.5.4.3.2-2) 


Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1..maxQbiectld)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldMeasObject-f14 






measObject[1] 


MeasObjectCDMA2000- 
GENERIC 






} 








reportConflgToAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfJg-B2- 
CDMA2000 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-CDMA2000(-69, -18) 






} 








measldToAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldlVleasObject-f14 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






1 








quantityConfig SEQUENCE { 








quantityConfJgCDMA2000 SEQUENCE { 








measQuantityCDMA2000 


pilotStrength 






1 








1 








measGapConfig SEQUENCE { 








gapActivation CHOICE { 








activate SEQUENCE { 








gapPattern CHOICE { 








gp1 SEQUENCE { 








gapOffset 









} 








} 








1 








1 








} 








} 
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Table 8.4.5.4.3.3-3: MeasObjectCDMA2000-G EN ERIC (step 1, Table 8.4.5.4.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 C 


Information Element 


Value/remark 


Comment 


Condition 


MeasObjectCDMA2000-GENERIC ::= SEQUENCE { 








cdma2000-Type 


TypeHRPD 






CarrierFreqCDMA2000 SEQUENCE { 








bandClass 


Band Class of frequency 
under test 






arfcn 


f14 






1 








SearchWindowSize 


15 






offsetFreq 


dbO 






cellsToRemoveList 


Not present 






cellsToAddModList CHOICE {} 


[Not present] 






cellForWhicliToReportCGI 


Not present 






} 








Table 8.4.5.4.3.3-4: MeasurementReport (step 4, Table 8.4.5.4.3.2-2) 


Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultsCDMA2000 :=SEQUENCE { 








preRegistrationStatusHRPD 


FALSE 






measResultUstCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 


Note 1 




physCellld[1] 


PhysicalCellldentity of 
Cell15 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








pilotStrength 


(0..63) 






} 








1 








} 








} 








} 








1 








1 








} 








} 
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Table 8.4.5.4.3.3-5: HandoverFromEUTRAPreparationRequest {step 5, Table 8.4.5.4.3.2-2) 



Derivation Path: 36.508 Table 4.6.1-4 


Information Element 


Value/remark 


Comment 


Condition 


HandoverFromEUTRAPreparationRequest ::= 
SEQUENCE! 








criticalExtensions CHOICE { 








c1 CHOICE! 








handoverFromEUTRAPreparationRequest-r8 
SEQUENCE { 








cdma2000-Type 


typeHRPD 






rand 


Not present 






mobilityParameters 


Not present 






} 








1 








1 








} 









Table 8.4.5.4.3.3-6: ULHandoverPreparationTransfer {step 6, Table 8.4.5.4.3.2-2) 



Derivation Path: 36.508 Table 4.6.1-24 


Information Element 


Value/remark 


Comment 


Condition 


ULHandoverPreparationTransfer ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE { 








ulHandoverPreparationTransfer-r8 SEQUENCE { 








cdma2000-Type 


typeHRPD 






moid 


Not present 






dedicated Info 


Set according to Table 
8.4.5.4.3.3-7 


HRPD Connection 
Request 




} 








} 








} 








1 









Table 8.4.5.4.3.3-7: HRPD Connection Request {step 6, Table 8.4.5.4.3.2-2) 



Information Element 


Value/remark 


Comment 


Condition 


MessagelD 


'0000001' 






Transaction ID 


Any allowed value 


8 bit field 




RequestReason 


'0000' 


Access Terminal 
Initiated 
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Table 8.4.5.4.3.3-8: MobilityFromEUTRACommand (step 7, Table 8.4.5.4.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-6 


Information Element 


Value/remark 


Comment 


Condition 


MobilityFromEUTRACommand ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








mobilityFromEUTRACommand-r8 SEQUENCE { 








csFallbacklndicator 


False 






purpose CHOICE! 








handover SEQUENCE { 








targetRAT-Type 


cdma2000-HRPD 






targetRAT-IVIessageContainer 


Set according to Table 
8.4.5.4.3.3-8 


HRPD Traffic 

Channel 

Assignment 




1 








} 








} 








} 








1 








} 
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Table 8.4.5.4.3.3-9: HRPD Traffic Cfiannel Assignment (step 7, Table 8.4.5.4.3.2-2) 



Information Element 


Value/remark 


Comment 


Condition 


MessagelD 


'00000001 ' 






MessageSequence 


Set by SS 


8 bit field 




Channellncluded 


'1' 


Channel record 
included 




Channel 


FFS 


channel record for 
Cell 15 




FrameOffset 


FFS 


frame offset for 
Cell 15 




DRCLength 


FFS 


DRCLength for 
Cell 15 




DRCChannelGainBase 


FFS 


ratio of the power 
level of the DRC 
Channel (when it is 
transmitted) to the 
power level of the 
Reverse Traffic 
Pilot Channel 
expressed as 2's 
complement value 
in units of 0.5 dB 




ACKChannelGain 


FFS 


ratio of the power 
level of the Ack 
Channel (when it is 
transmitted) to the 
power level of the 
Reverse Traffic 
Pilot Channel 
expressed as 2's 
complement value 
in units of 0.5 dB 




NumPilots 


'1' 






PilotPN 


FFS 


PN Offset of target 
sector (Cell 15) 




SofterHandoff 


'0' 


Set to 'O'since only 
1 pilot included in 
message 




MACIndexLSBs 


Set by SS 


6 least significant 
bits of the 
MACIndex 
assigned to UE 




DRCCover 


FFS 


index of the DRC 
cover associated 
with target sector 
(Cell15) 




RABLength 


FFS 


2 bit field 




RABOffset 


FFS 


3 bit field 





Table 8.4.5.4.3.3-10: HRPD Traffic Ctiannei Compiete (step 9, Table 8.4.5.4.3.2-2) 



Information Element 


Value/remark 


Comment 


Condition 


l\/lessagelD 


'00000010' 






IVIessageSequence 


Same value as 
MessageSequence in 
HRPD Traffic Channel 
Assignment message 
(Table 8.4.5.4.3.3-9) 
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8.4.7 Inter-RAT handover E-UTRA to 1 xRTT 

8.4.7.1 Inter-RAT handover / SRVCC from E-UTRA to 1 xRTT(CS) / Speech 

8.4.7.1.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a HandoverFromEUTRAPreparationRequest message with cdma2 000 -type set to 
'typelXRTT' } 

then { UE transmits an ULHandoverPreparationTransfer message containing a tunneled IxRTT 
Origination message } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a MobilityFromEUTRACommand message containing a tunneled IxRTT Handoff 
Direction message } 

then { UE transmits a IxRTT Handoff Completion message on the target IxRTT cell } 
} 

8.4.7.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clauses 5.4.3.3, 
5.4.4.3, 5.4.5.1 and 5.4.5.3, TS 23.216, clause 6.1.3 and 3GPP2 X.S0042-A, clause 4.5.1. 

[TS 36.331, clause 5.4.3.3] 

The UE shall be able to receive a MobilityFromEUTRACommand message and perform a cell change order to GERAN, 
even if no prior UE measurements have been performed on the target cell. 

The UE shall: 

1> stop timer T310, if running; 

1> if the MobilityFromEUTRACommand message includes the purpose set to 'handover' : 

2> if the targetRAT-Type is set to 'utra' or 'geran': 



2> else if the targetRAT-Type is set to 'cdmalOOO- IXRTT or 'cdma2000-HRPD' : 

3> forward the targetRAT-Type and the targetRAT-MessageContainer to the CDMA2000 upper layers for 
the UE to access the cell indicated in the inter-RAT message in accordance with the specifications of the 
CDMA2000 target-RAT; 

[TS 36.331, clause 5.4.4.3] 

Upon reception of the HandoverFromEUTRAPreparationRequest message, the UE shall: 

1> indicate the request to prepare handover and forward the cdma2000-Type to the CDMA2000 upper layers; 

1> if cdma2000-Type is set to 'typelXRTT: 

2> forward the rand and the mobilityParametersCDMA2000 to the CDMA2000 upper layers; 
[TS 36.331, clause 5.4.5.1] 
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UE 



EUTRAN 



ULHandoverPreparationTransfer 



Figure 5.4.5.1-1 : UL handover preparation transfer 

The purpose of this procedure is to tunnel the handover related CDMA2000 dedicated information from UE to E- 
UTRAN when requested by the higher layers. The procedure is triggered by the higher layers on receipt of 
HandoverFromEUTRAPreparationRequest message. This procedure applies to CDMA2000 capable UEs only. 

[TS 36.331, clause 5.4.5.3] 

The UE shall set the contents of the ULHandoverPreparationTransfer message as follows: 

1> include the cdma2000-Type and the dedicatedlnfoCDMAIOOO; 

1> if the cdma2000-Type is set to 'typelXRTT: 

2> include the meid and set it to the value received from the CDMA2000 upper layers; 

1> submit the ULHandoverPreparationTransfer message to lower layers for transmission, upon which the 
procedure ends; 

[TS 23.216, clause 6.1.3] 

Figure 6.1.3-1 illustrates a high-level call flow for the E-UTRAN-to-lx voice service continuity procedure. 
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(1x Air Interface 
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16. SI UEConte<t 
Release Reque st 



J 7. Suspend Request/A 



18. SI UE Context Release 



Figure 6.1.3-1 : LTE VolP-to-lx CS voice service continuity 

1 . Ongoing VoIP session over the IMS access leg established over EPS/E-UTRAN access. 

2. IxCS SRVCC UE sends measurement reports to eNodeB. 

3. The E-UTRAN (e.g., based on some trigger, measurement reports) makes a determination to initiate an 
inter-technology handover to cdma2000 IxRTT. 

4. The E-UTRAN signals the UE to perform an inter-technology handover by sending a Handover from EUTRA 
Preparation Request (3Glx Overhead Parameters, RAND value) message. 

5. The UE initiates signalling for establishment of the CS access leg by sending a UL handover preparation 
message containing the IxRTT Origination message. 

6. The E-UTRAN sends an Uplink SI cdma2000 Tunnelling (MEID, RAND, Ix Origination, Reference CelllD) 
message to the MME. The eNodeB will also include CDMA2000 HO Required Indication IE to Uplink SI 
CDMA2000 Tunnelling message, which indicates to the MME that the handover preparation has started. 

7. Upon reception of the Uplink SI cdma2000 Tunnelling message, the MME selects a 3GPP2 IxCS IWS based on 
Reference CelllD and encapsulates the Ix Origination Message along with the MEID and RAND in a S 102 
Direct Transfer message (as "Ix Air Interface Signalling"). 

8. The traffic channel resources are established in the Ix RTT system and 3GPP2 IxCS procedures for initiation of 
Session Transfer are performed as per 3GPP2 X.S0042 [4]. 

NOTE 1: Step 9 and 3GPP2 IxCS procedures in step 8 are independent of each other. 
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NOTE 2: The "VDN" parameter referred to in 3GPP2 X.S0042 [4] corresponds to the STN-SR parameter defined 
in TS 23.237 [14]. 

9. The 3GPP2 IxCS IWS creates a Ix message and encapsulates it in a S102 Direct Transfer message (Ix , 
Handover indication). If the 3GPP2 access was able to allocate resources successfully, the Ix message is a Ix 
Handover Direction message and the handover indicator indicates successful resource allocation. Otherwise, the 
handover indicator indicates to the MME that handover preparation failed and the embedded Ix message 
indicates the failure to the UE. 

10. The MME sends the Ix message and CDMA2000 HO Status IE in a Downlink SI cdma2000 Tunnelling 
message to the E-UTRAN. The CDMA2000 HO Status IE is set according to the handover indicator received 
over the SI 02 tunnel. 

11. If the CDMA2000 HO Status IE indicates successful handover preparation, the E-UTRAN forwards the Ix 
Handoff Direction message embedded in a Mobility from EUTRA Command message to the UE. This is 
perceived by the UE as a Handover Command message. If handover preparation failed, DL Information transfer 
message will be sent instead, with the embedded IxRTT message that indicates the failure to the UE. 

12. Once the UE receives the traffic channel information from the cdma2000 IxRTT system, the UE retunes to the 
IxRTT radio access network and performs traffic channel acquisition with the IxRTT CS access (e.g., IxRTT 
BSS). 

13. The UE sends a IxRTT handoff completion message to the IxRTT CS access (e.g., IxRTT BSS). 

14. The IxRTT CS Access sends message to IxRTT MSC to indicate of handoff done. The resources between Ix CS 
IWS and IxRTT MSC may be released at this step. 

15. Ongoing voice call over the CS access leg established over IxRTT access. The E-UTRAN/EPS context may be 
released based on the normal E-UTRAN/EPS procedure. 

16. The eNodeB sends an SI UE Context Release Request (Cause) message to the MME. Cause indicates the SI 
release procedure is caused by handover from E-UTRAN to IxRTT. 

17. The MME exchanges Suspend Request/ Acknowledge messages with the Serving GW. The Sl-U bearers are 
released for all EPS bearers and the GBR bearers are deactivated by the MME. The non-GBR bearers are 
preserved and are marked as suspended in the S-GW. Upon receipt of downlink data the S-GW should not send a 
downlink data notification message to the MME. 

18. SI UE Context in the eNodeB is released as specified in TS 23.401 [2]. 
[3GPP2 X.S0042-A, clause 4.5.1] 

Figure 16 illustrates a detailed call flow for the single radio VoIP-to-lx CS voice DT procedure. 
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Figure 16 Single Radio VolP-to-1x CS voice DT 



Pre-condition: 



It is assumed that initially there is an IMS VoIP call setup between a single radio, dual mode UE 1 and the Other End 
Point (OEP). SIP call dialog 1 for this voice call is illustrated by a heavy dashed double arrow between the VCC AS and 
the OEP. SIP call dialog 2 for this voice call is illustrated by a heavy dashed double arrow between the VCC AS and 
UE 1 . The voice bearer path is illustrated by a heavy solid double arrow between UE 1 and the OEP. 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 916 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

1. UE 1 and the packet data AN interact to initiate a DT. See [A.S0008] and [A.S0009] or SRVCC] for signaling 
details. 

2. UE 1 sends a Ix call origination to the MSC/VLR via the packet data AN (and optionally, the Ix BS) and 
includes the VDN. The specific messages and any acknowledgements are not shown for brevity. See [A.S0008] 
and [A.S0009] or [SRVCC] for signaling details. 

NOTE 1: steps 3-6 are optional, depending on whether the UE 1 has previously been IxCS registered and 
authenticated. 

3. The Visited MSCA^'LR may initiate a Ix registration procedure on behalf of UE 1 . The Visited MSC sends a 
MAP AUTHREQ message to UE I's HLR to authenticate UE 1 prior to allowing registration and prior to 
allocating a Ix traffic channel to UE 1. 

4. UE I's HLR responds by sending an MAP authreq message to the Visited MSC. 

5. The Visited MSC sends an MAP REGNOT message to UE I's HLR. 

6. UE I's HLR responds by sending an MAP regnot message to the Visited MSC. 

NOTE 2: Steps 7-8 are shown using the MAP ORREQ operation. Optionally, a post digit analysis trigger using the 
MAP ANLYZD operation may be used instead to obtain routing information for the DT. 

NOTE 3: If either origination triggers are not supported by the MSCA'^LR or origination triggers are not armed for 
this subscriber, proceed to Step 9. 

7. Once the visited MSCA'^LR has obtained the service profile for the originating subscriber (i.e., by Step 4), the 
Visited MSC/VLR invokes a call origination trigger to obtain routing information. The Visited MSC/VLR sends 
a MAP RREQ message to the WIN SCP (or to the HLR), containing the Calling Party Number (MDN) of UE 1 
(derived from the IMSI) and the Called Party Number from the call origination. The WIN SCP (or HLR) sends 
the ORREQ message on to the VCC AS. Optionally, the Visited MSC/VLR may send the ORREQ message 
directly to a VCC AS that has an integrated WIN SCP function. 

8. The VCC AS determines that this is a DT scenario based on the VDN in the Called Party Number (and the 
Calling Party Number) in the ORREQ message, and then allocates an IMS Routing Number, which is an E.164 
temporary routing number associated with this DT. The VCC AS then sends back the MAP orreq message to 
WIN SCP (or HLR), which returns the orreq message to the MSC/VLR. Optionally, the VCC AS has an 
integrated WIN SCP function and sends the orreq message directly to the MSC/VLR. 

9. Anytime after Step 2 the MSC/VLR sends a Ix traffic assignment/handoff initiation to UE 1 via the packet data 
AN and the packet data air interface. This instructs UE 1 to perform the handoff and acquire the Ix traffic 
channel. See [A.S0008] and [A.S0009] or [SRVCC] for signaHng details. 

10. The Ix BS acquires UE I's reverse traffic channel and the voice path is established with the MSC. 
8.4.7.1.3 Test description 

8.4.7.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 19. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

8.4.7.1 .3.2 Test procedure sequence 

Table 8.4.7.1.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while row marked "Tl" is to 
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be applied subsequently. The exact instants on which these values shall be applied are described in the texts in this 
clause. 

Table 8.4.7.1.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 19 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-75 


- 


Cell 19 is off. 


lor/loc 


dB 


- 


- 


Pilot Ec/lor 


dB 


- 


- 


loc 


dBm/1.23 
MHz 


- 


- 


Pilot Ec/lo (Note 
1) 


dB 


- 


- 


T1 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-75 


- 


The power level values are such 
that entering conditions for event B2 
on Cell 19 are satisfied. 


lor/loc 


dB 


- 





Pilot Ec/lor 


dB 


- 


-7 


loc 


dBm/1.23 
MHz 


- 


-75 


Pilot Ec/lo (Note 
1) 


dB 


- 


-10 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other 
parameters set by the SS. 



Table 8.4.7.1.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to setup inter RAT measurement on 
Cell 19. 


<— 


RRCConnectionReconfiguration 






2 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1 to confirm the setup of 
inter RAT measurement. 


— > 


RRCConnectionReconfigurationC 
ompiete 






3 


The SS changes Cell 1 and Cell 19 
parameters according to row "T1" in table 
8.4.7.1.3.2-1. 










4 


The UE transmits a MeasurementReport 
message on Cell 1 to report event B2 for Cell 
19, 


— > 


IVIeasurementReport 






5 


The SS transmits a 

HandoverFromEUTRAPreparationRequest 
on Cell 1. 


<— 


HandoverFromEUTRAPreparation 
Request 






6 


Check: Does the UE transmit a tunneled 
1xRTT Origination message contained in an 
ULHandoverPreparation Transfer m essag e 
on Cell 1? 


— > 


ULHandoverPreparation Transfer 


1 


P 


7 


The SS transmits a tunneled 1xRTT Handoff 
Direction message contained in a 
l\/lobiiityFromEUTRACommand or\ CelH to 
order the UE to perform inter RAT handover 
to Cell 19. 


<- 


l\/lobiiityFromEUTRACommand 






8 


The UE tunes to IxRTT radio. 


- 


- 


- 


- 


9 


Check: Does the UE transmit a 1xRTT 
Handoff Compietion message on Cell 1 9? 


— > 


Handoff Compietion 


2 


P 



8.4.7.1 .3.3 Specific message contents 

Table 8.4.7.1.3.3-1 : RRCConnectionReconfiguration (step 1, Table 8.4.7.1.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition MEAS 
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Table 8.4.7.1.3.3-2: MeasConfig (step 1, Table 8.4.7.1.3.2-2) 



Derivation Path: 36.508, Table 4.6.6-1 


Information Element 


Value/remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModList SEQUENCE (SIZE 
(1 ..maxQbjectId)) OF SEQUENCE { 


1 entry 






measObjectld[1] 


ldlVleasObject-f1 7 






measObject[1] 


MeasObjectCDMA2000- 
GENERIC 






1 








reportConfigloAddModList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-CDMA2000(-69, -18) 






} 








measldloAddModList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


IdMeasObject-fl 7 






reportConfigld[1] 


ldReportConfig-B2- 
CDMA2000 






} 








quantityConfig SEQUENCE { 








quantityConfigEUTRA 


Not present 






quantityConfigUTRA 


Not present 






quantityConfigGERAN 


Not present 






quantityConfigCDMA2000 SEQUENCE { 


Not present 






measQuantityCDIVIA2000 


pilotStrength 






1 








1 








measGapConfig SEQUENCE { 








gapActivation CHOICE { 








activate SEQUENCE { 








gapPattern CHOICE { 








gp1 SEQUENCE { 








gapOffset 









} 








} 








1 








1 








} 








} 








Table 8.4.7.1.3.3-3: MeasObjectCDMA2000-GENERIC (step 1, Table 8.4.7.1.3.2-2) 


Derivation Path: 36.508, Table 4.6.6-1 C 


Information Element 


Value/remark 


Comment 


Condition 


MeasObjectCDMA2000-GENERIC ::= SEQUENCE { 








cdma2000-Type 


TypelXRTT 






CarrierFreqCDMA2000 SEQUENCE { 








bandClass 


Band Class of frequency 
under test 






arfcn 


f17 






} 








SearchWindowSize 


15 






offsetFreq 


dbO 






cellsToRemoveList 


Not present 






cellsToAddModList CHOICE {} 


[Not present] 






cellForWhichToReportCGI 


Not present 






} 
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Table 8.4.7.1.3.3-4: MeasurementReport {step 4, Table 8.4.7.1.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 | 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultsCDMA2000 :=SEQUENCE { 








preRegistrationStatusHRPD 


FALSE 






measResultUstCDMA2000::=SEQUENCE 
(SIZE (1 ..maxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 19 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








pilotStrength 


(0..63) 






1 








1 








} 








} 








} 








1 








1 








} 








} 








Table 8.4.7.1.3.3-5: HandoverFromEUTRAPreparationRequest (step 5, Table 8.4.7.1.3.2-2) 


Derivation Path: 36.508 Table 4.6.1-4 


Information Element 


Value/remark 


Comment 


Condition 


HandoverFromEUTRAPreparationRequest ::= 
SEQUENCE! 








criticalExtensions CHOICE { 








c1 CHOICE { 








handoverFromEUTRAPreparationRequest-r8 
SEQUENCE! 








cdma2000-Type 


TypelXRTT 






Rand 


Set by SS 


Random 

Challenge Data as 
broadcast on Cell 
19 




mobilityParameters 


Set according to Table 
8.4.7.1.3.3-6 


3G1x Overhead 
Parameters 




} 








} 








} 








} 
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Table 8.4.7.3.3.3-6: mobilityParameters (step 5, Table 8.4.7.1.3.2-2) 



Field 


Value/remarl< 


Comment 


Condition 


SIDIncluded 


FFS 






SID 


FFS 






NIDIncluded 


FFS 






NID 


FFS 






REG ZONEIncluded 


FFS 






REG ZONE 


FFS 






TOTAL ZONESIncluded 


FFS 






TOTAL ZONES 


FFS 






ZONE TIMERIncluded 


FFS 






ZONE TIMER 


FFS 






PACKET ZONE IDIncluded 


FFS 






PACKET ZONE ID 


FFS 






PZIDHystParameterslncluded 


FFS 






PZ HYST ENABLED 


FFS 






PZ HYST INFO INCL 


FFS 






PZ HYST LIST LEN 


FFS 






PZ HYST ACT TIMER 


FFS 






PZ HYST TIMER MUL 


FFS 






PZ HYST TIMER EXP 


FFS 






P REVIncluded 


FFS 






P REV 


FFS 






NEG SLOT CYCLE INDEX SUPIncluded 


FFS 






NEG SLOT CYCLE INDEX SUP 


FFS 






ENCRYPT MODEIncluded 


FFS 






ENCRYPT MODE 


FFS 






ENC SUPPORTEDIncluded 


FFS 






ENC SUPPORTED 


FFS 






SIG ENCRYPT SUPIncluded 


FFS 






SIG ENCRYPT SUP 


FFS 






MSG INTEGRITY SUPIncluded 


FFS 






MSG INTEGRITY SUP 


FFS 






SIG INTEGRITY SUP INCLIncluded 


FFS 






SIG INTEGRITY SUP INCL 


FFS 






SIG INTEGRITY SUPIncluded 


FFS 






SIG INTEGRITY SUP 


FFS 






AUTHIncluded 


FFS 






AUTH 


FFS 






MAX NUM ALT SOIncluded 


FFS 






MAX NUM ALT SO 


FFS 






USE SYNC IDIncluded 


FFS 






USE SYNC ID 


FFS 






MS INIT POS LOC SUP INDIncluded 


FFS 






MS INIT POS LOC SUP IND 


FFS 






MOB OOSIncluded 


FFS 






MOB OOS 


FFS 






BAND CLASS INFO REOIncluded 


FFS 






BAND CLASS INFO REQ 


FFS 






ALT BAND CLASSIncluded 


FFS 






ALT BAND CLASS 


FFS 






MAX ADD SERV INSTANCEIncluded 


FFS 






MAX ADD SERV INSTANCE 


FFS 






HOME REGIncluded 


FFS 






HOME REG 


FFS 






FOR SID REGIncluded 


FFS 






FOR SID REG 


FFS 






FOR NID REGIncluded 


FFS 






FOR NID REG 


FFS 






POWER UP REGIncluded 


FFS 






POWER UP REG 


FFS 






POWER DOWN REGIncluded 


FFS 






POWER DOWN REG 


FFS 






PARAMETER REGIncluded 


FFS 
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PARAMETER REG 


FFS 






REG PRDIncluded 


FFS 






REG PRD 


FFS 






REG DISTIncluded 


FFS 






REG DIST 


FFS 






PREF MSID TYPEIncluded 


FFS 






PREP MSID TYPE 


FFS 






EXT PREF MSID TYPEIncluded 


FFS 






EXT PREF MSID TYPE 


FFS 






MEID REQDIncluded 


FFS 






MEID REQD 


FFS 






MCGIncluded 


FFS 






MOO 


FFS 






IMS! 11 12lncluded 


FFS 






IMSI 11 12 


FFS 






IMSI T SUPPORTEDIncluded 


FFS 






IMSI T SUPPORTED 


FFS 






RECONNECT MSG INDIncluded 


FFS 






RECONNECT MSG IND 


FFS 






RER MODE SUPPORTEDIncluded 


FFS 






RER MODE SUPPORTED 


FFS 






TKZ MODE SUPPORTEDIncluded 


FFS 






TKZ MODE SUPPORTED 


FFS 






TKZ IDIncluded 


FFS 






TKZ ID 


FFS 






PILOT REPORTIncluded PILOT REPORT 


FFS 






PILOT REPORT 


FFS 






SDB SUPPORTEDIncluded 


FFS 






SDB SUPPORTED 


FFS 






AUTO FCSO ALLOWEDIncluded 


FFS 






AUTO FCSO ALLOWED 


FFS 






SDB IN RCNM INDIncluded 


FFS 






SDB IN RCNM IND 


FFS 






FPC FCH Included 


FFS 






FPC FCH INIT SETPT RC3 


FFS 






FPC FCH INIT SETPT RC4 


FFS 






FPC FCH INIT SETPT RC5 


FFS 






T ADD Included 


FFS 






T ADD 


FFS 






PILOT INC Included 


FFS 






PILOT INC 


FFS 






Table 8.4.7.1.3.3-7: ULHandoverPreparationTransfer {step 6, Table 8.4.7.1.3.2-2) 


Derivation Path: 36.508 Table 4.6.1-24 


Information Element 


Value/remarl< 


Comment 


Condition 


ULHandoverPreparationTransfer ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








ulHandoverPreparationTransfer-r8 SEOUENCE { 








cdma2000-Type 


TypelXRTT 






Moid 


UE's meid 






dedicated Info 


Set according to Table 
8.4.7.1.3.3-8 


IxRTT Origination 
message 




} 








} 








1 








1 
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Table 8.4.7.1 .3.3-8: 1xRTT Origination (step 6, Table 8.4.7.1 .3.2-2) 



Field 


Value/remark 


Comment 


Condition 


Message ID 


'00000001 'B 


IxCircuitService 
message 




GCSNARevision 


FFS 






MessageSequence 


Any allowed value 






IxLogicalChannel 


'O'B 






PDU 




IxLAC 
encapsulated PDU 




MSGJD 


'0001 OO'B 


Origination 
Message 




SPECIAL SERVICE 


'1'B 






SERVICE_OPTION 


Any value mapping to a 
voice service option 






Table 8.4.7.1.3.3-9: IVIobiiityFromEUTRACommand (step 7, Table 8.4.7.1.3.2-2) 


Derivation Path: 36.508, Table 4.6.1-6 


Information Element 


Value/remark 


Comment 


Condition 


MobilityFromEUTRACommand ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








mobilityFromEUTRACommand-r8 SEQUENCE { 








csFallbacklndicator 


False 






purpose CHOICE! 








handover SEQUENCE { 








targetRAT-Type 


cdma2000-1XRTT 






targetRAT-MessageContainer 


Set according to Table 
8.4.7.1.3.3-10 


IxRTTHandoff 
Direction message 




1 








} 








} 








} 








1 








} 
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Table 8.4.7.1.3.3-10: 1xRTT Handoff Direction (step 7, Table 8.4.7.1.3.2-2) 



Field 


Value/remark 


Comment 


Condition 


Message ID 


'00000001 'B 


IxClrcultServlce 
message 




GCSNARevlslon 


FFS 






MessageSequence 


Set by SS 






IxLoglcalChannel 


'1'B 






PDU 




IxLAC 
encapsulated PDU 




MSGJD 


'0001 0001 'B 


Extended Handoff 
Direction Message 




USE TIME 


'O'B 






ACTION TIME 


'OOOOOO'B 






HDM SEQ 


Set by SS 






SEARCH INCLUDED 


'O'B 






HARD INCLUDED 


'1'B 






FRAME_OFFSET 


Set by SS 


Forward and 
Reverse Traffic 
Channel frame 
offset on Cell 1 9 




PRIVATE LCM 


'O'B 






RESET L2 


'1'B 






RESET FPC 


'1'B 






SERV_NEG_TYPE 


'O'B 


Service option 
negotiation 




ENCRYPT MODE 


Set by SS 






NOM PWR EXT 


'O'B 






NOM_PWR 


Set by SS 


Correction factor to 
be used by UE in 
open loop power 
estimate 




NUM_PREAMBLE 


Set by SS 


Traffic Channel 
Preamble length to 
be used by UE 




BAND CLASS 


Band class of Cell 19 


Band class for f1 7 




CDMA_FREO 


CDMA Chanel number of 
Cell 19 


CDMA channel 
number for f1 7 




ADD LENGTH 


'OOO'B 






PILOT_PN 


Set by SS 


Pilot PN sequence 
offset for Cell 19 




PWR COMB IND 


'O'B 






CODE_CHAN 


Set by SS 


Code channel 
index to be used 
by UE as the 
Forward 
Fundamental 
Channel 
associated with 
pilot on Cell 19 





Table 8.4.7.1 .3.3-1 1 : IxRTT Handoff Compietion (step 9, Table 8.4.7.1 .3.2-2) 



Information Element 


Value/remark 


Comment 


Condition 


MSG ID 


'00001010' 






LAST_HDM_SEQ 


Same value as 
HDM_SEOin IxRTT 
Handoff Direction 
message at Step 7 






PILOT_PN 


Same value as 
PILOT_PN included in 
IxRTT Handoff Direction 
message at Step 7 
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8.4.7.3 Pre-registration at 1xRTT and inter-RAT Handover / CS fallback from E- 

UTRA RRCJDLE to 1xRTT 

8.4.7.3.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_IDLE state having completed the IxRTT CS pre-registration procedure and 
having received a DLInformationTransfer message containing a IxRTT CS Paging message } 
ensure that { 

when { CS paging for the CS Fallback to IxRTT is accepted at the UE } 

then { UE transmits an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile terminating CS fallback or IxCS fallback" } 
} 

(2) 

with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile terminating CS fallback or IxCS fallback" in response to 
a IxRTT CS Paging message } 
ensure that { 

when { SS transmits an RRCConnectionRelease message with redirection to IxRTT } 

then { UE tunes to IxRTT cell and transmits a IxRTT Page Response message on IxRTT cell } 
} 

8.4.7.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 23.272, clause B.2.3. 

[TS 23.272, clause B.2.3] 

This clause describes the mobile terminating call procedures when the UE accepts or rejects CS paging for the CS 
Fallback to IxRTT. 

When the Ix MSC receives a registration from a UE, it makes note of the RAN equipment from which it received the 
registration. Subsequent paging activities may thus be directed toward that RAN equipment. However, paging activities 
by the IxMSC are not limited to the single RAN equipment from which the registration was received. The MSC may 
choose to page a wider area, including inter-system paging. If the IxMSC has direct interfaces to IxCS IWS, as well as 
to IxRTT access, the MSC may choose to do direct paging activities to both E-UTRAN and Ix RAN equipments in its 
attempts to contact the UE. 

The Ix paging request sent by the IxMSC to the IxCS IWS is delivered to the UE via the tunnel. The UE tunes to 
IxRTT access, acknowledges the Ix page and performs the IxCS procedures for mobile terminated call. When the UE 
receives a page message, it may not want to accept it based on Caller Line Identification or pre-provisioned local policy. 
In that case, the UE sends the Ix Release Order to IxCS IWS over a tunnel in E-UTRAN and EPC. 

The detailed procedure is described in figure B.2.3-1. 
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1xCS 

CSFB 

UE 



E- 
UTRAN 



I 



MME 



_L 



IxCS 
IWS 



X 



IxRTT 
MSC 



I 



S-GW 



1. UE is E-UTRAN attached and registered witii IxRTT CS 



3. IxRTT CS Paging 



4. If UE is idle, MME performs Network-initiated 
service request 



SI 02 Direct Transfei 



5. IxRTT 



5b. UI-/DL Information 
Transfer 



6a. IxRTT Fieiease Order 



6b. Extended Service Request 



CS Paging 



5a. UI-/DL SI cdma2000 
Tunnelling 



7. SI UE Context 
Modification 



8. Optional measurement report 
solicitation 



9. E-UTRAN triggers RRC connection 
release with redirection 



10. 31 UE Context Release 



Request 



6a. IxRTT Release Order 



11. Suspend 



12. Suspend Request Ack 



13. SI UE Context Release 



14. IxRTT CS Page Response Message 



2. Paging Request 



6a. Rejection 



Request 



15. 1x MT call establishment per 3GPP2 specifications 



Figure B.2.3-1 : CS IVIT call using fallback to CDMA 1x RTT network 

1. UE is E-UTRAN attached and pre-registered with IxRTT CS as defined in clause B.2.1.1. 

2. IxMSC sends a paging request to the IxCS IWS node with Caller Line Identification if available. 

3. IxCS IWS node forwards the Ix RTT CS paging request with Caller Line Identification if available via the SI 02 
tunnel to the MME. 

4. If the UE is in idle state, the MME performs the network initiated Service Request procedure in order to bring 
the UE to active state prior to tunnelling of the Ix RTT CS paging request toward the UE. 

5. MME forwards the IxRTT CS paging request to the UE. 

6a. If the UE decides to reject CSFB based on e.g. user decision by Caller Line Identification or UE locally pre- 
provisioned policy, then the UE rejects the Ix CS paging by sending an Ix Release Order to the MME. The 
MME forwards the Ix Release Order in an SI 02 Direct Transfer message to the IxCS IWS and the Ix IWS 
sends a Rejection to the Ix MSC. This completes the procedure. 
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6b. If the UE accepts CS paging for the CS Fallback to IxRTT, the UE sends an Extended Service Request (CS 
Fallback Indicator) to the MME and proceeds with step 7 to step 15 below. 

7. MME sends Sl-AP: UE Context Modification (UE capabilities, CS Fallback Indicator) to indicate the 
E-UTRAN to move the UE to IxRTT. 

8. E-UTRAN may optionally solicit a measurement report from the UE to determine the target IxRTT cell to which 
the CS Fallback will be performed. 

9. E-UTRAN triggers RRC connection release with redirection to IxCS. 

10. E-UTRAN sends an SI UE Context Release Request (Cause) message to the MME. Cause indicates that the SI 
UE Context Release was caused by CS fallback to IxRTT. 

1 1 . MME sets the UE context to suspended status and sends to the S-GW a Suspend Request (IMSI) message that 
requests the suspension of EPS bearers for the UE. The Sl-U bearers are released for all EPS bearers by the 
MME and all GBR bearers are deactivated. The non-GBR bearers are preserved and are marked as suspended in 
the S-GW. 

12. S-GW acknowledges the Suspend Request message and marks the UE as suspended. When a downlink data 
arrives at the S-GW, the S-GW should not send a downlink data notification message to the MME if the UE is 
marked as suspended. 

13. SI UE Context in the E-UTRAN is released as specified in TS 23.401 [2]. 

14. UE tunes to IxRTT and acknowledges the page by transmitting a IxRTT Paging Response message over the Ix 
Access Channel. 

15. Subsequently UE performs the procedure for mobile terminated call establishment as specified in 3GPP2 
A.S0013[18]. 

8.4.7.3.3 Test description 

8.4.7.3.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 19. 

Cell 19 has a lower reselection priority than Cell 1. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell 1 according to [18]. 

The UE has completed the IxRTT CS pre-registration procedure on Cell 19. 

8.4.7.3.3.2 Test procedure sequence 

Table 8.4.7.3.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while row marked "Tl" is to 
be applied subsequently. The exact instants on which these values shall be applied are described in the texts in this 
clause. 
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Table 8.4.7.3.3.2-1 : Cell configuration changes over time 





Parameter 


Unit 


CelM 


Cell 19 


Remark 


TO 


Cell-specific 
RS EPRE 


dBm/15kHz 


-60 


- 


Srxlevceii i > and Cell 19 is off 
such that camping on Cell 1 is 
guaranteed. 


lor/loc 


dB 


- 


- 


Pilot Ec/lor 


dB 


- 


- 


loc 


dBm/1.23 
MHz 


- 


- 


Pilot Ec/lo 
(Note 1) 


dB 


- 


- 


T1 


Cell-specific 
RS EPRE 


dBm/15kHz 


-60 


- 


Cell 19 in on, with SsemngCell > 
1 hreShserving, low and OnonServingCell, x 

< Threshx, low. 


lor/loc 


dB 


- 





Pilot Ec/lor 


dB 


- 


-7 


loc 


dBm/1.23 
MHz 


- 


-75 


Pilot Ec/lo 
(Note 1) 


dB 


- 


-10 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other 
parameters set by the SS. 
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Table 8.4.7.3.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits a Paging message to the UE 
on Cell 1 using S-TMSI with CN domain 
Indicator set to "PS". 


<- 


Paging 






2 


The UE transmits an RRCConnectionRequest 
message on Cell 1. 


-> 


RRCConnectionRequest 


- 


- 


3 


The SS transmit an RRCConnectionSetup 
message with SRB1 configuration on Cell 1. 


<— 


RRCConnectionSetup 


- 


- 


4 


The UE transmits an 

RRCConnectionSetupComplete message 
containing a SERVICE REQUEST message 
on Cell 1. 


-> 


RRCConnectionSetupCompiete 






5 


The SS transmits a SecurityModeCommand 
on Cell 1. 


<- 


SecurityModeCommand 


- 


- 


6 


The SS transmits an 

RRCConnectionReconfiguration message with 
SRB2-DRB{1,1) configuration on Cell 1. 


<— 


RRCConnectionReconfiguation 






7 


The UE transmits a SecurityModeComplete 
message on Cell 1. 


-> 


SecurityModeComplete 


- 


- 


8 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationC 
ompiete 






9 


The SS changes the cell power levels 
according to "T1 " in Table 8.4.7.3.3.2-1 . 










10 


The SS transmits a DLInformationTransfer 
containing a 1x RTTCS Paging message on 
CelM. 


<- 


DLInformationTransfer 






11 


The CS paging for the CS Fallback to 1 xRTT is 
accepted at the UE. 


- 


- 


- 


- 


12 


Check: Does the UE transmit an 
ULInformationTransfer containing an 
EXTENDED SERVICE REQUEST with 
Service Type IE set to "mobile terminating CS 
fallback or 1xCS fallback" on Cell 1? 


-> 


ULInformationTransfer 


1 


P 


13 


The SS transmits an RRCConnectionRelease 
message on Cell 1 redirecting the UE to Cell 
19. 


<- 


RRCConnectionRelease 






14 


The UE tunes to IxRTT radio. 


- 


- 


- 


- 


15 


Check: Does the UE transmit a Page 
Response message on Cell 1 9? 


-> 


Page Response 


2 


P 


16 


The SS transmits an Extended Channei 
Assignment message on Cell 19. 


<— 


Extended Channel Assignment 


- 


- 


17 


After the SS detects that Traffic Channel 
Initialization is successful, it transmits an 
Acl<nowledgement Order message on Cell 19. 


<~ 


Acknowledgement Order 






18 


The SS transmits a Service Connect message 
on Cell 19. 


<~ 


Service Connect 


- 


- 


19 


The UE transmits a Service Connect 
Completion message on Cell 19. 


~> 


Service Connect Completion 


- 


- 



8.4.7.3.3.3 Specific message contents 

Table 8.4.7.3.3.3-1 : SystemlnformationBlockTypel for Cell 1 (all steps, Table 8.4.7.3.3.2-2) 



Derivation Path: 36.508 Table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnformation ::= SEQUENCE (SIZE 
(1 ..maxSI-Message)) OF SEQUENCE {} 


Combination 6 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB 8 are 
transmitted 




} 
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Table 8.4.7.3.3.3-2: SystemlnformationBlockTypeS ior Cell 1 (all steps, Table 8.4.7.3.3.2-2) 



Derivation Path: 36.508 Table 4.4.3.3-7, condition 1XRTT 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type8 ::= SEQUENCE { 








parameterslXRTT SEQUENCE { 








csfb-RegistrationParam1XRTT SEQUENCE { 








Sid 


FFS 


Sid of Cell 19 




Nid 


FFS 


Nid of Cell 19 




multipleSID 


FFS 


BOOLEAN 




multipleNID 


FFS 


BOOLEAN 




homeReg 


FFS 


BOOLEAN 




foreignSIDReg 


FFS 


BOOLEAN 




foreignNIDReg 


FFS 


BOOLEAN 




parameterReg 


FFS 


BOOLEAN 




powerUpReg 


FFS 


BOOLEAN 




registrationPeriod 


FFS 


BIT STRING 
(SIZE (7)) 




registrationZone 


FFS 


BIT STRING 
(SIZE (12)) 




totalZone 


FFS 


BIT STRING 
(SIZE (3)) 




zoneTimer 


FFS 


BIT STRING 
(SIZE (3)) 




} 








longCodeStatelXRTT 


Set by SS 


BIT STRING 
(SIZE (42)) 
OPTIONAL 




cellReselectionParameterslXRTT SEQUENCE { 








bandClassLlst SEQUENCE (SIZE (L.tnaxCDMA 
-BandClass)) QF SEQUENCE { 


1 entry 






bandClass 


FFS 


ENUMERATED 
{bcO, bc1,bc2, 
bc3, bc4, bc5, 
bc6, bc7, bc8, 
bc9, bcIO, boll, 
bc12, bc13, bc14, 
bc15, bc16, bc17, 
sparel 4, sparel 3, 
sparel 2, sparel 1, 
sparel 0, spare9, 
spares, spare7, 
spares, spareS, 
spare4, spare3, 
spare2, sparel , 




cellReselectionPriority 


3 






threshX-Higli 


FFS 


INTEGER (0..63) 




threshX-Low 


FFS 


INTEGER (0..63) 




} 








} 








1 








1 
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Table 8.4.7.3.3.3-3: DLInformationTransfer {step 10, Table 8.4.7.3.3.2-2) 



Derivation Path: 36.508 Table 4.6.1-3 


Information Element 


Value/remark 


Comment 


Condition 


DLInformationTransfer ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE { 








dllnformationTransfer-r8 SEQUENCE { 








dedicated InfoType CHQICE { 








dedicatedlnfoCDMA2000-1 XRTT 


Set according to Table 
8.4.7.3.3.3-4 






} 








} 








} 








1 








} 








Table 8.4.7.3.3.3-4: IxRTTCS Paging message (step 10, Table 8.4.7.3.3.2-2) 


Field 


Value/remark 


Comment 


Condition 


IVIessagelD 


'00000001 'B 


IxCircuitService 
message 




GCSNARevision 


FFS 






IVIessageSequence 


Set by SS 






IxLogicalChannel 


'O'B 






PDU 




IxLAC 

encapsulated 

PDU 




MSGJD 


'01 0001 'B 


General Page 
Message 




PAGE_CLASS 


Set as per identity type 
of UE, for a mobile- 
addressed page 






PAGE_SUBCLASS 


Set as per identity type 
of UE, for a mobile- 
addressed page 






Page Type-specific fields 


Set to match UE's 
identity 






Table 8.4.7.3.3.3-5: ULInformationTransfer {step 12, Table 8.4.7.3.3.2-2) 


Derivation Path: 36.508 Table 4.6.1-25 


Information Element 


Value/remark 


Comment 


Condition 


ULInformationTransfer ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE { 








ullnformationTransfer-r8 SEQUENCE { 








dedicated InfoType CHQICE { 








dedicatedlnfoNAS 


Set according to Table 
8.4.7.3.3.3-6 


EXTENDED 

SERVICE 

REQUEST 




1 








} 








} 








} 








} 
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Table 8.4.7.3.3.3-6: EXTENDED SERVICE REQUEST (step 12, Table 8.4.7.3.3.2-2) 



Derivation Path: 36.508 Table 4.7.2-14A 


Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


EMM 






Service type 


'0001 'B 


mobile terminating 
CS fallback or 
IxCS fallback 




CSFB response 


'001 'B 


CS fallback 
accepted by the 
UE 





Table 8.4.7.3.3.3-7: RRCConnectionRelease {step 13, Table 8.4.7.3.3.2-2) 



Derivation Path: 36.508 table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE { 








rrcConnectionRelease-r8 SEQUENCE { 








redirectionlnformation ::= CHOICE { 








interRAT-target CHOICE { 








cdma2000-1xRTT 


cdma2000-Carrierlnfo for 
Cell 19 






1 








1 








} 








} 








} 








} 









Table 8.4.7.3.3.3-8: Page Response (step 15, Table 8.4.7.3.3.2-2) 



Field 


Value/remark 


Comment 


Condition 


MSGJD 


'000101'B 


Page Response 
Message 




MOB TERM 


'1'B 







Table 8.4.7.3.3.3-9: Extended Channel Assignment (step 16, Table 8.4.7.3.3.2-2) 



Field 


Value/remark 


Comment 


Condition 


MSGJD 


'010101'B 


Extended Channel 

Assignment 

Message 




ASSIGN_MODE 


'OOO'B 


Traffic Channel 
Assignment 





Table 8.4.7.3.3.3-10: Acknowledgment Order {step 17, Table 8.4.7.3.3.2-2) 



Field 


Value/remark 


Comment 


Condition 


MSG ID 


'00000001 'B 


Order Message 




ORDER 


'OIOOOO'B 


Base Station 

Acknowledgment 

Order 




ORDO 


'OOOOOOOO'B 
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Table 8.4.7.3.3.3-1 1 : Service Connect (step 18, Table 8.4.7.3.3.2-2) 



Field 


Value/remark 


Comment 


Condition 


MSGJD 


'00010100'B 


Service Connect 
IVIessage 




SERV CON SEQ 


Set by SS 







Table 8.4.7.3.3.3-12: Service Connect Compietion (step 19, Table 8.4.7.3.3.2-2) 



Field 


Value/remark 


Comment 


Condition 


IVISGJD 


'00001 110'B 


Service Connect 

Completion 

Message 




SERV_CON_SEQ 


Same value as 
SERV_CON_SEQ 
received in Service 
Connect Message (Table 
8.4.7.3.3.3-15) 







8.4.7.4 

8.4.7.4.1 

(1) 



Pre-registration at 1xRTT and inter-RAT handover / CS fallback caused by 
addition of CS service / From E-UTRA (Data) to 1xRTT 

Test Purpose (IP) 



with { UE in E-UTRA RRC_CONNECTED state and having completed the IxRTT CS pre-registration procedure 

} 

ensure that { 

when { a voice call is originated at the UE } 

then { UE transmits an EXTENDED SERVICE REQUEST message with Service Type IE set to "mobile 
originating CS fallback or IxCS fallback" } 
} 

(2) 

with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile originating CS fallback or IxCS fallback" } 
ensure that { 

when { SS transmits a RRCConnectionRelease message with redirection to IxRTT } 

then { UE tunes to IxRTT cell and transmits a IxRTT Origination message on IxRTT cell } 



8.4.7.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 23.272, clause B.2.2. 

[TS 23.272, clause B.2.2] 

This clause describes the mobile originating call procedures for the CS Fallback to IxRTT. 
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1xCS 

CSFB 

UE 



E- 
UTRAN 



MME 



1xCS 
IWS 



1xRTT 
MSC 



S-GW 



1. UE is E-UTRAN attached and registered with 1xRTT CS 



2. UE decision 

to perform IVIO 

call in 1xCS 



3. Extended Service Request 



4. S1 UE Context 
Modification 



5. Optional measurement report 



solicitation 



o. 



a. 



6. E-UTRAN triggers RRC connection 
release with redirection 



7. S1 UE Context Releas^ 
Request 



10. S1 UE Context Release 



8. Suspend Request 



9. Suspend Re(|uest Ack 



1 1 . 1x MO call establishment per 3GPP2 specifications 



Figure B.2.2-1 : CS IVIO call using fallback to CDMA 1x RTT network 

1. UE is E-UTRAN attached and registered with IxRTT CS as defined in clause B.2.1.1. 

2. UE makes a decision to perform a mobile originated CS call. 

3. UE sends an Extended Service Request (CS Fallback Indicator) to the MME. 

4. MME sends Sl-AP: UE Context Modification (UE capabihties, CS Fallback Indicator) to indicate the 
E-UTRAN to move the UE to IxRTT. 

5. E-UTRAN may optionally solicit a measurement report from the UE to determine the target IxRTT cell to which 
the CS Fallback will be performed. 

6. E-UTRAN triggers RRC connection release with redirection to IxCS. 

7. E-UTRAN sends an SI UE Context Release Request (Cause) message to the MME. Cause indicates that the SI 
UE Context Release was caused by CS fallback to IxRTT. 
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8. MME sets the UE context to suspended status and sends to the S-GW a Suspend Request (IMSI) message that 
requests the suspension of EPS bearers for the UE. The Sl-U bearers are released for all EPS bearers by the 
MME and all GBR bearers are deactivated. The non-GBR bearers are preserved and are marked as suspended in 
the S-GW. 

9. S-GW acknowledges the Suspend Request message and marks the UE as suspended. When a downlink data 
arrives at the S-GW, the S-GW should not send a downlink data notification message to the MME if the UE is 
marked as suspended. 

10. SI UE Context in the E-UTRAN is released as specified in TS 23.401 [2]. 

11. UE moves to IxRTT and performs the procedure for mobile originating call as specified in 
3GPP2A.S0013[18]. 



Test description 
Pre-test conditions 



8.4.7.4.3 
8.4.7.4.3.1 
System Simulator: 

- Cell 1 and Cell 19. 

Cell 19 has a lower reselection priority than Cell 1. 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on Cell 1 according to [18]. 

The UE has completed the IxRTT CS pre-registration procedure on Cell 19. 

8.4.7.4.3.2 Test procedure sequence 

Table 8.4.7.4.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while row marked "Tl" is to 
be applied subsequently. The exact instants on which these values shall be applied are described in the texts in this 
clause. 

Table 8.4.7.4.3.2-1 : Cell configuration changes over time 





Parameter 


Unit 


CelM 


Cell 19 


Remark 


TO 


Cell-specific 
RS EPRE 


dBm/15kHz 


-60 


- 


Srxlevceii i > and Cell 19 is off 
such that camping on Cell 1 is 
guaranteed. 


lor/loc 


dB 


- 


- 


Pilot Ec/lor 


dB 


- 


- 


loc 


dBm/1.23 
MHz 


- 


- 


Pilot Ec/lo 
(Note 1) 


dB 


- 


- 


T1 


Cell-specific 
RS EPRE 


dBm/15kHz 


-60 


- 


Cell 19 in on, with SsemngCell > 
1 hreShserving, low and OnonServingCell, x 

< Threshx, low. 


lor/loc 


dB 


- 





Pilot Ec/lor 


dB 


- 


-7 


loc 


dBm/1.23 
MHz 


- 


-75 


Pilot Ec/lo 
(Note 1) 


dB 


- 


-10 


Note 1 : This parameter is not directly settable, but is derived by calculation from the other 
parameters set by the SS. 
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Table 8.4.7.4.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


A voice call is originated at the UE 


- 


- 


- 


- 


2 


Check: Does the UE transmit an 
ULInformationTransfer containing an 
EXTENDED SERVICE REQUEST with 
Service Type IE set to "mobile originating CS 
fallback or 1xCS fallback" on Cell 1? 


-> 


ULInformationTransfer 


1 


P 


3 


The SS changes the cell power levels 
according to "T1" in Table 8.4.7.3.3.2-1 and 
waits for [2] seconds. 










4 


The SS transmits an RRCConnectionRelease 
message on Cell 1 redirecting the UE to Cell 
19. 


<- 


RRCConnectionRelease 






5 


The UE tunes to IxRTT radio. 


- 


- 


- 


- 


6 


Check: Does the UE transmit an Origination 
message on Cell 19? 


-> 


Origination 


2 


P 


7 


The SS transmits an Extended Cliannel 
Assignment message on Cell 19. 


<— 


Extended Channel Assignment 


- 


- 


8 


After the SS detects that Traffic Channel 
Initialization is successful, it transmits an 
Acl<nowledgement Order message on Cell 19. 


<— 


Acknowledgement Order 






9 


The SS transmits a Service Connect message 
on Cell 19. 


<— 


Service Connect 


- 


- 


10 


The UE transmits a Service Connect 
Compietion message on Cell 19. 


-> 


Service Connect Completion 


- 


- 



8.4.7.4.3.3 Specific message contents 

Table 8.4.7.4.3.3-1 : SystemlnformationBlockTypel for cell 1 (all steps, Table 8.4.7.4.3.2-2) 



Derivation Path: 36.508 Table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnformation ::= SEQUENCE (SIZE 
(L.maxSI-Message)) OF SEQUENCE {} 


Combination 6 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB 8 are 
transmitted 




} 
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Table 8.4.7.4.3.3-2: SystemlnformationBlockTypeS ior cell 1 (all steps, Table 8.4.7.4.3.2-2) 



Derivation Path: 36.508 Table 4.4.3.3-7, condition 1XRTT 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type8 ::= SEQUENCE { 








parameterslXRTT SEQUENCE { 








csfb-RegistrationParam1XRTT SEQUENCE { 








Sid 


FFS 


Sid of Cell 19 




Nid 


FFS 


Nid of Cell 19 




multipleSID 


FFS 


BOOLEAN 




multipleNID 


FFS 


BOOLEAN 




homeReg 


FFS 


BOOLEAN 




foreignSIDReg 


FFS 


BOOLEAN 




foreignNIDReg 


FFS 


BOOLEAN 




parameterReg 


FFS 


BOOLEAN 




powerUpReg 


FFS 


BOOLEAN 




registrationPeriod 


FFS 


BIT STRING 
(SIZE (7)) 




registrationZone 


FFS 


BIT STRING 
(SIZE (12)) 




totalZone 


FFS 


BIT STRING 
(SIZE (3)) 




zoneTimer 


FFS 


BIT STRING 
(SIZE (3)) 




} 








longCodeStatelXRTT 


Set by SS 


BIT STRING 
(SIZE (42)) 
OPTIONAL 




cellReselectionParameterslXRTT SEQUENCE { 








bandClassLlst SEQUENCE (SIZE (L.tnaxCDMA 
-BandClass)) QF SEQUENCE { 


1 entry 






bandClass 


FFS 


ENUMERATED 
{bcO, bc1,bc2, 
bc3, bc4, bc5, 
bc6, bc7, bc8, 
bc9, bcIO, boll, 
bc12, bc13, bc14, 
bc15, bc16, bc17, 
sparel 4, sparel 3, 
sparel 2, sparel 1, 
sparel 0, spare9, 
spares, spare7, 
spares, spareS, 
spare4, spare3, 
spare2, sparel , 




cellReselectionPriority 


3 






threshX-Higli 


FFS 


INTEGER (0..63) 




threshX-Low 


FFS 


INTEGER (0..63) 




} 








} 








1 








1 
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Table 8.4.7.4.3.3-3: ULInformationTransfer {step 2, Table 8.4.7.4.3.2-2) 



Derivation Path: 36.508 Table 4.6.1-25 


Information Element 


Value/remark 


Comment 


Condition 


ULInformationTransfer ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE { 








ullnformationTransfer-r8 SEQUENCE { 








dedicated InfoType CHQICE { 








dedicatedlnfoNAS 


Set according to Table 
8.4.7.4.3.3-4 


EXTENDED 

SERVICE 

REQUEST 




} 








} 








1 








1 








} 









Table 8.4.7.4.3.3-4: EXTENDED SERVICE REQUEST (step 2, Table 8.4.7.4.3.2-2) 



Derivation Path: 36.508 Table 4.7.2-14A 


Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


EMM 






Service type 


'0001 'B 


mobile originating 
CS fallback or 
IxCS fallback 




CSFB response 


Not present 







Table 8.4.7.4.3.3-5: RRCConnectionRelease (step 4, Table 8.4.7.4.3.2-2) 



Derivation Path: 36.508 table 4.6.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE { 








rrcConnectionRelease-r8 SEQUENCE { 








redirectionlnformation ::= CHQICE { 








interRAT-target CHQICE { 








cdma2000-1xRTT 


cdma2000-Carrierlnfo for 
Cell 19 






} 








} 








1 








1 








} 








} 









Table 8.4.7.4.3.3-6: Origination (step 6, Table 8.4.7.4.3.2-2) 



Field 


Value/remark 


Comment 


Condition 


MSGJD 


'0001 OO'B 


Qrigination 
Message 




SPECIAL SERVICE 


'1'B 






SERVICE_QPTIQN 


Any value mapping to a 
voice service option 
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Table 8.4.7.4.3.3-7: Extended Channel Assignment (step 7, Table 8.4.7.4.3.2-2) 



Field 


Value/remark 


Comment 


Condition 


MSGJD 


'010101'B 


Extended Channel 

Assignment 

Message 




ASSIGN_MODE 


'OOO'B 


Traffic Channel 
Assignment 





Table 8.4.7.4.3.3-8: Acknowledgment Order (step 8, Table 8.4.7.4.3.2-2) 



Field 


Value/remark 


Comment 


Condition 


MSG ID 


'00000001 'B 


Order Message 




ORDER 


'010000'B 


Base Station 

Acknowledgment 

Order 




ORDQ 


'OOOOOOOO'B 







Table 8.4.7.4.3.3-9: Service Connect (step 9, Table 8.4.7.4.3.2-2) 



Field 


Value/remark 


Comment 


Condition 


MSG_ID 


'00010100'B 


Service Connect 
Message 




SERV CON SEQ 


Set by SS 







Table 8.4.7.4.3.3-10: Service Connect Completion (step 10, Table 8.4.7.4.3.2-2) 



Information Element 


Value/remark 


Comment 


Condition 


MSG_ID 


'00001 110'B 


Service Connect 

Completion 

Message 




SERV_CON_SEQ 


Same value as 
SERV_CON_SEQ 
received in Service 
Connect Message (Table 
8.4.7.4.3.3-9 







8.5 

8.5.1 
8.5.1.1 

8.5.1.1.1 
(1) 



RRC others 

Radio link failure 

Radio link failure / RRC connection re-establishment success 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE detecting physical layer problems} 
then { UE shall start timer T310 and UE does not initiate any RRC Connection re-establishment 
procedure before expiring of timer T310} 



(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE detecting radio link failure on expiring of timer T310 } 
then { UE starts timer T311 and UE initiates the RRC Connection re-establishment procedure 
} 
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(3) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE sucsessfully completes the RRC Connection re-establishment procedure } 
then { UE is in E-UTRA RRC_CONNECTED state } 
} 

8.5.1.1.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in TS 36.331, clauses 5.3.7.2, 
5.3.10.1, 5.3.10.3 and 5.3.10.4. 

[TS 36.331 clause 5.3.7.2] 

The UE shall only initiate the procedure when AS security has been activated. The UE initiates the procedure when one 
of the following conditions is met: 

1> upon detecting radio link failure, in accordance with 5.3.1 1; or 

1> upon handover failure, in accordance with 5.3.5.6; or 

1> upon mobility from E-UTRA failure, in accordance with 5.4.3.5; or 

1> upon integrity check failure indication from lower layers; or 

1> upon an RRC connection reconfiguration failure, in accordance with 5.3.5.5; 
Upon initiation of the procedure, the UE shall: 

1> stop timer T310, if running; 

1> start timer T311; 

1> suspend all RBs except SRBO; 

1> reset MAC; 

1> apply the default physical channel configuration as specified in 9.2.4; 

1> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

1> apply the default MAC main configuration as specified in 9.2.2; 

1> perform cell selection in accordance with the cell selection process as specified in TS 36.304 [4]; 

[TS 36.331 clause 5.3.11.1] 

The UE shall: 

1> upon receiving N310 consecutive "out-of-sync" indications from lower layers while neither T300, T301, T304 
nor T31 1 is running: 

2> start timer T3 10; 

[TS 36.331 clause 5.3.11.3] 

The UE shall: 

1> upon T310 expiry; or 

1> upon random access problem indication from MAC while neither T300, T301, T304 nor T31 1 is running; or 

1> upon indication from RLC that the maximum number of retransmissions has been reached: 

2> consider radio link failure to be detected; 

2> if AS security has not been activated: 
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3> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'; 
2> else: 

3> initiate the connection re-establishment procedure as specified in 5.3.7; 
8.5.1.1.3 Test description 

8.5.1.1.3.1 Pre-test conditions 
System Simulator: 

2 cells on same E-UTRA frequency: 

Cell 1 (default parameters) serving cell 
Cell 2 intra-frequency cell 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18] on cell 1. 

8.5.1 .1 .3.2 Test procedure sequence 

Table 8.5.1.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS changes the power level of cell 1 to 
non-suitable "Off" according to TS 36.508 
subclause 6.2.2.1 in order that the radio link 
quality of Cell 1 is degraded. 










2 


Check: Does the UE initiate an RRC 
connection re-establishment procedure on Cell 
1 or Cell 2. This is checked during the time 
T=T310. 






1 


F 


3 


Check: does the UE send RRC connection re- 
establishment message on Cell 2? 


-> 


RRCConnectionReestablishment 
Request 


2 


P 


4 


The SS transmits 
RRCConnectionReestablishment message. 


<- 


RRCConnectionReestablishment 


- 


- 


5 


The UE transmits 

RRCConnectionReestablishmentComplete 

message. 


-> 


RRCConnectionReestablishment 
Complete 






6 


The SS transmits an 

RRCConnectionReconflguration message to 
resume existing radio bearer. 


<- 


RRCConnectionReconflguration 






7 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationtC 
omplete 






8 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 2? 






3 


P 
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8.5.1 .1 .3.3 Specific message contents 

Table 8.5.1 .1 .3.3-1 : RRCConnectionReestablishmentRequest (step 3, Table 8.5.1 .1 .3.2-1) 



Derivation Path: 36.508, Table 4.6.1-13 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablislimentRequest ::= 
SEQUENCE! 








criticalExtensions CHOICE { 








rrcConnectionReestablishmentRequest-r8 
SEQUENCE! 








ue-ldentity SEQUENCE { 








c-RNTI 


the value of the C-RNTI 
oftheUE 






physCellld 


PhysicalCellldentity of 
CelM 






shortMAC-l 


The same value as the 
16 least significant bits of 
the XMAC-I value 
calculated by SS 






} 








reestablishmentCause 


otherFailure 






1 








} 








} 








Table 8.5.1.1.3.3-2: RRCConnectionReconfiguration (step 6, Table 8.5.1.1.3.2-1) 


Derivation Path: 36.508, Table 4.6.1-8 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICEj 








rrcConnectionReconfiguration-r8 SEQUENCE { 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-HQ 






1 








} 








} 








} 









8.5.1.2 



8.5.1.2.1 



Radio link failure /T301 expiry 
Test Purpose (TP) 



(1) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE having sent an RRCConnectionReestablishmentRequest message on starting of timer T301 } 
then { goes to RRC_IDLE state after timer T301 is expired and trigger TAU procedure in order to 
recover RRC connection) 



8.5.1.2.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in TS 36.331, clauses 5.3.7.2, 
5.3.7.3, 5.3.7.7, 5.3.11.1 and 5.3.11.3. The following represent an extraction of the requirements relevant to the test 
purpose. 

[TS 36.331 clause 5.3.7.2] 

The UE shall only initiate the procedure when AS security has been activated. The UE initiates the procedure when one 
of the following conditions is met: 

1> upon detecting radio link failure, in accordance with 5.3.1 1; or 
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1> upon handover failure, in accordance with 5.3.5.6; or 

1> upon mobility from E-UTRA failure, in accordance with 5.4.3.5; or 

1> upon integrity check failure indication from lower layers; or 

1> upon an RRC connection reconfiguration failure, in accordance with 5.3.5.5; 
Upon initiation of the procedure, the UE shall: 

1> stop timer T310, if running; 

1> start timer T311; 

1> suspend all RBs except SRBO; 

1> reset MAC; 

1> apply the default physical channel configuration as specified in 9.2.4; 

1> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

1> apply the default MAC main configuration as specified in 9.2.2; 

1> perform cell selection in accordance with the cell selection process as specified in TS 36.304 [4]; 
[TS 36.331 clause 5.3.7.3] 
Upon selecting a suitable E-UTRA cell, the UE shall: 

1> stop timer T311; 

1> start timer T301; 

1> apply the timeAUgnmentTimerCommon included in SystemInformationBlockType2; 

l> initiate transmission of the RRCConnectionReestablishmentRequest message in accordance with 5.3.7.4; 

NOTE: This procedure applies also if the UE returns to the source cell. 

Upon selecting an inter-RAT cell, the UE shall: 

1> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'RRC 
connection failure'; 

[TS 36.331 clause 5.3.7.7] 

The UE shall: 

1> if timer T301 expires; or 

1> if the selected cell becomes no longer suitable according to the cell selection criteria as specified in TS 36.304 
[4]: 

2> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'RRC 
connection failure'; 

[TS 36.331 clause 5.3.11.1] 

The UE shall: 

1> upon receiving N310 consecutive "out-of-sync" indications from lower layers while neither T300, T301, T304 
nor T31 1 is running: 

2> start timer T3 10; 

[TS 36.331 clause 5.3.11.3] 
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The UE shall: 

1> upon T310 expiry; or 

1> upon random access problem indication from MAC while neither T300, T301, T304 nor T31 1 is running; or 
1> upon indication from RLC that the maximum number of retransmissions has been reached: 
2> consider radio link failure to be detected; 
2> if AS security has not been activated: 

3> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'; 
2> else: 

3> initiate the connection re-establishment procedure as specified in 5.3.7; 
8.5.1.2.3 Test description 

8.5.1.2.3.1 Pre-test conditions 

System Simulator: 

2 cells on same E-UTRA frequency: 
Cell 1 (default parameters) serving cell 
Cell 2 intra-frequency cell non-suitable cell 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) on cell 1 according to [18]. 
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8.5.1.2.3.2 



Test procedure sequence 

Table 8.5.1 .2.3.1-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS changes the power level of cell 1 to 
non-suitable "Off" and changes the power level 
of cell 2 to suitable according to TS 36.508 
subclause 6.2.2.1 in order that the radio link 
quality of Cell 1 is degraded. 










2 


The UE sends 

RRCConnectionReestablishmentRequest 
message on Cell 2. 


-> 


RRCConnectionReestablishment 
Request 






3 


The SS does not respond to any 
RRCConnectionReestablishmentRequest 
message for 2s (T301). 










4 


The SS wait for 5s. 


- 


- 


- 


- 


4-8 


The UE will perform TAD procedure based on 
steps 1 to 5 of subclause 6.4.2.7 in TS 36.508 
on Cell 2. 

NOTE: The UE performs a TAU procedure due 
to NAS signaling connection recovery. 










5 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.2 
indicate that the UE is in E-UTRA RRCJDLE 
state on Cell 2? 






1 




9 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 2? 






1 





8.5.1.2.3.3 8.5.1.2.3.3 Specific message contents 

Table 8.5.1.2.3.3-1 : SystemlnformationBlockType2 ior Cell 2 (all steps) 



Derivation path: 36.508 table 4.4.3.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEOUENCE { 
ue-TimersAndConstants SEQUENCE { 
t301 
} 

} 


ms2000 
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Table 8.5.1.2.3.3-2: RRCConnectionReestablishmentRequest (step 2, Table 8.5.1.2.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-13 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReestablislimentRequest ::= 
SEQUENCE! 








criticalExtensions CHOICE { 








rrcConnectionReestablislimentRequest-r8 
SEQUENCE! 








ue-ldentity SEQUENCE { 








c-RNTI 


the value of the C-RNTI 
of the UE 






physCellld 


PhysicalCellldentity of 
CelM 






shortMAC-l 


The same value as the 
16 least significant bits of 
the XMAC-I value 
calculated by SS 






} 








reestablishmentCause 


otherFailure 






} 








1 








} 









8.5.1.3 
8.5.1.3.1 
(1) 



Radio link failure / T31 1 expiry 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state with default bearer established and radio link failure was 
detected and UE attempts to select a suitable E-UTRA cell to re-establish the RRC connection } 
ensure that { 

when { UE can not find a suitable cell within T311 } 

then { UE does not try to re-establish the RRC connection and goes to RRC_IDLE state after T311 
expired } 



8.5.1.3.2 



Conformance requirements 



The conformance requirements covered in the current test case are specified in TS 36.331 clause 5.3.7.2, 5.3.7.6 and 
5.3.12. 

[TS 36.331 clause 5.3.7.2] 



Upon initiation of the procedure, the UE shall: 
1> stop timer T310, if running; 
1> start timer T311; 



[TS 36.331 clause 5.3.7.6] 

Upon T3 1 1 expiry, the UE shall: 

1> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'RRC 
connection failure'. 

[TS 36.331 clause 5.3.12] 

Upon leaving RRC_CONNECTED, the UE shall: 

1> reset MAC; 
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1> stop all timers that are running except T320; 

1> release all radio resources, including release of the RLC entity, the MAC configuration and the associated PDCP 
entity for all established RBs; 

1> indicate the release of the RRC connection to upper layers with the release cause; 

1> if leaving RRC_CONNECTED was not triggered by reception of the MobilityFromEUTRACommand message: 

2> enter RRC_IDLE by performing cell selection in accordance with the cell selection process, defined for the 
case of leaving RRC_CONNECTED, as specified in TS 36.304 [4]. 



Test description 
Pre-test conditions 



8.5.1.3.3 
8.5.1.3.3.1 
System simulator: 

2 cells on same E-UTRA frequency: 

Cell 1 (default parameters) serving cell 

Cell 1 1 intra-frequency cell (non-suitable "Off) 
UE: 
None. 
Preamble: 

The UE is in state ( state 3)Generic RB Established (state 3) according to [18]. 
8.5.1 .3.3.2 Test procedure sequence 

Table 8.5.1 .3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS changes the power level of Cell 1 to 
non-suitable according to TS 36.508 subclause 
6.2.2.1 in order that the radio link quality of 
Cell 1 is degraded. 










2 


Wait for 12s (T31 1 (10s) is transmitted in 
SIB2). 


- 


- 


- 


- 


3 


The SS activate Cell 1 1 . 


- 


- 


- 


- 


4 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7 
indicate that the UE is camped on E-UTRAN 
Cell 11? 

NOTE: The UE performs a TAU procedure and 
the RRC connection is released. 






1 





8.5.1.3.3.3 
None. 

8.5.1.4 
8.5.1.4.1 
(1) 



Specific message contents 

Radio link failure / RRC connection re-establisment reject 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state with default bearer established and radio link failure was 
detected and UE initiates the re-establishment procedure} 
ensure that { 

when { the UE receives a RRCConnectionReestablishmentReject message } 

then { UE goes to RRC_IDLE and trigger TAU procedure in order to recover RRC connection } 
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8.5.1.4.2 Conformance requirements 

The conformance requirements covered in the current test case are specified in TS 36.331 clause 5.3.7.8 and 5.3.12. 

[TS 36.331 clause 5.3.7.8] 

Upon receiving the RRCConnectionReestablishmentReject message, the UE shall: 

1> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'RRC 
connection failure'. 

[TS 36.331 clause 5.3.12] 

Upon leaving RRC_CONNECTED, the UE shall: 

1> reset MAC; 

1> stop all timers that are running except T320; 

1> release all radio resources, including release of the RLC entity, the MAC configuration and the associated PDCP 
entity for all established RBs; 

1> indicate the release of the RRC connection to upper layers together with the release cause; 

1> if leaving RRC_CONNECTED was not triggered by reception of the MobilityFromEUTRACommand message: 

2> enter RRC_1DLE by performing cell selection in accordance with the cell selection process, defined for the 
case of leaving RRC_CONNECTED, as specified in TS 36.304 [4]; 

8.5.1.4.3 Test description 
8.5.1.4.3.1 Pre-test conditions 
System simulator: 

2 cells on same E-UTRA frequency: 

Cell 1 (default parameters) serving cell 
Cell 2 intra-frequency cell 
UE: 
None. 
Preamble: 

The UE is in stat( e Gen 3)eric RB Established (state 3) according to [18] on Cell 1. 
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8.5.1.4.3.2 



Test procedure sequence 

Table 8.5.1 .4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS changes the power level of Cell 1 to 
non-suitable cell according to TS 36.508 
subclause 6.2.2.1 in order that the radio link 
quality of Cell 1 is degraded and set the power 
level of Cell 2 to suitable cell. 










2 


UE transmits an 

RRCConnectionReestablishmentRequest 
message on Cell 2. 


-> 


RRCConnectionRestablishmentR 
equest 






3 


The SS transmits a 

RRCConnectionReestablishmentReject 

message 


<— 


RRCConnectionReestablishment 
Reject 






4-8 


The UE will perform TAU procedure based on 
steps 1 to 5 of subclause 6.4.2.7 in TS 36.508 
on Cell 2. 

NOTE: The UE performs a TAU procedure due 
to NAS signaling connection recovery. 










9 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 2? 






1 





8.5.1.4.3.3 

None. 

8.5.1.5 

8.5.1.5.1 

(1) 



Specific message contents 

Radio link failure / Radio link recovery while T31 is running 
Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE detecting physical layer recovery while T310 was running } 
then { the UE resumes the RRC connection without explicit signalling 



8.5.1.5.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 36.331 clause 5.3.1 1.1 and 
5.3.11.2. 

[TS 36.331, clause 5.3.11.1] 

The UE shall: 

1> upon receiving N310 consecutive "out of sync" indications from lower layers while neither T300, T301, T304 
nor T31 1 is running: 

2> start timer T3 10. 
[TS 36.331, clause 5.3.11.2] 
Upon receiving N311 consecutive "in-sync" indications from lower layers while T310 is running, the UE shall: 1> 

stop timer T310. 

NOTE 1: In this case, the UE resumes the RRC connection without explicit signalling, i.e. the UE resumes the 
entire radio resource configuration. 

NOTE 2: Periods in time where neither "in-sync" nor "out-of-sync" is reported by layer 1 do not affect the 
evaluation of the number of consecutive "in-sync" or "out-of-sync" indications 
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Test description 
Pre-test conditions 



8.5.1.5.3 

8.5.1.5.3.1 

System Simulator: 

- Cell 1 

UE: 

None. 

Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

8.5.1 .5.3.2 Test procedure sequence 

Table 8.5.1.5.3.2-1 illustrates the downlink power level to be applied for the cell at various time instants of the test 
execution. Row marked "TO" denotes the initial condition, while column marked "TT'is applied according the 
procedure. 

Table 8.5.1.5.3.2-1 : Time instances of cell power level 





Parameter 


Unit 


CelM 


Remark 


TO 


RS EPRE 


dBm/ 
15kH 

z 


Pdefault 


Power level from 36.508 
clause 6.2.2.1. Pdefauitas 
serving cell. 


T1 


RS EPRE 


dBm/ 
15kH 

z 


Poff 


Poff as as non-suitable "Off" 
cell. 



Table 8.5.1.5.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




SS wait for the 660ms to ensure that DL 
Timing Advance is sent at least once and UE 
apply the value of 

timeAlignmentTimerDedicated which is 
updated during the preamble. 










1 


The SS changes Cell 1 level according to the 
row "T1" in table 8.5.1.5.3.2-1. 


- 


- 


- 


- 


2 


SS waits for 1 .5s. The T31 is 2s. 


- 


- 


- 


- 


3 


The SS changes Cell 1 level according to the 
row "TO" in table 8.5.1 .5.3.2-1 . 


- 


- 


- 


- 


4 


SS waits for 5s. 

Check: Does the UE transmit any signalling 

message? 






1 


F 


5 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.3 
indicate that the UE is in E-UTRA 
RRC CONNECTED state on Cell 1? 






1 





8.5.1 .5.3.3 Specific message contents 

Table 8.5.1.5.3.3-1 : SystemlnformationBlockType2 (preamble and all steps, Table 8.5.1.5.3.2-2) 



Derivation path: 36.508 table 4.4.3.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








ue-TimersAndConstants SEQUENCE { 








t310 


ms2000 






1 








} 
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Table 8.5.1.5.3.3-2: RRCConnectionReconfiguration (preamble: Table 4.5.3.3-1 [18], step 8) 



Derivation path: 36.508 table 4.8.2.1 .5-1 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








RadioResourceConfigDedicated SEQUENCE { 








mac-MainConfig CHOICE { 








timeAlignmentTimerDedicated 


Infinity 






} 








} 








} 








1 








} 








} 









NOTE: As per test model SS is not configured to transmit PDCCH orders and it expects UE to be PUCCH 
synchronized throughout the test sequence. 



8.5.2.1 

8.5.2.1.1 
(1) 



Redirection to E-UTRAN / From UTRAN upon reception of RRC 
CONNECTION REJECT 

Test Purpose (TP) 



with { UE in UTRA Idle state } 
ensure that { 

when { UE is requested to make an outgoing PS call } 
then { UE includes in the RRC CONNECTION REQUEST the IE Pre-Redirection info" } 
} 

(2) 

with { UE in UTRA CELL_DCH state } 
ensure that { 

when { UE receives an RRC CONNECTION REJECT message including an IE J?edirection info with E-UTRA 
target info E-UTRA frequency } 

then { UE enters RRC IDLE state on E-UTRAN Carrier included in IE J?edirection info } 



8.5.2.1.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 25.331, clause 8.1.3.3, 
8. 1.4.3 and clause 8.5.2. 

[TS 25.331, clause 8.1.3.3] 

The UE shall, in the transmitted RRC CONNECTION REQUEST message: 

1> if the UE supports E-UTRA: 

2> if the variable EUTRA_FREQUENCY_1NF0_L1ST contains no E-UTRA frequencies: 
3> include the IE "Pre-Redirection info"; 
3> if the UE supports E-UTRA FDD: 

4> set the IE "Support of E-UTRA FDD" to TRUE. 
3> if the UE supports E-UTRA TDD: 

4> set the IE "Support of E-UTRA TDD" to TRUE. 
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2> if the UE supports any of the bands that the E-UTRA frequencies included in the variable 
EUTRA_FREQUENCY_INFO_LIST belong to: 

3> include the IE "Pre-Redirection info"; 

3> if the UE supports any of the bands that the E-UTRA FDD frequencies included in the variable 
EUTRA_FREQUENCY_INFO_LIST belong to: 

4> set the IE "Support of E-UTRA FDD" to TRUE. 

3> if the UE supports any of the bands that the E-UTRA TDD frequencies included in the variable 
EUTRA_FREQUENCY_INFO_LIST belong to: 

4> set the IE "Support of E-UTRA TDD" to TRUE. 

[TS 25.331, clause 8.1.3.9] 

When the UE receives an RRC CONNECTION REJECT message on the downlink CCCH, it shall compare the value of 
the IE "Initial UE identity" in the received RRC CONNECTION REJECT message with the value of the variable 
INITIAL_UE_IDENTITY: 



1> if the IE "inter-RAT info" is present: 

2> if the IE "wait time" = '0': 

3> the UE behaviour is not specified. 

2> if V300 is equal to or smaller than N300: 

3> if the IE "GSM target cell info" is present: 

4> attempt to camp on a suitable cell of the list of cells indicated for that RAT; 

4> if the UE selects and camps on one of the cells indicated for that RAT: 

5> disable cell reselection to the original RAT until the time stated in the IE "wait time" has elapsed. 

4> if the UE cannot find any suitable cell from the indicated ones within 10s, the UE is allowed to camp 
on any suitable cell on that RAT. 

5> after having selected and camped on a suitable cell on the designated RAT: 

6> the UE may disable cell reselection to the original RAT until the time stated in the IE "wait 
time" has elapsed. 

3> if the IE "E-UTRA target info" is present: 

4> attempt to camp on a suitable cell on one of the frequencies indicated for that RAT, excluding any cell 
indicated in the list of not allowed cells for that RAT (e.g. the "E-UTRA Target Cell Blackist" for E- 
UTRA), if present; 

4> if the UE selects and camps on one such cell: 

5> disable cell reselection to the original RAT until the time stated in the IE "wait time" has elapsed. 

4> if the UE cannot find any suitable cell on the indicated frequencies within 10s, the UE is allowed to 
camp on any suitable cell on that RAT: 

5> after having selected and camped on a suitable cell on the designated RAT: 

6> disable cell reselection to the original RAT until the time stated in the IE "wait time" has 
elapsed. 
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8.5.2.1.3 Test description 

8.5.2.1.3.1 Pre-test conditions 
System Simulator: 

- 2 cells, one UTRA and one E-UTRA cell: 

Cell 5 UTRA serving cell (priority 4 default) 
Cell 1 suitable neighbour E-UTRA cell (priority 3) 
UE: 

UTRAN Idle state 
Preamble: 

State 3 or state 7 as specified in clause 7.4 of TS 34.108, depending on the CN domain(s) supported by the UE. 

8.5.2.1 .3.2 Test procedure sequence 

Table 8.5.2.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Make the UE initiate an outgoing PS call. 


- 


- 


- 


- 


2 


Check: does the UE include the IE Pre- 
redirection info with Support of E-UTRA set to 
TRUE? 


-> 


RRC CONNECTION REOUEST 


1 


P 


3 


The SS transmit a RRC CONNECTION 
REJECT 


<- 


RRC CONNECTION REJECT 


- 


- 


4 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.7A 
indicate that the UE is camped on E-UTRAN 
Cell 1? 






2 





8.5.2.1.3.3 



Specific message or IE contents 



Table 8.5.2.1.3.3-1 System Information Block type 19 for cell 5 (preamble and all steps, Table 

8.5.2.1.3.2-1) 



Derivation Path: 36.508 table Table 4.4.4.1-1 


Information Element 


Value/remark 


Comment 


Condition 


SyslnfoTypelO ::= SEOUENCE { 








utra-PrioritylnfoList SEQUENCE { 








utra-ServingCell SEQUENCE { 








priority 


4 






} 








eutra-FrequencyAndPrioritylnfoList SEOUENCE 
(SIZE (1 ..maxNumEUTRAFreqs)) OF SEOUENCE 


1 entry 






earfcn[y] 


Downlink EARFCN of 
CelM 






priority[y] 


3 






} 








} 
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Table 8.5.2.1.3.3-2: RRC CONNECTION REQUEST (UTRA Rel-8) 



Derivation path: 34.108 default RRC CONNECTION REOUEST in section 9.1.1 for UTRA FDD or 9.1.2 for UTRA 
TDD 


Information Element 


Value/Remark 


Comment 


Condition 


Pre-redirection info 




The presence of 
this IE indicates 
the UE support of 
radio access 
technologies that 
the UE could be 
directed to 












Support of E-UTRA FDD 


TRUE 




E-UTRA- 
FDD 


Support of E-UTRA TDD 


TRUE 




E-UTRA- 
TDD 


Domain indicator 


PS domain 







Table 8.5.2.1.3.3-2: RRC CONNECTION REJECT (UTRA Rel-8) 



Derivation path: 34.1 08 default RRC CONNECTION REJECT in section 9.1 .1 for UTRA FDD or 9.1 .2 for UTRA TDD 


Information Element 


Value/Remark 


Comment 


Condition 


Wait Time 


15 






Redirection info 








Inter-RAT info 


E-UTRA 






E-UTRA target info 








E-UTRA Target Frequency Info List 


1 Entry 






DL Carrier frequency 


EARFCN of the downlink 
Cell 1 carrier frequency 







8.5.4 UE capability transfer 



8.5.4.1 



8.5.4.1.1 



UE capability transfer / Success 

Test Purpose (TP) 



(1) 



with { UE in RRC_CONNECTED state } 
ensure that { 

when { UE receives an UECapabilityEnquiry message before AS security is activatecl } 

then { UE transmits an UECapabilitylnformation message including UE radio access capability 
information corresponding to the ue-CapabilityRequest variable } 
} 

(2) 

with { UE in RRC_CONNECTED state } 
ensure that { 

when { UE receives an UECapabilityEnquiry message after AS security is activated } 

then { UE transmits an UECapabilitylnformation message including UE radio access capability 
information corresponding to the ue-CapabilityRequest variable } 



8.5.4.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.6.3.3. 

[TS 36.331, clause 5.6.3.3] 

The UE shall: 

1> set the contents of UECapabilitylnformation message as follows: 
2> if the ue-CapabilityRequest includes 'eutra': 
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3> include the UE-EUTRA-Capability within a ue-CapabilityRAT -Container and with the rat-Type set to 
'eMfra'; 

2> if the ue-CapabilityRequest includes 'geran-cs' and if the UE supports GERAN CS domain: 

3> include the UE radio access capabilities for GERAN CS within a ue-Capability RAT -Container and with 
the rat-Type set to 'geran-cs'; 

2> if the ue-CapabilityRequest includes 'geran-ps' and if the UE supports GERAN PS domain: 

3> include the UE radio access capabilities for GERAN PS within a ue-CapabilityRAT-Container and with 
the rat-Type set to 'geran-ps'; 

2> if the ue-CapabilityRequest includes 'Mfra' and if the UE supports UTRA: 

3> include the UE radio access capabilities for UTRA within a ueCapability RAT -Container and with the rat- 
Type set to 'utra'; 

2> if the ue-CapabilityRequest includes 'cdma2000-lXRTT and if the UE supports CDMA2000-lxRTT: 

3> include the UE radio access capabilities for CDMA 2000 within a ueCapabilityRAT-Container and with 
the rat-Type set to 'cdma2000-lXRTT; 

1> submit the UECapability Information message to lower layers for transmission, upon which the procedure ends. 

8.5.4.1 .3 Test description 

8.5.4.1.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 

- The UE is in state Switched OFF (state 1) according to [18]. 
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8.5.4.1.3.2 



Test procedure sequence 

Table 8.5.4.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


lUlessage 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an RRCConnectionRequest 
message. 


-> 


RRCConnectionRequest 


- 


- 


3 


The SS transmits an RRCConnectionSetup 
message. 


<- 


RRCConnectionSetup 


- 


- 


4 


The UE transmits an 
RRCConnectionSetupComplete. 
This message includes an ATTACH 
REQUEST and a PDN CONNECTIVITY 
REQUEST message. 


-> 


RRCConnectionSetupComplete 






5 


The SS transmits a DLInformationTransfer 

message. 

This message includes an AUTHENTICATION 

REQUEST message. 


<— 


DL Information Transfer 






6 


The UE transmits a ULInformationTransfer 

message. 

This message includes an AUTHENTICATION 

RESPONSE message. 


~> 


ULInformationTransfer 






7 


The SS transmits a DLInformationTransfer 

message. 

This message includes a SECURITY MODE 

COMMAND message. 


<- 


DL Information Transfer 






8 


The UE transmits a ULInformationTransfer 

message. 

This message includes a SECURITY MODE 

COMPLETE message. 


-> 


UL Information Transfer 






9 


The SS transmits a UECapabilityEnquiry 
message to request UE radio access capability 
information for E UTRA only. 


<— 


UECapabilityEnquiry 






10 


Check: Does the UE transmit a 
UECapabilitylnformation message? 


-> 


UECapabilitylnformation 


1 


P 


11 


The SS transmits a SecurityModeCommancI 
message to activate AS security. 


<— 


SecurityModeCommand 


- 


- 


12 


The UE transmits a SecurityModeComplete 
message and establishes the initial security 
configuration. 


-> 


SecurityModeComplete 








EXCEPTION: Steps 13a1 to 13a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred after 
SECURITY MODE COMPLETE message. 










13a 
1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits a 
DLInformationTransfer message. 
This message includes an ESM 
INFORMATION REQUEST message. 


<— 


DL Information Transfer 






13a 
2 


The UE transmits a ULInformationTransfer 

message. 

This message includes an ESM 

INFORMATION RESPONSE message. 


— > 


ULInformation Transfer 






14 


The SS transmits an 

RRCConnectionReconfiguration message to 
establish a data radio bearer. 


<— 


RRCConnectionReconfiguration 






15 


The UE transmits an 
RRCConnectionReconfigurationComplete. 


-> 


RRCConnectionReconfigurationC 
omplete 


- 


- 


16 


The UE transmits a ULInformationTransfer 

message. 

This message includes an ATTACH 

COMPLETE message. 


-> 


UL Information Transfer 






17 


The SS transmits a UECapabilityEnquiry 


<— 


UECapabilityEnquiry 


- 


- 
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message to request UE radio access capability 
information for E UTRA only. 










18 


Check: Does the UE transmit a 
UECapabilitylnformation message? 


—> 


UECapabilitylnformation 


2 


P 


- 


EXCEPTION: Steps 19a1 to 19a2 describe 
behaviour that depends on the UE capability. 


- 


- 


- 


- 


19a 
1 


IF pc FDD, pc TDD HCR, pc TDD LCR, 
pc TDD VHCR, pc UMTS GSM, pc IxRTT 
or pc_HRPD THEN the SS transmits a 
UECapabilityEnquiry message to request UE 
radio access capability information for every 
other supported RATs. 


<— 


UECapabilityEnquiry 






19a 
2 


Check: Does the UE transmit a 
UECapabilitylnformation message? 


—> 


UECapabilitylnformation 


2 


P 



8.5.4.1.3.3 Specific message contents 

Table 8.5.4.1.3.3-1: UECapabilityEnquiry (step 9 and 17, Table 8.5.4.1.3.2-1) 



Derivation path: 36.508 clause 4.6.1 table 4.6.1-22 


Information Element 


Value/Remark 


Comment 


Condition 


UECapabilityEnquiry ::= SEQUENCE { 
criticalExtensions CHOICE { 
c1 CHOICE! 
ueCapabilityEnquiry-r8 SEQUENCE { 
ue-CapabilityRequest SEQUENCE (SIZE 
(1..maxRAT-Capabilities)) OF SEQUENCE { 
RAT-Type[1] 
} 
} 
} 
} 
} 


1 entry 
eutra 


E-UTRA only 
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Table 8.5.4.1.3.3-2: UECapabilitylnformation (step 10 and 18, Table 8.5.4.1.3.2-1) 



Derivation path: 36.508 clause 4.6.1 table 4.6.1-23 


Information Element 


Value/Remark 


Comment 


Condition 


UECapabilitylnformation ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








ueCapabilitylnformation-r8 SEQUENCE { SIZE 


1 entry only 






(1..maxRAT-Capabilities)) OF SEQUENCE { 








rat-Type[1] 


eutra 


E-UTRA only 




ueCapabilitiesRAT-Container[1 ] OCTET 








STRING { 








UE-EUTRA-Capability SEQUENCE { 








accessStratumRelease 


rel8 


Release 8 only 




ue-Category 


pxeUECategoryType 






pdcp- Parameters 


Not checked 






phyLayerParameters SEQUENCE { 








ul-AntennaSelectionSupported 


Not checked 






ue-SpecificRefSigsSupported 


Not checked 






rf-Parameters SEQUENCE (SIZE 








(1 ..maxBands)) OF SEQUENCE { 








supportedEUTRA-BandList SEQUENCE { 


n entries where n is the 


n is the number of 






sum of pc_eBanda_Supp 


supported EUTRA 






for a= 1 to 64 


bands 




eutra-Band[a = 1..n] 


Any value (3 such that 
pc_eBandp_Supp is 
TRUE and different from 
all eutra-Band[k] where k 
= 1 to a - 1 






halfDuplex[a = 1..n] 
} 


Not checked 






} 

measurementParameters SEQUENCE { 








eutra-BandList SEQUENCE (SIZE 








(1 ..maxBands)) OF SEQUENCE { 








InterFreqEUTRA-BandList SEQUENCE 


same number of entries 






(SIZE (1 ..maxBands)) OF SEQUENCE { 


like in supportedEUTRA- 
BandList 






interFreqNeedForGaps[1 ..n] 
1 


Not checked 






InterRAT-BandList SEQUENCE (SIZE 


m entries (contents not 






(1 ..maxBands)) OF SEQUENCE { 


checked, but m shall be 
equal to the number of IE 
present in interRAT- 
Parameters) 






interRAT-NeedForGaps[1 ..m] 

} 
1 


Not checked 






} 
featureGrouplndicators 


Bits 1 to 26 shall be set 
according to 
pcFeatGrp_1 to 
pcFeatGrp_26, other bits 
shall be set to 0. 






InterRAT-Parameters SEQUENCE { 


m elements are present 






utraFDD 


Present but value not 
checked 




pc_FDD 


utraTDD128 


Present but value not 




pc TDD L 




checked 




CR 


utraTDD384 


Present but value not 




pc TDD H 




checked 




CR 


utraTDD768 


Present but value not 




pc TDD V 




checked 




NCR 


geran 


Present but value not 




pc UMTS 




checked 




GSM 


cdma2000-HRPD 


Present but value not 
checked 




pc HRPD 
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cdma2000-1xRTT 

} 

nonCriticalExtension SEQUENCE {} 

} 
} 
} 
} 
} 
} 


Present but value not 
checked 

Not checked 




pc_1 xRTT 



Table 8.5.4.1.3.3-3: UEcapabilityEnquiry (step 19a1, Table 8.5.4.1.3.2-1) 



Derivation path: 36.508 clause 4.6.1 table 4.6.1-22 


Information Element 


Value/Remark 


Comment 


Condition 


UEcapabilityEnquiry ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE { 








ueCapabilityEnquiry-r8 SEQUENCE { 


Numbering of entries is 


According to inter- 






according to conditions 


RAT capabilities 






met 


of UE 




ue-RadioAccessCapRequest[i1 ] 


utran 


This entry is 


pc FDD, 






present if the UE 


pc TDD H 






is capable of any 


CR, 






mode (FDD/TDD) 


pc TDD L 






In UMTS. 


CR, 

pc TDD V 

HCR 


ue-RadioAccessCapRequest[i2] 


geran-cs 




pc UMTS 
GSM 


ue-RadioAccessCapRequest[i3] 


geran-ps 




pc UMTS 
GSM 


ue-RadioAccessCapRequest[i4] 


cdma2000-1XRTT 




pc IxRTT, 
pc_HRPD 


nonCriticalExtension SEQUENCE {} 
} 
} 
} 
} 


Not present 
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Table 8.5.4.1.3.3-4: UECapabilitylnformation (step 19a2, Table 8.5.4.1.3.2-1) 



Derivation path: 36.508 clause 4.6.1 table 4.6.1-23 


Information Element 


Value/Remark 


Comment 


Condition 


UECapabilitylnformation ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








ueCapabilitylnformation-r8 SEQUENCE { SIZE 




Stated capability 




(1..maxRAT-Capabilities)) OF SEQUENCE { 




shall be 
compatible with 
3GPP TS 36.523- 
2(ICS 

statements) and 
the user settings 




rat-Type [11] 


utran 




pc FDD, 

pc TDD H 

CR, 

pc TDD L 

CR, 

pc TDD V 

NCR 


ueCapabilitiesRAT-Container[i1] OCTET 


ueCapabilitiesRAT- 


Encoded as an 


pc FDD, 


STRING {} 


Container-UTRAN 


INTER RAT 


pc TDD H 






HANDOVER 


CR, 






INFO messages 


pc TDD L 






as defined in 


CR, 






3GPP TS 25.331 


pc TDD V 






[17]. 


NCR 


rat-Type[i2] 


geran-cs 




pc UMTS 
GSM 


ueCapabilitiesRAT-Container [12] OCTET 


ueCapabilitiesRAT- 


Encoded as the 


pc_UMTS_ 


STRING {} 


Container-GERAN-CS 


concatenation of 


GSM and 






lEs MS classmark 


pc_CS 






2 and MS 








classmark 3 as 








defined in 3GPP 








TS 24.008 [32]. 




rat-Type [13] 


geran-ps 




pc_UMTS_ 
GSM and 
pc PS 


ueCapabilitiesRAT-Container [12] OC 1 b 1 


ueCapabilitiesRAT- 


Encoded as MS 


pc UMTS 


STRING {} 


Container-GERAN-PS 


radio access 
capability IE as 
defined in 3GPP 
TS 24.008 [32]. 


GSM 


rat-Type[i4] 


cdma2000-1XRTT 




pc IxRTT, 
pc_HRPD 


ueCapabilitiesRAT-Container [13] OC 1 b 1 


Not checked 


Encoded as A21 


pc IxRTT, 


STRING {} 




Mobile 
Subscription 
Information as 
defined in 3GPP2 
A.S0008 [33]. 


pc HRPD 


nonCriticalExtension SEQUENCE {} 

} 
} 
} 
} 


Not present 
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Table 8.5.4.1.3.3-5: ueCapabilitiesRAT-Container-UTRAN 



Derivation path: 25.331 clause 1 1 .2 


Information Element 


Value/Remark 


Comment 


Condition 


ueCapabilitiesRAT-Container-UTRAN ::= 
SEQUENCE! 








predefinedConfigStatusList CHOICE { 








absent 


NULL 






} 








uE-Security Information 


Not checked 


The value of start 
CS is not used for 
LTE to UMTS 
handover in Rel-8 




ue-CapabilityContainer CHOICE { 








present 


Not checked 


Container 
including UE radio 
access capability 




1 








v390NonCriticalExtensions CHOICE { 








present SEQUENCE { 








interRATHandoverlnfo-v390ext 


Not checked 


Positioning 
capability and 
dummy field 




vSaONonCriticalExtensions SEQUENCE { 








interRATHandoverlnfo-v3a0ext 


Not checked 


Positioning 
capability 




laterNonCriticalExtensions SEQUENCE { 








InterRATHandoverlnfo-vSdOext 


Not checked 


Deprecated 
Information 




interRATHandoverlnfo-r3-add-ext 


Not checked 


UE radio access 
capability for 
bands VIII to XIV, 
UE radio access 
capability 
extension, support 
of 2 DRX 
schemes in 
CELL_PCH, 
support of E- 
DPDCH power 
interpolation 




v3gONonCriticalExtensions SEQUENCE { 








interRATHandoverlnfo-v3g0ext 


Not checked 


Positioning 

capability 

extension 




v4bONonCriticalExtensions SEQUENCE { 








interRATHandoverlnfo-v4bOext 


Not checked 


Access Stratum 
Release indicator 




v4dONonCriticalExtensions SEQUENCE { 








interRATHandoverlnfo-v4d0ext 


Not checked 


LCRTDDUE 
capability 




v590NonCriticalExtensions SEQUENCE { 








interRATHandoverlnfo-v590ext 


Not checked 


Predefined 
configuration 
status information 
compressed, UE 
radio access 
capability 
compressed 




v690NonCriticalExtensions SEQUENCE { 








interRATHandoverlnfo-v690ext 
SEQUENCE! 








ue-Securitylnformation2 





START PS 




ue-RadioAccessCapabilityComp 


Not checked 


RF capability for 
bands VIII to XIV 




ue-RadioAccessCapabilityComp2 


Not checked 


UE radio access 
capability comp 2 
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1 








v6bONonCriticalExtensions SEQUENCE 
{ 








interRATHandoverlnfo-v6b0ext 


Not checked 


Support for 
SIB11bis 




v6eONonCritical Extensions SEQUENCE 
1 








InterRATHandoverlnfo-vGeOext 


Not checked 


Support of 
FDPCH 




v770NonCritical Extensions 
SEQUENCE! 








interRATHandoverlnfo-v770ext 


Note checked 


TDD RF and 
physical channel 
capability 
extensions in Rel- 
7, support of 
GANSS, support 
of MAC-ehs, LCR 
TDD UE specific 
capability 
information 




v790nonCritical Extensions 
SEQUENCE! 








interRATHandoverlnfo-v790ext 


Note checked 


Support of E- 
DPCCH power 
boosting 




vSeONonCriticalExtensions 
SEQUENCE! 








interRATHandoverlnfo-v860ext 


Note checked 


UE radio access 
capability for 
additional bands, 
Rel-B HS-DSCH 
physical layer 
category, support 
of MAC-iis 




vBBONonCritical Extensions 








SEQUENCE! 








interRATHandoverlnfo-vBBOext 


Note checked 


Support for priority 
reselection in 
UTRAN, Rel-B 
radio access 
capability 
extensions for 
LCR TDD (e.g. 
multi-carrier 
operation) 




nonCriticalExtensions 








SEQUENCE !} 








} 








} 








} 








1 








1 








} 








} 








} 








1 








1 








} 








} 








} 








1 








1 








} 
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Table 8.5.4.1.3.3-6: ueCapabilitiesRAT-Container-GERAN-CS 



Derivation path: 25.331 clause 1 1 .2 


Information Element 


Value/Remark 


Comment 


Condition 


IVIobile Station Classmark 2 


First byte is 33H 
Second byte is 3. 
Third, Fourth and Fith 
bytes are ignored. 






IVIobile Station Classmarl< 3 


CSN.1 decoding shall be 
successfull and the 
contents shall indicate 
that E-UTRA FDD or 
EUTRA TDD or both is 
supported. 
Other values are not 
checked. 







Table 8.5.4.1.3.3-7: ueCapabilitiesRAT-Container-GERAN-PS 



Derivation path: 25.331 clause 1 1 .2 


Information Element 


Value/Remark 


Comment 


Condition 


MS Radio Access Capability 


CSN.1 decoding shall be 
successfull and the 
contents shall indicate 
that E-UTRA FDD or 
EUTRA TDD or both is 
supported. 
Other values are not 
checked. 
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9 EPS mobility management 

9.1 EMM common procedures 

9.1.1 Void 

9.1.1.1 Void 

9.1.1.2 Void 

9.1.2 Authentication procedure 

9.1.2.1 Authentication accepted 

9.1.2.1.1 Test Purpose (TP) 
(1) 

with { a NAS signalling connection existing } 
ensure that { 

when { the UE receives an AUTHENTICATION REQUEST message } 

then { the UE responds with a correct AUTHENTICATION RESPONSE message and establishes correct 
EPS security context } 
} 

9.1 .2.1 .2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clauses 5.4.2.1 and 

5.4.2.3 and TS 33.401, clause 6.1.1. 

[TS 24.301, clause 5.4.2.1] 

The UE shall support the EPS authentication challenge only if a USIM is present. 

An EPS security context is established in the UE and the network when an EPS authentication is successfully 
performed. During a successful EPS authentication, the CK and IK keys are computed. CK and IK are then used as key 
material to compute a new key,KASME. Kasme is stored in the EPS security contexts (see 3GPP TS 33.401 [19]) of both 
the network and the UE, and is the root for the EPS integrity protection and ciphering key hierarchy. 

[TS 24.301, clause 5.4.2.3] 

The UE shall respond to an AUTHENTICATION REQUEST message. With the exception of the cases described in 
subclause 5.4.2.6, the UE shall process the authentication challenge data and respond with an AUTHENTICATION 
RESPONSE message to the network. 

Upon a successful EPS authentication challenge, the new Kasme calculated from the authentication challenge data shall 
be stored in a new EPS security context. 

[TS 33.401, clause 6.1.1] 

UE shall compute Kasme from CK, IK, and serving network's identity (SN id) using the KDF as specified in Annex A. 
SN id binding implicitly authenticates the serving network's identity when the derived keys from Kasme ^e successfully 
used. 



UE shall respond with User authentication response message including RES in case of successful AUTN verification as 
described in TS 33.102[4] and successful AMF verification as described above. Otherwise UE shall send User 
authentication reject message with a proper CAUSE value. 
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9.1.2.1.3 Test description 

9.1.2.1.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

UE: 

- The test USIM contains a valid GUTI-1 and TAl-1, and EPS update status is "EUl: UPDATED"; EPS security 
context has been established and taken into use. 

Preamble: 

UE in state Switched OFF (State 1) according to [18]. 
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9.1.2.1.3.2 



Test procedure sequence 

Table 9.1.2.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Switch the U Eon 


- 


- 


- 


- 


2 


The UE transmit an ATTACH REQUEST 
including a GUTI and a PDN CONNECTIVITY 
REQUEST message 


-> 


ATTACH REQUEST 






3 


SS transmits an AUTHENTICATION 
REQUEST message, KSIasme value is different 
to the KSIasme value provided in the ATTACH 
REQUEST 


<- 


AUTHENTICATION REQUEST 






4 


Check: Does the UE respond with 
AUTHENTICATION RESPONSE message 
within 6 seconds and the included RES is 
equal to the XRES calculated in the SS? 


-> 


AUTHENTICATION RESPONSE 


1 


P 


5 


SS transmits a NAS SECURITY MODE 
COMMAND message including the KSIasme of 
the new EPS security context (as provided in 
step 3) 


<— 


SECURITY MODE COMMAND 






6 


Check: Does the UE respond with NAS 
SECURITY MODE COMPLETE message 
integrity protected and ciphered with the new 
EPS security context identified by the KSIasme 
received in the SECURITY MODE COMMAND 
message in step 5 


-> 


SECURITY MODE COMPLETE 


1 


P 




EXCEPTION: Steps 7a1 to 7a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
Information which needs to be transferred. 










7a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






7a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






8 


SS responds with ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 9 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
If requested by the UE. 










9 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 


-> 


ATTACH COMPLETE 






lOal 


Void 


- 


- 


- 


- 


11 


SS releases the RRC connection 


- 


- 


- 


- 


12 


SS pages the UE using S-TMSI with CN 
domain indicator set to "PS". 


- 


- 


- 


- 


13 


Check: Does the UE respond with SERVICE 
REQUEST message providing KSIasme value 
that equals the value provided in the 
AUTHENTICATION REQUEST message in 
Step 3, and, integrity protected with new EPS 
security context? 


-> 


SERVICE REQUEST 


1 


P 


14- 
17 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
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service request procedure. 



9.1 .2.1 .3.3 Specific message contents 

Table 9.1.2.1.3.3-1: AUTHENTICATION RESPONSE (step 4, Table 9.1.2.1.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-8 


Information Element 


Value/remark 


Comment 


Condition 


Authentication response parameter 


RES equal to the XRES 
calculated in the SS with 
the parameters 
provided/indicated in the 
AUTHENTICATION 
REQUEST 







Table 9.1.2.1.3.3-2: SERVICE REJECT (step 14, Table 9.1.2.1.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-22 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


00010110 


Congestion 





9.1.2.2 
9.1.2.3 

9.1.2.3.1 
(1) 



Void 

Authentication not accepted by the network / GUT! used / Authentication 
reject and re-authentication 

Test Purpose (TP) 



with { UE having sent an initial NAS message with type of identity GUTI } 
ensure that { 

when { as a result of failure of an Authentication procedure intiated by the network the UE 
receives an AUTHENTICATION REJECT message } 

then { the UE shall set the update status to EU3 ROAMING NOT ALLOWED, delete the stored GUTI, 
TAI list, last visited registered TAI and KSIssme and enter state EMM-DEREGISTERED } 



9.1.2.3.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clauses 5.4.2.5. 

[TS 24.301, clause 5.4.2.5] 

Upon receipt of an AUTHENTICATION REJECT message, the UE shall set the update status to EU3 ROAMING NOT 
ALLOWED, delete the stored GUTI, TAI list, last visited registered TAI and KSIasme- The USIM shall be considered 
invalid until switching off the UE or the UICC containing the USIM is removed. 

If the AUTHENTICATION REJECT message is received by the UE, the UE shall abort any EMM signalling 
procedure, stop any of the timers T3410, T3417 or T3430 (if running) and enter state EMM-DEREGISTERED. 



9.1.2.3.3 
9.1.2.3.3.1 
System Simulator: 

- Cell A 
UE: 



Test description 
Pre-test conditions 



The test USIM contains a valid GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED"; EPS security 
context has been established and taken into use. 
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Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.1.2.3.3.2 



Test procedure sequence 

Table 9.1.2.3.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Switch the UE on 


- 


- 


- 


- 


2 


The UE transmit an ATTACH REQUEST 
message including a GUTI and a PDN 
CONNECTIVITY REQUEST message 


-> 


ATTACH REQUEST 






3 


The SS transmits an AUTHENTICATION 
REQUEST message without integrity 
protection and ciphering 


<- 


AUTHENTICATION REQUEST 






4 


The UE transmits an AUTHENTICATION 
RESPONSE. 


-> 


AUTHENTICATION RESPONSE 


- 


- 


5 


The SS transmits an AUTHENTICATION 
REJECT message without integrity protection 
and ciphering 


<— 


AUTHENTICATION REJECT 






6 


SS releases the RRC connection 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


8 


Check: Does the test result of CALL generic 
procedure "Test procedure for no response to 
paging (for NAS testing)" clause 6.4.2.5 [18] 
indicates that the UE responds to paging when 
paged with GUTI-1 and with CN domain 
indicator set to "PS"? 






1 




9 


Check: Does the test result of CALL generic 
procedure "Test procedure for no response to 
paging (for NAS testing)" clause 6.4.2.5 [18] 
indicates that the UE responds to paging when 
paged with IMSI and with CN domain indicator 
set to "PS"? 






1 




10 


Switch the UE off 


- 


- 


- 


- 


11 


Switch the UE on 


- 


- 


- 


- 


12 


Check: Does UE transmit a NOTintegrity 
protected ATTACH REQUEST message 
including IMSI and a PDN CONNECTIVITY 
REQUEST message? 


-> 


ATTACH REQUEST 


1 


P 


13 


The SS transmits an AUTHENTICATION 
REQUEST message without integrity 
protection and ciphering 


<— 


AUTHENTICATION REQUEST 






14 


The UE transmits an AUTHENTICATION 
RESPONSE message 


-> 


AUTHENTICATION RESPONSE 


- 


- 


15 


The SS transmits a NAS SECURITY MODE 
COMMAND message including the KSIasme of 
the new EPS security context 


<— 


SECURITY MODE COMMAND 






16 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and ciphered with the 
new EPS security context identified by the 
KSIasme received in the SECURITY MODE 
COMMAND message in step 14 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 17a1 to 17a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










17a 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






17a 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






18 


SS responds with ATTACH ACCEPT 


<- 


ATTACH ACCEPT 


- 


- 
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message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 












EXCEPTION: In parallel to the event described 
in step 19 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U- 
plane if requested by the UE. 










19 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 


-> 


ATTACH COMPLETE 






20a 

1 


Void 


- 


- 


- 


- 



9.1 .2.3.3.3 Specific message contents 

Table 9.1.2.3.3.3-1 : ATTACH REQUEST (step 12, Table 9.1.2.3.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 


'111'B 


no key is available 




Old GUTI or IMSI 


IMSI 






Last visited registered TAI 


Not Present 







9.1.2.4 



9.1.2.4.1 



Authentication not accepted by the UE / MAC code failure 
Test Purpose (TP) 



(1) 



with { a NAS signalling connection existing } 
ensure that { 

when { the UE receives an AUTHENTICATION REQUEST message with invalid MAC code } 

then { the UE shall send an AUTHENTICATION FAILURE message to the network, with the reject cause 
#20 "MAC failure" } 



9.1.2.4.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clauses 5.4.2.6. 

[TS 24.301, clause 5.4.2.6] 

In an EPS authentication challenge, the UE shall check the authenticity of the core network by means of the AUTN 
parameter received in the AUTHENTICATION REQUEST message. This enables the UE to detect a false network. 

During an EPS authentication procedure, the UE may reject the core network due to an incorrect AUTN parameter (see 
3GPP TS 33.401 [19]). This parameter contains three possible causes for authentication failure: 

a) MAC code failure: 

If the UE finds the MAC code (supplied by the core network in the AUTN parameter) to be invalid, the UE shall 
send an AUTHENTICATION FAILURE message to the network, with the EMM cause #20 "MAC failure". The 
UE shall then follow the procedure described in subclause 5.4.2.7, item c. 

[TS 24.301, clause 5.4.2.7] 

c) Authentication failure (EMM cause #20 "MAC failure"): 

The UE shall send an AUTHENTICATION FAILURE message, with EMM cause #20 "MAC failure" according 
to subclause 5.4.2.6, to the network and start timer T3418 (see example in figure 5.4.2.7.1). Furthermore, the UE 
shall stop any of the retransmission timers that are running (e.g. T3410, T3417, T3421 orT3430). Upon the first 
receipt of an AUTHENTICATION FAILURE message from the UE with EMM cause #20 "MAC failure", the 
network may initiate the identification procedure described in subclause 5.4.4. This is to allow the network to 
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obtain the IMSI from the UE. The network may then check that the GUTI originally used in the authentication 
challenge corresponded to the correct IMSI. Upon receipt of the IDENTITY REQUEST message from the 
network, the UE shall send the IDENTITY RESPONSE message. 



If the GUTI/IMSI mapping in the network was incorrect, the network should respond by sending a new 
AUTHENTICATION REQUEST message to the UE. Upon receiving the new AUTHENTICATION REQUEST 
message from the network, the UE shall stop the timer T3418, if running, and then process the challenge 
information as normal. 

9.1.2.4.3 Test description 

9.1.2.4.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

UE: 

None. 

Preamble: 

UE is in state Switched OFF (State 1) according to [18]. 
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9.1.2.4.3.2 



Test procedure sequence 

Table 9.1.2.4.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Switch the UE on 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message 


-> 


ATTACH REQUEST 






3 


SS transmits an AUTHENTICATION 
REQUEST message which contains an invalid 
IVIAC code 


<- 


AUTHENTICATION REQUEST 






4 


Check: Does the UE respond with a 
AUTHENTICATION FAILURE message, with 
reject cause "MAC failure"? 


-> 


AUTHENTICATION FAILURE 


1 


P 


5 


SS transmits an IDENTITY REQUEST 
message requesting IIVISI in the IE Identity 
type 


<~ 


IDENTITY REQUEST 






6 


The UE responds with a correct IDENTITY 
RESPONSE message providing its IMSI in the 
IE IVIobile Identity 


-> 


IDENTITY RESPONSE 






7 


SS transmits a correct AUTHENTICATION 
REQUEST message, RAND different to the 
one send in Step 3 


<- 


AUTHENTICATION REQUEST 






8 


Check: Does the UE respond with a correct 
AUTHENTICATION RESPONSE message 
with RES that is equal to the XRES calculated 
in the SS? 


-> 


AUTHENTICATION RESPONSE 


1 


P 


9 


SS transmits a NAS SECURITY MODE 
CQIVIMAND message including the KSIasme of 
the new EPS security context (as provided in 
step 8) 


<- 


SECURITY MODE COMMAND 






10 


UE transmits a NAS SECURITY MODE 
COMPLETE message integrity protected and 
ciphered with the new EPS security context 
identified by the KSIasme received in the 
SECURITY MODE COMMAND message in 
step 9 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps Hal to 11 a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










11a 
1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






11a 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






12 


SS responds with ATTACH ACCEPT. The 
ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 13 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U- 
plane if requested by the UE. 










13 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 


-> 


ATTACH COMPLETE 






14a 

1 


Void 


- 


- 


- 


- 
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9.1 .2.4.3.3 Specific message contents 

Table 9.1 .2.4.3.3-1 : AUTHENTICATION REQUEST (step 3, Table 9.1 .2.4.3.2-1 ) 



Derivation Path: 36.508, Table 4.7.2-7 


Information Element 


Value/remark 


Comment 


Condition 


Authentication parameter AUTN 


Invalid MAC 


SS shall calculate 
the correct MAC 
value as specified 
in TS 33.102 and 
use any different 
value, e.g. 
correct MAC+5. 





Table 9.1.2.4.3.3-2: AUTHENTICATION RESPONSE (step 8, Table 9.1.2.4.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-8 


Information Element 


Value/remark 


Comment 


Condition 


Authentication response parameter 


RES equal to the XRES 
calculated in the SS with 
the parameters 
provided/indicated in the 
AUTHENTICATION 
REQUEST 







9.1.2.5 

9.1.2.5.1 
(1) 



Authentication not accepted by the UE / SQN failure 
Test Purpose (TP) 



with { a NAS signalling connection existing } 
ensure that { 

when { the UE receives an AUTHENTICATION REQUEST message with SQN out of range } 

then { the UE sends an AUTHENTICATION FAILURE message to the network, with EMM cause "synch 
failure" and a re- synchronization token } 



(2) 

with { UE having sent an AUTHENTICATION FAILURE message to the network, with EMM cause "synch 
failure" } 
ensure that { 

when { the UE receives a new correct AUTHENTICATION REQUEST message while T3420 is running } 
then { the UE sends a corect AUTHENTICATION RESPONSE message } 



9.1.2.5.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 24.301, clauses 5.4.2.6 and 
5.4.2.7. 

[TS 24.301, clause 5.4.2.6] 

In an EPS authentication challenge, the UE shall check the authenticity of the core network by means of the AUTN 
parameter received in the AUTHENTICATION REQUEST message. This enables the UE to detect a false network. 

During an EPS authentication procedure, the UE may reject the core network due to an incorrect AUTN parameter (see 
3GPP TS 33.401 [19]). This parameter contains three possible causes for authentication failure: 



c) SQN failure: 
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If the UE finds the SQN (supplied by the core network in the AUTN parameter) to be out of range, the UE 
shall send an AUTHENTICATION FAILURE message to the network, with the EMM cause #21 "synch 
failure" and a re-synchronization token AUTS provided by the USIM (see 3GPP TS 33.102 [18]). The UE 
shall then follow the procedure described in subclause 5.4.2.7, item e. 

[TS 24.301, clause 5.4.2.7] 

e) Authentication failure (EMM cause #21 "synch failure"): 

The UE shall send an AUTHENTICATION FAILURE message, with EMM cause #21 "synch failure", to the 
network and start the timer T3420 (see example in figure 5.4.2.7.2). Furthermore, the UE shall stop any of the 
retransmission timers that are running (e.g. T3410, T3417, T3421 or T3430). Upon the first receipt of an 
AUTHENTICATION FAILURE message from the UE with the EMM cause #21 "synch failure", the network 
shall use the returned AUTS parameter from the authentication failure parameter IE in the AUTHENTICATION 
FAILURE message, to re-synchronise. The re-synchronisation procedure requires the MME to delete all unused 
authentication vectors for that IMSI and obtain new vectors from the HSS. When re-synchronisation is complete, 
the network shall initiate the authentication procedure. Upon receipt of the AUTHENTICATION REQUEST 
message, the UE shall stop the timer T3420, if running. 



If the network is validated successfully (a new AUTHENTICATION REQUEST is received which contains a 
vaUd SQN and MAC) while T3420 is running, the UE shall send the AUTHENTICATION RESPONSE 
message to the network and shall start any retransmission timers (e.g. T3410, T3417, T3421 or T3430), if they 
were running and stopped when the UE received the first failed AUTHENTICATION REQUEST message. 

9.1.2.5.3 Test description 

9.1.2.5.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
UE: 

None. 
Preamble: 

The UE is in state Switched OFF (State 1) according to [18]. 
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9.1.2.5.3.2 



Test procedure sequence 

Table 9.1.2.5.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Switch the U Eon 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message 


-> 


ATTACH REQUEST 






3 


SS transmits AUTHENTICATION REQUEST 
message with the AMP field in the IE 
"Authentication parameter AUTN" set to 
"AMFresynch" value to trigger SON re- 
synchronisation procedure in test USIIVI 


<- 


AUTHENTICATION REQUEST 






4 


Check: Does the UE respond with a 
AUTHENTICATION FAILURE message, with 
EMM cause "synch failure"? 


-> 


AUTHENTICATION FAILURE 


1 


P 


5 


SS transmits an IDENTITY REQUEST 
message requesting IMSI in the IE Identity 
type 


<— 


IDENTITY REQUEST 






6 


The UE responds with IDENTITY RESPONSE 
message providing its IMSI in the IE Mobile 
Identity 


-> 


IDENTITY RESPONSE 






7 


SS transmits AUTHENTICATION REQUEST 

message 

(Notel) 


<- 


AUTHENTICATION REQUEST 






8 


Check: Does the UE respond with 
AUTHENTICATION RESPONSE message 
with RES that is equal to the XRES calculated 
In the SS? 


-> 


AUTHENTICATION RESPONSE 


2 


P 


9 


SS transmits a NAS SECURITY MODE 
COMMAND message including the KSIasme of 
the new EPS security context (as provided in 
step 8) 


<- 


SECURITY MODE COMMAND 






10 


UE transmits a NAS SECURITY MODE 
COMPLETE message integrity protected and 
ciphered with the new EPS security context 
identified by the KSIasme received in the 
SECURITY MODE COMMAND message in 
step 9 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps Hal to 1 1 a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










Hal 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






11a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






12 


SS responds with ATTACH ACCEPT. The 
ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 13 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










13 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 


-> 


ATTACH COMPLETE 
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14a1 Void 



Note 1 : The SS shall ensure that the AUTHENTICATION REQUEST message sent in step 7 is sent less than 

(T3420-1 0%) sec after the message sent in step 4 otherwise it cannot be ensured that the UE will behave as 
specified in step 8. 



9.1.2.5.3.3 Specific message contents 

Table 9.1 .2.5.3.3-1 : AUTHENTICATION REQUEST (step 3, Table 9.1 .2.5.3.2-1 ) 



Derivation Path: 36.508, Table 4.7.2-7 


Information Element 


Value/remark 


Comment 


Condition 


Authentication parameter AUTN 


AMF field set to 
"AMFresynch" 







Table 9.1.2.5.3.3-2: AUTHENTICATION FAILURE (step 4, Table 9.1.2.5.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-5 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0001 0101'B 


Synch failure 




Authentication failure parameter 


'1111 1111 1111 1111'B 


AMFresynch see 
TS 34.108, 8.1.2.2 





Table 9.1.2.5.3.3-3: AUTHENTICATION RESPONSE (step 8, Table 9.1.2.5.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-8 


Information Element 


Value/remark 


Comment 


Condition 


Authentication response parameter 


RES equal to the XRES 
calculated in the SS with 
the parameters 
provided/indicated in the 
AUTHENTICATION 
REQUEST 







9.1.2.6 

9.1.2.6.1 
(1) 



Abnormal cases / Network failing the authentication check 
Test Purpose (TP) 



with { UE in EMM-REGISTERED state / EMM-CONNECTED mode} 
ensure that { 

when { UE receives an AUTHENTICATION REQUEST message but UE deems that the network failed the 
authentication check } 

then { UE locally release the RRC connection and treat the active cell as barred } 



9.1.2.6.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.4.2.7. 

[TS 24.301, clause 5.4.2.7] 

It can be assumed that the source of the authentication challenge is not genuine (authentication not accepted by the 
UE) if any of the following occur: 

- after sending the AUTHENTICATION FAILURE message with the EMM cause #20 "MAC failure" the 
timer T3418 expires; 



When it has been deemed by the UE that the source of the authentication challenge is not genuine (i.e. 
authentication not accepted by the UE), the UE shall proceed as described in item f. 
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f) Network failing the authentication check: 

If the UE deems that the network has failed the authentication check, then it shall request RRC to locally release 
the RRC connection and treat the active cell as barred (see 3GPP TS 36.331 [22]). The UE shall start any 
retransmission timers (e.g. T3410, T3417, T3421 or T3430), if they were running and stopped when the UE 
received the first AUTHENTICATION REQUEST message containing an invahd MAC or SQN. 

9.1.2.6.3 Test description 

9.1.2.6.3.1 Pre-test conditions 

System Simulator: 

Cell A and Cell I are configured according to Table 6.3.2.2-1 in [18]. 

Cell A and Cell I belong to different PLMNs and different Frequencies. 
UE: 

None 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.1.2.6.3.2 



Test procedure sequence 

Table 9.1.2.6.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell". 

- Cell 1 as a " Suitable cell". 


' 








- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmit an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


— > 


ATTACH REQUEST 






4 


SS transmits an AUTHENTICATION 
REQUEST message which contains an invalid 
IVIAC code 


<— 


AUTHENTICATION REQUEST 






5 


UE responds with an AUTHENTICATION 
FAILURE message, with reject cause "MAC 
failure" . 


— > 


AUTHENTICATION FAILURE 






6 


SS responds nothingnand wait for.the 
expiration of T3418. 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message in the 
next 30 seconds after T3418 expired? 


— > 


ATTACH REQUEST 


1 


P 


8 


The SS transmits an AUTHENTICATION 
REQUEST message which contains a valid 
IVIAC code. 


<— 


AUTHENTICATION REQUEST 


' 


' 


9 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


— > 


AUTHENTICATION RESPONSE 






10 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


11 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


— > 


SECURITY MODE COMPLETE 






- 


EXCEPTION: Steps 12a1 to 12a2 describe 
behaviour that depends on UE configuration. 


- 


- 


- 


- 


12a 
1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






12a 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






13 


SS responds with ATTACH ACCEPT 
message. 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step14 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U- 
plane if requested by the UE. 










14 


The UE transmits an ATTACH COMPLETE 
message 


-> 


ATTACH COMPLETE 


- 


- 
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9.1 .2.6.3.3 Specific message contents 

Table 9.1 .2.6.3.3-1 : AUTHENTICATION REQUEST (step 3, Table 9.1 .2.6.3.2-1 ) 



Derivation Path: 36.508, Table 4.7.2-7 


Information Element 


Value/remark 


Comment 


Condition 


Authentication parameter AUTN 


Invalid MAC 


SS shall calculate 
the correct MAC 
value as specified 
in TS 33.401 and 
use any different 
value, e.g. 
correct MAC+5. 





Table 9.1.2.6.3.3-2: AUTHENTICATION FAILURE (step 5, Table 9.1.2.6.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-5 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0001 0100'B 


MAC failure 




Authentication failure parameter 


Not present 







Table 9.1.2.6.3.3-3: AUTHENTICATION REQUEST (step 8, Table 9.1.2.6.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-7 


Information Element 


Value/remark 


Comment 


Condition 


Authentication parameter AUTN 


Valid MAC 


SS shall calculate 
the correct MAC 
value as specified 
in TS 33.401, e.g. 
correct MAC. 





9.1.3 

9.1.3.1 
9.1.3.1.1 
(1) 



Security mode control procedure 

NAS security mode command accepted by the UE 
Test Purpose (TP) 



with { succesful completion of EPS authentication and key agreement (AKA) procedure } 
ensure that { 

when { UE receives an integrity protected SECURITY MODE COMMAND message including replayed 
security capabilities and IMEISV request } 

then { UE sends an integrity protected and ciphered SECURITY MODE COMPLETE message including 
IMEISV and starts applying the NAS Security in both UL and DL } 

(2) 

with { NAS Security Activated and EPS Authentication and key agreement procedure is executed for new 
Key generation} 
ensure that { 

when { UE receives an integrity protected SECURITY MODE COMMAND message corresponding to NAS count 
reset to zero including replayed security capabilities and IMEISV request } 

then { UE sends integrity protected and ciphered SECURITY MODE COMPLETE message [with NAS count 
set to zero] including IMEISV and starts applying the NAS Security in both UL and DL} 



9.1.3.1.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 24.301 clause 4.4.3.1, 
5.4.3.1, 5.4.3.2 and 5.4.3.3. 

[TS 24.301, clause 4.4.3.1] 

Each EPS NAS security context shall be associated with two separate counters NAS COUNT: one related to uplink 
NAS messages and one related to downlink NAS messages. The NAS COUNT counters use 24 bit internal 
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representation and are independently maintained by UE and MME. The NAS COUNT shall be constructed as a NAS 
sequence number (8 least significant bits) concatenated with a NAS overflow counter (16 most significant bits). 

When NAS COUNT is input to NAS ciphering or NAS integrity algorithms it shall be considered to be a 32-bit entity 
which shall be constructed by padding the 24-bit internal representation with 8 zeros in the most significant bits. 

During the handover from UTRAN/GERAN to E-UTRAN, if the mapped EPS security context is taken into use, the 
NAS COUNT values for this EPS security context shall be initialized to zero in the UE and the network for uplink and 
downlink NAS messages. 

The NAS sequence number part of the NAS COUNT shall be exchanged between the UE and the MME as part of the 
NAS signalling. After each new or retransmitted outbound security protected NAS message, the sender shall increase 
the NAS COUNT number by one. Specifically, on the sender side, the NAS sequence number shall be increased by one, 
and if the result is zero (due to wrap around), the NAS overflow counter shall also be incremented by one (see 
subclause 4.4.3.5). The receiving side shall estimate the NAS COUNT used by the sending side. Specifically, if the 
estimated NAS sequence number wraps around, the NAS overflow counter shall be incremented by one. 

[TS 24.301, clause 5.4.3.1] 

The purpose of the NAS security mode control procedure is to take an EPS security context into use, and initialise and 
start NAS signalling security between the UE and the MME with the corresponding NAS keys and security algorithms. 

[TS 24.301, clause 5.4.3.2] 

The MME initiates the NAS security mode control procedure by sending a SECURITY MODE COMMAND message 
to the UE and starting timer T3460 (see example in figure 5.4.3.2.1). 

If the security mode control procedure is initiated further to a successful execution of the authentication procedure, the 
MME shall use the reset downlink NAS COUNT to integrity protect the SECURITY MODE COMMAND message. 

The MME shall send the SECURITY MODE COMMAND message unciphered, but shall integrity protect the message 
with the NAS integrity key based on Kasme or mapped K'asme indicated by the eKSI included in the message. The 
MME shall set the security header type of the message to "integrity protected with new EPS security context". 



The MME shall include the replayed security capabilities of the UE (including the security capabilities with regard to 
NAS, RRC and UP (user plane) ciphering as well as NAS, RRC integrity, and other possible target network security 
capabilities, i.e. UTRAN/GERAN if UE included them in the message to network), the replayed nonccuE if the UE 
included it in the message to the network, the selected NAS ciphering and integrity algorithms and the Key Set 
Identifier (eKSI). 

Additionally, the MME may request the UE to include its IMEISV in the SECURITY MODE COMPLETE message. 

NOTE: The AS and NAS security capabilities will be the same, i.e. if the UE supports one algorithm for NAS it is 
also be supported for AS. 

[TS 24.301, clause 5.4.3.3] 

Upon receipt of the SECURITY MODE COMMAND message, the UE shall check whether the security mode 
command can be accepted or not. This is done by performing the integrity check of the message and by checking that 
the received UE security capabilities and the received nonccuE have not been altered compared to what the UE provided 
in the initial layer 3 message that triggered this procedure. 

If the type of security context flag is set to "native security context" and if the KSI matches a valid native EPS security 
context held in the UE while the UE has a mapped EPS security context as the current security context, the UE shall 
take the native EPS security context into use. The UE shall store the native EPS security context, as specified in 
annex C. 

If the security mode command can be accepted, the UE shall reset the uplink NAS COUNT and the UE shall take the 
new EPS security context into use when: 

a) the SECURITY MODE COMMAND message is received further to a successful execution of the authentication 
procedure; or 



ETSI 



3GPP TS 36.523-1 version 9.1 .1 Release 9 980 ETSI TS 1 36 523-1 V9.1 .1 (201 0-07) 

b) the type of security context flag is set to "mapped security context" in the NAS KSI IE included in the SECURITY 
MODE COMMAND message. 

If the security mode command can be accepted and the eKSI was included in the SECURITY MODE COMMAND 
message, the UE shall send a SECURITY MODE COMPLETE message integrity protected with the selected NAS 
integrity algorithm and the NAS integrity key based on the Kasme or mapped K'asme if the type of security context flag 
is set to "mapped security context"indicated by the eKSI. If the SECURITY MODE COMMAND message includes the 
type of security context flag set to "mapped security context" in the NAS KSI IE, nonccMME and nonccuE, the UE shall 
generate K'asme from both nonces as indicated in 3GPP TS 33.401 [19] and reset the downlink NAS COUNT to check 
whether the SECURITY MODE COMMAND can be accepted or not. The UE shall cipher the SECURITY MODE 
COMPLETE message with the selected NAS ciphering algorithm and the NAS ciphering key based on the Kasme or 
mapped K'asme indicated by the eKSI. The UE shall set the security header type of the message to "integrity protected 
and ciphered with new EPS security context". 

From this time onwards the UE shall cipher and integrity protect all NAS signalling messages with the selected NAS 
ciphering and NAS integrity algorithms. 

If the MME indicated in the SECURITY MODE COMMAND message that the IMEISV is requested, the UE shall 
include its IMEISV in the SECURITY MODE COMPLETE message. 

9.1.3.1.3 Test description 

9.1.3.1.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.1.3.1.3.2 



Test procedure sequence 

Table 9.1.3.1.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






3 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






4 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






5 


The SS transmits a SECURITY MODE 
COMMAND message to activate MAS security. 
It is integrity protected and includes request to 
include IMEISV 


<— 


SECURITY MODE COMMAND 






6 


Check: Does the UE transmit a SECURITY 
MODE COMPLETE message and does it 
establish the initial security configuration? 


~> 


SECURITY MODE COMPLETE 


1 


P 




EXCEPTION: Steps 6Aa1 to 6Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










6A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






6A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






7 


The SS transmits an ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<~ 


ATTACH ACCEPT 






8 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 


~> 


ATTACH COMPLETE 






9 


The SS Transmits an IDENTITY REQUEST 
message [Security protected] 


<- 


IDENTITY REQUEST 


- 


- 


10 


Check: Does the UE transmit an IDENTIY 
RESPONSE message [Security Protected]? 


-> 


IDENTITY RESPONSE 


1 


P 


11 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure for new key 
set generation. 


<— 


AUTHENTICATION REQUEST 






12 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






13 


SS resets UL and DL NAS Count to zero 


- 


- 


- 


- 


14 


The SS transmits a SECURITY MODE 
COMMAND message to activate NAS security. 
It is integrity protected and includes request to 
include IMEISV 


<- 


SECURITY MODE COMMAND 






15 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 


2 


P 




Exception : Steps 16 and 17 are executed 100 
times to check UE is applying security correctly 










16 


The SS transmits an IDENTITY REQUEST 
message [Security protected] 


<- 


IDENTITY REQUEST 


- 


- 
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17 


Check: Does the UE transmit an IDENTIY 
RESPONSE message [Security Protected]? 


-> 


IDENTITY RESPONSE 


2 


P 



9.1 .3.1 .3.3 Specific message contents 

Table 9.1.3.1.3.3-1 : SECURITY MODE COMMAND (Steps 5 and 14) 



Derivation path: 36.508 table 4.7.2-19 


Information Element 


Value/Remark 


Comment 


Condition 


IMEISV request 


Present 






Table 9.1.3.1.3.3-2: 


SECURITY MODE COMPLETE (Steps 6 and 15) 




Derivation path: 36.508 table 4.7.2-20 


Information Element 


Value/Remark 


Comment 


Condition 


IMEISV 


Present 







9.1.3.2 

9.1.3.2.1 
(1) 



NAS security mode command not accepted by the UE 
Test Purpose (TP) 



with { succesful completion of EPS authentication and key agreement (AKA) procedure [ } 
ensure that { 

when { UE receives an integrity protected SECURITY MODE COMMAND message including not mathcing 
replayed security capabilities} 

then { UE sends SECURITY MODE REJECT and does not start applying the NAS security in both UL and 

dl} 

} 



9.1.3.2.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 24.301 clause 5.4.3.1, 
5.4.3.2, 5.4.3.3 and 5.4.3.5. 

[TS 24.301, clause 5.4.3.1] 

The purpose of the NAS security mode control procedure is to take an EPS security context into use, and initialise and 
start NAS signalling security between the UE and the MME with the corresponding NAS keys and security algorithms. 

[TS 24.301, clause 5.4.3.2] 

The MME initiates the NAS security mode control procedure by sending a SECURITY MODE COMMAND message 
to the UE and starting timer T3460 (see example in figure 5.4.3.2.1). 

If the security mode control procedure is initiated further to a successful execution of the authentication procedure, the 
MME shall use the reset downlink NAS COUNT to integrity protect the SECURITY MODE COMMAND message. 

The MME shall send the SECURITY MODE COMMAND message unciphered, but shall integrity protect the message 
with the NAS integrity key based on Kasme or mapped K'asme indicated by the eKSI included in the message. The 
MME shall set the security header type of the message to "integrity protected with new EPS security context". 



The MME shall include the replayed security capabilities of the UE (including the security capabilities with regard to 
NAS, RRC and UP (user plane) ciphering as well as NAS, RRC integrity, and other possible target network security 
capabilities, i.e. UTRAN/GERAN if UE included them in the message to network), the replayed nonccuE if the UE 
included it in the message to the network, the selected NAS ciphering and integrity algorithms and the Key Set 
Identifier (eKSI). 

Additionally, the MME may request the UE to include its IMEISV in the SECURITY MODE COMPLETE message. 

NOTE: The AS and NAS security capabilities will be the same, i.e. if the UE supports one algorithm for NAS it is 
also be supported for AS. 
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[TS 24.301, clause 5.4.3.3] 

Upon receipt of the SECURITY MODE COMMAND message, the UE shall check whether the security mode 
command can be accepted or not. This is done by performing the integrity check of the message and by checking that 
the received UE security capabilities and the received nonccuE have not been altered compared to what the UE provided 
in the initial layer 3 message that triggered this procedure. 

[TS 24.301, clause 5.4.3.5] 

If the security mode command cannot be accepted, the UE shall send a SECURITY MODE REJECT message, which 
shall not be integrity protected. The SECURITY MODE REJECT message contains an EMM cause that typically 
indicates one of the following cause values: 

#23: UE security capabilities mismatch; 

#24: security mode rejected, unspecified. 



Upon receipt of the SECURITY MODE REJECT message, the MME shall stop timer T3460. The MME shall also abort 
the ongoing procedure that triggered the initiation of the NAS security mode control procedure. 

9.1.3.2.3 Test description 

9.1.3.2.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
Preamble: 

The UE does not have a EPS security context. 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.1.3.2.3.2 



Test procedure sequence 

Table 9.1.3.2.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






3 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






4 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






5 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 
It is integrity protected and includes un 
matched replayed security capabilities. 


<— 


SECURITY MODE COMMAND 






6 


Check: Does the UE transmit a NAS 
SECURITY MODE REJECT message with 
cause'#23: UE security capabilities mismatch'? 


~> 


SECURITY MODE REJECT 


1 


P 


7 


The SS Transmits an IDENTITY REQUEST 
message for IMSI (Security not applied) 


<- 


IDENTITY REQUEST 


- 


- 


8 


Check: Does the UE Transmits a non security 
protected IDENTIY RESPONSE message? 


-> 


IDENTITY RESPONSE 


1 


P 


9 


The SS transmits a SECURITY MODE 
COMMAND message to activate NAS security. 
It is integrity protected and includes request to 
include IMEISV 


<— 


SECURITY MODE COMMAND 






10 


The UE transmits a SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps lOAal to 10Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










10 
Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






10 
A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






11 


The SS transmits an ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<— 


ATTACH ACCEPT 






12 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 


-> 


ATTACH COMPLETE 







9.1.3.2.3.3 



Specific message contents 
Table 9.1 .3.1 .3.3-1 : SECURITY MODE COMMAND (Step 5) 



Derivation path: 36.508 table 4.7.2-1 9 


Information Element 


Value/Remark 


Comment 


Condition 


Replayed UE security capabilities 


Set to mismatch the 
security capability of UE 
under test 
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Table 9.1.3.1.3.3-2: SECURITY MODE REJECT (Step 6 ) 



Derivation path: 36.508 table 4.7.2-21 


Information Element 


Value/Remark 


Comment 


Condition 


ElVIIVI cause 


#23 







9.1.4 

9.1.4.1 
9.1.4.2 

9.1.4.2.1 
(1) 



Identification procedure 
Void 

Identification procedure / IMEI requested 
Test Purpose (IP) 



with { UE in EMM-REGISTERED state / EMM-CONNECTED mode} 
ensure that { 

when { UE receives an IDENTITY REQUEST message with IMEI in the IE Identity type } 
then { UE sends an IDENTITY RESPONSE message providing its IMEI } 
} 

9.1.4.2.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.4.4.3. 

[TS 24.301, clause 5.4.4.3] 

A UE shall be ready to respond to an IDENTITY REQUEST message at any time whilst in EMM-CONNECTED 
mode. 

Upon receipt of the IDENTITY REQUEST message the UE shall send an IDENTITY RESPONSE message to the 
network. The IDENTITY RESPONSE message shall contain the identification parameters as requested by the network. 



Test description 
Pre-test conditions 



9.1.4.2.3 
9.1.4.2.3.1 
System Simulator: 

- Cell A 
UE: 

None 
Preamble: 

UE is in state Generic RB established (state 3) on Cell A according to [18]. 
9.1 .4.2.3.2 Test procedure sequence 

Table 9.1.4.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


IVIessage 


1 


SS transmits an IDENTITY REQUEST 
message requesting IMEI in the IE Identity 

type. 


<— 


IDENTITY REQUEST 






2 


Check: Does the UE respond with an 
IDENTITY RESPONSE message providing its 
IMEI? 


— > 


IDENTITY RESPONSE 


1 


P 
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9.1 .4.2.3.3 Specific message contents 

Table 9.1.4.2.3.3-1 : Message IDENTITY REQUEST (step 1, Table 9.1.4.2.3.2-1) 



Derivation Patii : 36.508, Table 4.7.2-1 7 


Information Element 


Value/Remark 


Comment 


Condition 


Identity Type 


0010 


IMEI 





Table 9.1.4.2.3.3-2: IDENTITY RESPONSE (step 2, Table 9.1.4.2.3.2-1) 



Derivation path : 36.508, Table 4.7.2-1 8 


Information Element 


Value/Remark 


Comment 


Condition 


IVIobile Identity 








Type of identity 


010 


IMEI 




Identity digits 


UE's IMEI 







9.1 .5 EMM information procedure 
9.1 .5.1 EMM information procedure 

9.1.5.1.1 Test Purpose (IP) 

(1) 

with { UE in EMM-REGISTERED state and UE supporting the EMM information message } 
ensure that { 

when { UE receives an EMM Information message } 

then { UE accepts the message and uses the contents to update appropriate information stored 
within the UE } 



9.1 .5.1 .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.4.5.3. 

[TS 24.301, clause 5.4.5.3] 

When the UE (supporting the EMM information message) receives an EMM INFORMATION message, it shall accept 
the message and optionally use the contents to update appropriate information stored within the UE. 



Test description 
Pre-test conditions 



9.1.5.1.3 
9.1.5.1.3.1 
System Simulator: 

- Cell A 
UE: 

None. 
Preamble: 

UE is in state Generic RB established (state 3) on Cell A according to [18]. 
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9.1.5.1.3.2 



Test procedure sequence 

Table 9.1.5.1.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits an EMM INFORMATION 
message. 


<— 


EMM INFORMATION 


- 


- 


2 


Checl<: Does the UE transmit in the next 5 
seconds an EMM STATUS message with 
cause #97 "message type non-existent or not 
implemented"? 


-> 


EMM STATUS 


1 


F 




EXCEPTION: Steps 3a1 to 3a4 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported. 










3a1 


IF pc_EMM_lnformation AND 
pc_FullNameNetwork THEN 
Check: Does the UE associate the "full length 
name of the network" with the MCC and MNC 
contained in the last visited tracking area 
identification and is presented to the MS user 
at the earliest opportunity? (Note 1) 






1 


P 


3b1 


IF pc_EMM_lnformation AND 
pc_ShortNameNetwork THEN 
Check: Does the UE associate the 
"abbreviated name of the network" with the 
MCC and MNC contained in the last visited 
tracking area identification and is presented to 
the MS user at the earliest opportunity? (Note 
1) 






1 


P 


3c1 


IF pc_EMM_lnformation AND 
pc_LocalTimeZone THEN 
Check: Does the UE assume that this time 
zone applies to the tracking area of the current 
cell and is presented to the MS user at the 
earliest opportunity? (Note 2) 






1 


P 


3d1 


IF pc_EMM_lnformation AND 
pc_UniversalAndLocalTimeZoneTHEN 
Check: Does the UE assume that this time 
zones applies to the tracking area of the 
current cell and is presented to the MS user at 
the earliest opportunity? (Note 2) 






1 


P 


Note 1 : AT command +COPS is assumed to be used for check. 
Note 2: AT command +CCLK is assumed to be used for cliecl<. 



9.1 .5.1 .3.3 Specific message contents 

Table 9.1.5.1.3.3-1 : ElVIIVI INFORMATION (step 1, Table 9.1.5.1 .3.2-1) 



Derivation Path: 36.508 table 4.7.2-13 


Information Element 


Value/Remark 


Comment 


Condition 


Full name for network 


"FullNamel 234567890" 


Note 




Short name for network 


"ShortName123" 


Note 




Local time zone 


"GMT-i-1" 


Note 




Universal time and local time zone 


"2010 12 April 13:38 52s 
GMT+1" 


Note 




Network daylight saving time 


"-I-1 hour adjustment for 
Daylight Saving Time" 


Note 




Note: Hardcoded values have been chosen to allow for consistent/comparable SS behaviour. 
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Table 9.1.5.1.3.3-2: Message EMM STATUS (step 2, Table 9.1.5.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-14 


Information Element 


Value/Remark 


Comment 


Condition 


ElVIIVI cause 


'0110 0001 'B 


IVIessage type 
non-existent or 
not implemented 





9.1.5.2 

9.1.5.2.1 
(1) 



EMM information procedure not supported by the UE 
Test Purpose (IP) 



with { UE in EMM-REGISTERED state } 
ensure that { 

when { UE receives an EMM Information message } 

then { UE ignore the contents of the message and return an EMM STATUS message with cause #97 
"message type non-existent or not implemented" } 



9.1.5.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.4.5.3. 

[TS 24.301, clause 5.4.5.3] 

If the UE does not support the EMM information message the UE shall ignore the contents of the message and return an 
EMM STATUS message with cause #97 "message type non-existent or not implemented". 



Test description 
Pre-test conditions 



9.1.5.2.3 
9.1.5.2.3.1 
System Simulator: 

- Cell A 
UE: 

None 
Preamble: 

UE is in state Generic RB established (state 3) on Cell A according to [18]. 
9.1 .5.2.3.2 Test procedure sequence 

Table 9.1.5.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SB transmits an EMM INFORMATION 
message. 


<- 


EMM INFORMATION 


- 


- 


2 


Check: Does the UE transmit an EMM 
STATUS message with cause #97 "message 
type non-existent or not implemented". 


~> 


EMM STATUS 


1 


P 
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9.1 .5.2.3.3 Specific message contents 

Table 9.1.5.2.3.3-1: EMM INFORMATION (step 1, Table 9.1.5.2.3.2-1) 



Derivation Path: 36.508 table 4.7.2-13 


Information Element 


Value/remark 


Comment 


Condition 


Full name for network 


Not present 






Short name for network 


Not present 






Local time zone 


Not present 






Universal time and local time zone 


Not present 






Network daylight saving time 


'OO'B 


No adjustment for 
Daylight Saving 
Time 





Table 9.1.5.2.3.3-2: Message EMM STATUS (step 2, Table 9.1.5.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-14 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


'0110 0001 'B 


Message type 
non-existent or 
not implemented 





9.2 EMM specific procedures 

9.2.1 Attach procedure 
9.2.1 .1 Attach procedure for EPS services 

9.2.1 .1 .1 Attach Procedure / Success / Valid GUTI 



9.2.1.1.1.1 



(1) 



Test Purpose (IP) 



with { the UE is switched-off with a valid USIM inserted and the USIM contains a valid GUTI and last 
visited registered TAI } 
ensure that { 

when { UE is powered on in a cell not belonging to the last visited registered TAI and in a 
different PLMN } 

then { the UE establishes the RRC connection without S-TMSI, with registeredMME and with the RRC 
establishmentCause set to 'mo-Signalling' } 
} 

(2) 

with { UE is switched-off with a valid USIM inserted and the USIM contains a valid GUTI and last 
visited registered TAI } 
ensure that { 

when { UE is powered on in a cell not belonging to the last visited registered TAI } 

then { the UE transmits an ATTACH REQUEST message with the EPS attach type set to "EPS attach", 
including the GUTI and last visited registered TAI copied from the USIM, and, a PDN CONNECTIVITY 
REQUEST message with the request type set to "initial request" and not including APN } 
} 

(3) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH ACCEPT message with EPS attach result matching the requested 
service (s), the TAI list the UE is registered to and including an ACTIVATE DEFAULT EPS CONTEXT 
BEARER message with IE EPS Bearer Identity for the default EPS bearer context activated for the UE } 

then { UE accepts the allocated GUTI, deletes the old TAI list and transmits an ATTACH COMPLETE 
message, together with ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT message and enters EMM-REGISTERED 
state } 
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9.2.1 .1 .1 .2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clauses 5.3.1.1, 
5.5.1.2.1, 5.5.1.2.2, 5.5.1.2.4, 6.2.2, 6.4.1.3, 6.5.1.2 and Annex D, and TS 36.331, clauses 5.3.3.3 and 5.3.3.4. 

[TS 24.301, clause 5.3.1.1] 

When the UE is in EMM-IDLE mode and needs to transmit an initial NAS message, the UE shall request the lower 
layer to establish a RRC connection. In this request to the lower layer the NAS shall provide to the lower layer the RRC 
establishment cause and the call type as specified in annex D of this specification. 



For the routing of the initial NAS message to the appropriate MME, the UE NAS provides the lower layers with either 
the S-TMSI or the registered globally unique MME identifier (GUMMEI) that consists of the PLMN ID, the MME 
group ID, and the MME code (see 3GPP TS 23.003 [2]) according to the following rules: 

When the UE is registered in the tracking area of the current cell during the NAS signalling connection 
establishment, the UE NAS shall provide the lower layers with the S-TMSI, but shall not provide the registered 
MME identifier to the lower layers. Exceptionally, when the UE in EMM-IDLE mode initiates a tracking area 
updating or combined tracking area updating procedure for load balancing purposes, the UE NAS shall provide 
the lower layers with neither S-TMSI nor registered MME identifier. 

When the UE is not registered in the tracking area of the current cell during the NAS signalling connection 
establishment, the UE NAS does not provide the lower layers with the S-TMSI. Instead, 

a) if the TIN indicates "GUTI" or "RAT-related TMSI", or the TIN is not available, and the UE holds a valid 
GUTI, the UE NAS shall provide the lower layers with the MME identifier part of the valid GUTI; or 

b) if the TIN indicates "P-TMSI" and the UE holds a vaUd P-TMSI and RAI, the UE NAS shall provide the lower 
layers with the MME identifier part of the mapped GUTI, which is generated from the P-TMSI and RAI. 

[TS 24.301, clause 5.5.1.1] 

The attach procedure is used to attach to an EPC for packet services in EPS. 

The attach procedure is used for two purposes: 

by a UE in PS mode of operation to attach for EPS services only; or 

by a UE in CS/PS mode 1 or CS/PS mode 2 of operation to attach for both EPS and non-EPS services. 

With a successful attach procedure, a context is established for the UE in the MME, and a default bearer is established 
between the UE and the PDN GW, thus enabling always-on IP connectivity to the UE. The network may also initiate 
the activation of dedicated bearers as part of the attach procedure. 



[TS 24.301, clause 5.5.1.2.1] 

This procedure is used by a UE to attach for EPS services only. When the UE initiates the EPS attach procedure, the UE 
shall indicate "EPS attach" in the EPS attach type IE. 

[TS 24.301, clause 5.5.1.2.2] 

In state EMM-DEREGISTERED, the UE initiates the attach procedure by sending an ATTACH REQUEST message to 
the MME, starting timer T3410 and entering state EMM-REGISTERED-INITIATED (see example in 
figure 5.5. 1 .2.2. 1). If timer T3402 is currently running, the UE shall stop timer T3402. If timer T341 1 is currently 
running, the UE shall stop timer T341 1. 

If the UE supports neither A/Gb mode nor lu mode, the UE shall handle the Old GUTI or IMSI IE in the ATTACH 
REQUEST message as follows: 

The UE shall include in the ATTACH REQUEST message a valid GUTI together with the last visited registered 
TAI, if available. If there is no valid GUTI available, the UE shall include the IMSI in the ATTACH REQUEST 

message. 
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The UE shall send the ATTACH REQUEST message together with a PDN CONNECTIVITY REQUEST message 
contained in the ESM message container information element to request PDN connectivity. 



If a valid NAS security context exists, the UE shall integrity protect the ATTACH REQUEST message combined with 
the PDN CONNECTIVITY REQUEST message. When the UE does not have a valid NAS security context, the 
ATTACH REQUEST message combined with the PDN CONNECTIVITY REQUEST message is not integrity 
protected. 



[TS 24.301, clause 5.5.1.2.4] 



If the ATTACH ACCEPT message contains a GUTI, the UE shall use this GUTI as the new temporary identity. The 
UE shall delete its old GUTI and store the new assigned GUTI. If no GUTI has been included by the MME in the 
ATTACH ACCEPT message, the old GUTI, if any available, shall be kept. 



When the UE receives the ATTACH ACCEPT message combined with the ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message, it shall forward the ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST 
message to the ESM sublayer. Upon receipt of an indication from the ESM sublayer that the default EPS bearer context 
has been activated, the UE shall send an ATTACH COMPLETE message together with an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message contained in the ESM message container information element to the 
network. 



[TS 24.301, clause 6.2.2] 

The UE shall set the PDN type IE in the PDN CONNECTIVITY REQUEST message based on its IP stack 
configuration as follows: 

a) A UE, which is IPv6 and IPv4 capable and 

has not been allocated an IP address for this APN, shall set the PDN type IE to IPv4v6. 

has been allocated an IPv4 address for this APN and received the ESM cause #52, "single address bearers 
only allowed", and is requesting an IPv6 address, shall set the PDN type IE to IPv6. 

has been allocated an IPv6 address for this APN and received the ESM cause #52, "single address bearers 
only allowed", and is requesting an IPv4 address, shall set the PDN type IE to IPv4. 

b) A UE, which is only IPv4 capable, shall set the PDN type IE to IPv4. 

c) A UE, which is only IPv6 capable, shall set the PDN type IE to IPv6. 

d) When the IP version capability of the UE is unknown in the UE (as in the case when the MT and TE are 
separated and the capability of the TE is not known in the MT), the UE shall set the PDN type IE to IPv4v6. 



[TS 24.301, clause 6.4.1.3] 

Upon receipt of the ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST message, the UE shall send an 
ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT message and enter the state BEARER CONTEXT 
ACTIVE. When the default bearer is activated as part of the attach procedure, the UE shall send the ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT message together with ATTACH COMPLETE message. When the 
default bearer is activated as the response to the stand-alone PDN CONNECTIVITY REQUEST message, the UE shall 
send the ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT message alone. 
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The UE checks the PTI in the ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST message to identify the 
UE requested PDN connectivity procedure to which the defauh bearer context activation is related (see subclause 6.5.1). 



[TS 24.301, clause 6.5.1.2] 

When the PDN CONNECTIVITY REQUEST message is sent together with an ATTACH REQUEST message, the UE 
shall not include the APN. 

NOTE: If the UE needs to provide PCO which require ciphering or provide an APN, or both, during the attach 

procedure, the ESM information transfer flag is included in the PDN CONNECTIVITY REQUEST. The 
MME then at a later stage in the PDN connectivity procedure initiates the ESM information request 
procedure in which the UE can provide the MME with PCO or APN or both. 



The UE shall set the request type to "initial request" when the UE is establishing connectivity to a PDN for the first 
time, i.e. when it is an initial attach to that PDN. The UE shall set the request type to "handover" when the connectivity 
to a PDN is established upon handover from a non-3GPP access network and the UE was connected to that PDN before 
the handover to the 3GPP access network. 



[TS 24.301, Annex D] 



Table D.1.1 : Mapping of NAS procedure to establishment cause and call type 



NAS procedure 


RRC establishment cause (according 3GPP TS 36.331 [22]) 


Call type 


Attach 


IVIO signalling (See Note 1) 


"originating signalling" 








Note 1 : For these NAS procedures initiated by UEs of access class 12, 13 or 14 in their home country, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". For this purpose the home country is 
defined as the country of the MCC part of the IIVISI, see 3GPP TS 22.01 1 [1A]. 

For these NAS procedures initiated by UE of access class 11 or 15 in their HPLMN or (if the EHPLMN list 
is not present or is empty) EHPLMN, (if the EHPLIVIN list is present) the RRC establishment cause will be 
set to "High priority access AC 1 1 - 15". 



[TS 36.331, clause 5.3.3.3 "Actions related to transmission of RRCConnectionRequest message"] 
The UE shall set the contents of RRCConnectionRequest message as follows: 
1> set the ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 
2> else 

3> draw a random value in the range .. 2'**'-l and set the ue-Identity to this value; 
NOTE 1 Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 
1> Set the establishmentCause in accordance with the information received from upper layers; 
[TS 36.331 clause 5.3.3.4] 

The UE shall: 

1> set the content of RRCConnectionSetupComplete message as follows: 
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2> set the selectedPLMN-Identity to the PLMN selected by upper layers (see TS 23.122 [11], TS 24.301 [35]) 
from the PLMN(s) included in the plmn-IdentityList in SystemlnformationBlockTypel; 

2> if upper layers provide the 'Registered MME', include and set the registeredMME as follows: 

3> if the PLMN identity of the 'Registered MME' is different from the PLMN selected by the upper layers: 

4> include the plmnldentity in the registeredMME and set it to the value of the PLMN identity in the 
'Registered MME' received from upper layers; 

3> set the mmegi and the mmec to the value received from upper layers; 



2> submit the RRCConnectionSetupComplete message to lower layers for transmission, upon which the 
procedure ends; 

9.2.1.1.1.3 Test description 

9.2.1.1.1.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

- Cell A is a cell with TAI-1 (PLMN-1 + TAC-1). 

The cell power levels are such that Cell A is guaranteed to become the serving cell 
UE: 

The UE is configured to initiate EPS attach. 

- The test USIM contains a valid GUTI (belonging to PLMN with same MCC as stored in EFjmsi on the test USIM 
card and MNC 02) and TAI-8, and EPS update status is "EUl: UPDATED". 

NOTE: GUTI and TAI specified above are same as defined for Cell H in [18] 

Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1.1.1.3.2 



Test procedure sequence 

Table 9.2.1.1.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


Checl<: Does the UE transmit an 
RRCConnectionRequest message not 
including S-TIVISI and with 
establishmentCause set to 'mo-Signalling'? 






1 


P 


3 


The SS transmits a RRCConnectionSetup 
message. 


- 


- 


- 


- 


4 


Check: does the UE transmit an 
RRCConnectionSetupComplete message 
including PLMN ID, MME group ID and IVIME 
code with ATTACH REQUEST message 
including a GUTI and a PDN CONNECTIVITY 
REQUEST message? 


-> 


ATTACH REQUEST 


2 


P 


5 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






6 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


~> 


AUTHENTICATION RESPONSE 






7 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


8 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 9a1 to 9a2 describe 
behaviour that depends on UE configuration 
the "lower case letter" identifies a step 
sequence that take place depending on the 
last sent by the UE PDN CONNECTIVITY 
REQUEST message, IE Protocol configuration 
options setting. 










9a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






9a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






10 


SS responds with ATTACH ACCEPT message 
including a valid TAI list. The ACTIVATE 
DEFAULT EPS BEARER CONTEXT 
REQUEST message is piggybacked in 
ATTACH ACCEPT message 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 1 1 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










11 


Check: does the UE transmit an ATTACH 
COMPLETE message including an ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message? 


-> 


ATTACH COMPLETE 


2 


P 


12 


Void 


- 


- 


- 


- 


13 


The SS releases the RRC connection. 


- 


- 


- 


- 


14 


Check: Does the test result of CALL generic 
procedure [18] clause 6.4.2.4 indicate that the 
UE is in E-UTRA EMM-REGISTERED state on 
Cell A? 






3 
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At the end of this test procedure sequence, the 
UE is in end state E-UTRA idle {E1) according 
to TS 36.508. 











9.2.1 .1 .1 .3.3 Specific message contents 

Table 9.2.1 .1 .1 .3.3-1 : Message RRCConnectionRequest (step 2, Table 9.2.1 .1 .1 .3.2-1) 



Derivation path: 36.508 table 4.6.1-16 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








ue-ldentity CHQICE { 








randomValue 


Not checked 






} 








establishmentCause 


mo-Signalling 






1 








1 








} 








Table 9.2.1.1.1.3.3-2: Message RRCConnectionSetupComplete (step 2, Table 9.2.1.1.1.3.2-2) 


Derivation path: 36.508 table 4.6.1-18 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionSetupComplete ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE { 








rrcConnectionSetupComplete-r8 SEQUENCE { 








registeredlVIME { 








pimn-ldentity 


PLMN ID(MCC as stored 
in EFiMsi on the test 
USIM card and MNC 02) 






mmegi 


0000000000001000 


Bit is LSB 




mmec 


00000001 


Bit is LSB 




} 








1 








1 








} 
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Table 9.2.1.1.1.3.3-3: Message ATTACH REQUEST (step 4, Table 9.2.1.1.1.3.2-1) 



Derivation path: TS 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IIVISI 


GUTI(belonging to PLIVIN 
with same MCC as 
stored in EFimsi on the 
test USIIVI card and MNC 
02) 


GUTI copied from 

USIM 

Old and valid 

GUTI is included 

bytheUE 




ESM message container 


PDN CONNECTIVITY 
REQUEST message as 
specified in table 
9.2.1.1.1.3.3-3. 






Last visited registered TAI 


TAIS 


GUTI copied from 
USIM 

If available, the 
last TAI is 
included by UE 
and will be used 
to establish a 
good list of TAIs 
in subsequent 
ATTACH 
ACCEPT 
message. 





Table 9.2.1.1.1.3.3-4: Void 



Table 9.2.1 .1 .1 .3.3-5: Message ATTACH ACCEPT (step 10, Table 9.2.1 .1 .1 .3.2-1) 



Derivation path: TS 36.508 table 4.7.2-1 


Information Element 


Value/Remaric 


Comment 


Condition 


ESM message container 


Contains the ACTIVATE 
DEFAULT EPS BEARER 
CONTEXT REOUEST 
message specified in 
table 9.2.1.1.1.3.3-6. 







Table 9.2.1.1.1.3.3-6: Void 



Table 9.2.1.1.1.3.3-7: Message ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT (step 11, Table 

9.2.1.1.1.3.2-1) 



Derivation path: TS 36.508 table 4.7.3-4 


Information Element 


Value/Remarl< 


Comment 


Condition 


EPS bearer identity 


Default EBId 


Same value as in 

ACTIVATE 

DEFAULT EPS 

BEARER 

CONTEXT 

REOUEST 




Procedure transaction identity 


PTI-0 


Same value as in 
PDN 

CONNECTIVITY 
REOUEST 
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9.2.1 .1 .1a Attach Procedure / Success / Last visited TAI, TAI list and equivalent PLMN list 

handling 

9.2.1 .l.la.1 Test Purpose (TP) 

(1) 

with { UE attached to the network with a valid USIM inserted and a valid GUTI } 
ensure that { 

when { UE is powered off and then powered on } 

then { the UE transmits an ATTACH REQUEST message with the EPS attach type set to "initial EPS 
attach", including GUTI and last visited registered TAI and a PDN CONNECTIVITY REQUEST message with 
the request type set to "initial attach" and not including APN } 
} 

(2) 

with { UE having a valid NAS security context and the UE switched-off } 
ensure that { 

when { UE is powered on} 

then { the UE transmits an integrity protected ATTACH REQUEST message combined with the PDN 
CONNECTIVITY REQUEST message} 

} 

(3) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH ACCEPT message with EPS attach result matching the requested 
service (s) , the TAI list the UE is registered to, a set of equivalent PLMNs matching the PLMNs 
within the TAI list, and including an ACTIVATE DEFAULT EPS CONTEXT BEARER message with IE EPS Bearer 
Identity for the default EPS bearer context activated for the UE } 

then { UE deletes the old TAI list, stores the new TAI list, and does not perform a TAU while 
moving within this set of TAs } 
} 

(4) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH ACCEPT message with EPS attach result matching the requested 
service (s) , the TAI list the UE is registered to, a set of equivalent PLMNs matching the PLMNs 
within the TAI list, and including an ACTIVATE DEFAULT EPS CONTEXT BEARER message with IE EPS Bearer 
Identity for the default EPS bearer context activated for the UE } 

then { UE deletes the old TAI list, stores the new TAI list, and performs a TAU when moving out 
of this set of TAs} 



(5) 

with { UE has received a set of equivalent PLMNs in an ATTACH ACCEPT message } 
ensure that { 

when { the UE has been switched off; then switched on; and then the UE receives an ATTACH_ACCEPT 
message with a new set of equivalent PLMNs} 

then { UE deletes the old equivalent PLMN list, and uses the new equivalent PLMN list} 
} 

9.2.1 .1 .la. 2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clauses 5.3.3, 
5.5.1.2.2, 5.5.1.2.4, 6.5.1.2 and 9.9.3.33, and TS 36.304 clause 4.3. 

[TS 24.301, clause 5.3.3] 

The UE shall store a list of equivalent PLMNs. These PLMNs shall be regarded by the UE as equivalent to each other 
for PLMN selection and cell selection/re-selection. The same list is used by EMM, GMM and MM. 

The UE shall update or delete this list at the end of each attach or tracking area updating procedure. The stored list 
consists of a list of equivalent PLMNs as downloaded by the network plus the PLMN code of the registered PLMN that 
downloaded the list. When the UE is switched off, it shall keep the stored list so that it can be used for PLMN selection 
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after switch on. The UE shall delete the stored list if the USIM is removed. The maximum number of possible entries in 
the stored list is 16. 

[TS 24.301, clause 5.5.1.2.2] 

In state EMM-DEREGISTERED, the UE initiates the attach procedure by sending an ATTACH REQUEST message to 
the MME, starting timer T3410 and entering state EMM-REGISTERED-INITIATED (see figure 5.5.1.2.2.1). 



The UE shall include in the ATTACH REQUEST message a valid GUTI together with the last visited registered TAI, if 
available. If there is no valid GUTI available, the UE shall include the IMSI in the ATTACH REQUEST message. 

The UE shall send the ATTACH REQUEST message together with a PDN CONNECTIVITY REQUEST message to 
request PDN connectivity to the default PDN (see subclause 6.5.1). 



If a valid NAS security context exists, the UE shall integrity protect the ATTACH REQUEST message combined with 
the PDN CONNECTIVITY REQUEST message. 

...[TS 24.301, clause 5.5.1.2.4] 



The MME shall assign and include the TAI Ust the UE is registered to in the ATTACH ACCEPT message. The UE, 
upon receiving an ATTACH ACCEPT message, shall delete its old TAI list and store the received TAI list. 



If the ATTACH ACCEPT message contains a GUTI, the UE shall use this GUTI as the new temporary identity and set 
its TIN to "GUTI". The UE shall delete its old GUTI and store the new assigned GUTI. If no GUTI has been included 
by the MME in the ATTACH ACCEPT message, the old GUTI, if any available, shall be kept. 



The MME may also include a list of equivalent PLMNs in the ATTACH ACCEPT message. Each entry in the list 
contains a PLMN code (MCCh-MNC). The UE shall store the list as provided by the network, after having removed 
from the list any PLMN code that is already in the list of forbidden PLMNs. In addition, the UE shall add to the stored 
list the PLMN code of the registered PLMN that sent the list. The UE shall replace the stored list on each receipt of the 
ATTACH ACCEPT message. If the ATTACH ACCEPT message does not contain a list, then the UE shall delete the 
stored list. 



[TS 24.301, clause 5.5.3.2.2, "Normal and periodic tracking area updating procedure initiation"] 

The UE in state EMM-REGISTERED shall initiate the tracking area updating procedure by sending a TRACKING 
AREA UPDATE REQUEST message to the MME, 

a) when the UE detects entering a tracking area that is not in the list of tracking areas that the UE previously 
registered in the MME; 



[TS 24.301, clause 6.5.1.2, "UE requested PDN connectivity procedure initiation"] 

In order to request connectivity to the default PDN, the UE shall not include any APN in the PDN CONNECTIVITY 
REQUEST message. 



[TS 24.301, clause 9.9.3.33, "Tracking area identity list"] 
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The Tracking area identity list is a type 4 information element, with a minimum length of 8 octets and a maximum 
length of 98 octets. The list can contain a maximum of 16 different tracking area identities. 



The value part of the Tracking area identity list information element consists of one or several partial tracking area 
identity lists. The length of each partial tracking area identity list can be determined from the 'type of list' field and the 
'number of elements' field in the first octet of the partial tracking area identity list. 



Partial tracking area identity list: 

Type of list (octet 1 ) 

Bits 

76 

list of TACs belonging to one PLMN, with non-consecutive TAG values 

1 list of TACs belonging to one PLMN, with consecutive TAG values 

1 list of TAIs belonging to different PLIVINs 



For type of list = "001 " and number of elements = k: 

octet 2 to 4 contain the IVIGG+MNG, and 

octet 5 and 6 contain the TAG of the first TAI belonging to the partial list. 

The TAG values of the other k-1 TAIs are TAG+1 , TAG+2, ..., TAG+k-1 . 



The MNC shall consist of 2 or 3 digits. 



[TS 36.304, clause 4.3] 



suitable cell: 



A "suitable cell" is a cell on which the UE may camp on to obtain normal service. Such a cell shall fulfil all the 
following requirements. 

The cell is part of either: 

the selected PLMN, or: 

the registered PLMN, or: 

a PLMN of the Equivalent PLMN list 

according to the latest information provided by NAS: 



9.2.1.1.1a.3 
9.2.1.1.1a.3.1 
System Simulator: 



Test description 
Pre-test conditions 



NOTE: while this test describes the uses of 8 cells, it is intended that this test only requires 2 cells to be active at 
any one instant. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1000 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 9.2.1 .1 .1 a-1 : Cell TAI values 



Cell 


MCC 


MNC 


TAC (hex) 


Remark 


Freq 


Remark 


A 


001 


01 


0000 


2 digit MNC 


f1 


HPLMN 


1 


310 


102 


0000 


3 digit MNC 


f3 


See Note 1 


B 


001 


01 


0001 




f1 


HPLMN 


C 


001 


01 


0027 




f1 


HPLMN 


G 


004 


07 


fffO 




f2 


See Note 2 


H 


004 


07 


fff9 




f2 


See Note 2 


K 


316 


002 


0003 


3 digit MNC 


f3 


See Note 1 


E 


004 


02 


0003 




f2 


See Note 2 


Note 1 : Cell 1 and Cell K do not co-exist; the same frequency f3 is used. 

Note 2: Cell E and Cells G and H do not co-exist; the same frequency f2 is used. 



With the exception of the Physical Cell Identity, all other parameters for these cells are the same as defined for 
cell 1 in TS 36.508 [18] 

The power level of Cell A is the Serving Cell level defined in table 6.2.2.1-1 of TS 36.508 [18]. 

The power levels of Cells B to K are set to the Non-suitable "Off level defined in table 6.2.2.1-1 of TS 36.508 
[18]. 

Table 9.2.1.1.1a-2: Time instances of cell power level and parameter changes 





Parameter 


Unit 


Cell A 


Celll 


CellB 


CellC 


CellG 


CellH 


CellK 


CellE 


TO 


Cell-specific 
RS EPRE 


dBm/ 
15kHz 


[-85] 


Off 


Off 


Off 


Off 


Off 


Off 


Off 


T1 


Cell-specific 
RS EPRE 


dBm/ 
15kHz 


[-97] 


[-85] 


Off 


Off 


Off 


Off 


Off 


Off 


T2 


Cell-specific 
RS EPRE 


dBm/ 
15kHz 


Off 


Off 


[-85] 


Off 


Off 


Off 


Off 


Off 


T3 

(N=3) 


Cell-specific 
RS EPRE 


dBm/ 
15kHz 


Off 


Off 


[-97] 


[-85] 


Off 


Off 


Off 


Off 


T3 
(N=4) 


Cell-specific 
RS EPRE 


dBm/ 
15kHz 


Off 


Off 


Off 


[-97] 


[-85] 


Off 


Off 


Off 


T3 
(N=5) 


Cell-specific 
RS EPRE 


dBm/ 
15kHz 


Off 


Off 


Off 


Off 


[-97] 


[-85] 


Off 


Off 


T3 
(N=6) 


Cell-specific 
RS EPRE 


dBm/ 
15kHz 


Off 


Off 


Off 


Off 


Off 


[-97] 


[-85] 


Off 


T3 
(N=7) 


Cell-specific 
RS EPRE 


dBm/ 
15kHz 


Off 


Off 


Off 


Off 


Off 


Off 


[-97] 


[-85] 


T4 


Cell-specific 
RS EPRE 


dBm/ 
15kHz 


Off 


[-85] 


Off 


Off 


Off 


Off 


Off 


[-97] 


T5 


Cell-specific 
RS EPRE 


dBm/ 
15kHz 


[-85] 


Off 


Off 


Off 


Off 


Off 


Off 


[-97] 



UE: 

- The test USIM contains a valid GUTll and TAIl, and EPS update status is "EUl: UPDATED". 
Preamble: 

- The UE is in state Switched OFF (state 1) according to TS 36.508, [18]. 
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9.2.1.1.1a.3.2 Test procedure sequence 

Table 9.2. 1.1.1a.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message on cell A including a PDN 
CONNECTIVITY REQUEST message 


~> 


ATTACH REQUEST 






3 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<~ 


AUTHENTICATION REQUEST 






4 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






5 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


6 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 7a1 to 7a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










7a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






7a2 


The UE transmits the ESM INFORMATION 
REQUEST message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






8 


SS responds with ATTACH ACCEPT message 
including a valid TAI list containing the TAIs of 
Cell A and Cell 1; with PLMN ID of Cell A 
included in the GUTI; and with the PLMN ID of 
Cell 1 included in the Equivalent PLMNs IE. 
The ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<~ 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 9 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










9 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 






10 


Void 


- 


- 


- 


- 


11 


The SS releases the RRC connection. 


- 


- 


- 


- 


12 


The signal strength of Cell 1 is raised to that of 
the Serving Cell and that of Cell A is lowered 
to that of a Suitable Neighbour Cell as defined 
in table 6.2.2.1-1 of TS 36.508 [18]. 

Note: Cell A is still suitable but the UE shall 
select Cell 1 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


13 


Wait [10] seconds for mobile to camp on Cell 1 










14 


The UE is switched off 
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15 


Check: does the UE send DETACH? 


— > 


DETACH REQUEST 


3 


P 


16 


Cells A and 1 are set to the Non-suitable "Off" 
level and Cell B is set to the Serving Cell level. 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


17 


The UE is switched on 










18 


Check: does the UE send an integrity 
protected ATTACH REQUEST message 
(including a PDN CONNECTIVITY REOUEST 
message) with the last visited TAI correctly 
indicating the TAI of cell 1; the GUTI allocated 
in step 8 and the KSIasme allocated in step 3? 


-> 


ATTACH REQUEST 


1,2 


P 


18 
A 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


18 
B 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 18a1 to 18a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










18a 
1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REOUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






18a 
2 


The UE transmits the ESM INFORMATION 
REQUEST message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






19 


The SS sends an ATTACH ACCEPT message 
allocating 16 TAIs and an aligned set of 
equivalent PLMNs. The ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message is piggybacked in ATTACH ACCEPT 
message. 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 20 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










20 


The UE sends ATTACH COMPLETE including 
an ACTIVATE DEFAULT EPS BEARER 
CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 






21 


Void 


- 


- 






22 


The SS releases the RRC connection. 


- 


- 


- 


- 


23 


The SS waits [5] seconds 


- 


- 


- 


- 




EXCEPTION steps 24 to 26 are repeated for N 
= 3 to N = 7 with cells B,C,G,H,K,N according 
to T3 in table 9.2.1. 1.1a-2. 










24 


Cell power levels are set according to T3 and 
the value of N. 










25 


Check: does the UE transmit a TRACKING 
AREA UPDATE REQUEST message in the 
next 15 seconds? 


~> 


TRACKING AREA UPDATE 
REQUEST 


3 


F 


26 


Using the procedure of clause 6.4.2.2 of TS 

36.508 [18], 

Check: does the UE camp on the strongest cell 

? 






3 


P 


27 


Cell K is is set to the Non-suitable "Off" level. 
The signal strength of Cell E is lowered to that 
of a Suitable Neighbour Cell and that of Cell 1 
is raised to the Serving Cell level. 
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Note: the new list of equivalent PLIVINs 
allocated in step 19 means that list of 
equivalent PLMNs allocated in step 8 should 
have been deleted. Hence the PLMN of Cell 1 
shall not be selected by a cell reselection 
process, and the UE shall remain camped on 
Cell E. 










28 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message on cell 1 
in the next 15 seconds? 


-> 


TRACKING AREA UPDATE 
REQUEST 


5 


F 


29 


Using the procedure of clause 6.4.2.2 of TS 
36.508 [18], page the UE on Cells E and 1. 

Check: Does the UE camp on cell E and not 
on Cell 1? 






5 


P 


30 


Cell 1 is set to the Non-suitable "Off" level. The 
signal strength of Cell A is raised to the 
Serving Cell level such that the UE shall select 
Cell A. 










31 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message on cell A 
with the last visted TAI set to the TAI of cell E; 
the GUTI allocated in step 8 and the KSIasme 
allocated in step 3? 


~> 


TRACKING AREA UPDATE 
REQUEST 


4 


P 



9.2.1.1.1a.3.3 Specific message contents 

Table 9.2.1. 1.1a.3.3-1: Message ATTACH ACCEPT (step 8, Table 9.2.1 .1.1a.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


TAI list 




List of 2 TAIs 




Length of tracking area identity list contents 


11 


The value in the 
length field 




Number of elements 


2 






Type of list 


010 


More than one 
PLMN 




Partial tracking area identity list 


First TAI = TAI of Cell 1; 
Second TAI = TAI of Cell 
A 






GUTI 


MCC=001, MNC=01, 
MMEGI = 1, MMEC=1, 
IVl-TMSI arbitrarily 
allocated but compliant to 
rules of TS 23.003 sub 
clause 2.8 


Includes PLMN ID 
of cell A 




Equivalent PLMNs 


MCC=310, MNC=102 


PLMN ID of cell 1 





Table 9.2.1. 1.1a.3.3-2: Message ATTACH REQUEST (step 18, Table 9.2.1.1. 1a.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Sent in SECURITY PROTECTED NAS IMESSAGE 
with valid integrity check 








Old GUTI or IMSI 


GUTI allocated in step 8 






NAS key set identifier 


KSI allocated in step 3 






Last visited registered TAI 


TAI of cell 2 
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Table9.2.1.1.1a.3.3-3:MessageATTACH ACCEPT (Step 19, Table 9.2.1.1.13.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


TAI list 




Contains 3 
separate partial 
tracking area ID 
lists 




Length of tracking area Identity list contents 


32 


The decimal value 
of the value in the 
length field 




Type of first partial tracking area identity list 


010 


More than one 
PLMN 




Number of elements 


00010 


3 elements 




First TAI 


MCC = 004, 
MNC = 02, 
TAC = 0003 






Second TAI 


MCC = 005, 
MNC = 002, 
TAC = 0003 






Third TAI 


MCC = 004, 
MNC = 03, 
TAC = 0003 






Type of second partial tracking area identity list 


001 


Consecutive 
TACs on same 
PLMN 




Number of consecutive TACS 


01001 


10 elements 




TAI 


MCC = 004 
MNC = 07 
TAC = fffO 


TAI with lowest 
numbered TAC 




Type of third partial tracking area identity list 


000 


Individual TACs 
on same PLMN 




Number of elements 


00010 


3 




MCC 


MCC = 001 






MNC 


MNC = 01 






First TAC 


TAC = 0001 






Second TAC 


TAC = 0002 






Third TAC 


TAC = 0027 






GUTI 


MCC=001, MNC = 01, 
MMEGI = 64000, 
MMEC= 127, M-TMSI 
arbitrarily allocated but 
compliant to rules of 
TS 23.003 sub clause 2.8 


Includes PLMN ID 
of cell B. 




Equivalent PLMNs 


MCC=004, MNC=02; 
MCC=004, MNC=03; 
MCC=004, MNC=07; 
MCC=316, MNC=002; 


4 equivalent 
PLMNs 





Table 9.2.1. 1.1a.3.3-4: Message TRACKING AREA UPDATE REQUEST (step 37, Table 9.2.1. 1.1a.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 


GUTI allocated instep 19 






NAS key set identifier asme 


Same as allocated in 
step 3 






Last visited registered TAI 


TAI of cell 8 







9.2.1 .1 .2 Attach Procedure / Success / With IMSI / GUTI reallocation 

9.2.1 .1 .2.1 Test Purpose (TP) 

(1) 

with { UE in EMM-DEREGISTERED state } 
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ensure that { 

when { there is no valid GUTI available in UE } 
then { UE sends ATTACH REQUEST message, containing IMSI as the EPS mobile identity } 
} 

(2) 

with { UE having received reallocated GUTI in the ATTACH ACCEPT message } 
ensure that { 

when { UE detaches from the EPS services } 
then { UE sends DETACH REQUEST message, containing GUTI as the EPS mobile identity } 
} 

9.2.1 .1 .2.2 Conformance requirements 

References: The conformance requirements covered in tlie current TC are specified in: TS 24.301, clause 5.5.1.2. 

[TS 24.301, clause 5.5.1.2.2] 

In state EMM-DEREGISTERED, the UE initiates the attach procedure by sending an ATTACH REQUEST message to 
the MME, starting timer T3410 and entering state EMM-REGISTERED-INITIATED (see example in figure 
5.5.1 .2.2.1). If timer T3402 is currently running, the UE shall stop timer T3402. If timer T341 1 is currently running, the 
UE shall stop timer T341 1. 

If the UE supports neither A/Gb mode nor lu mode, the UE shall handle the Old GUTI or IMSI IE in the ATTACH 
REQUEST message as follows: 

The UE shall include in the ATTACH REQUEST message a valid GUTI together with the last visited registered 
TAI, if available. If there is no vaUd GUTI available, the UE shall include the IMSI in the ATTACH REQUEST 

message. 

[TS 24.301, clause 5.5.1.2.4] 

If the attach request is accepted by the network, the MME shall send an ATTACH ACCEPT message to the UE and 
start timer T3450. The MME shall send the ATTACH ACCEPT message together with anACTlVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message contained in the ESM message container information element to activate the 
default bearer (see subclause 6.4.1). The network may also initiate the activation of dedicated bearers towards the UE 
by invoking the dedicated EPS bearer context activation procedure (see subclause 6.4.2). 



The MME shall assign and include the TAI list the UE is registered to in the ATTACH ACCEPT message. The UE, 
upon receiving an ATTACH ACCEPT message, shall delete its old TAI list and store the received TAI list. 

Upon receiving the ATTACH ACCEPT message, the UE shall stop timer T3410. 

The GUTI reallocation may be part of the attach procedure. When the ATTACH REQUEST message includes the 
IMSI, the MME considers the GUTI provided by the UE is invalid, or the GUTI provided by the UE was assigned by 
another MME, the MME shall allocate a new GUTI to the UE. The MME shall include in the ATTACH ACCEPT 
message the new assigned GUTI together with the assigned TAI list. In this case the MME shall enter state EMM- 
COMMON-PROCEDURE-INITIATED as described in subclause 5.4.1. 

For a shared network, the TAIs included in the TAI list can contain different PLMN identities. The MME indicates the 
selected core network operator PLMN identity to the UE in the GUTI (see 3GPP TS 23.251).If the ATTACH ACCEPT 
message contains a GUTI, the UE shall use this GUTI as the new temporary identity. The UE shall delete its old GUTI 
and store the new assigned GUTI. If no GUTI has been included by the MME in the ATTACH ACCEPT message, the 
old GUTI, if any available, shall be kept. 

If A/Gb mode or lu mode is supported in the UE, the UE shall set its TIN to "GUTI" when receiving the ATTACH 
ACCEPT message. 

9.2.1.1.2.3 Test description 

9.2.1.1.2.3.1 Pre-test conditions 

System Simulator: 

- Cell A (HPLMN) 
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UE: 



The UE is configured to initiate EPS attach. 



Preamble: 

- The UE is in state Registered, Idle Mode (State 2) according to [18]. 
9.2.1 .1 .2.3.2 Test procedure sequence 

Table 9.2.1.1.2.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits Paging on cell A with IMSI. 
Upon reception of paging with IIVISI the UE 
shall locally deactivate any EPS bearer 
context{s), locally detach from EPS and delete 
the GUTI-1 . After local detach the UE shall 
perform an EPS attach procedure. 










2 


Check; Does the UE transmit an ATTACH 
REQUEST message including IMSI in the EPS 
mobile identity IE including a PDN 
CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


1 


P 


3 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






4 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






5 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


6 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 6Aa1 to 6Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










6A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






6A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






7 


SS responds with ATTACH ACCEPT message 
with a new GUTI-2 included in the EPS mobile 
identity IE. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message. 


<~ 


ATTACH ACCEPT 






8 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 


-> 


ATTACH COMPLETE 






9 


Cause UE to detach from the EPS services 


- 


- 


- 


- 


10 


Check: Does the UE transmit a DETACH 
REQUEST message including GUTI-2 in the 
EPS mobile identity IE? 


~> 


DETACH REQUEST 


2 


P 


11 


SS responds with DETACH ACCEPT message 


<- 


DETACH ACCEPT 


- 


- 
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9.2.1 .1 .2.3.3 Specific message contents 

Table 9.2.1.1.2.3.3-1: ATTACH REQUEST (step 2, Table 9.2.1.1.2.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


Old GUTI or IMS! 


IMS! 






Last visited registered TAI 


Not present 







Table 9.2.1.1.2.3.3-2: DETACH REQUEST (step 10, Table 9.2.1.1.2.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-1 1 


Information Element 


Value/remark 


Comment 


Condition 


GUTI or IMS! 


GUTI-2 







9.2.1.1.4 



9.2.1.1.4.1 



Attach Procedure / Success / Request for obtaining the IPv4 address of the home 
agent 

Test Purpose (TP) 



(1) 

with { UE and is configured to request the DSMIPvS IPv4 Home Agent Address } 
ensure that { 

when { UE is switched on and has established the RRC connection } 
then { the UE transmits a ATTACH REQUEST and a PDN CONNECTIVITY REQUEST message indicating a 
request for DSMIPv6 IPv4 Home Agent Address in the protocol configuration options } 
} 

(2) 

with { UE and is configured to request the DSMIPvS IPv4 Home Agent Address, and has indicated in the 
PDN CONNECTIVITY REQUEST a request for DSMIPv6 IPv4 Home Agent Address } 
ensure that { 

when { the SS responds to the ATTACH REQUEST with a DSMIPv6 IPv4 Home Agent Address } 
then { the UE transmits an ATTACH COMPLETE message } 



9.2.1.1.4.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 24.301, clauses 5.5.1.1, and 
6.5.1.2, and TS 24.008, clause 10.5.6.3. 

[24.301 clause 5.5.1.1] 

During the attach procedure, the UE may also obtain the home agent IPv4 and IPv6 addresses. 

[24.301 clause 6.5.1.2] 

If the UE supports DSMIPv6, the UE may include a request for obtaining the IPv6 address and optionally the IPv4 
address of the home agent in the Protocol configuration options IE in the PDN CONNECTIVITY REQUEST message. 
The UE may also include a request for obtaining the IPv6 Home Network Prefix. The UE shall request the IPv6 Home 
Network Prefix only if the UE has requested the home agent IPv6 address. The requested home agent address(es) and 
the Home Network Prefix are related to the APN the UE requested connectivity for. 

[24.008 clause 10.5.6.3] 
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Table 1 0.5.1 54/3GPP TS 24.008: Protocol configuration options information element 



Additional parameters list (octets w+1 to z) 

The additional parameters list\s included when special parameters and/or requests 
(associated with a PDP context) need to be transferred between the IVIS and the 
network. These parameters and/or requests are not related to a specific 
configuration protocol (e.g. PPP), and therefore are not encoded as the "Packets" 
contained in the configuration protocoi options iist 

The additional parameters //sf contains a list of special parameters, each one in a 
separate container. The type of the parameter carried in a container is identified by 
a specific container identifier In this version of the protocol, the following container 
identifiers are specified: 

MS to network direction: 

- 0001 H (P-CSCF Address Request); 

- 0002H (IM CN Subsystem Signaling Flag); 

- 0003H (DNS Server Address Request); 

- 0004H (Not Supported); 

- 0005H (MS Support of Network Requested Bearer Control indicator); 

- 0006H (Reserved); 

- 0007H (DSMIPv6 Home Agent Address Request; 

- 0008H (DSMIPv6 Home Network Prefix Request); 

- 0009H (DSMIPv6 IPv4 Home Agent Address Request); 

- OOOAH (IP address allocation via NAS signalling); and 

- OOOBH (IPv4 address allocation via DHCPv4). 
Network to MS direction: 

- 0001 H (P-CSCF Address); 

- 0002H (IM CN Subsystem Signaling Flag); 

- 0003H (DNS Server Address); 

- 0004H (Policy Control rejection code); 

- 0005H (Selected Bearer Control Mode; 

- 0006H (Reserved); 

- 0007H (DSMIPv6 Home Agent Address) ; 

- 0008H (DSMIPv6 Home Network Prefix); and 

- 0009H (DSMIPv6 IPv4 Home Agent Address). 

If the additional parameters //sf contains a container identifier that is not supported 
by the receiving entity the corresponding unit shall be discarded. 

The container identifier f\e\6 is encoded as the protocoi identifier Y\e\6 and the lengtli 
of container identifier contents field is encoded as the iengtti of the protocol identifier 
contents f\e\6. 

When the container identifier \n6\cates P-CSCF Address Request or DNS Server 
Address Request, the container identifier contents field is empty and the iengtti of 
container identifier contents indicates a length equal to zero. If the container 
identifier contents i\e\6 is not empty, it shall be ignored. 

When the container identifier \r\6\cates IM CN Subsystem Signaling Flag (see 3GPP 
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TS 24.229 [95]), the container identifier contents i\e\6 is empty and the length of 
container identifier contents indicates a length equal to zero. If the container 
identifier contents field is not empty, it shall be ignored. In Network to MS direction 
this information may be used by the MS to indicate to the user whether the 
requested dedicated signalling PDP context was successfully established. 

When the container identifier \r\6\cates P-CSCF Address, the container identifier 
contents f\e\6 contains one IPv6 address corresponding to a P-CSCF address (see 
3GPP TS 24.229 [95]). This IPv6 address is encoded as an 128-bit address 
according to RFC 3513 [99]. When there is need to include more than one P-CSCF 
address, then more logical units with container identifier indicating P-CSCF Address 
are used. 

When the container identifier \n6\cates DNS Server Address, the container identifier 
contenfs field contains one IPv6 DNS server address (see 3GPP TS 27.060 [36a]). 
This IPv6 address is encoded as an 128-bit address according to RFC 3513 [99]. 
When there is need to include more than one DNS server address, then more 
logical units with confa/ne/'/c/enf/f/e/' indicating DNS Server Address are used. 

When the container identifier \n6\ca\es Policy Control rejection code, the container 
identifier contents field contains a Go interface related cause code from the GGSN 
to the UE (see 3GPP TS 29.207 [100]). The iength of container identifier contents 
indicates a length equal to one. If the container identifier contents i\e\6 is empty or 
its actual length is greater than one octect, then it shall be ignored by the receiver. 

When the container identifier \n6\cates MS Support of Network Requested Bearer 
Control indicator, the container identifier contents tie\6 is empty and the lengtli of 
container identifier contents indicates a length equal to zero. If the container 
identifier contents i\e\6 is not empty, it shall be ignored. 

When the container identifier \n6\caies Selected Bearer Control Mode, the container 
identifier contents field contains the selected bearer control mode, where '01 H' 
indicates that 'MS only' mode has been selected and '02H' indicates that 'MS/NW' 
mode has been selected. The lengtli of container identifier contents indicates a 
length equal to one. If the container identifier contents i\e\6 is empty or its actual 
length is greater than one octect, then it shall be ignored by the receiver. 

When the container identifier \n6\caies DSMIPv6 Home Agent Address Request, the 
container identifier contents field is empty and the length of container identifier 
contents indicates a length equal to zero. If the container identifier contents field is 
not empty, it shall be ignored. 

When the container identifier \n6\caies DSMIPv6 Home Network Prefix Request, the 
container identifier contents field is empty and the length of container identifier 
contents indicates a length equal to zero. If the container identifier contents field is 
not empty, it shall be ignored. 

When the container identifier \n6\cates DSMIPv6 IPv4 Home Agent Address 
Request, the container identifier contents i\e\6 is empty and the length of container 
identifier contents \n6\cales a length equal to zero. If the container identifier contents 
field is not empty, it shall be ignored. 

When the container identifier \n6\caies DSMIPv6 Home Agent Address, the 
container identifier contents field contains one IPv6 address corresponding to a 
DSMIPV6 HA address (see 3GPP TS 24.303 [124] and 3GPP TS 24.327 [125]). 
This IPv6 address is encoded as an 128-bit address according to 
IETF RFC 3513 [99]. 

When the container identifier \n6\cates DSMIPv6 Home Network Prefix, the 
container identifier contents tie\6 contains one IPv6 Home Network Prefix (see 
3GPP TS 24.303 [124] and 3GPP TS 24.327 [125]). This IPv6 prefix is encoded as 
an IPv6 address according to RFC 3513 [99] followed by 8 bits which specifies the 
prefix length. 

When the container identifier \n6\cates DSMIPv6 IPv4 Home Agent Address, the 
container identifier contents field contains one IPv4 address corresponding to a 
DSMIPv6 IPv4 Home Agent address (see 3GPP TS 24.303 [124] and 
3GPPTS 24.327 [125]). 

When the container identifier \n6\caies IP address allocation via NAS signalling, the 
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container identifier contents field is empty and the length of container identifier 
contents indicates a lengtli equal to zero. If the container identifier contents field is 
not empty, it shall be ignored. 

When the container identifier \r\6\ca\es IP address allocation DHCPv4, the container 
identifier contents field is empty and the lengtli of container identifier contents 
indicates a length equal to zero. If the container identifier contents f\e\6 is not empty, 
it shall be ignored. 

NOTE 1 : The additional parameters //sf and the configuration protocol options list 
are logically separated since they carry different type of information. The beginning 
of the additional parameters //sf is marked by a logical unit, which has an identifier 
(i.e. the first two octets) equal to a container identifier (i.e. it is not a protocol 
identifier). 



Test description 
Pre-test conditions 



9.2.1.1.4.3 
9.2.1.1.4.3.1 
System Simulator: 

- Cell A is a E-UTRAN cell with TAI-1 (PLMN-1 + TAC-1). 

The cell power levels are such that Cell A is guaranteed to become the serving cell 
UE: 

- The test USIM contains a valid GUTI and EPS update status is "EUl : UPDATED". 

The UE is configured to request the DSMIPv6 IPv4 Home Agent Address in the protocol configuration options 
IE as part of the Attach / PDN connectivity request procedure. 

Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1.1.4.3.2 



Test procedure sequence 

Table 9.2.1.1.4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


Checl<: Does the UE transmit an 
RRCConnectionRequest message not 
including S-TIVISI and with 
establishmentCause set to 'mo-Signalling'? 










3 


The SS transmits a RRCConnectionSetup 
message. 


- 


- 


- 


- 


4 


Check: does the UE transmit an 
RRCConnectionSetupComplete message 
including a PDN CONNECTIVITY REQUEST 
message with IE PROTOCOL 
CONFIGURATION OPTIONS indicating a 
DSMIPv6 IPv4 Home Agent Address Request? 


-> 


ATTACH REQUEST 


1 


P 


5- 
13 


Steps 5 to 13 of the generic test procedure in 
TS 36.508 Table 4.5.2.3-1 (Attach procedure) 
are performed on Cell A, 










14 


SS responds with ATTACH ACCEPT message 
including a valid TAI list. The ACTIVATE 
DEFAULT EPS BEARER CONTEXT 
REOUEST message is piggybacked in 
ATTACH ACCEPT message, including the IE 
PROTOCOL CONFIGURATION OPTIONS 
indicating a DSIVIIPvB IPv4 Home Agent 
Address 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 1 1 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










15 


Check: does the UE transmit an ATTACH 
COIVIPLETE message including an ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message? 


-> 


ATTACH COMPLETE 


2 


P 



9.2.1 .1 .4.3.3 Specific message contents 

Table 9.2.1 .1 .4.3.3-1 : Message RRCConnectionRequest (step 2, Table 9.2.1 .1 .4.3.2-1) 



Derivation path: 36.508 table 4.6.1-16 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








ue-ldentity CHOICE { 








randomValue 


Not checked 






1 








establishmentCause 


mo-Signalling 






} 








} 








1 
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Table 9.2.1.1.4.3.3-2: Message ATTACH REQUEST (step 4, Table 9.2.1.1.4.3.2-1) 



Derivation path: TS 36.508 table 4.7.2.-4 


Information Element 


Value/Remark 


Comment 


Condition 


ESIVI message container 


PDN CONNECTIVITY 
REQUEST message as 
specified in table 
9.2.1.1.4.3.3-3. 







Table 9.2.1.1.4.3.3-3: PDN CONNECTIVITY REQUEST (step 4, Table 9.2.1.1.4.3.2-1) 



Derivation path: TS 36.508 table 4.7.3.-20 


Information Element 


Value/Remark 


Comment 


Condition 


Protocol configuration options 


The IE Protocol 
configuration options 
contains a configuration 
protocol option = '0009H' 
("DSMIPV6 IPv4 Home 
Agent Address Request", 
lenght of contents = 0). 







Table 9.2.1.1.4.3.3-4: Message ATTACH ACCEPT (step 11, Table 9.2.1.1.4.3.2-1) 



Derivation path: TS 36.508 table 4.7.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


ESIVI message container 


Contains the ACTIVATE 
DEFAULT EPS BEARER 
CONTEXT REOUEST 
message specified in 
table 9.2.1.1.4.3.3-5. 







Table 9.2.1.1.4.3.3-5: Message ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST (step 11, 

Table 9.2.1.1.4.3.2-1) 



Derivation path: TS 36.508 table 4.7.3-6 


Information Element 


Value/Remark 


Comment 


Condition 


Protocol configuration options 


The IE Protocol 
configuration options 
contains a configuration 
protocol option = '0009H' 
("DSMIPv6 IPv4 Home 
Agent Address", non- 
zero length), with the 
value set to TBD. 







9.2.1.1.5 



Void 



9.2.1 .1 .7 Attach Procedure / Success / List of equivalent PLMNs in the ATTACH ACCEPT 

message 

9.2.1 .1 .7.1 Test Purpose (TP) 

(1) 

with { UE in EMM-REGISTERED- INITIATED state } 
ensure that { 

when { the UE receives ATTACH ACCEPT message including a list of equivalent PLMNs } 
then { the UE stores correctly the list and does not consider forbidden PLMNs as equivalent PLMNs 
} 
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(2) 

with { UE in EMM-REGISTERED- INITIATED state } 
ensure that { 

when { the UE receives ATTACH ACCEPT message without a list of equivalent PLMNs } 
then { the UE deletes the stored list and applies a normal PLMN selection process } 
} 

9.2.1 .1 .7.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.1.2.4. 

[TS 24.301, clause 5.5.1.2.4] 

The MME may also include a list of equivalent PLMNs in the ATTACH ACCEPT message. Each entry in the list 
contains a PLMN code (MCC+MNC). The UE shall store the list as provided by the network, after having removed 
from the list any PLMN code that is already in the list of forbidden PLMNs. In addition, the UE shall add to the stored 
list the PLMN code of the registered PLMN that sent the list. The UE shall replace the stored list on each receipt of the 
ATTACH ACCEPT message. If the ATTACH ACCEPT message does not contain a list, then the UE shall delete the 
stored list. 

9.2.1.1.7.3 Test description 
9.2.1.1.7.3.1 Pre-test conditions 
System Simulator: 

- Cell A (PLMN 1), Cell G (PLMN2), Cell 1 (PLMN3) and Cell J (PLMN4) are configured according to Table 
6.3.2.2-1 in [18]. 

- Cell A (HPLMN) 

- Cell G (visited PLMN) 

- Cell I (another visited PLMN) 

Cell J (another visited PLMN, different than Cell I and switched OFF, at most 3 cells are active 
simultaneously) 

UE: 

The UE is configured to initiate EPS attach. 

- The "forbidden PLMN list" contains PLMN3 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1.1.7.3.2 



Test procedure sequence 

Table: 9.2.1.1.7.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell". 

- Cell G as a "Non-Suitable cell". 

- Cell 1 as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<~ 


AUTHENTICATION REQUEST 






5 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






6 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


7 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


~> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 7Aa1 to 7Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










7A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






7A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






8 


SS responds with ATTACH ACCEPT message 
including PLMN2, PLMN3 and PLMN4 in the 
list of equivalent PLMNs. The ACTIVATE 
DEFAULT EPS BEARER CONTEXT 
REQUEST message is piggybacked in 
ATTACH ACCEPT message. 


<— 


ATTACH ACCEPT 






9 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 






10 


The UE is switched off. 


— > 


DETACH REQUEST 


- 


- 


11 


The SS configures: 

- Cell A as the "Non-Suitable cell". 

- Cell G as a "Suitable cell". 

- Cell 1 as a "Serving cell". 

Note: Cell 1 belongs to the forbidden PLMN. 










- 


The following messages are to be observed on 
Cell G unless explicitly stated otherwise. 


- 


- 


- 


- 


12 


The UE is switched on. 


- 


- 


- 


- 


- 


EXCEPTION: The behaviour in table 

9.2.1 .1 .7.3.2-2 occurs in parallel with step 13. 










13 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


1 


P 


13 
A 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 
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13 
B 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps ISAal to 13Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










13 
Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REOUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






13 
A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 








EXCEPTION: In parallel to the event described 
in step 14 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U- 
plane if requested by the UE. 










14 


The SS transmits an ATTACH ACCEPT 
message without the Equivalent PLMNs list. 
The ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message. 


<- 


ATTACH ACCEPT 






15 


The UE transmits an ATTACH COMPLETE 
message on Cell G (PLMN2) including an 
ACTIVATE DEFAULT EPS BEARER 
CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 






15 
A 


The SS configures: 

- Cell A as a "Suitable cell". 

- Cell G as a "Non-Suitable cell". 

- Cell 1 as a "Non-suitable "Off" cell". 

- Cell J as a "Serving cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


- 


EXCEPTION: The behaviour in table 
9.2.1.1.7.3.2-3 occurs in parallel with step 15B. 










15 
B 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REOUEST message? 


-> 


TRACKING AREA UPDATE 
REOUEST 


2 


P 


15 
C 


SS responds with TRACKING AREA UPDATE 
ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


15 
D 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message 


~> 


TRACKING AREA UPDATE 
COMPLETE 






16- 

34 


Void 


- 


- 


- 


- 



Table: 9.2.1.1.7.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does the UE transmit an ATTACH 
REOUEST message on Cell 1 (PLMNS) ? 


-> 


ATTACH REOUEST 


1 


F 



Table: 9.2.1.1.7.3.2-3: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REOUEST message on Cell J 
(PLMN4)? 


-> 


TRACKING AREA UPDATE 
REOUEST 


2 


F 
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9.2.1 .1 .7.3.3 Specific message contents 

Table 9.2.1.1.7.3.3-1: Message ATTACH ACCEPT (step 8, Table 9.2.1.1.7.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


Equivalent PLMNs 




Includes MCC and 
MNC digits for 
PLMN2, PLMNS 
and PLMN4. 





Table 9.2.1.1.7.3.3-2: Message ATTACH ACCEPT (step 14, Table 9.2.1.1.7.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


Equivalent PLMNs 


Not present 







9.2.1.1.9 
9.2.1.1.9.1 
(1) 



Attach / Rejected / IMSI invalid 
Test Purpose (TP) 



with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "Illegal UE" } 

then { UE considers the USIM as invalid for EPS services and non-EPS services and enters state 
EMM-DEREGISTERED } 
} 

(2) 

with { UE receives an ATTACH REJECT message with the reject cause set to "Illegal UE" } 
ensure that { 

when { the UE has been switched off, then switched on } 

then { the UE sends an ATTACH REQUEST message with IMSI, including a PDN CONNECTIVITY REQUEST 
message } 

} 

9.2.1 .1 .9.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.1.2.5. 

[TS 24.301, clause 5.5.1.2.5] 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410 and take the following actions 
depending on the reject cause value received. 



#3 (Illegal UE); or 



The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. The UE shall consider the 
USIM as invalid for EPS services and non-EPS services until switching off or the UICC containing the USIM is 
removed. Additionally, the UE shall delete the list of equivalent PLMNs and enter state EMM- 
DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the MM parameters update 
status, TMSI, LAI and ciphering key sequence number, and the GMM parameters GMM state, GPRS update 
status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as specified in 
3GPP TS 24.008 [13] for the case when the normal attach procedure is rejected with the GMM cause with the 
same value. 
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NOTE: The possibility to configure a UE so that the radio transceiver for a specific RAT is not active, although it 
is implemented in the UE, is out of scope of the present specification. 



9.2.1.1.9.3 Test description 

9.2.1.1.9.3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell B (home PLMN, different TAs) and Cell G (another PLMN) 
The different cells may not be simultaneously activated. 

UE: 

The UE is configured to initiate EPS attach. 

- The test USIM contains IMSIl, GUTIl and TAIl, and EPS update status is "EUl: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.1.9.3.2 



Test procedure sequence 

Table 9.2.1.1.9.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell". 

- Cell B as a "Non-Suitable cell". 

- Cell G as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message on cell A. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with EMM cause = "Illegal UE" as 
specified. 


<~ 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


The SS configures: 

- Cell A as a "Non-Suitable cell". 

- Cell B as the "Serving cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 

Note: Cell B belongs to the same PLMN where 
the UE was rejected but a different TA 


-> 


ATTACH REQUEST 


1 


F 


8 


The operator initiates an attach by MMI or by 
AT command. 


- 


- 


- 


- 


9 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


~> 


ATTACH REQUEST 


1 


F 


10 


Void 


- 


- 


- 


- 


11 


Check: Does the test result of CALL generic 
procedure (TS 36.508 subclause 6.4.2.5) 
indicate that the UE ignores paging on cell B 
for PS domain with GUTI-1 ? 






1 




12 


The SS configures: 

- Cell B as a "Non-Suitable cell". 

- Cell G as the "Serving cell". 










- 


The following messages are to be observed on 
Cell G unless explicitly stated otherwise. 


- 


- 


- 


- 


13 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 

Note: Cell G belongs to a PLMN which is not 
the same like the one on which the UE was 
rejected. 


-> 


ATTACH REQUEST 


1 


F 


14 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


15 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


16 


If possible (see ICS) switch off is performed. 
Qtherwise the power is removed. 










17 


The UE is brought back to operation. 










18 


Void 


- 


- 


- 


- 


19 


Check: Does the UE transmit an ATTACH 
REQUEST message with IMSI-1 ? 


-> 


ATTACH REQUEST 


2 


P 


20 


The SS transmit an ATTACH REJECT 
message with EMM cause = "Illegal UE" as 
specified. 


<~ 


ATTACH REJECT 






21 


The SS releases the RRC connection. 


- 


- 


- 


- 




At the end of this test procedure sequence, the 
UE is in end state E-UTRA deregistered (E4) 
according to TS 36.508. 
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NOTE: At the end of the test procedure sequence, the UE should be switched off or the attach procedure should 
be successfully completed by the SS so as to leave the UE in a stable state. 

9.2.1 .1 .9.3.3 Specific message contents 

Table 9.2.1.1.9.3.3-1: Message ATTACH REJECT (steps 4 and 20, Table 9.2.1.1.9.3.2-1) 



Derivation path: 36.508 table 4.7.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


Security header type 

EMM cause 

ESM message container 


0000 

0000001 1 
Not present 


" Plain NAS 
message, not 
security protected 

#3 "Illegal UE" 





Table 9.2.1.1.9.3.3-2: Message ATTACH REQUEST (step 19, Table 9.2.1.1.9.3.2-1) 



Derivation path: TS 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMS! 


IMSI-1 






ESM message container 


PDN CONNECTIVITY 
REQUEST message to 
request PDN connectivity 
to the default PDN 






Last visited registered TAI 


Not present 






Old LAI 


Not present 






TMSI status 


Not present 







9.2.1.1.10 
9.2.1.1.10.1 
(1) 



Attach / Rejected / Illegal ME 
Test Purpose (TP) 



with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "Illegal ME" } 

then { UE considers the USIM as invalid for EPS services and non-EPS services and enters state 
EMM-DEREGISTERED } 



} 



(2) 



with { UE receives an ATTACH REJECT message with the reject cause set to "Illegal ME" } 
ensure that { 

when { the UE has been switched off, then switched on } 

then { the UE sends an ATTACH REQUEST message with IMSI, including a PDN CONNECTIVITY REQUEST 
message } 



9.2.1.1.10.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.1.2.5. 

[TS 24.301, clause 5.5.1.2.5] 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410 and take the following actions 
depending on the reject cause value received. 



#6 (Illegal ME); 
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The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAX and KSI. The UE shall consider the 
USIM as invalid for EPS services and non-EPS services until switching off or the UICC containing the USIM is 
removed. Additionally, the UE shall delete the list of equivalent PLMNs and enter state EMM- 
DEREGISTERED. 



9.2.1.1.10.3 Test description 

The test description is identical to the one of subclause 9.2.1.1.9 except that in the test procedure and in the specific 
message contents, the reject cause #3 "Illegal UE" is replaced with the reject cause #6 "Illegal ME". 

9.2.1 .1 .1 1 Attach / Rejected / EPS services and non-EPS services not allowed 

9.2.1.1.11.1 Test Purpose (TP) 

(1) 

with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "EPS services and non-EPS 
services not allowed" } 

then { UE considers the USIM as invalid for EPS services and non-EPS services and enters state 
EMM-DEREGISTERED } 
} 

(2) 

with { UE receives an ATTACH REJECT message with the reject cause set to "EPS services and non-EPS 
services not allowed" } 
ensure that { 

when { the UE has been switched off, then switched on } 

then { the UE sends an ATTACH REQUEST message with IMSI, including a PDN CONNECTIVITY REQUEST 
message } 



(3) 



with { UE receives an ATTACH REJECT message with the reject cause set to "EPS services and non-EPS 
services not allowed" } 
ensure that { 

when { the UE has been switched off, then switched on and a UMTS or GSM cell is found } 

then { the UE sends an ATTACH REQUEST message with IMSI and TMSI status indicated invalid TMSI } 



9.2.1 .1 .1 1 .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.1.2.5. 

[TS 24.301, clause 5.5.1.2.5] 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410 and take the following actions 
depending on the reject cause value received. 

#8 (EPS services and non-EPS services not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. The UE shall consider the 
USIM as invalid for EPS services and non-EPS services until switching off or the UICC containing the USIM is 
removed. Additionally, the UE shall delete the list of equivalent PLMNs and enter state EMM- 
DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the MM parameters update 
status, TMSI, LAI and ciphering key sequence number, and the GMM parameters GMM state, GPRS update 
status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as specified in 
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3GPP TS 24.008 [13] for the case when the normal attach procedure is rejected with the GMM cause with the 
same value. 



[TS 24.008, clause 4.7.3.2.4] 

The MS shall then take one of the following actions depending upon the reject cause: 
# 8 (GPRS services and non-GPRS services not allowed); 



The MS shall set the GPRS update status to GU3 ROAMING NOT ALLOWED (shall store it according to 
subclause 4.1.3.2) and shall delete any P-TMSI, P-TMSl signature, RAl and GPRS ciphering key sequence 
number. The new GMM state is GMM-DEREGISTERED. The new MM state is MM IDLE. 

The MS shall set the update status to U3 ROAMING NOT ALLOWED, shall delete any TMSl, LAI and 
ciphering key sequence number. The SIM/USIM shall be considered as invalid for GPRS and non-GPRS 
services until switching off or the SlM/USlM is removed. 

9.2.1.1.11.3 Test description 

The test description is identical to the one of subclause 9.2.1.1.9 with the following exceptions: 

9.2.1 .1 .1 1 .3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell B (home PLMN, different TAs) and Cell G (another PLMN) 

- If pc_UTRAN Cell 5 and if (NOT pc_UTRAN AND pc_GERAN) Cell 24 are configured according to Table 

4.4.4-2 in [18]. 

if pc_UTRAN, Cell 5 (only active when stated) 
- if pc_GERAN and NOT pc_UTRAN, Cell 24 (only active when stated) 
The different cells may not be simultaneously activated. 
UE: 

The UE is configured to initiate EPS attach. 

- The test USIM contains IMSll, GUTll and TAll, and EPS update status is "EUl: UPDATED". 

- If pc_GERAN or pc_UTRAN supported by UE, the test USIM contains TMSl- 1 , P-TMSl- 1 and RAl- 1 , and 
GPRS update status is "GUI: UPDATED". 

Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1 .1.11 .3.2 Test procedure sequence 

Table 9.2.1 .1 .1 1 .3.2-1 : Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell". 

- Cell B as a "Non-Suitable cell". 

- Cell G as a "Non-Suitable cell". 

IF pc_GERAN or pc_UTRAN THEN the SS 
configures Cell 24 (GERAN) or Cell 5 
(UTRAN) as "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with EMM cause = "EPS services 
and non-EPS services not allowed" as 
specified. 


<~ 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


The SS configures: 

- Cell A as a "Non-Suitable cell". 

- Cell B as the "Serving cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 

Note: Cell B belongs to the same PLMN where 
the UE was rejected but a different TA 


-> 


ATTACH REQUEST 


1 


F 


8 


The operator initiates an attach by MMI or by 
AT command. 


- 


- 


- 


- 


9 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


~> 


ATTACH REQUEST 


1 


F 


10 


Void 


- 


- 


- 


- 


11 


Check: Does the test result of CALL generic 
procedure (TS 36.508 subclause 6.4.2.5) 
indicate that the UE ignores paging on cell B 
for PS domain with GUTI-1 ? 






1 




12 


The SS configures: 

- Cell B as a "Non-Suitable cell". 

- Cell G as the "Serving cell". 










- 


The following messages are to be observed on 
Cell G unless explicitly stated otherwise. 


- 


- 


- 


- 


13 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 

Note: Cell G belongs to a PLMN which is not 
the same like the one on which the UE was 
rejected. 


~> 


ATTACH REQUEST 


1 


F 


14 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


15 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


16 


If possible (see ICS) switch off is performed. 
Qtherwise the power is removed. 










17 


The UE is brought back to operation. 










18 


The following message is sent on Cell G. 










19 


Check: Does the UE transmit an ATTACH 
REQUEST message with IMSI-1 ? 


-> 


ATTACH REQUEST 


2 


P 


20 


The SS transmits an ATTACH REJECT 
message with EMM cause = "EPS services 


<— 


ATTACH REJECT 


- 


- 
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and non-EPS services not allowed" as 
specified. 










- 


EXCEPTION: Steps 21 a1 to 21 a10 describe 
behaviour that depends on the UE capability. 


- 


- 


- 


- 


21a 

1 


IF pc_UTRAN or pc_GERAN THEN 
the SS configures 

- Cell G as a "Non-Suitable cell". 

- Cell 24 (GERAN) or Cell 5 (UTRAN) as the 
"Serving cell". 












The following messages are to be observed on 
Cell 24 or Cell 5 (depending on which cell was 
set as "Serving cell" in the preceding step) 
unless explicitly stated otherwise. 










21a 
2 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


21a 
3 


The user initiates an attach by IVIMI or by AT 
command. 


- 


- 


- 


- 


21a 
4 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


21a 
5 


If possible (see ICS) switch off is performed. 
Qtherwise the power is removed. 


- 


- 


- 


- 


21a 
6 


The UE is brought back to operation. 


- 


- 


- 


- 


21a 

7 


Void 


- 


- 


- 


- 


21a 
8 


Check: Does the UE transmit an ATTACH 
REQUEST message with IMSI-land TMSI 
status indicated invalid TMSI? 


-> 


ATTACH REQUEST 


3 


P 


21a 
9 


The SS transmits an ATTACH REJECT 
message with cause " GPRS services and 
non-GPRS services not allowed" 


<- 


ATTACH REJECT 






21a 
10 


The SS releases the RRC connection. 


- 


- 


- 


- 




At the end of this test procedure sequence, the 
UE is in end state E-UTRA deregistered (E4) 
according to TS 36.508. 











9.2.1 .1 .1 1 .3.3 Specific message contents 

Table 9.2.1 .1 .1 1 .3.3-1 : Message ATTACH REJECT (steps 4 and 20, Table 9.2.1 .1 .1 1 .3.2-1) 



Derivation path: 36.508 table 4.7.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


Security header type 


0000 


" Plain NAS 
message, not 
security protected 




EMM cause 


00001000 


#8 "EPS services 
and non-EPS 




ESM message container 


Not present 


services not 
allowed" 
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Table 9.2.1.1.11.3.3-2: Message ATTACH REQUEST (step 19, Table 9.2.1.1.11.3.2-1) 



Derivation path: TS 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMS! 


IMSI-1 






ESM message container 


PDN CONNECTIVITY 
REQUEST message to 
request PDN connectivity 
to the default PDN 






Last visited registered TAI 


Not present 






Old LAI 


Not present 






TMSI status 


Not present 







Table 9.2.1.1.11.3.3-3: Message ATTACH REQUEST (step 21a8, Table 9.2.1.1.11.3.2-1) 



Derivation path : TS 24.008 table 9.4.1 


Information Element 


Value/Remark 


Comment 


Condition 


MS network capability 


Not checked 






Attach type 


Not checked 






GPRS ciphering key sequence number 


111 


No key is 
available 




DRX parameter 


Not checked 






P-TMSI or IMSI 


IMSI-1 






Old routing area identification 


Deleted RAI-1 


The MNC and the 
MCC in the 
coding of the RAI 
are replaced by 
the RAC of RAC-1 




MS Radio Access capability 


Not checked 






Old P-TMSI signature 


Not present 






Requested READY timer 
Value 


Not checked 






TMSI status 





no valid TMSI 
available 




PS LCS Capability 


Not checked 






Mobile station classmark 2 


Not checked 






Mobile station classmark 3 


Not checked 






Supported Codecs 


Not checked 






UE network capability 


Not checked 






Additional mobile identity 


Not present 






Additional old routing area identification 


Not present 







Table 9.2.1.1.11.3.3-4: Message ATTACH REJECT (step 21 a9, Table 9.2.1.1.11.3.2-1) 



Derivation path: TS 24.008 table 9.4.1 


Information Element 


Value/Remark 


Comment 


Condition 


GMM cause 


00001000 


GPRS services 
and non-GPRS 
services not 
allowed 





9.2.1.1.12 
9.2.1.1.12.1 
(1) 



Attach / Rejected / EPS services not allowed 
Test Purpose (TP) 



with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "EPS services not 
allowed" } 

then { UE deletes the GUTI and the last visited registered TAI and KSI and considers the USIM as 
invalid for EPS services until switching off or the UICC containing the USIM is removed and deletes 
the list of equivalent PLMNs and UE enters state EMM-DEREGISTERED } 
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9.2.1.1.12.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.5.1.2.2 and 
5.5.1.2.5. 

[TS 24.301, clause 5.5.1.2.2] 

In state EMM-DEREGISTERED, the UE initiates the attach procedure by sending an ATTACH REQUEST message to 
the MME, starting timer T3410 and entering state EMM-REGISTERED-INITIATED (see example in 
figure 5.5.1.2.2.1). If timer T3402 is currently running, the UE shall stop timer T3402. If timer T3411 is currently 
running, the UE shall stop timer T341 1. 

If the UE supports neither A/Gb mode nor lu mode, the UE shall handle the Old GUTI or IMSI IE in the ATTACH 
REQUEST message as follows: 

The UE shall include in the ATTACH REQUEST message a valid GUTI together with the last visited registered 
TAI, if available. If there is no valid GUTI available, the UE shall include the IMSI in the ATTACH REQUEST 
message. 



[TS 24.301, clause 5.5.1.2.5] 

Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410 and take the following actions 
depending on the reject cause value received. 

#7 (EPS services not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. The UE shall consider the 
USIM as invalid for EPS services until switching off or the UICC containing the USIM is removed. 
Additionally, the UE shall delete the list of equivalent PLMNs and enter state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM 
state, GPRS update status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as 
specified in 3GPP TS 24.008 [6] for the case when the normal attach procedure is rejected with the GMM cause 
with the same value. 

9.2.1.1.12.3 Test description 

9.2.1.1.12.3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell B and Cell G: 

- Cell A and Cell B (HPLMN, different TAs), 

- Cell G (another PLMN); 

- If pc_UTRAN, Cell 5 (HPLMN, UTRAN, NMO 2); 

- If NOT pc_UTRAN and pc_GERAN, Cell 24 (HPLMN, GERAN, NMO 2). 

The different cells may not be simultaneously activated (at most 2 cells are active simultaneously); 
Cells B and G can be implemented as minimum uplink cells. 
UE: 

The UE is configured to initiate EPS attach. 

- The test USIM contains IMSI- 1 , GUTI- 1 and TAI- 1 , and EPS update status is "EU 1 : UPDATED" . 
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- If pc_GERAN or pc_UTRAN, the test USIM contains P-TMSI- 1 , P-TMSI signature 1 and RAI- 1 , and GPRS 
update status is "GUI: UPDATED". 

Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.1.12.3.2 Test procedure sequence 

Table 9.2.1.1.12.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell". 

- Cell B as a " Suitable neighbour cell". 

- Cell G as a "Non-Suitable Off cell". 

- If present, Cell 5 or 24 as a "Non-Suitable Off 
cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The user switches the UE on. 


- 


- 


- 


- 


3 


The UE transmit an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with EMM cause = "EPS services not 
allowed". 


<~ 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


The SS reconfigures: 

Cell A as a " Suitable neighbour cell". 

Cell B as the "Serving cell". 

Note: Cell A and Cell B are in different TAIs - 
same PLMN. 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


8 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


9 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


- 


EXCEPTION: Steps lOal to 10a6 describe 
behaviour that depends on the UE capability. 


- 


- 


- 


- 


10a 

1 


IF pc_UTRAN or pc_GERAN THEN 
the SS configures 

- Cell A as "Non-suitable Off cell" 

- Cell B as a " Suitable neighbour cell". 

- Cell 24 (GERAN) or 5 (UTRAN) as the 
"Serving cell". 

Note: Cell B and Cell 24 (GERAN) or 5 
(UTRAN) are in different PLMNs 










10a 
2 


The following messages are to be observed on 
Cell 24 or Cell 5 (depending on which cell was 
set as "Serving cell" in the preceding step) 
unless explicitly stated otherwise. 












EXCEPTION: The behaviour in table 
9.2.1.1.12.3.2-2 occurs in parallel with step 
10a3. 










10a 
4 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 2 minutes? 


-> 


ATTACH REQUEST 


1 


F 


10a 
4 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


10a 
5 


Check : Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


10a 
6 


The SS configures cell 24 or cell 5 as "Suitable 
Neighbour cell". 


- 


- 


- 


- 


11 


The SS configures: 

- Cell B as a "Non-Suitable Off cell". 

- Cell G as the "Serving cell". 

Note: Cell B and Cell G are different PLMNs. 
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- 


The following messages are to be observed on 
Cell G unless explicitly stated otherwise. 


- 


- 


- 


- 


12 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 60 seconds? 


-> 


ATTACH REQUEST 


1 


F 


13 


The operator initiates an attach by IVIMI or by 
AT command. 


- 


- 


- 


- 


14 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 




At the end of this test procedure sequence, the 
UE is in end state E-UTRA deregistered {E4) 
according to TS 36.508. 











Table 9.2.1.1.12.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


- 


EXCEPTION: Steps la and lb describe a 
behaviour which depends on the UE capability. 


- 


- 


- 


- 


la 


IF pc CS THEN the UE transmits a 
LQCATIQN UPDATING REQUEST message. 


-> 


LOCATION UPDATING 
REQUEST 


- 


- 


lb 


The SS transmits a LOCATION UPDATING 
ACCEPT message including IMSI-1 


<— 


LOCATION UPDATING ACCEPT 


- 


- 



9.2.1 .1 .12.3.3 Specific message contents 

Table 9.2.1.1.12.3.3-1 : Message ATTACH REJECT (step 4, Table 9.2.1.1.12.3.2-1) 



Derivation path: 36.508 table 4.7.2-3 (This message is transmitted as a "plain NAS message") 


Information Element 


Value/Remark 


Comment 


Condition 


Security header type 


0000 


"Plain NAS 
message, not 
security 
protected" 




EMM cause 


00000111 


#7 "EPS services 
not allowed" 




ESM message container 


Not present 







9.2.1.1.13 



9.2.1.1.13.1 



Attach / Rejected / PLMN not allowed 
Test Purpose (TP) 



(1) 



with { the UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { the UE receives an ATTACH REJECT message with the reject cause set to "PLMN not allowed" } 
then { the UE deletes the GUTI , the last visited registered TAI , KSI, the list of equivalent 
PLMNs and UE enters state EMM-DEREGISTERED . PLMN-SEARCH and UE stores the PLMN in the "forbidden PLMN 
list" in the USIM } 
} 

(2) 

with { the UE is switched off and a PLMN is stored in the "forbidden PLMN list" in the USIM } 
ensure that { 

when { the UE is switched on } 

then { the UE doesn't attempt to attach on this PLMN } 
} 

(3) 

with { the UE in E-UTRA EMM-DEREGISTERED . PLMN-SEARCH state and a PLMN is stored in the "forbidden 
PLMN list" } 
ensure that { 

when { the UE detects a cell belonging to a PLMN which is not in the "forbidden PLMN list" } 
then { the UE attaches to this PLMN } 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1029 ETSI TS 136 523-1 V9.1.1 (2010-07) 

(4) 

with {the UE in E-UTRA EMM-DEREGISTERED . PLMN-SEARCH state and a PLMN is stored in the "forbidden 
PLMN list" } 
ensure that { 

when { the forbidden PLMN is selected manually } 

then { the UE attaches to the forbidden PLMN and deletes this PLMN from the USIM} 
} 

9.2.1.1.13.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.5.1.2.2 and 
5.5.1.2.5. 

[TS 24.301, clause 5.5.1.2.2] 

In state EMM-DEREGISTERED, the UE initiates the attach procedure by sending an ATTACH REQUEST message to 
the MME, starting timer T3410 and entering state EMM-REGISTERED-INITIATED (see example in figure 
5.5.1.2.2.1). If timerT3402 is currently running, the UE shall stop timerT3402. If timerT3411 is currently running, the 
UE shall stop timer T341 1 . 



If the UE supports neither A/Gb mode nor lu mode, the UE shall handle the Old GUTI or IMSI IE in the ATTACH 
REQUEST message as follows: 

The UE shall include in the ATTACH REQUEST message a valid GUTI together with the last visited registered 
TAI, if available. If there is no valid GUTI available, the UE shall include the IMSI in the ATTACH REQUEST 

message. 

If the UE supports A/Gb mode or lu mode, the UE shall handle the Old GUTI or IMSI IE as follows: 



If the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI or IMSI IE. 



Otherwise the UE shall include the IMSI in the Old GUTI or IMSI IE. 



[TS 24.301, clause 5.5.1.2.5] 

If the attach request cannot be accepted by the network, the MME shall send an ATTACH REJECT message to the UE 
including an appropriate EMM cause value. 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410 and take the following actions 
depending on the EMM cause value received. 



#1 1 (PLMN not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. Additionally, the UE shall 
delete the list of equivalent PLMNs and reset the attach attempt counter, and enter state EMM- 
DEREGISTERED.PLMN-SEARCH. 

In SI mode, the UE shall store the PLMN identity in the "forbidden PLMN list" and enter state EMM- 
DEREGISTERED.PLMN-SEARCH. The UE shall perform a PLMN selection according to 3GPP TS 23.122 
[6]. 
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If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the MM parameters update 
status, TMSI, LAI, ciphering key sequence number and location update attempt counter, and the GMM 
parameters GMM state, GPRS update status, P-TMSI, P-TMSI signature, RAI, GPRS ciphering key sequence 
number and GPRS attach attempt counter as specified in 3GPP TS 24.008 [13] for the case when the normal 
attach procedure is rejected with the GMM cause with the same value and no RR connection exists. 

9.2.1.1.13.3 Test description 

9.2.1.1.13.3.1 Pre-test conditions 

System Simulator: 

- Cell G, Cell H, and Cell I 

- Cell G and Cell H (VPLMN, same MCC hke HPLMN, different TAs) 

- Cell I (VPLMN, different MCC from HPLMN). 

- The cells may not be simultaneously activated. 
UE: 

- The test USIM contains IMSIl, GUTIl and TAIl, and EPS update status is "EUl: UPDATED". 

- The "forbidden PLMN Ust" is empty. 

The UE is configured to initiate EPS attach. 
Preamble: 
- The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.1.13.3.2 Test procedure sequence 

Table 9.2.1.1.13.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell G as the "Serving cell". 

- Cell H as a " Suitable Neighbour cell". 

- Cell 1 as a "Non-Suitable Off cell". 

Note: Cell G and Cell H are in the different TAI 
-same PLMN. 










- 


The following messages are to be observed on 
Cell G unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REOUEST message. 


-> 


ATTACH REOUEST 






4 


The SS transmits an ATTACH REJECT 
message including EMM cause = "PLMN not 
allowed". 


<- 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


Check: Does the UE transmit an ATTACH 
REOUEST message on cell G or H in the next 
30 seconds? 


~> 


ATTACH REOUEST 


1 


F 


7 


The UE is switched off. 


- 


- 


- 


- 


8 


The UE is switched on. 


- 


- 


- 


- 


9 


Check: Does the UE transmit an ATTACH 
REOUEST message in the next 30 seconds? 


-> 


ATTACH REOUEST 


2 


F 


10 


The SS configures: 

- Cell G as the "Serving cell" 

- Cell H as a "Non-Suitable Off cell" 

- Cell 1 as a " Suitable neigbour cell". 










11 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


12 


Check: Does the UE transmit an ATTACH 
REOUEST message including a PDN 
CONNECTIVITY REOUEST message as 
specified? 


-> 


ATTACH REOUEST 


1,3 


P 


12 
A 


The SS completes the attach procedure 
successfully and then releases the RRC - 
connection by executing steps 5 to 17 of UE 
registration procedure in TS 36.508 clause 
4.5.2.3. 










13- 
19 


Void 


- 


- 


- 


- 


20 


The user switches the UE off. 


- 


- 


- 


- 


21 


The UE transmits a DETACH REOUEST 
message. 


-> 


DETACH REQUEST 


- 


- 


22 


The SS configures: 

- Cell G as the "Serving cell" 

- Cell 1 as a "Non-suitable Off cell". 

Note: Cell G belongs to the forbidden PLMN. 










23 


The user switches the UE on. 


- 


- 


- 


- 


24 


The following messages are to be observed on 
Cell G unless explicitly stated otherwise. 


- 


- 


- 


- 


25 


The user sets the UE in manual PLMN 
selection mode or requests a PLMN search. 


- 


- 


- 


- 


26 


The user selects PLMN of cell G. 


- 


- 


- 


- 


27 


Check: Does the UE transmit an ATTACH 
REOUEST message including a PDN 
CONNECTIVITY REOUEST message as 
specified? 


-> 


ATTACH REQUEST 


4 


P 


27 


The SS completes the attach procedure 


- 


- 


- 


- 
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A 


successfully and then releases the RRC - 
connection by executing steps 5 to 17 of UE 
registration procedure in TS 38.508 clause 
4.5.2.3. 










28- 
33 


Void 


- 


- 


- 


- 




At the end of this test procedure sequence, the 
UE is in end state E-UTRA idle (El) according 
to TS 36.508. 











9.2.1.1.13.3.3 Specific message contents 

Table 9.2.1.1.13.3.3-1 : Message ATTACH REJECT (step 4, Table 9.2.1.1.13.3.2-1) 



Derivation path: 36.508 table 4.7.2-3 (Plain 


NAS message) 






Information Element 


Value/Remark 


Comment 


Condition 


Security header type 




0000 


"No security 
protection" 




EIVIM cause 




00001011 


#11 "PLMNnot 
allowed" 




ESIVI message container 




Not present 







Table 9.2.1.1.13.3.3-2: Message ATTACH REQUEST (step 12, Table 9.2.1.1.13.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMS! 


IMSI-1 


GUTI has been 
deleted after 
receiving 

ATTACH REJECT 
at step 5; only 
IIVISI is available. 




Last visited registered TAI 


Not present 


TAI has been 
deleted after 
receiving 

ATTACH REJECT 
at step 5. 





Table 9.2.1.1.13.3.3-3: Message ATTACH REQUEST (step 27, Table 9.2.1.1.13.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


OldGUTIorlMSI 


GUTI allocated in step 18 






Last visited registered TAI 


TAI-9 


TAI 9 is allocated 
on Cell 1 
according to 
36.508 table 
6.3.2.2-1 





9.2.1.1.14 Attach / Rejected / Tracking area not allowed 

9.2.1.1.14.1 Test Purpose (TP) 

(1) 

with { UE has sent an ATTACH REQUEST message inclucJing a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "Tracking area not 
allowecJ" } 

then { UE sets the EPS upcJate status to EU3 ROAMING NOT ALLOWED, UE (deletes the GUTI, last 
visiteca registereca TAI ancJ KSI, UE enters the state EMM-DEREGISTERED. LIMITED-SERVICE and UE stores 
the current TAI in the list of "forbicJcJen tracking areas for regional provision of service" } 
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(2) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and the current TAI in the list of "forbidden 
tracking areas for regional provision of service"} 
ensure that { 

when { serving cell belongs to TAI where UE was rejected } 
then { UE does not attempt to attach on any other cell } 
} 

(3) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and the current TAI in the list of "forbidden 
tracking areas for regional provision of service"} 
ensure that { 

when { UE re- selects a new cell in the same TAI it was already rejected } 
then { UE does not attempt to attach } 
} 

(4) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and the current TAI in the list of "forbidden 
tracking areas for regional provision of service"} 
ensure that { 

when { UE enters a cell belonging to a tracking area not in the list of "forbidden tracking areas 
for regional provision of service"} 

then { UE attempts to attach with IMSI } 

} 

(5) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and the list of "forbidden tracking areas for 
regional provision of service" contains more than one TAI } 
ensure that { 

when { UE re-selects a cell belonging to one of the TAIs in the list of "forbidden tracking areas 
for regional provision of service" } 

then { UE does not attempt to attach } 
} 

(6) 

with { UE is switched off } 
ensure that { 

when { UE is powered on in the cell belonging to the TAI which was in the list of "forbidden 
tracking areas for regional provision of service" before the UE was swithed off } 
then { UE performs registration on that cell } 
} 

9.2.1.1.14.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.3.2, 
5.5.1.2.2, 5.5.1.2.5, 5.2.2.3.2, Annex C and TS 36.304 clause 4.3. 

[TS 24.301, clause 5.3.2] 

The UE shall store a list of "forbidden tracking areas for roaming", as well as a list of "forbidden tracking areas for 
regional provision of service". These lists shall be erased when the UE is switched off or when the UlCC containing the 
USIM is removed, and periodically (with a period in the range 12 to 24 hours). 



In SI mode, the UE shall update the suitable list whenever an ATTACH REJECT, TRACKING AREA UPDATE 
REJECT, SERVICE REJECT or DETACH REQUEST message is received with the EMM cause #12 "tracking area not 
allowed", #13 "roaming not allowed in this tracking area", or #15 "no suitable cells in tracking area". 

Each list shall accommodate 40 or more TAIs. When the list is full and a new entry has to be inserted, the oldest entry 
shall be deleted. 

[TS 24.301, clause 5.5.1.2.2] 

In state EMM-DEREGISTERED, the UE initiates the attach procedure by sending an ATTACH REQUEST message to 
the MME, starting timer T3410 and entering state EMM-REGISTERED-INITIATED (see example in figure 
5.5.1.2.2.1). 
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If the UE supports neither A/Gb mode nor lu mode, the UE shall handle the Old GUTI or IMSI IE in the ATTACH 
REQUEST message as follows: 

The UE shall include in the ATTACH REQUEST message a valid GUTI together with the last visited registered 
TAI, if available. If there is no valid GUTI available, the UE shall include the IMSI in the ATTACH REQUEST 
message. 

If the UE supports A/Gb mode or lu mode, the UE shall handle the Old GUTI or IMSI IE as follows: 



If the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI or IMSI IE. 



The UE shall send the ATTACH REQUEST message together with a PDN CONNECTIVITY REQUEST message 
contained in the ESM message container information element to request PDN connectivity. 



[TS 24.301, clause 5.5.1.2.5] 

If the attach request cannot be accepted by the network, the MME shall send an ATTACH REJECT message to the UE 
including an appropriate EMM cause value. 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410 and take the following actions 
depending on the EMM cause value received. 



#12 (Tracking area not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. Additionally, the UE shall 
reset the attach attempt counter. 

In SI mode, the UE shall store the current TAI in the list of "forbidden tracking areas for regional provision of 
service" and enter the state EMM-DEREGISTERED.LIMITED-SERVICE. 



[TS 24.301, clause 5.2.2.3.2] 

The UE shall perform an attach or combined attach procedure when entering a cell which provides normal service. 

[TS 24.301, Annex C (normative)] 

The following EMM parameters shall be stored on the USIM if the corresponding file is present: 

- GUTI; 

last visited registered TAI; 
EPS update status; 

- Allowed CSG Hst; and 

EPS security context parameters from a full native EPS security context (see 3GPP TS 33.401 [19]). 

The presence and format of corresponding files on the USIM is specified in 3GPP TS 31.102 [17]. 

If the corresponding file is not present on the USIM, these EMM parameters except allowed CSG list are stored in a 
non-volatile memory in the ME together with the IMSI from the USIM. The allowed CSG list is stored in a non-volatile 
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memory in the ME if the UE supports CSG selection. These EMM parameters can only be used if the IMSI from the 
USIM matches the IMSI stored in the non-volatile memory; else the UE shall delete the EMM parameters. 



[TS 36.304, clause 4.3] 



suitable cell: 



Following exceptions to these definitions are applicable for UEs: 

camped on a cell that belongs to a registration area that is forbidden for regional provision of service; a cell that 
belongs to a registration area that is forbidden for regional provision service ([5], [16]) is suitable but provides 
only limited service. 



9.2.1.1.14.3 Test description 

9.2.1 .1 .14.3.1 Pre-test conditions 

System Simulator: 

Cell A and Cell B are configured according to Table 6.3.2.2-1 in [18] and belong to the same frequency as 
specified in [20]: 

- Cell A in (home PLMN), 

- Cell B in (home PLMN, another TA), 
UE: 

The UE is configured to initiate EPS attach. 
- The USIM contains GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.1.14.3.2 Test procedure sequence 

Table 9.2.1.1.14.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell". 

- Cell B as a "Suitable Neighbour cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 

message, EIVIM cause = "Tracking area not 

allowed". 

(The list of "forbidden tracking areas for 

regional provision of service " in the UE should 

now contain TAI-1) 


<— 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


Check; Does the UE transmit the ATTACH 
REQUEST message in the next 30 seconds on 
Cell A or Cell B? 


-> 


ATTACH REQUEST 


1,2 


F 


7 


The user initiates an attach by IVIMI or by AT 
command. 


- 


- 


- 


- 


8 


Check: Does the UE transmit the ATTACH 
REQUEST message in the next 30 seconds? 


~> 


ATTACH REQUEST 


1 


F 


9 


The SS reconfigures: 

Cell A as a "Suitable Neighbour cell", 

Cell B as the "Serving cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


10 


Check: Does the UE transmit the ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


1,4 


P 


11 


The SS transmits an ATTACH REJECT 

message, EIVIM cause = "Tracking area not 

allowed". 

(The list of "forbidden tracking areas for 

regional provision of service " in the UE should 

now contain TAI-1 and TAI-2) 


<~ 


ATTACH REJECT 






12 


The SS releases the RRC connection. 


- 


- 


- 


- 


13 


The SS reconfigures: 

Cell A as the "Serving cell". 

Cell B as a " Suitable Neighbour cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


14 


Check: Does the UE transmit the ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1,3, 
5 


F 


15 


If possible (see ICS) switch off is performed. 
Otherwise the power is removed. 


- 


- 


- 


- 


16 


The SS reconfigures: 
Cell A as the "Serving cell". 
Cell B as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


17 


The UE is brought back to operation. 


- 


- 


- 


- 


18 


Void 


- 


- 


- 


- 


19 


Check: Does the UE transmit the ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message as 
specified? 


-> 


ATTACH REQUEST 


1,6 


P 


19 
A 


The SS completes the attach procedure 
successfully and then releases the RRC - 


- 


- 


- 


- 
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connection by executing steps 5 to 17 of UE 
registration procedure in TS 36.508 clause 
4.5.2.3. 










20- 
23 


Void 


- 


- 


- 


- 




At the end of this test procedure sequence, the 
UE is in end state E-UTRA idle {E1) according 
to TS 36.508. 











9.2.1 .1 .14.3.3 Specific message contents 

Table 9.2.1.1.14.3.3-1: Message ATTACH REJECT (steps 4 and 11, Table 9.2.1.1.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


Security header type 


0000 


"No security 
protection" 




EIVIM cause 


00001100 


#12 "Tracking 
area not allowed" 




ESM message container 


Not present 







Table 9.2.1.1.14.3.3-2: Message ATTACH REQUEST (steps 10 and 18 Table 9.2.1.1.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMS! 


IMSI-1 


GUTI has been 
deleted after 
receiving 

ATTACH REJECT 
at step 4; only 
IIVISI is available. 




Last visited registered TAI 


Not present 


TAI has been 
deleted after 
receiving 

ATTACH REJECT 
at step 4. 





9.2.1 .1 .15 Attach / Rejected / Roaming not allowed in this tracking area 

9.2.1.1.15.1 Test Purpose (TP) 

(1) 

with { the UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { the UE receives an ATTACH REJECT message with the reject cause set to "roaming not allowed 
in this tracking area" } 

then { the UE sets the EPS update status to EU3 ROAMING NOT ALLOWED and the UE deletes the GUTI, 
the last visited registered TAI and KSI and the UE enters the state EMM-DEREGISTERED. LIMITED-SERVICE 
or optionally EMM-DEREGISTERED . PLMN-SEARCH and the UE stores the current TAI in the list of 
"forbidden tracking areas for roaming" } 
} 

(2) 

with { the UE is in EMM-DEREGISTERED .LIMITED-SERVICE or EMM-DEREGISTERED . PLMN-SEARCH state and the 
TAI of the current cell belongs to the list of "forbidden tracking areas for roaming"} 
ensure that { 

when { the UE enters a cell belonging to a tracking area not in the list of "forbidden tracking 
areas for roaming" } 

then { the UE attempts to attach with IMSI } 
} 

(3) 

with { the UE is in EMM-DEREGISTERED .LIMITED-SERVICE or EMM-DEREGISTERED . PLMN-SEARCH state and the 
list of "forbidden tracking areas for roaming" contains more than one TAI } 
ensure that { 
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when { the UE selects a cell belonging to one of the TAIs in the list of "forbidden tracking areas 
for roaming" } 

then { the UE does not attempt to attach } 
} 

(4) 

with { the UE is switched off or the UICC containing the USIM is removed } 
ensure that { 

when { UE is powered on in the cell belonging to the TAI which was in the list of "forbidden 
tracking areas for roaming" before the UE was swithed off or the USIM is inserted again on that cell 



then { UE performs registration on that cell 



(5) 



with { the UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { the UE receives an ATTACH REJECT message with the reject cause set to "roaming not allowed 
in this tracking area" } 

then { the UE performs a PLMN selection } 

} 

9.2.1 .1 .1 5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.3.2, 
5.5.1.2.2, 5.5.1.2.5 and in TS 36.304 clause 5.2.4.4. 

[TS 24.301, clause 5.3.2] 

The UE shall store a list of "forbidden tracking areas for roaming", as well as a list of "forbidden tracking areas for 
regional provision of service". These lists shall be erased when the UE is switched off or when the UICC containing the 
USIM is removed, and periodically (with a period in the range 12 to 24 hours). 



In SI mode, the UE shall update the suitable list whenever an ATTACH REJECT, TRACKING AREA UPDATE 
REJECT, SERVICE REJECT or DETACH REQUEST message is received with the EMM cause #12 "tracking area not 
allowed", #13 "roaming not allowed in this tracking area", or #15 "no suitable cells in tracking area". 

Each list shall accommodate 40 or more TAIs. When the list is full and a new entry has to be inserted, the oldest entry 
shall be deleted. 

[TS 24.301, clause 5.5.1.2.2] 

In state EMM-DEREGISTERED, the UE initiates the attach procedure by sending an ATTACH REQUEST message to 
the MME, starting timer T3410 and entering state EMM-REGISTERED-INITIATED (see example in 
figure 5.5.1.2.2.1). 



If the UE supports neither A/Gb mode nor lu mode, the UE shall handle the Old GUTI or IMSI IE in the ATTACH 
REQUEST message as follows: 

The UE shall include in the ATTACH REQUEST message a valid GUTI together with the last visited registered 
TAI, if available. If there is no valid GUTI available, the UE shall include the IMSI in the ATTACH REQUEST 
message. If the UE supports A/Gb mode or lu mode, the UE shall handle the Old GUTI or IMSI IE as follows: 



If the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI or IMSI IE. 



The UE shall send the ATTACH REQUEST message together with a PDN CONNECTIVITY REQUEST message 
contained in the ESM message container information element to request PDN connectivity. 
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[TS 24.301, clause 5.5.1.2.5] 

If the attach request cannot be accepted by the network, the MME shall send an ATTACH REJECT message to the UE 
including an appropriate EMM cause value. 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410 and take the following actions 
depending on the EMM cause value received. 



#13 (Roaming not allowed in this tracking area); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. The UE shall delete the list of 
equivalent PLMNs and reset the attach attempt counter. 

In SI mode, the UE shall store the current TAI in the list of "forbidden tracking areas for roaming". Additionally, 
the UE shall enter the state EMM-DEREGISTERED.LIMITED-SERVICE or optionally EMM- 
DEREGISTERED.PLMN-SEARCH. The UE shall perform a PLMN selection according to 3GPP TS 23.122 
[6]. 



[TS 36.304 subclause 5.2.4.4] 



If the highest ranked cell is an intra-frequency or inter-frequency cell which is not suitable due to being part of the "list 
of forbidden TAs for roaming" or belonging to a PLMN which is not indicated as being equivalent to the registered 
PLMN, the UE shall not consider this cell and other cells on the same frequency, as candidates for reselection for a 
maximum of 300s. If the UE enters into state any cell selection, any limitation shall be removed. If the UE is redirected 
under E-UTRAN control to a frequency for which the timer is running, any limitation on that frequency shall be 
removed. 



9.2.1.1.15.3 Test description 

9.2.1 .1 .1 5.3.1 Pre-test conditions 

System Simulator: 

Cell C, Cell I and Cell E, but at most two cells are simultaneously activated: 

- Cell C (home PLMN), 

- Cell I (visited PLMN), 

- Cell E (same visited PLMN, another TA). 

NOTE 1: Cell E shall not use the same frequency as cell I. 

NOTE 2: The requirement in 3GPP TS 24.301 to store at least 40 entries in the list of "forbidden tracking areas for 
roaming" is not fully tested. 

NOTE 3: Different types of UE may use different methods to periodically clear the list of forbidden areas (e.g. 

every day at 12 am) for roaming. If the list is cleared while the test is being run, it may be necessary to re- 
run the test. 

UE: 

The UE is configured to initiate EPS attach. 
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- The test USIM contains IMSI- 1 , GUTI- 1 and TAI- 1 , and EPS update status is "EU 1 : UPDATED" . 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1.1.15.3.2 Test procedure sequence 

Table 9.2.1.1.15.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

Cell 1 as the "Serving cell". 

Cell E as a " Non-Suitable Off cell", 

Cell C as a "Non-Suitable Off cell". 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REOUEST message. 


-> 


ATTACH REOUEST 






4 


The SS transmits an ATTACH REJECT 
message, EIVIM cause = "roaming not allowed 
in this tracking area ". 
(The list of "forbidden tracking areas for 
roaming" in the UE should now contain TAI-9) 


<~ 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


Check: Does the UE transmit an ATTACH 
REOUEST message in the next 30 seconds? 


-> 


ATTACH REOUEST 


1,5 


F 


7 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


8 


Check: Does the UE transmit an ATTACH 
REOUEST message in the next 30 seconds? 


~> 


ATTACH REOUEST 


1,5 


F 


- 


The following messages are to be observed on 
Cell E unless explicitly stated otherwise. 


- 


- 


- 


- 


8A 


The SS configures: 

Cell 1 as the "Serving cell". 

Cell E as a " Suitable Neighbour cell", 

Cell C as a "Non-Suitable Off cell". 










9 


Check: Does the UE transmit an ATTACH 
REOUEST message including a PDN 
CONNECTIVITY REOUEST message on Cell 
E as specified? 

Note: according to TS 24.301 , the UE has the 
choice to enter "LIMITED-SERVICE" or 
"PLIVIN- SEARCH" state. But in any case it 
shall do a PLMN selection. In the first option, 
the UE shall apply reselection so it will select 
cell E and then attempt to attach; in the 
second option it will select the same PLMN 
again and exclude cells from forbidden TAs so 
it will select cell E. 


-> 


ATTACH REOUEST 


1,2 


P 


10 


The SS transmits an ATTACH REJECT 

message, EMM cause = "roaming not allowed 

in this tracking area". 

(The list of "forbidden tracking areas for 

roaming" in the UE should now contain TAI-9 

andTAI-12) 


<— 


ATTACH REJECT 






11 


The SS releases the RRC connection. 


- 


- 


- 


- 


12 


Check: Does the UE transmit an ATTACH 
REOUEST message in the next 60 seconds on 
Cell lor Cell E? 


~> 


ATTACH REOUEST 


1,3 


F 


13 


If possible (see ICS) switch off is performed or 
the USIM is removed. 
Otherwise the power is removed. 










14 


The SS reconfigures: 
Cell 1 as the "Serving cell". 
Cell E as a "Non-Suitable Off cell". 
Cell C as a "Non-Suitable Off cell". 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


15 


The UE is brought back to operation or the 


- 


- 


- 


- 
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USIM is inserted. 










16 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message as specified. 


-> 


ATTACH REQUEST 


4 


P 


17 


The SS transmits an ATTACH REJECT 
message, EIVIM cause = "roaming not allowed 
in this tracking area ". 
(The list of "forbidden tracking areas for 
roaming" in the UE should now contain TAI-9) 


<- 


ATTACH REJECT 






18 


The SS reconfigures: 

Cell 1 as the "Serving cell". 

Cell E as a "Non-Suitable Qff cell". 

Cell C as a "Suitable neigbour cell". 










- 


The following messages are to be observed on 
Cell C unless explicitly stated otherwise. 


- 


- 


- 


- 


19 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message as 
specified? 


-> 


ATTACH REQUEST 


5 


P 


19 
A 


The SS completes the attach procedure 
successfully and then releases the RRC - 
connection by executing steps 5 to 17 of UE 
registration procedure in TS 36.508 clause 
4.5.2.3. 










20- 
25 


Void 


- 


- 


- 


- 




At the end of this test procedure sequence, the 
UE is in end state E-UTRA idle (El) according 
to TS 36.508. 











9.2.1.1.15.3.3 Specific message contents 

Table 9.2.1.1.15.3.3-1 : Message ATTACH REJECT (steps 4, 10 and 17 in table 9.2.1.1.15.3.2-1) 



Derivation path: 36.508 table 4.7.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


Security header type 


0000 


"Plain NAS 
message, not 
security 
protected" 




EIVIM cause 


00001101 


#13 " roaming not 
allowed in this 
tracking area " 




ESIVI message container 


Not present 







Table 9.2.1.1.15.3.3-2: Message ATTACH REQUEST (steps 9,12, 16 and 19 in table 9.2.1.1.15.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 


IMSI1 


GUTI has been 
deleted after 
receiving 

ATTACH REJECT 
at step 4; only 
IMSI is available. 




Last visited registered TAI 


Not present 


TAI has been 
deleted after 
receiving 

ATTACH REJECT 
at step 4. 
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9.2.1 .1 .16 Attach / Rejected / EPS services not allowed in this PLMN 

9.2.1.1.16.1 Test Purpose (TP) 
(1) 

with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "EPS services not allowed 
in this PLMN" } 

then { UE deletes any GUTI , last visited registered TAI , KSI and enters EMM-DEREGISTERED . PLMN- 
SEARCH state} 
} 

(2) 

with { UE in E-UTRA EMM-DEREGISTERED . PLMN-SEARCH state, and a PLMN is stored in the "forbidden PLMNs 
for GPRS service list" } 
ensure that { 

when { UE detects a cell which belongs to a PLMN which is in the "forbidden PLMNs for GPRS service 
list" } 

then { UE doesn't perform an attach procedure } 
} 

(3) 

with { UE in E-UTRA EMM-DEREGISTERED . PLMN-SEARCH state, and a PLMN is stored in the "forbidden PLMNs 
for GPRS service list" } 
ensure that { 

when { UE detects a cell which belongs to a PLMN which is not in the "forbidden PLMNs for GPRS 
service list" } 

then { UE performs an attach procedure } 
} 

(4) 

with { UE is switched off when a PLMN is stored in the "forbidden PLMNs for GPRS service list" } 
ensure that { 

when { UE is powered on a cell which belongs to this PLMN } 
then { UE performs an attach procedure } 
} 

(5) 

with { UE in E-UTRA EMM-DEREGISTERED . PLMN-SEARCH state, and a PLMN is stored in the "forbidden PLMNs 
for GPRS service list" } 
ensure that { 

when { UE is in the cell which belongs to the rejected PLMN and when that PLMN is selected 
manually } 

then { UE performs an attach procedure } 

9.2.1 .1 .1 6.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.5.1.2.5 and 
TS23.122, clause 3.1. 

[TS24.301 clause 5.5.1.2.5] 

If the attach request cannot be accepted by the network, the MME shall send an ATTACH REJECT message to the UE 
including an appropriate EMM cause value. If the attach procedure fails due to a default EPS bearer setup failure, an 
ESM procedure failure, or operator determined barring is applied on default EPS bearer context activation during attach 
procedure, the MME shall combine the ATTACH REJECT message with a PDN CONNECTIVITY REJECT message 
contained in the ESM message container information element. In this case the EMM cause value in the ATTACH 
REJECT message shall be set to #19 "ESM failure". 

Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410 and take the following actions 
depending on the EMM cause value received. 



#14 (EPS services not allowed in this PLMN); 
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The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. 

In SI mode, the UE shall store the PLMN identity in the "forbidden PLMNs for GPRS service" list. 
Additionally, the UE shall enter state EMM-DEREGISTERED.PLMN-SEARCH. The UE shall perform a 
PLMN selection according to 3GPP TS 23.122 [6]. 

In S 101 mode, the UE shall store the PLMN identity provided with the indication from the lower layers to 
prepare for an SlOl mode to SI mode handover in the list of "forbidden PLMNs for attach in SlOl mode" and 
enter the state EMM-DEREGISTERED. NO-CELL- AVAILABLE. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM state, 
GPRS update status, P-TMSI, P-TMSI signature, RAI, GPRS ciphering key sequence number and GPRS attach attempt 
counter as specified in 3GPP TS 24.008 [13] for the case when the normal attach procedure is rejected with the GMM 
cause with the same value. 



[TS23.122 clause 3.1] 



If a message with cause value "GPRS services not allowed in this PLMN" is received by an MS in response to an GPRS 
attach, GPRS detach, routing area update, attach or tracking area update request (see 3GPP TS 24.008 [23] and 
3GPP TS 24.301 [23A]) from a VPLMN, that VPLMN is added to a Hst of "forbidden PLMNs for GPRS service" 
which is stored in the MS and thereafter that VPLMN will not be accessed by the MS for GPRS service when in 
automatic mode. This list is deleted when the MS is switched off or when the SIM is removed. A PLMN is removed 
from the list of "forbidden PLMNs for GPRS service" if, after a subsequent manual selection of that PLMN, there is a 
successful GPRS attach. The maximum number of possible entries in this list is implementation dependant, but must be 
at least one entry. The HPLMN (if the EHPLMN list is not present or is empty) or an EHPLMN (if the EHPLMN hst is 
present) shall not be stored on the list of "forbidden PLMNs for GPRS service". 



9.2.1.1.16.3 Test description 

9.2.1 .1 .1 6.3.1 Pre-test conditions 

System Simulator: 

Cell G, Cell H and Cell I are configured according to Table 6.3.2.2-1 in [18]. 

- Cell G and Cell H with MCC- l/MNC-2 (visited PLMN, different TAs) 

- Cell I with MCC-2/MNC- 1 1 (visited PLMN) 
The cells may not be simultaneously activated. 

UE: 

The UE is configured to initiate EPS attach. 

- The test USIM contains IMSI-1, GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 

- The "forbidden PLMNs for GPRS service list" is empty. 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.1.16.3.2 Test procedure sequence 

Table 9.2.1.1.16.3.2-1: Main Behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell G as the "Serving cell". 

- Cell H as a "Non-Suitable cell". 

- Cell 1 as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell G unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


Void 


- 


- 


- 


- 


3 


The UE is switched on. 


- 


- 


- 


- 


4 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






5 


The SS transmits an ATTACH REJECT 
message including EMM cause = "EPS 
services not allowed in this PLMN". 


<- 


ATTACH REJECT 






6 


The SS releases the RRC connection. 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


8 


The SS configures: 

Cell G as a "Non-Suitable cell". 

Cell H as the "Serving cell". 

Note: Cell G and Cell H are in the different TAI 
-same PLMN. 










- 


The following messages are to be observed on 
Cell H unless explicitly stated otherwise. 


- 


- 


- 


- 


9 


Void 


- 


- 


- 


- 


10 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


2 


F 


11 


The SS configures: 

Cell H as a "Non-Suitable cell". 

Cell 1 as the "Serving cell". 

Note: Cell G and Cell 1 are different PLMNs. 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


12 


Void 


- 


- 


- 


- 


13 


Check: Does the UE transmit an ATTACH 
REQUEST message including and a PDN 
CONNECTIVITY REQUEST message as 
specified? 


-> 


ATTACH REQUEST 


3 


P 


13 
A 


The SS completes the attach procedure 
successfully and then releases the RRC - 
connection by executing steps 5 to 17 of UE 
registration procedure in TS 36.508 clause 
4.5.2.3. 










14- 
20 


Void 


- 


- 


- 


- 


21 


If possible (see ICS) switch off is performed. 
Otherwise the power is removed. 


- 


- 


- 


- 


22 


The SS configures 

- Cell 1 as a "Non-Suitable cell". 

- Cell G as the "Serving cell". 










- 


The following messages are to be observed on 
Cell G unless explicitly stated otherwise. 


- 


- 


- 


- 


23 


The UE is brought back to operation. 










24 


Void 


- 


- 


- 


- 


25 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


4 


P 


26 


The SS transmits an ATTACH REJECT 
message including EMM cause = "EPS 
services not allowed in this PLMN". 


<- 


ATTACH REJECT 
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27 


The user sets the UE in manual PLMN 
selection mode or requests a PLIVIN search. 










28 


The user selects PLIVIN (MCC-1/MNC-2) 










29 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message as 
specified? 


-> 


ATTACH REQUEST 


5 


P 


30 


The SS completes the attach procedure 
successfully and then releases the RRC - 
connection by executing steps 5 to 17 of UE 
registration procedure in TS 36.508 clause 
4.5.2.3. 












At the end of this test procedure sequence, the 
UE is in end state E-UTRA idle (El) according 
to TS 36.508. 











9.2.1 .1 .16.3.3 Specific message contents 

Table 9.2.1.1.16.3.3-1 : Message ATTACH REJECT (step 5, Table 9.2.1.1.16.3.2-1) 



Derivation path: 36.508 table 4.7.2-3 (Plain 


NAS message) 






Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


00001110 


#14 "EPS 
services not 
allowed in this 
PLMN " 




ESM message container 


Not present 







Table 9.2.1.1.16.3.3-2: Message ATTACH REQUEST (step 13 and step 29, Table 9.2.1.1.16.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 


IMSI-1 


GUTI has been 
deleted after 
receiving 

ATTACH REJECT 
at step 5 and 
step25;only IMSI 
is available. 




Last visited registered TAI 


Not present 


TAI has been 
deleted after 
receiving 

ATTACH REJECT 
at step 5 and 
step26. 





Table 9.2.1.1.16.3.3-3: Message ATTACH REJECT (step 26, Table 9.2.1.1.16.3.2-1) 



Derivation path: 36.508 table 4.7.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


00001110 


#14 "EPS 
services not 
allowed in this 
PLMN " 




ESM message container 


Not present 







9.2.1 .1 .17 Attach / Rejected / No suitable cells in tracking area 

9.2.1.1.17.1 Test Purpose (TP) 

(1) 

with { the UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message 
ensure that { 
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when { the UE receives an ATTACH REJECT message with the EMM cause set to "No suitable cells in 
tracking area" } 

then { the UE set the EPS update status to EU3 ROAMING NOT ALLOWED, UE deletes any GUTI , last 
visited registered TAI and KSI and the UE enters the state EMM-DEREGISTERED .LIMITED-SERVICE and the 
UE stores the current TAI in the list of "forbidden tracking areas for roaming" } 
} 

(2) 

with { the UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and the current TAI in the list of 
"forbidden tracking areas for roaming"} 
ensure that { 

when { the UE re- selects a cell that belongs to the TAI where UE was rejected } 
then { the UE does not attempt to attach } 
} 

(3) 

with { the UE is in EMM-DEREGISTERED. LIMITED-SERVICE state and the current TAI in the list of 
"forbidden tracking areas for roaming" and KSI was deleted } 
ensure that { 

when { in the same PLMN, the UE enters a cell which provides normal service and belongs to a 
tracking area not in the list of "forbidden tracking areas for roaming" } 
then { the UE attempts to attach with IMSI } 



(4) 

with { the UE is in EMM-DEREGISTERED. LIMITED-SERVICE state and the current TAI in the list of 
"forbidden tracking areas for roaming"} 
ensure that { 

when { there are cells in the same PLMN and other PLMN that provide normal service and belong to 
tracking areas not in the list of "forbidden tracking areas for roaming" } 
then { UE attempts to attach to the cell in the same PLMN } 
} 

(5) 

with { UE is in EMM-DEREGISTERED. LIMITED-SERVICE state and the list of "forbidden tracking areas for 
roaming" contains more than one TAI } 
ensure that { 

when { UE re-selects a cell that belongs to one of the TAIs in the list of "forbidden tracking 
areas for roaming" } 

then { UE does not attempt to attach } 

} 

(6) 

with { UE is swithched off } 
ensure that { 

when { UE is powered on in the cell belonging to the TAI which was in the list of "forbidden 
tracking areas for roaming" before the UE was swithed off } 
then { UE attempts to attach } 

} 

9.2.1 .1 .1 7.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.3.2, 
5.5.1.2.2 and 5.5.1.2.5, and in TS 36.304 clause 5.2.4.4. 

[TS 24.301, clause 5.3.2] 

The UE shall store a list of "forbidden tracking areas for roaming", as well as a list of "forbidden tracking areas for 
regional provision of service". These lists shall be erased when the UE is switched off or when the UlCC containing the 
USIM is removed, and periodically (with a period in the range 12 to 24 hours). 



In SI mode, the UE shall update the suitable list whenever an ATTACH REJECT, TRACKING AREA UPDATE 
REJECT, SERVICE REJECT or DETACH REQUEST message is received with the EMM cause #12 "tracking area not 
allowed", #13 "roaming not allowed in this tracking area", or #15 "no suitable cells in tracking area". 

Each list shall accommodate 40 or more TAIs. When the list is full and a new entry has to be inserted, the oldest entry 
shall be deleted. 
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[TS 24.301, clause 5.5.1.2.2] 

In state EMM-DEREGISTERED, the UE initiates the attach procedure by sending an ATTACH REQUEST message to 
the MME, starting timer T3410 and entering state EMM-REGISTERED-INITIATED (see example in figure 
5.5.1.2.2.1). 



If the UE supports neither A/Gb mode nor lu mode, the UE shall handle the Old GUTI or IMSI IE in the ATTACH 
REQUEST message as follows: 

The UE shall include in the ATTACH REQUEST message a valid GUTI together with the last visited registered 
TAI, if available. If there is no vahd GUTI available, the UE shall include the IMSI in the ATTACH REQUEST 

message. 

If the UE supports A/Gb mode or lu mode, the UE shall handle the Old GUTI or IMSI IE as follows: 



- If the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a vaUd GUTI, the UE shall indicate the 
GUTI in the Old GUTI or IMSI IE. 



Otherwise the UE shall include the IMSI in the Old GUTI or IMSI IE. 



The UE shall send the ATTACH REQUEST message together with a PDN CONNECTIVITY REQUEST message 
contained in the ESM message container information element to request PDN connectivity. 



[TS 24.301, clause 5.5.1.2.5] 

If the attach request cannot be accepted by the network, the MME shall send an ATTACH REJECT message to the UE 
including an appropriate EMM cause value. 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410 and take the following actions 
depending on the EMM cause value received. 



#15 (No suitable cells in tracking area); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. Additionally, the UE shall 
reset the attach attempt counter. 

In S 1 mode, the UE shall store the current TAI in the list of "forbidden tracking areas for roaming" and enter the 
state EMM-DEREGISTERED.LIMITED-SERVICE. The UE shall search for a suitable cell in another tracking 
area or in another location area in the same PLMN according to 3GPP TS 36.304 [21]. 



[TS 36.304 subclause 5.2.4.4] 



If the highest ranked cell is an intra-frequency or inter-frequency cell which is not suitable due to being part of the "list 
of forbidden TAs for roaming" or belonging to a PLMN which is not indicated as being equivalent to the registered 
PLMN, the UE shall not consider this cell and other cells on the same frequency, as candidates for reselection for a 
maximum of 300s. If the UE enters into state any cell selection, any limitation shall be removed. If the UE is redirected 
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under E-UTRAN control to a frequency for which the timer is running, any limitation on that frequency shall be 
removed. 



9.2.1.1.17.3 Test description 

9.2.1 .1 .1 7.3.1 Pre-test conditions 

System Simulator: 

Cell I, Cell J, Cell K and Cell L are configured according to Table 6.3.2.2-1 in [18] (maximum 3 cells are 
simultaneously active): 

- Cell I and Cell K (visited PLMN, same TA) 

- Cell L (same visited PLMN, another TA) 

- Cell J (another VPLMN). 

NOTE: Different types of UE may use different methods to periodically clear the list of forbidden areas (e.g. 

every day at 12 am) for roaming. If the list is cleared while the test is being run, it may be necessary to re- 
run the test. 

UE: 

The UE is configured to initiate EPS attach. 
- The USIM contains IMSI- 1 , GUTI- 1 and TAI- 1 and EPS update status is "EU 1 : UPDATED" . 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.1.17.3.2 Test procedure sequence 

Table 9.2.1.1.17.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS configures: 

Cell 1 as the "Serving cell", 

Cell K as a "Suitable Neighbour cell", 

Cell L as a "Non-Suitable Off cell", 

Cell J as a "Non-Suitable Off cell". 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


~> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 

message, 

EIVIM cause = "No suitable cells in tracking 

area". 

(The list of "forbidden tracking areas for 

roaming" in the UE should now contain TAI-9) 


<— 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell 1 or Cell K? 


-> 


ATTACH REQUEST 


1 


F 


7 


The SS reconfigures: 

Cell 1 as a "Suitable neighbour cell". 

Cell K as the "Serving cell". 

Cell L as a "Non-Suitable Off cell", 

Cell J as a "Non-Suitable Off cell ". 










8 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell K or Cell 1? 


-> 


ATTACH REQUEST 


2 


F 


9 


The SS reconfigures: 

Cell 1 as a " Non-Suitable Off cell", 

Cell K is the "Serving cell". 

Cell L as a "Suitable Neighbour cell". 

Cell J as a "Suitable Neighbour cell". 










10 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message as 
specified on Cell L? 


-> 


ATTACH REQUEST 


3,4 


P 


11 


The SS transmits an ATTACH REJECT 

message, EIVIM cause = "Tracking area not 

allowed". 

(The list of "forbidden tracking areas for 

roaming" in the UE should now contain TAI-9 

andTAI-11) 


<— 


ATTACH REJECT 






12 


The SS releases the RRC connection. 


- 


- 


- 


- 


13 


The SS reconfigures: 

Cell 1 as the "Serving cell". 

Cell K as a "Non-Suitable Off cell". 

Cell L as a " Suitable Neighbour cell". 

Cell J as a "Non-Suitable Off cell". 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


14 


Check: Does the UE transmit the ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


5 


F 


15 


If possible (see ICS) switch off is performed. 
Otherwise the power is removed. 


- 


- 


- 


- 


16 


The UE is brought back to operation. 


- 


- 


- 


- 


17 


Void 


- 


- 


- 


- 


18 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


6 


P 
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18 
A 


The SS completes the attach procedure 
successfully and then releases the RRC - 
connection by executing steps 5 to 17 of UE 
registration procedure in TS 36.508 clause 
4.5.2.3. 










19- 
24 


Void 


- 


- 


- 


- 




At the end of this test procedure sequence, the 
UE is in end state E-UTRA idle (El) according 
to TS 36.508. 











9.2.1.1.17.3.3 Specific message contents 

Table 9.2.1.1.17.3.3-1: Message ATTACH REJECT (step 4 and 11 Table 9.2.1.1.17.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


Security header type 


0000 


"No security 
protection" 




EIVIM cause 


0000 1111 


#15 "No suitable 
cells in tracking 
area" 




ESIVI message container 


Not present 







Table 9.2.1.1.17.3.3-2: Message ATTACH REQUEST (step 10 Table 9.2.1.1.17.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 


111 


"No key is 
available" 




Old GUTI or IMS! 


IMSI-1 


GUTI has been 
deleted after 
receiving 

ATTACH REJECT 
at step 4; only 
IIVISI is available. 




Last visited registered TAI 


Not present 


TAI has been 
deleted after 
receiving 

ATTACH REJECT 
at step 4. 





9.2.1.1.18 Attach / Rejected / Not authorized for this CSG 

9.2.1.1.18.1 Test Purpose (TP) 

(1) 

with { UE has sent an ATTACH REQUEST message inclucJing a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to " Not authorized for this 
CSG " } 

then { UE shall remove the CSG ID from the allowed CSG list and search for a suitable cell in 
the same PLMN } 
} 

(2) 

with { UE in state EMM-REGISTERED and EMM- IDLE mode and the CSG ID is removed from the Allowed CSG 
list } 
ensure that { 

when { UE detects entering new tracking areas not included in the TAI list } 

then { UE attempts to enter a normal cell and does not choose a cell which not included in the 
allowed CSG list | 
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9.2.1.1.18.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.1.2.5. 

[TS 24.301, clause 5.5.1.2.5] 

#25 (Not authorized for this CSG); 

Cause #25 is only applicable when received from a CSG cell. Cause #25 received from a non-CSG cell is 
considered as an abnormal case and the behaviour of the UE is specified in subclause 5.5.1.2.6. 

If the ATTACH REJECT message with cause #25 was received without integrity protection, then the UE shall 
discard the message. 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3). Additionally, the UE shall reset the attach attempt counter and shall enter the state EMM- 
DEREGISTERED.LIMITED-SERVICE. 

The UE shall remove the CSG ID of the cell where the UE has sent the ATTACH REQUEST message from the 
Allowed CSG Ust. 

The UE shall search for a suitable cell in the same PLMN according to 3GPP TS 36.304 [21]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM 
state, GPRS update status and GPRS attach attempt counter as specified in 3GPP TS 24.008 [13] for the case 
when the normal attach procedure is rejected with the GMM cause with the same value. 

9.2.1.1.18.3 Test description 
9.2.1 .1 .18.3.1 Pre-test conditions 
System Simulator: 

- Cell A , Cell B, Cell C. 

- Cell A(TAC1, frequency 1, not a CSG cell) 
\- Cell B(TAC2, frequency 1, is a CSG cell) 
,- Cell C(TAC3, frequency 2, not a CSG cell) 

UE: 

The UE is configured to initiate EPS attach. 

- The UE has a vaHd GUTI (GUTI-1). 

- The test USIM contains IMSIl, GUTll and TAll, and EPS update status is "EUl: UPDATED". 

- The test USIM contains a allowed CSG list which include CSG ID of Cell B. 
The UE has a valid security context. 

Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.1.18.3.2 Test procedure sequence 

Table 9.2.1.1.18.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell A as a "Not Suitable cell". 

- Cell B as a "Serving cell". 

- Cell C as a "Not Suitable cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


UE initiate attach procedure and send 
ATTACH REQUEST including a PDN 
CONNECTIVITY REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with EIVIM cause = " Not authorized 
for this CSG " as specified. 


<- 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


The SS configures: 

- Cell A as a " Not Suitable cell". 

- Cell B as a " Serving cell". 

- Cell C as a " Suitable cell". 










- 


The following messages are to be observed on 
Cell C unless explicitly stated otherwise. 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 
Note: The UE shall search for a suitable cell in 
the same PLMN 


— > 


ATTACH REQUEST 


1 


P 


8 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






9 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


— > 


AUTHENTICATION RESPONSE 






10 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


11 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


— > 


SECURITY MODE COMPLETE 






- 


EXCEPTION: Steps 12a1 to 12a2 describe 
behaviour that depends on UE configuration. 


- 


- 


- 


- 


12a 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






12a 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






13 


SS responds with ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step14 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










14 


The UE transmit an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 






15 


The SS configures: 


- 


- 


- 


- 
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- Cell A as a "Non-Suitable cell". 

- Cell B as the "Serving cell". 

- Cell C as a "Not Suitable cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


16 


Check: does the UE transmits a TRACKING 
AREA UPDATE REQUEST message in the 
next 30 seconds? 


— > 


TRACKING AREA UPDATE 
REQUEST 


2 


F 


17 


The SS configures: 

- Cell A as a " Serving cell". 

- Cell B as the "Not Suitable cell". 

- Cell C as a " Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


18 


Check: does the UE transmits a TRACKING 
AREA UPDATE REQUEST message in the 
next 30 seconds? 


— > 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


19 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


20 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


— > 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 



9.2.1.1.18.3.3 Specific message contents 

Table 9.2.1.1.18.3.3-1 : Message ATTACH REJECT (step 4, Table 9.2.1.1.18.3.2-1) 



Derivation path: 36.508 table 4.7.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


Security header type 


0000 


" Plain NAS 
message, not 
security protected " 




EMM cause 


00011001 


#25 " Not authorized 
for this CSG " 




ESM message container 


Not present 







Table 9.2.1.1.18.3.3-2: SystemlnformationBlockTypel for Cell A, B, C(Pre-test conditions and all steps 

in Table 9.2.1.1.18.3.2-1) 



Derivation Path: 36.508 clause 4.4.3-2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








csg-lndication 


TRUE 




CellB 




FALSE 




Cell A 




FALSE 




CellC 


csg-ldentity 


Not present 




Cell A 




Not present 




CellC 




'000 0000 0000 0000 
0000 0000 001 0'B 




CellB 



9.2.1.1.19 
9.2.1.1.19.1 
(1) 



Attach / Abnormal case / Failure due to non integrity protection 
Test Purpose (TP) 



with { UE has not performed NAS security mode control procedure } 
ensure that { 

when { UE receives an ATTACH ACCEPT messages without NAS integrity protection 
then { UE discards this message } 
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(2) 

with { a valid NAS security context exists and the NAS security mode control procedure has been 
successfully completed in the network and the UE } 
ensure that { 

when { UE receives a NAS signalling message without integrity protection } 
then { UE discards this NAS signalling message } 
} 

(3) 

with { a valid NAS security context exists and the NAS security mode control procedure has been 
successfully completed in the network and the UE } 
ensure that { 

when { UE receives a security protected NAS signalling message with the Message authentication 
code set to an incorrect value } 

then { UE discards this NAS signalling message } 

} 

(4) 

with { a valid NAS security context exists and the NAS security mode control procedure has been 
successfully completed in the network and the UE } 
ensure that { 

when { UE receives a NAS signalling message with integrity protection } 
then { UE sends the response as a security protected NAS message } 
} 

9.2.1 .1 .1 9.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 4.4.4.1, 
4.4.4.2 and 5.5.2.2. 

[TS 24.301, clause 4.4.4.1] 

For the UE, integrity protected signalling is mandatory for the NAS messages once a valid EPS security context exists 
and has been taken into use. For the network, integrity protected signalling is mandatory for the NAS messages once a 
secure exchange of NAS messages has been established for the NAS signalling connection. Integrity protection of all 
NAS signalling messages is the responsibility of the NAS. It is the network which activates integrity protection. 



[TS 24.301, clause 4.4.4.2] 

Except the messages listed below, no NAS signalling messages shall be processed by the receiving EMM entity in the 
UE or forwarded to the ESM entity, unless the secure exchange of NAS messages has been established for the NAS 
signalling connection: 



EMM messages: 

- IDENTITY REQUEST (if requested identification parameter is IMSI); 

- AUTHENTICATION REQUEST; 

- AUTHENTICATION REJECT; 

- ATTACH REJECT; 

- DETACH REQUEST; 

- DETACH ACCEPT (for non switch off); 

- TRACKING AREA UPDATE REJECT; 

- SERVICE REJECT. 

NOTE: These messages are accepted by the UE without integrity protection, as in certain situations they are sent 
by the network before security can be activated. 
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All ESM messages are integrity protected. 

Once the secure exchange of NAS messages has been established, the receiving EMM or ESM entity in the UE shall not 
process any NAS signalling messages unless they have been successfully integrity checked by the NAS. If NAS 
signalling messages, having not successfully passed the integrity check, are received, then the NAS in the UE shall 
discard that message. If any NAS signalling message is received as not integrity protected even though the secure 
exchange of NAS messages has been established by the network, then the NAS shall discard this message. 

[TS 24.301, clause 5.5.2.2.1] 



If the UE is to be switched off, the UE shall: 

delete the current EPS security context stored in the UE as specified in annex C, if it is a mapped EPS security 
context; 

store the native EPS security context (if it is valid), as specified in annex C; and 

try for a period of 5 seconds to send the DETACH REQUEST message. During this period, the UE may be 
switched off as soon as the DETACH REQUEST message has been sent. 



9.2.1.1.19.3 Test description 

9.2.1.1.19.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI-1 
UE: 

- The test USIM contains GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 
The UE is configured to initiate EPS attach. 

Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1 .1 .19.3.2 Test procedure sequence 

Table 9.2.1.1.19.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 

Note: The ATTACH REQUEST message 
shall be sent as a security protected NAS 
message (see TS 24.301 - clause 9.1 ). 


-> 


ATTACH REQUEST 








EXCEPTION: Steps 2Aa1 to 2Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










2A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






2A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






3 


The SS transmits an ATTACH ACCEPT 
although UE has not successfully completed 
any NAS security mode control procedure. 

Note: The ATTACH ACCEPT message is 
sent as a plain NAS message (see TS 24.301 
-clause 9.1). 


<- 


ATTACH ACCEPT 






4 


Check: Does the UE transmit an ATTACH 
COMPLETE message within the next Is? 

Note: the UE discards ATTACH ACCEPT 
message without security protection 


-> 


ATTACH COMPLETE 


1 


F 


5 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






6 


The UE transmits an AUTHENTICATION 
RESPONSE message to establish mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






7 


The SS transmits a SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


8 


The UE transmits a SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 






9 


The SS transmits an ATTACH ACCEPT 
without integrity protection. 

Note: The ATTACH ACCEPT message is sent 
as a plain NAS message (see TS 24.301 - 
clause 9.1). 


<- 


ATTACH ACCEPT 






10 


Check: Does the UE transmit an ATTACH 
COMPLETE message within the next Is? 

Note: the UE discards ATTACH ACCEPT 
message without security protection 


-> 


ATTACH COMPLETE 


2 


F 


11 


The SS transmits an ATTACH ACCEPT with 
integrity protection with the Message 
authentication code set to an incorrect value. 

Note: The ATTACH ACCEPT message is sent 
as a security protected NAS message (see TS 


<— 


ATTACH ACCEPT 
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24.301 -clause 9.1). 










12 


Check: Does the UE transmit an ATTACH 
COMPLETE message within the next Is? 

Note: the UE discards ATTACH ACCEPT 
message because the integrity checl< is failed. 


-> 


ATTACH COMPLETE 


3 


F 


13 


The SS transmits an ATTACH ACCEPT 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT REOUEST. 
Note: The ATTACH ACCEPT message is sent 
as a security protected NAS message (see TS 
24.301 -clause 9.1). 

Nota 1 : SS allocates a PDN address of a PDN 
type which is compliant with from the PDN type 
requested by the UE. 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 14 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U- 
plane if requested by the UE. 










14 


Check: Does the UE transmit an ATTACH 
C0I\/1PLETE message including a ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message as specified? 

Note: The ATTACH COIVIPLETE message is 
sent as a security protected NAS message 
(see TS 24.301 -clause 9.1). 


-> 


ATTACH COMPLETE 


4 


P 


15 


The SS releases the RRC connection. 


- 


- 


- 


- 


16 


Check : Does the test results of CALL generic 
procedure [18] indicate that the UE is in E- 
UTRA EMM-REGISTERED state with S-TMSI- 
2? 

Note: This step verifies that the UE has 
correctly stored the GUTI-4 which was 
included in the protected ATTACH ACCEPT 
messages. 






4 






At the end of this test procedure sequence, the 
UE is in end state E-UTRA idle (El) according 
to TS 36.508. 











9.2.1.1.19.3.3 Specific message contents 

Table 9.2.1.1.19.3.3-1: Message ATTACH ACCEPT (steps 3 and 9, Table 9.2.1.1.19.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 (Plain NAS message) 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 


GUTI-2 


The SS chooses a 
value different 
fromGUTI-1. 





NOTE: This message is voluntarily sent as a plain NAS message (see TS 24.301 - clause 9.1). 
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Table 9.2.1.1.19.3.3-2: Message SECURITY PROTECTED NAS MESSAGE (step 11, Table 

9.2.1.1.19.3.2-1) 



Derivation path: 36.508 table 4.7.1 -1 with condition CIPHERED 


Information Element 


Value/Remark 


Comment 


Condition 


IVIessage authentication code 


Incorrect value 


The SS chooses 
an incorrect value 
which fails 
integrity checks, 
(e.g. 00000000) 




NAS message 


ATTACH ACCEPT (see 
table 9.2.1.1.19.3.3-3) 







Table 9.2.1 .1 .1 9.3.3-3: Message ATTACH ACCEPT (step 1 1 , Table 9.2.1 .1 .19.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 (Security protected NAS message) 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 


GUTI-3 


The SS chooses a 
value different 
from GUTI-1 and 
GUTI-2. 





Table9.2.1.1.19.3.3-4:MessageATTACH ACCEPT (step 13, Table 9.2.1. 1.1 9.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 (Security protected NAS message) 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 


GUTI-4 


The SS chooses a 
value different 
from GUTI-1, 
GUTI-2 and GUTI- 
3. 





9.2.1.1.20 



9.2.1.1.20.1 



Attach / Abnormal case / Access barred because of access class barring or NAS 
signalling connection establishment rejected by the network 

Test Purpose (TP) 



(1) 

with { UE switched-on, and not yet attached to EPS } 
ensure that { 

when { Access is barred for signalling in the cell UE is camping [Access Class barred in System 
information] } 

then { the UE will not initiate any Attach procedure on the current cell } 
} 

(2) 

with { UE switched-on, and not yet attached to EPS } 
ensure that { 

when { Access is barred for signalling in the cell UE is camping [T3 02 runiing due to 
RRCConnectionReject message reception] } 

then { the UE will not initiate any Attach procedure on the current cell } 
} 

(3) 

with { UE switched-on, and not yet attached to EPS } 
ensure that { 

when { Access is not barred for signalling in the cell UE is camping } 
then { the UE will initiate Attach procedure on the current cell } 
} 

(4) 

with { UE switched-on, and not yet attached to EPS } 
ensure that { 
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when { Access was barred for signalling in the cell and UE has reselected an new cell where access 
for "signalling" is granted } 

then { the UE will initiate Attach procedure on the new cell } 
} 

9.2.1 .1 .20.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.1.2.6 and 
TS 36.331, clause 5.3.3.2 

[TS 24.301, clause 5.5.1.2.6] 

The following abnormal cases can be identified: 

a) Access barred because of access class barring or NAS signalling connection establishment rejected by the 
network 

If access is barred for "signalling" (see 3GPP TS 36.331 [22]), the attach procedure shall not be started. The UE 
stays in the current serving cell and applies the normal cell reselection process. The attach procedure is started as 
soon as possible, i.e. when access for "signalling" is granted on the current cell or when the UE moves to a cell 
where access for "signalling" is granted. 

[TS 36.331, clause 5. 3.3.2] 

1> else (the UE is establishing the RRC connection for mobile originating signalling): 

2> if timer T302 or T305 is running: 

3> consider access to the cell as barred; 

2> else if SystemlnformationBlockTypel includes the ac-Barringlnformation and the ac-BarringForMO- 
Signalling is present: 

3> if the UE has one or more Access Classes, as stored on the USIM, with a value in the range 1 1..15, which 
is valid for the UE to use according to TS 22.01 1 [10] and TS 23. 122 [11], and 

3> for at least one of these Access Classes the corresponding bit in the ac-BarringForSpecialAC contained in 
ac-BarringForMO-Signalling is set to zero: 

4> consider access to the cell as not barred; 

3> else: 

4> draw a random number 'rand' uniformly distributed in the range: < rand < 1 ; 

4> if 'rand' is lower than the value indicated by accessProbabilityFactor included in 
accessBarringForSignalUng: 

5> consider access to the cell as not barred; 

4> else: 

5> consider access to the cell as barred; 

2> else: 

3> consider access to the cell as not barred; 

9.2.1.1.20.3 Test description 
9.2.1 .1 .20.3.1 Pre-test conditions 
System Simulator: 

Cell I and Cell K are configured according to Table 6.3.2.2-1 in [18]. 
- Cell 1 and Cell K belongs to TAl-9(home PLMN) 
UE: 
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The UE is configured to initiate EPS attach. 
- The test USIM contains a valid GUTIl and TAI9, and EPS update status is "EUl: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1062 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



9.2.1 .1 .20.3.2 Test procedure sequence 

Table 9.2.1.1.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS set the cell type of cell 1 to the "Serving 
cell", set the cell type of cell K to the " Non- 
Suitable cell", and set 

SystemlnformationBlockType2 parameters as 
described below. 
The UE is switched on. 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


Check: for 5 seconds if UE initiates Attach 
procedure and hence transmits RRC 
Connection Request? 






1 


F 


3 


The SS transmits a Paging message including 
systemlnfoModification. 


- 


- 


- 


- 


4 


The SS changes 

SystemlnformationBlockType2 parameters to 
default parameters defined in [18]. 










5 


The UE transmits RRC Connection Request 


- 


- 


- 


- 


6 


SS responds with RRCConnectionReject 
message with IE waitTime set to 10 
seconds(Max Value). 










7 


Check: for 10 seconds if UE initiates Attach 
procedure and hence transmits RRC 
Connection Request? 






2 


F 


8 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


3 


P 


9 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






10 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






11 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


12 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 12Aa1 to 12Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










12 
Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






12 

Aa 

2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






13 


SS responds with ATTACH ACCEPT message 
including a valid TAI list. The ACTIVATE 
DEFAULT EPS BEARER CONTEXT 
REQUEST message is piggybacked in 
ATTACH ACCEPT message 

Note: The IP addresses of the UE are not 
allocated in this test so PDN address is not 
included in the message.. 


<- 


ATTACH ACCEPT 






14 


Check: does the UE transmit an ATTACH 


— > 


ATTACH COMPLETE 


- 


- 
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COMPLETE message including an ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message? 










15 


The SS releases the RRC connection. 


- 


- 


- 


- 


16 


The UE is switched off. 


- 


- 


- 


- 


17 


The SS set the cell type of cell 1 to the "Serving 
cell", set the cell type of cell K to the " Non- 
Suitable cell", and set 

SystemlnformationBlockType2 parameters as 
described below. 
The UE is switched on. 










18 


Check: for 5 seconds if UE initiates Attach 
procedure and hence transmits RRC 
Connection Request? 






1 


F 


19 


The SS set the cell type of cell K to the " 
Suitable cell". 










- 


The following messages are to be observed on 
Cell K unless explicitly stated otherwise. 


- 


- 


- 


- 


20 


Check: Does the UE transmit an ATTACH 
REOUEST message including a PDN 
CONNECTIVITY REOUEST message? 


~> 


ATTACH REOUEST 


4 


P 


21 


The attach procedure is completed and the 
RRC connection is released by executing 
steps 5 to 17 of TS 36.508 sub clause 4.5.2.3. 











9.2.1 .1 .20.3 Specific message contents 

Table 9.2.1.1.20.3.3-1 : SystemlnformationBlockType2 for Cell Al (preamble) 



Derivation Path: 36.508, Table 4.4.3.3-1 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEOUENCE { 








accessBarringlnformation SEOUENCE { 








accessBarringForEmergencyCalls 


FALSE 






accessBarringForSignalling SEOUENCE { 








accessProbabilityFactor 


pOO 






accessBarringTime 


s4 






accessClassBarringList SEOUENCE (SIZE 
(maxAC)) OF SEQUENCE { 


5 entries 






accessClassBarring[1 ] 


TRUE 






accessClassBarring[2] 


TRUE 






accessClassBarring[3] 


TRUE 






accessClassBarring[4] 


TRUE 






accessClassBarring[5] 


TRUE 






} 








} 








accessBarringForOriginatinqCalls 


Not present 






1 








} 









9.2.1 .1 .21 Attach / Abnormal case / Success after several attempts due to no network 

response 

9.2.1.1.21.1 Test Purpose (TP) 

(1) 

with { UE has sent an ATTACH REQUEST message and started T3410 timer} 
ensure that { 

when { T3410 timer epires } 

then { the UE release NAS signalling connection locally} 
} 

(2) 

with { UE has sent an ATTACH REQUEST message and T3410 timer expired} 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1064 ETSI TS 136 523-1 V9.1.1 (2010-07) 

ensure that { 

when { T3411 timer epires and attach attempt counter is less than 5 } 
then { the UE restarts the attach procedure} 

(3) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { Lower Layer failure {RRC Connection is released) before the ATTACH ACCEPT or ATTACH REJECT 
message is received, T3411 has expired and attach attempt counter is less than 5} 

then { the UE restarts the attach procedure } 
} 

9.2.1 .1 .21 .2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in; TS 24.301, clause 5.5.1.2.6 & 
10.2 

[TS 24.301, clause 5.5.1.2.6] 

The following abnormal cases can be identified: 



b) Lower layer failure or release of the NAS signalling connection before the ATTACH ACCEPT or ATTACH 
REJECT message is received 

The attach procedure shall be aborted, and the UE shall proceed as described below. 

c) T3410 timeout 

The UE shall abort the attach procedure and proceed as described below. The NAS signalling connection shall 
be released locally. 



For the cases b, c, and d the UE shall proceed as follows: 

Timer T3410 shall be stopped if still running. The attach attempt counter shall be incremented, unless it was 
already set to 5. 

If the attach attempt counter is less than 5: 

- timer T341 1 is started and the state is changed to EMM-DEREGISTERED.ATTEMPTING-TO-ATTACH. 
When timer T341 1 expires the attach procedure shall be restarted. 

[TS 24.301, clause 10.2] 
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Table 10.2.1 : EPS mobility management timers - UE side 



TIMER 
NUM. 


TIMER 
VALUE 


STATE 


CAUSE OF START 


NORMAL STOP 


ON 
EXPIRY 














T3410 


15s 


EMM- 

REGISTERED- 

INITIATED 


ATTACH REQUEST sent 


ATTACH ACCEPT 
received 

ATTACH REJECT 
received 


Start T341 1 or 

T3402 as described 

in 

subclause 5.5.1.2.6 


T3411 


10s 


EMM- 

DEREGISTERED. 

Al IbMPTING- 

TO-ATTACH 

EMM- 
REGISTERED. 
Al IbMPTING- 
TO-UPDATE 


At attach failure due to lower 
layer failure, T3410 timeout or 
attach rejected with other EMM 
cause values than those treated 
in subclause 5.5.1.2.5. 

At tracking area updating failure 
due to lower layer failure, T3430 
timeout or TAU rejected with 
other EMM cause values than 
those treated in 
subclause 5.5.3.2.5. 


ATTACH REQUEST 

sent 

TRACKING AREA 

UPDATE 

REQUEST sent 


Retransmission of 
the ATTACH 
REQUEST or 
TRACKING AREA 
UPDATE 
REQUEST 



9.2.1.1.21.3 Test description 

9.2.1 .1 .21 .3.1 Pre-test conditions 

System Simulator: 

- Cell A 

- Cell A is the serving cell with TAIl (PLMNlH-TACl); 
UE: 

The UE is configured to initiate EPS attach. 

- The test USIM is inserted. 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1 .1 .21 .3.2 Test procedure sequence 

Table 9.2.1.1.21.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmit an ATTACH REQUEST 
message. 


-> 


ATTACH REQUEST 


- 


- 


3 


The SS waits 20 seconds (1 5 seconds T341 
and 5 seconds half of T341 1 ). 


- 




- 


- 


4 


SS transmits an IDENTITY REQUEST 
message requesting IIVISI in the IE Identity 
type 


<- 


IDENTITY REQUEST 








Exception: In parallel with steps 5 and 6, the 
parallel behaviour defined in table 
9.2.1.1.1.3.2-2 is running. 










5 


The SS waits 5 seconds (half of T341 1 ) 


- 


- 


- 


- 


6 


Check: The UE transmit an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


2 


P 


7 


The SS releases the RRC connection. 










8 


The SS waits 10 seconds (T341 1). 










9 


Check: The UE transmits an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


3 


P 


10 


The attach procedure is completed and the 
RRC connection is released by executing 
steps 5 to 17 of TS 36.508 sub clause 4.5.2.3. 










Table 9.2.1.1.21.3.2-2 : Parallel behaviour 


St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does the UE sends an IDENTITY 
RESPQNSE message? 


-> 


IDENTITY RESPONSE 


1 


F 



9.2.1.1.21.3.3 

None 

9.2.1.1.22 

9.2.1.1.22.1 

(1) 



Specific message contents 

Attach / Abnormal case / Unsuccessful attach after 5 attempts 
Test Purpose (TP) 



with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { T3411 has expired and attach attempt counter is equal to 5) 
then { the UE stops attach attempts and starts timer T34 02 } 



9.2.1.1.22.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.1.2.6 & 
10.2 

[TS 24.301, clause 5.5.1.2.6] 

The following abnormal cases can be identified: 



b) Lower layer failure or release of the NAS signalling connection before the ATTACH ACCEPT or ATTACH 
REJECT message is received 
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The attach procedure shall be aborted, and the UE shall proceed as described below. 

c) T3410 timeout 

The UE shall abort the attach procedure and proceed as described below. The NAS signalling connection shall 
be released locally. 



For the cases b, c, and d the UE shall proceed as follows: 

Timer T3410 shall be stopped if still running. The attach attempt counter shall be incremented, unless it was 
already set to 5. 

If the attach attempt counter is less than 5: 

- timer T341 1 is started and the state is changed to EMM-DEREGISTERED.ATTEMPTING-TO-ATTACH. 
When timer T341 1 expires the attach procedure shall be restarted. 

If the attach attempt counter is equal to 5: 

the UE shall delete any GUTI, TAI list, last visited registered TAI, list of equivalent PLMNs and KSI, shall set 
the update status to EU2 NOT UPDATED, and shall start timer T3402. The state is changed to EMM- 
DEREGISTERED.ATTEMPTING-TO-ATTACH or optionally to EMM-DEREGISTERED.PLMN-SEARCH in 
order to perform a PLMN selection according to 3GPP TS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM 
state, GPRS update status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as 
specified in 3GPP TS 24.008 [13] for the abnormal case when a normal attach procedure fails and the attach 
attempt counter is equal to 5. 



[TS 24.301, clause 10.2] 



Table 10.2.1 : EPS mobility management timers - UE side 



TIMER 
NUM. 


TIMER 
VALUE 


STATE 


CAUSE OF START 


NORMAL STOP 


ON 
EXPIRY 


T3402 


Default 12 

min. 

N0TE1 


EMM- 
DEREGISTERED 
EMM- 
REGISTERED 


At attach failure and the attempt 
counter is equal to 5. 
At tracking area updating failure 
and the attempt counter is equal 
to 5. 


ATTACH REQUEST 

sent 

TRACKING AREA 

UPDATE 

REQUEST sent 


Initiation of the 
attach procedure or 
TAU procedure 














T3410 


15s 


EMM- 

REGISTERED- 

INITIATED 


ATTACH REQUEST sent 


ATTACH ACCEPT 
received 

ATTACH REJECT 
received 


Start T341 1 or 

T3402 as described 

in 

subclause 5.5.1.2.6 


T3411 


10s 


EMM- 

DEREGISTERED. 

Al IbMPTING- 

TO-ATTACH 

EMM- 
REGISTERED. 
Al IbMPTING- 
TO-UPDATE 


At attach failure due to lower 
layer failure, T3410 timeout or 
attach rejected with other EMM 
cause values than those treated 
in subclause 5.5.1.2.5. 

At tracking area updating failure 
due to lower layer failure, T3430 
timeout or TAU rejected with 
other EMM cause values than 
those treated in 
subclause 5.5.3.2.5. 


ATTACH REQUEST 

sent 

TRACKING AREA 

UPDATE 

REQUEST sent 


Retransmission of 
the ATTACH 
REQUEST or 
TRACKING AREA 
UPDATE 
REQUEST 














Note 1 : The default value of this timer is used if the network does not indicate another value in an EMM signalling 
procedure. 
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Test description 
Pre-test conditions 



UE: 



9.2.1.1.22.3 
9.2.1.1.22.3.1 
System Simulator: 

- Cell A 

- Cell A is the serving cell with TAIl (PLMNl+TACl); 

- T3402issettodefauh(12min.). 

The UE is configured to initiate EPS attach. 

- The test USIM is inserted. 

- The test USIM contains a valid GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
9.2.1 .1 .22.3.2 Test procedure sequence 

Table 9.2.1.1.22.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message. (Attach attempt counter = 1) 


-> 


ATTACH REQUEST 


- 


- 


3 


The SS waits 25 seconds (15 seconds T341 
and 10 seconds T3411). 


- 




- 


- 


4 


The UE transmits an ATTACH REQUEST 
message. (Attach attempt counter = 2) 


-> 


ATTACH REQUEST 


- 


- 


5 


The SS releases the RRC connection. 










6 


The SS waits 10 seconds ( T341 1). 










7 


The UE transmits an ATTACH REQUEST 
message. (Attach attempt counter = 3) 


-> 


ATTACH REQUEST 


- 


- 


8 


The SS waits 25 seconds (1 5 seconds T341 
and 10 seconds T3411). 


- 




- 


- 


9 


The UE transmits an ATTACH REQUEST 
message. (Attach attempt counter = 4) 


-> 


ATTACH REQUEST 


- 


- 


10 


The SS releases the RRC connection. 










11 


The SS waits 10 seconds ( T341 1). 










12 


The UE transmits an ATTACH REQUEST 
message. (Attach attempt counter = 5) 


-> 


ATTACH REQUEST 






13 


The SS releases the RRC connection. 










14 


Check: Does the UE transmits an ATTACH 
REQUEST message after 12 minutes (default 
value of T3402, after step 13? 


-> 


ATTACH REQUEST 


1 


P 


15 


The attach procedure is completed and the 
RRC connection is released xecutinc 
steps 5 to 17 of TS 36.508 sub clause 4.5.2.3. 
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9.2.1 .1 .22.3.3 Specific message contents 

Table 9.2.1.1.22.3.3-1: Message ATTACH REQUEST (step 14, Table 9.2.1.1.22.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 


111 


"No key is 
available" 




Old GUTI or IMSI 


IMSI-1 


GUTI has been 
deleted; only IMSI 
is available. 




Last visited registered TAI 


Not present 


TAI has been 
deleted. 





9.2.1.1.23 
9.2.1.1.23.1 
(1) 



Attach / Abnormal case / Repeated rejects for network failures 
Test Purpose (TP) 



with { UE having valid GUTI, has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to #17 or #22 and attach 
attempt counter is less than 5} 

then { UE starts timer T3411 and shall not deleate stored GUTI } 

when { Timer T3411 expires} 

then { UE restarts attach procedure } 



(2) 

with { UE having valid GUTI, has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to #22 and attempt counter 
is set to 5 } 

then { the UE stops attach attempts and starts timer T34 02, shall delete stored GUTI } 

} 

NOTE: Only representative coverage for various abnormal reject causes is provided. 

9.2.1 .1 .23.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.1.2.5, 
5.5.1.2.6, 9.9.3.9 & 10.2 

[TS 24.301, clause 5.5.1.2.5] 

If the attach request cannot be accepted by the network, the MME shall send an ATTACH REJECT message to the UE 
including an appropriate EMM cause value. If the attach procedure fails due to a default EPS bearer setup failure, an 
ESM procedure failure, or operator determined barring is applied on default EPS bearer context activation during attach 
procedure, the MME shall combine the ATTACH REJECT message with a PDN CONNECTIVITY REJECT message 
contained in the ESM message container information element. In this case the EMM cause value in the ATTACH 
REJECT message shall be set to #19 "ESM failure". 

Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410 and take the following actions 
depending on the EMM cause value received. 



Other values are considered as abnormal cases. The behaviour of the UE in those cases is specified in 
subclause 5.5.1.2.6. 

[TS 24.301, clause 5.5.1.2.6] 

The following abnormal cases can be identified: 
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d) ATTACH REJECT, other EMM cause values than those treated in subclause 5.5.1.2.5 

Upon reception of the EMM cause #19, "ESM failure", the UE may set the attach attempt counter to 5. Upon 
reception of the EMM causes #95, #96, #97, #99 and #1 1 1 the UE should set the attach attempt counter to 5. 

The UE shall proceed as described below. 



For the cases b, c, and d the UE shall proceed as follows: 

Timer T3410 shall be stopped if still running. The attach attempt counter shall be incremented, unless it was 
already set to 5. 

If the attach attempt counter is less than 5: 

- timer T341 1 is started and the state is changed to EMM-DEREGISTERED.ATTEMPTING-TO-ATTACH. 
When timer T341 1 expires the attach procedure shall be restarted. 
If the attach attempt counter is equal to 5: 

the UE shall delete any GUTI, TAI list, last visited registered TAI, list of equivalent PLMNs and KSI, shall set 
the update status to EU2 NOT UPDATED, and shall start timer T3402. The state is changed to EMM- 
DEREGISTERED.ATTEMPTING-TO-ATTACH or optionally to EMM-DEREGISTERED.PLMN-SEARCH in 
order to perform a PLMN selection according to 3GPP TS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM 
state, GPRS update status, P-TMSl, P-TMSI signature, RAI and GPRS ciphering key sequence number as 
specified in 3GPP TS 24.008 [13] for the abnormal case when a normal attach procedure fails and the attach 
attempt counter is equal to 5. 



[TS 24.301, clause 9.9.3.9] 



Table 9.9.3.9.1 : EMM cause information element 



Cause value (octet 2) 

Bits 

8 7 6 5 4 3 2 1 

10 1 

10 10 

10 11 

10 



1 
1 



1 



1 1 
1 1 
10 111 



Network failure 

CS domain not available 

ESM failure 

MAC failure 

Synch failure 

Congestion 

UE security capabilities mismatch 



Any other value received by the mobile station shall be treated as 01 10 1111, "protocol 
error, unspecified". Any other value received by the network shall be treated as 01 10 
1111, "protocol error, unspecified". 



[TS 24.301, clause 10.2] 
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Table 10.2.1 : EPS mobility management timers - UE side 



TIMER 
NUM. 


TIMER 
VALUE 


STATE 


CAUSE OF START 


NORMAL STOP 


ON 
EXPIRY 


T3402 


Default 12 

min. 

N0TE1 


EMM- 
DEREGISTERED 
EMM- 
REGISTERED 


At attach failure and the attempt 
counter is equal to 5. 
At tracking area updating failure 
and the attempt counter is equal 
to 5. 


ATTACH REQUEST 

sent 

TRACKING AREA 

UPDATE 

REQUEST sent 


Initiation of the 
attach procedure or 
TAU procedure 














T3410 


15s 


EMM- 

REGISTERED- 

INITIATED 


ATTACH REQUEST sent 


ATTACH ACCEPT 
received 

ATTACH REJECT 
received 


Start T341 1 or 

T3402 as described 

in 

subclause 5.5.1.2.6 


T3411 


10s 


EMM- 

DEREGISTERED. 

Al IbMPTING- 

TO-ATTACH 

EMM- 
REGISTERED. 
Al IbMPTING- 
TO-UPDATE 


At attach failure due to lower 
layer failure, T3410 timeout or 
attach rejected with other EMM 
cause values than those treated 
in subclause 5.5.1.2.5. 

At tracking area updating failure 
due to lower layer failure, T3430 
timeout or TAU rejected with 
other EMM cause values than 
those treated in 
subclause 5.5.3.2.5. 


ATTACH REQUEST 

sent 

TRACKING AREA 

UPDATE 

REQUEST sent 


Retransmission of 
the ATTACH 
REQUEST or 
TRACKING AREA 
UPDATE 
REQUEST 














Note 1 : The default value of this timer is used if the network does not indicate another value in an EMM signalling 
procedure. 



9.2.1.1.23.3 Test description 

9.2.1 .1 .23.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

- Cell A is the serving cell with TAIl (PLMNlH-TACl); 

- T3402issettodefauh(12min.). 
UE: 

The test USIM is inserted. 

- The test USIM contains a valid GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 

Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1 .1 .23.3.2 Test procedure sequence 

Table 9.2.1.1.23.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message. (Attach attempt counter = 1) 


-> 


ATTACH REQUEST 


- 


- 


3 


The SS transmits an ATTACH REJECT 
message, ElVIIVI cause = Networl< failure (#17) 


<~ 


ATTACH REJECT 


- 


- 


4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


The SS waits 10 seconds (T341 1). 


- 


- 


- 


- 


6 


Check: does the UE transmit an ATTACH 
REQUEST message? (Attach attempt counter 
= 2) 


-> 


ATTACH REQUEST 


1 


P 


7 


The SS transmits an ATTACH REJECT 
message, EIVIM cause = Network failure (#17) 


<— 


ATTACH REJECT 


- 


- 


8 


The SS releases the RRC connection. 


- 


- 


- 


- 


9 


The SS waits 1 seconds (T341 1 ). 


- 


- 


- 


- 


10 


Check: does the UE transmit an ATTACH 
REQUEST message? (Attach attempt counter 
= 3) 


-> 


ATTACH REQUEST 


1 


P 


11 


The SS transmits an ATTACH REJECT 
message, EMM cause = Congestion (#22) 


<— 


ATTACH REJECT 


- 


- 


12 


The SS releases the RRC connection. 


- 


- 


- 


- 


13 


The SS waits 1 seconds (T341 1 ). 


- 


- 


- 


- 


14 


Check: does the UE transmit an ATTACH 
REQUEST message? (Attach attempt counter 
= 4) 


-> 


ATTACH REQUEST 






15 


The SS transmits an ATTACH REJECT 
message, EMM cause = Congestion (#22) 


<- 


ATTACH REJECT 


1 


- 


16 


The SS releases the RRC connection. 


- 


- 


- 


- 


17 


The SS waits 1 seconds ( T341 1 ). 


- 


- 


- 


- 


18 


The UE transmits an ATTACH REQUEST 
message. (Attach attempt counter = 5) 


-> 


ATTACH REQUEST 


1 


P 


19 


The SS transmits an ATTACH REJECT 
message, EMM cause = Congestion (#22) 


<— 


ATTACH REJECT 


- 


- 


20 


The SS releases the RRC connection. 


- 


- 


- 


- 


21 


The SS waits 12 minutes (default value of 
T3402). 


- 


- 


- 


- 


22 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


2 


P 


23 


The attach procedure is completed and the 
RRC connection is released by executing 
steps 5 to 17 of TS 36.508 sub clause 4.5.2.3. 











9.2.1 .1 .23.3.3 Specific message contents 

Table 9.2.1.1. 23.3.3-1 : Message ATTACH REQUEST (step 2, 6, 10 &14 Table 9.2.1.1.24.2-1) 



Derivation path: TS 36.508 table 4.7.2.-4 


Information Element 


Value/Remark 


Comment 


Condition 


NAS key set identifier 


Any allowed value other 
than'111'B 


"Stored key is 
available" 




Old GUTI or IMSI 


GUTI-1 


As stored in USIM 




Last visited registered TAI 


TAI-1 


Stored TAI. 
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Table 9.2.1.1. 23.3.3-2: Message ATTACH REJECT (steps 3 & 7 Table 9.2.1.1.23.3.2-1) 



Derivation path: 36.508 table 4.7.2.3 


Information Element 


Value/Remark 


Comment 


Condition 


Security header type 

EIVIM cause 

ESM message container 


0000 

00010001 
Not present 


" Plain NAS 
message, not 
security protected 

#17 "Network 
failure " 





Table 9.2.1.1. 23.3.3-3: Message ATTACH REJECT (steps 11, 15 & 19 Table 9.2.1.1.23.3.2-1) 



Derivation path: 36.508 table 4.7.2.3 


Information Element 


Value/Remark 


Comment 


Condition 


Security header type 

EIVIM cause 

ESM message container 


0000 

00010110 
Not present 


" Plain NAS 
message, not 
security protected 

#22 "Congestion " 





Table 9.2.1.1.23.3.3-4: Message ATTACH REQUEST (step 22, Table 9.2.1.1.23.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2.4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 


111 


"No key is 
available" 




Old GUTI or IMSI 


IMSI-1 


GUTI has been 
deleted; only IMSI 
is available. 




Last visited registered TAI 


Not present 


TAI has been 
deleted. 





9.2.1.1.24 
9.2.1.1.24.1 
(1) 



Attach / Abnormal case / Change of cell into a new tracking area 
Test Purpose (TP) 



with { UE has sent an ATTACH Request message and ATTACH ACCEPT message is not received 
ensure that { 

when { UE reselects a cell belonging to a new tracking area } 
then { the UE restarts the attach procedure } 



(2) 

with { UE has sent an ATTACH REQUEST message and received ATTACH ACCEPT message containing GUTI } 
ensure that { 

when { UE reselects a cell belonging to a new tracking area}} 
then { the UE restarts the attach procedure} 



9.2.1 .1 .24.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.1.2.6. 

[TS 24.301, clause 5.5.1.2.6] 

The following abnormal cases can be identified: 
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e) Change of cell into a new tracking area 

If a cell change into a new tracking area occurs before the attach procedure is completed, the attach procedure 
shall be aborted and re-initiated immediately. If a tracking area border is crossed when the ATTACH ACCEPT 
message has been received but before an ATTACH COMPLETE message is sent, the attach procedure shall be 
re-initiated. If a GUTI was allocated during the attach procedure, this GUTI shall be used in the attach 
procedure. 

9.2.1.1.24.3 Test description 

9.2.1 .1 .24.3.1 Pre-test conditions 

System Simulator: 

- Cell A and B 

- Cell A is the serving cell with TAIl (PLMNlH-TACl); 

- Cell B is the non-suitable cell with TAI2 (PLMN1H-TAC2); 
UE: 

The UE is configured to initiate EPS attach. 
- The test USIM is inserted. 

- The UE has no vahd GUTI. 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1 .1 .24.3.2 Test procedure sequence 

Table 9.2.1.1.24.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmit an ATTACH REQUEST 
message in Cell A including a PDN 
CONNECTIVITY REQUEST message. 


~> 


ATTACH REQUEST 






3 


The SS configures: 

- Cell B as a "serving cell" 

- Cell A as a "non-suitable cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


4 


Check: Does the UE transmit an ATTACH 
REQUEST message in Cell B including a PDN 
CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


1 


P 


4A 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






5 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






6 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


7 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 8a to 8b describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










8a 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






8b 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






9 


The SS configures: 

- Cell A as a "serving cell" 


- 


- 


- 


- 


10 


SS is configured to not allocate any UL grant 
or respond to any PRACH preambles for 
ATTACH COMPLETE in Cell B. 










11 


SS responds with ATTACH ACCEPT message 
including a valid TAI list. The ACTIVATE 
DEFAULT EPS BEARER CONTEXT 
REQUEST message is piggybacked in 
ATTACH ACCEPT message. GUTI-1 is 
allocated. 


<- 


ATTACH ACCEPT 






12 


The SS configures: 

- Cell B as a "non-suitable cell". 


- 


- 


- 


- 


13 


UE transmits 

RRCConnectionReestablishmentRequest 
message in Cell A 










14 


SS Sends RRCConnectionReestablishment 


- 


- 


- 


- 


15 


The UE transmits a 

RRCConnectionReestablishmentComp\e\e 

message 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


16 


Check: Does the UE transmit an ATTACH 
REQUEST message, containing GUTI 1? 


-> 


ATTACH REQUEST 


2 


P 
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17 


SS responds with ATTACH ACCEPT message 
including a valid TAI list. The ACTIVATE 
DEFAULT EPS BEARER CONTEXT 
REOUEST message is piggybacked in 
ATTACH ACCEPT message 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 13 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










18 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 






19 


The SS releases the RRC connection. 


- 


- 


- 


- 


NOTE 1 : UE already has NAS security context in step 17 and just sending a DL message witti Integrity and Ciphering 
will start enable NAS security 



9.2.1 .1 .24.3.3 Specific message contents 

Table 9.2.1 .1 .24.3-1 : Message ATTACH ACCEPT step 1 1 , Table 9.2.1 .1 .24.3.2-1) 



Derivation path: TS 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 


GUTI-1 







9.2.1.1.25 



9.2.1.1.25.1 



Attach / Abnormal case / Mobile originated detach required 
Test Purpose (TP) 



(1) 



with { UE in EMM-REGISTERED- INITIATED state } 
ensure that { 

when { the UE initiates mobile originated detach 
then { the UE aborts the attach procedure } 



9.2.1 .1 .25.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.1.2.6. 
[TS 24.301, clause 5.5.1.2.6] 
The following abnormal cases can be identified: 
f) Mobile originated detach required 

The attach procedure shall be aborted, and the UE initiated detach procedure shall be performed. 



Test description 
Pre-test conditions 



9.2.1.1.25.3 
9.2.1.1.25.3.1 
System Simulator: 

- Cell A 
UE: 

The UE is configured to initiate EPS attach. 
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Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
- The UE has a vahd GUTI- 1 . 
9.2.1 .1 .25.3.2 Test procedure sequence 

Table 9.2.1.1.25.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message. 


-> 


ATTACH REQUEST 


- 


- 


3 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






4 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






5 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


6 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 






7 


The SS does not respond to ATTACH 
REQUEST message. 


- 


- 


- 


- 


8 


Check: Does the UE initiate mobile originated 
detach and abort the attach procedure while 
T3410 is running. 


-> 


DETACH REQUEST 


1 


P 


9 


The SS transmits DETACH ACCEPT 
message. 


<— 


DETACH ACCEPT 


- 


- 


10 


Check: Does the test result of CALL generic 
procedure "Test procedure for no response to 
paging (for NAS testing)" clause 6.4.2.5 [18] 
indicates that the UE responds to paging when 
paged with GUTI-1 and with CN domain 
indicator set to "PS"? 






1 




11 


Void 


- 


- 


- 


- 


Note: T341 value is specified as 1 5s in TS 24.301 . 



9.2.1 .1 .25.3.3 Specific message contents 

Table 9.2.1 .1 .25.3.3-1 : Message DETACH REQUEST (step 8, Table 9.2.1 .1 .25.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 1 


Information Element 


Value/Remark 


Comment 


Condition 


Detach type 


0001 


Normal EPS 
detach 





9.2.1.1.26 
9.2.1.1.26.1 
(1) 



Attach / Abnormal case / Detach procedure collision 
Test Purpose (TP) 



with { UE in EMM-REGISTERED- INITIATED state} 
ensure that { 

when { UE receives a DETACH REQUEST message and detach type indicates "re-attach not required" 
then { the UE sends DETACH ACCEPT } 

(2) 

with { UE in EMM-REGISTERED- INITIATED state} 
ensure that { 
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when { UE receives a DETACH REQUEST message and detach type indicates "re-attach required"} 
then { the UE continues with ATTACH procedure } 
} 

9.2.1 .1 .26.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.1.2.6 & 
10.2 

[TS 24.301, clause 5.5.1.2.6] 

The following abnormal cases can be identified: 



g) Detach procedure collision 

If the UE receives a DETACH REQUEST message from the network in state EMM-REGISTERED-INITIATED 
and the detach type indicates "re-attach not required", the detach procedure shall be progressed and the attach 
procedure shall be aborted. Otherwise the attach procedure shall be progressed and the DETACH REQUEST 
message shall be ignored. 

9.2.1.1.26.3 Test description 

9.2.1 .1 .26.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

- Cell A is the serving cell with TAll (PLMNl+TACl); 
UE: 

The UE is configured to initiate EPS attach. 

- The test USIM is inserted. 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1 .1 .26.3.2 Test procedure sequence 

Table 9.2.1.1.26.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmit an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


~> 


ATTACH REQUEST 






3 


The SS initiates Detach procedure with the 
Detach Type IE "re-attach not required" 


<- 


DETACH REQUEST 


- 


- 


4 


Check: Does the UE send DETACH ACCEPT 
message? 


-> 


DETACH ACCEPT 


1 


P 


5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


UE is switched off and switched on 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message? 


~> 


ATTACH REQUEST 


1 


P 


8 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure 


<- 


AUTHENTICATION REQUEST 






9 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






10 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


11 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 12a1 to 12a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










12a 
1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






12a 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






13 


The SS initiates Detach procedure with the 
Detach Type IE "re-attach required" 


<— 


DETACH REQUEST 


- 


- 




Exception: In parallel with steps 13 to 15, the 
parallel behaviour defined in table 
9.2.1.1.26.3.2-2 is running. 










14 


SS responds with ATTACH ACCEPT message 
including a valid TAI list. The ACTIVATE 
DEFAULT EPS BEARER CONTEXT 
REQUEST message is piggybacked in 
ATTACH ACCEPT message. GUTI-1 is 
allocated. 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 13 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










15 


The UE transmit an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message? 


^ 


ATTACH COMPLETE 


2 


P 


16 


The SS waits 5 seconds 


- 


- 


- 


- 


17 


The SS releases the RRC connection. 


- 


- 


- 


- 


NOTE 1 : Step 16 is added to additionally guarantee UE has neglected DETACH REQUEST message. 
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Table 9.2.1.1.26.3.2-2 : Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does the UE send DETACH ACCEPT 
message? 


-> 


DETACH ACCEPT 


2 


F 



9.2.1 .1 .26.3 Specific message contents 

Table 9.2.1.1.26.3.3-1: Message DETACH REQUEST (step 3, Table 9.2.2.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 2 


Information Element 


Value/Remark 


Comment 


Condition 


Detach type 


'010'B 


"re-attach not 
required" 




ElVIIVI cause 


'08'H 


EPS services and 
non-EPS services 
not allowed 





Table 9.2.1.1.26.3.3-2: Message DETACH REQUEST (step 13, Table 9.2.2.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 2 


Information Element 


Value/Remark 


Comment 


Condition 


Detach type 


'001 'B 


"re-attach 
required" 




EMM cause 


NOT PRESENT 







9.2.1 .2 Combined attach procedure for EPS services and non-EPS services 
9.2.1 .2.1 Combined attach procedure / Success / EPS and non-EPS services 

9.2.1 .2.1 .1 Test Purpose (TP) 

(1) 

with { UE in state EMM-DEREGISTERED and is switched off } 
ensure that { 

when { UE is powered up or switched on} 
then { UE sends ATTACH REQUEST message with EPS attach type IE 'combined EPS/IMSI attach' } 
} 

(2) 

with { UE in state EMM-REGISTERED- INITIATED} 
ensure that { 

when { UE receives ATTACH ACCEPT message with EPS attach result 'combined EPS/IMSI attach' } 
then { UE sends ATTACH COMPLETE message and enters EMM state EMM-REGISTERED and MM state MM- IDLE 
and UE responsds to a paging message with CS or PS domain} 
} 

(3) 

with { UE in state EMM-REGISTERED and state MM- IDLE} 
ensure that { 

when { SS sends Paging message with CS domain } 
then { UE sends EXTENDED SEREVICE REQUEST message } 



(4) 

with { UE in state EMM-REGISTERED and EMM- IDLE mode} 
ensure that { 

when { UE enters a new tracking area already included in the TAI list } 
then { UE does not send TRACKING AREA UPDATE REQUEST message and UE responsds a paging message 
with CS or PS domain} 
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(5) 

with { UE in state EMM-REGISTERED and EMM- IDLE mode} 
ensure that { 

when { UE enters a new tracking area not included in the TAI list } 
then { UE sends TRACKING AREA UPDATE REQUEST message with 'EPS update type = combined TA/LA 
updated ' } 

} 

(6) 

with { UE in state EMM-DEREGISTERED and is switched off and has a valid TAI value in 'Last visited 
registered TAI' IE and a valid GUTI } 
ensure that { 

when { UE is powered up or switched on} 
then { UE sends ATTACH REQUEST message with EPS attach type IE 'combined EPS/IMSI attach 'and with 
the value in 'Last visited registered TAI' and the valid GUTI } 



9.2.1 .2.1 .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.1.3.1, 5.5.1.3.4.1 and 5.5.1.3.4.2. 

[TS24.301clause5.5. 1.3.1] 

The combined EPS attach procedure is used by a UE in CS/PS mode 1 or CS/PS mode 2 of operation to attach for both 
EPS and non-EPS services. 

The combined EPS attach procedure is also used by a UE in CS/PS mode 1 or CS/PS mode 2 of operation to attach for 
EPS services if it is already attached for non-EPS services. 

When the UE initiates a combined EPS attach procedure, the UE shall indicate "combined EPS/IMSI attach" in the EPS 
attach type IE. 

The combined EPS attach procedure follows the attach procedure for EPS described in subclause 5.5.1.2. 

[TS24.301clause5.5. 1.3.2] 

If the UE is in EMM state EMM-DEREGISTERED, the UE initiates the combined attach procedure by sending an 
ATTACH REQUEST message to the network, starting timer T3410 and entering state EMM-REGISTERED- 
INITIATED (see example in figure 5.5.1.2.2.1). 

The UE shall include the TMSl status IE if no valid TMSl is available. Furthermore, if the UE has stored a valid 
location area identification, the UE shall include it in the Old location area identification IE in the ATTACH REQUEST 

message. 

[TS24.301clause5.5.1.3.4.1] 

Depending on the value of the EPS attach result IE received in the ATTACH ACCEPT message, two different cases 
can be distinguished: 

1) The EPS attach result IE value indicates "combined EPS/IMSI attach": attach for EPS and non-EPS services 
have been successful. 



[TS24.301clause5.5. 1.3.4.2] 

The description for attach for EPS services as specified in subclause 5.5.1.2.4 shall be followed. In addition, the 
following description for attach for non-EPS services applies. 

The TMSl reallocation may be part of the combined attach procedure. The TMSl allocated is then included in the 
ATTACH ACCEPT message, together with the location area identification (LAI). In this case the MME shall start timer 
T3450 and enter state EMM-COMMON -PROCEDURE-INITIATED as described in subclause 5.4.1. 

The UE, receiving an ATTACH ACCEPT message, stores the received location area identification, stops timer T3410, 
resets the location update attempt counter and sets the update status to Ul UPDATED. If the message contains an IMSI, 
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the UE is not allocated any TMSI, and shall delete any TMSI accordingly. If the message contains a TMSI, the UE shall 
use this TMSI as the new temporary identity. The UE shall delete its old TMSI and shall store the new TMSI. If neither 
a TMSI nor an IMSI has been included by the network in the ATTACH ACCEPT message, the old TMSI, if any 
available, shall be kept.IThe UE, when receiving the ATTACH ACCEPT message combined with the ACTIVATE 
DEFAULT EPS BEARER CONTEXT REQUEST message, shall send an ATTACH COMPLETE message combined 
with an ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT message to the network after which it shall enter 
state EMM-REGISTERED and MM state MM-IDLE and set the EPS update status to EUl UPDATED. 

9.2.1.2.1.3 Test description 

9.2.1.2.1.3.1 Pre-test conditions 

System Simulator: 

Cell A, Cell B and Cell C are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI- 1 (home PLMN). 

- Cell B belongs to TAI-2(home PLMN, another TAC). 

- Cell C belongs to TAI-3(home PLMN, another TAC). 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The test USIM contains GUTI-1 and a valid TAI-1 for EPS service, and EPS update status is "EUI: 
UPDATED". 

The test USIM contains TMSI-1 and a valid LAI-1 for CS service, and Location update status is " Ul: 
UPDATED". 

Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1.2.1.3.2 



Test procedure sequence 

Table 9.2.1.2.1.3.2-1: Main Behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


lUlessage 


1 


Set the cell type of cell A to the "Serving cell". 

Set the cell type of cell B to the " Non-Suitable 

cell ". 

Set the cell type of cell C to the "Non-Suitable 

cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is powered up or switched on. 






- 


- 


3 


Check: Does the UE ATTACH REQUEST 
message with a PDN CONNECTIVITY 
REQUEST message to request PDN 
connectivity to the default PDN. EPS attach 
type = "combined EPS/IMSI attach"? 


-> 


ATTACH REQUEST 


1 


P 


4 


The SS starts an authentication procedure 


<- 


AUTHENTICATION REQUEST 


- 


- 


5 


The UE responds properly to the 
authentication procedure 


-> 


AUTHENTICATION RESPONSE 


- 


- 


6 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<— 


SECURITY MODE COMMAND 


- 


- 


7 


The UE responds properly to the NAS security 
mode command procedure 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTION: Steps 7Aa1 to 7Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESIVI 
information which needs to be transferred. 










7A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






7A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






8 


The SS sends ATTACH ACCEPT message 
with the ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message. 


<— 


ATTACH ACCEPT 






9 


Check: Does the UE send ATTACH 
COMPLETE message with the ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message? 


-> 


ATTACH COMPLETE 


2 


P 


10 


The SS releases the RRC connection. 






- 


- 


11 


Check: Does the UE respond to paging on cell 
A with S-TMSI in GUTI-2 for PS 
domain?(Generic Procedure TS36.508 6.2.4.2) 






2 




12 


The SS transmits a paging on cell A with S- 
TMSI in GUTI-2 for CS domain. 


- 


- 


3 


- 


13 


Check: Does the UE send EXTENDED 
SERVICE REQUEST message? 


-> 


EXTENDED SERVICE REQUEST 


3 


P 


14 


The SS transmits SERVICE REJECT with 
cause #39 'CS domain temporarily not 
available' with T3442 = 5s and the SS waits 5 
sec. 


<— 


SERVICE REJECT 






15 


Void 










16 


Set the cell type of cell A to the "Non-Suitable 
Set the cell type of cell B to the " Serving cell ". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 
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17 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message in the 
next 30 seconds? 






4 


F 


18 


Checl<: Does the UE respond to paging on cell 
B with S-TMSI in GUTI-2 for PS 
domain?(Generic Procedure TS36.508 6.2.4.2) 






4 




19 


Check: Does the UE respond to paging on cell 
B with S-TMSI in GUTI-2 for CS 
domain?{Generic Procedure TS36.508 6.2.4.5) 






4 




20 


Set the cell type of cell B to the " non-Suitable 

cell ". 

Set the cell type of cell C to the " Serving cell". 










- 


The following messages are to be observed on 
Cell C unless explicitly stated otherwise. 


- 


- 


- 


- 


21 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


5 


P 


22 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


23 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message? 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


24 


The SS releases the RRC connection. 


- 


- 


- 


- 


25 


Cause switch off or remove power from the UE 


- 


- 


- 


- 


26 


The UE transmit a DETACH 
REQUEST.(Qptional) 


-> 


DETACH REQUEST 


- 


- 


27 


The UE is powered up or switched on. 


- 


- 


- 


- 


28 


Check: Does the UE send ATTACH 
REQUEST message with a PDN 
CQNNECTIVITY REQUEST message to 
request PDN connectivity to the default PDN. 


~> 


ATTACH REQUEST 


6 


P 


29 


The SS starts an authentication procedure 


<- 


AUTHENTICATION REQUEST 


- 


- 


30 


The UE responds properly to the 
authentication procedure 


~> 


AUTHENTICATION RESPONSE 


- 


- 


31 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<— 


SECURITY MODE COMMAND 


- 


- 


32 


The UE responds properly to the NAS security 
mode command procedure 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTIQN: Steps 32Aa1 to 32Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










32 
Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CQNNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATIQN REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






32 
Aa 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






33 


The SS sends ATTACH ACCEPT message 
with the ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message. 


<- 


ATTACH ACCEPT 






34 


The UE transmits ATTACH COMPLETE 
message with the ACTIVATE DEFAULT EPS 
BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 







ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1085 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



9.2.1 .2.1 .3.3 Specific message contents 

Table 9.2.1.2.1.3.3-1: Message ATTACH REQUEST (step 3, Table 9.2.1.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


EPS attach type 


'0010'B 


"combined 
EPS/IMSI attach" 




Old GUT! or IMS! 


GUTI-1 






Last visited registered TAI 


TAI-1 






Old location area identification 


LAI-1 






TMSI status 


Not Present 







Table 9.2.1.2.1.3.3-2: Message ATTACH ACCEPT (step 8, Table 9.2.1.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS attach result 


'010'B 


"Gombined 
EPS/IMSI attach" 




TAI list 








Number of elements 


'00001 'B 






Type of list 


'OO'B 


"list of TAGS 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




MCC 


PLMN= MGG/MNG 


"PLMN is set to 




MNC 


TAG 1=1 


the same 




TAC1 


TAG 2=2 


MGG/MNG stored 




TAG 2 




in EFiMsi" 

"TAI-1" 

"TAI-2" 




GUT! 


GUTI-2 






LAI 


LAI-1 






MS identity 


TMSI-1 







Table 9.2.1.2.1.3.3-3: Message EXTENDED SERVICE REQUEST (step 13, Table 9.2.1.2.1.3.2-1) 



Derivation Path: 36.508 table 4.7.2.-1 4A 


Information Element 


Value/remark 


Comment 


Condition 


Service type 


'0001 'B 


"mobile 

terminating GS 
fallback or IxGS 
fallback" 




M-TMSI 


M-TSMI2 


"M-TMSI2 is a 
part of GUTI-2" 




GSFB response 


'001 'B 







Table 9.2.1.2.1.3.3-4: Message SERVICE REJECT (step 14, Table 9.2.1.2.1.3.2-1) 



Derivation Path: 36.508 table 4.7.2-22 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0010 0111'B 


#39 'GS domain 
temporarily not 
available' 




T3442 value 


5 sec 
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Table 9.2.1.2.1.3.3-5: Message TRACKING AREA UPDATE REQUEST (step 21, Table 9.2.1.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 | 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 
EPS update type value 

Old GUTI 


'001 'B 
GUTI-2 


"Combined TA/LA 
updating" 
"Old GUTI is 
included by UE if 
valid, IMSI 
otherwise" 




Old location area identification 


LAI-1 






TIVISI status 


Not Present 







Table 9.2.1.2.1.3.3-6: Message TRACKING AREA UPDATE ACCEPT (step 22, Table 9.2.1.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update result 


'001 'B 


"combined TA/LA 
updated" 




GUTI 


GUTI-3 






TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'OOOOO'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLIVIN, with non- 
consecutive TAG 
values" 




MCC 


TAI-3 






MNC 








TAC1 








Location area identification 


LAI-3 






IVIS identity 


TMSI-3 







Table 9.2.1.2.1.3.3-7: Message ATTACH REQUEST (step 28, Table 9.2.1.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


EPS attach type 


'0010'B 


"combined 
EPS/I MSI attach" 




Old GUTI or IMSI 


GUTI-3 






Last visited registered TAI 


TAI-3 






Old location area identification 


LAI-3 






TMSI status 


Not Present 
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Table 9.2.1.2.1.3.3-8: Message ATTACH ACCEPT (step 33, Table 9.2.1.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS attach result 


'010'B 


"Combined 
EPS/IMSI attach" 




TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'OOOOO'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLIVIN, with non- 
consecutive TAG 
values" 




MCC 


TAI-3 






MNC 








TAC1 








GUT! 


GUTI-3 







Combined attach procedure / Success / EPS services only / IMS! unknown in 
HSS 

Test Purpose (TP) 



9.2.1.2.2 

9.2.1.2.2.1 
(1) 

with { UE in state EMM-DEREGISTERED and is switched off } 
ensure that { 

when { the UE is powered up or switched on } 

then { the UE transmits an ATTACH REQUEST message with the EPS attach type set to "combined 
EPS/IMSI attach" and enters EMM-REGISTERED- INITIATED state } 



(2) 

with { UE in state EMM-REGISTERED- INITIATED } 
ensure that { 

when { the UE receives an ATTACH ACCEPT message with EPS attach result set to "EPS only" and EMM 
cause set to "IMSI unknown in HSS" } 

then { the UE transmits an ATTACH COMPLETE message, the UE set the update status to U3 ROAMING 
NOT ALLOWED, shall delete any TMSI, LAI and ciphering key sequence number and enters EMM- 
REGISTERED. NORMAL-SERVICE state and MM IDLE state. The USIM shall be considered as invalid for non- 
EPS services until switching off or the UICC containing the USIM is removed } 
} 

(3) 

with { UE in E-UTRA EMM-REGISTERED .NORMAL-SERVICE state and MM IDLE state and USIM is invalidated by 
network for non-EPS services } 
ensure that { 

when { SS sends DETACH REQUEST message with the Detach type IE "re-attach required" } 

then { the UE sends DETACH ACCEPT message, and then the UE sends ATTACH REQUEST message with EPS 
attach type set to 'EPS attach', including the value in 'Last visited registered TAI' and the valid 
GUTI and initiates an attach procedure } 
} 

(4) 

with { UE in EMM-REGISTERED .NORMAL-SERVICE state and MM IDLE state and USIM is invalidated by 
network for non-EPS services } 
ensure that { 

when { the UE is switch off and then powered up or switched on } 

then { the UE sends ATTACH REQUEST message with EPS attach type IE 'combined EPS/IMSI attach' } 
} 

(5) 

with { UE in EMM-REGISTERED- INITIATED state } 
ensure that { 

when { the UE receives ATTACH ACCEPT message with EPS attach result 'combined EPS/IMSI attach' } 
then { UE sends ATTACH COMPLETE message and enters EMM-REGISTERED .NORMAL-SERVICE state and MM 
IDLE state | 
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9.2.1 .2.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 4.3, 
5.5.1.2.2, 5.5.1.2.4, 5.5.1.3.1, 5.5.1.3.2, 5.5.1.3.4.1, 5.5.1.3.4.2, and 5.5.1.3.4.3. 

[TS24.301 clause 4.3] 

A UE attached for EPS services may operate in one of the following operation modes: 



CS/PS mode 1 of operation: the UE registers to both EPS and non-EPS services, and UE's usage setting is "voice 
centric"; and 

CS/PS mode 2 of operation: the UE registers to both EPS and non-EPS services, and UE's usage setting is "data 
centric" or the UE has no CS voice capability. 

A UE configured to use CS fallback, shall operate in CS/PS mode 1 or CS/PS mode 2. Such UE may also be configured 
to use IMS, in which case the voice domain preference as defined in 3GPP TS 24.167 [13B] shall be used for the 
selection of the domain for originating voice communication services. 



[TS 24.301, clause 5.5.1.2.2] 

In state EMM-DEREGISTERED, the UE initiates the attach procedure by sending an ATTACH REQUEST message to 
the MME, starting timer T3410 and entering state EMM-REGISTERED-INITIATED (see example in 
figure 5.5.1.2.2.1). If timer T3402 is currently running, the UE shall stop timer T3402. If timer T3411 is currently 
running, the UE shall stop timer T341 1. 



The UE shall include in the ATTACH REQUEST message a valid GUTI together with the last visited registered 
TAI, if available. If there is no valid GUTI available, the UE shall include the IMSI in the ATTACH REQUEST 

message. 



[TS 24.301, clause 5.5.1.2.4] 

If the attach request is accepted by the network, the MME shall send an ATTACH ACCEPT message to the UE and 
start timer T3450. The MME shall send the ATTACH ACCEPT message together with an ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message contained in the ESM message container information element to activate the 
default bearer (see subclause 6.4.1). The network may also initiate the activation of dedicated bearers towards the UE 
by invoking the dedicated EPS bearer context activation procedure (see subclause 6.4.2). 



The MME shall assign and include the TAI hst the UE is registered to in the ATTACH ACCEPT message. The UE, 
upon receiving an ATTACH ACCEPT message, shall delete its old TAI list and store the received TAI list. 

Upon receiving the ATTACH ACCEPT message, the UE shall stop timer T3410. 

The GUTI reallocation may be part of the attach procedure. When the ATTACH REQUEST message includes the 
IMSI, or the MME considers the GUTI provided by the UE is invalid, or the GUTI provided by the UE was assigned by 
another MME, the MME shall allocate a new GUTI to the UE. The MME shall include in the ATTACH ACCEPT 
message the new assigned GUTI together with the assigned TAI list. In this case the MME shall enter state EMM- 
COMMON-PROCEDURE-INITIATED as described in subclause 5.4.1. 
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If the ATTACH ACCEPT message contains a GUTI, the UE shall use this GUTI as the new temporary identity. The 
UE shall delete its old GUTI and store the new assigned GUTI. If no GUTI has been included by the MME in the 
ATTACH ACCEPT message, the old GUTI, if any available, shall be kept. 

If A/Gb mode or lu mode is supported in the UE, the UE shall set its TIN to "GUTI" when receiving the ATTACH 
ACCEPT message. 



When the UE receives the ATTACH ACCEPT message combined with the ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message, it shall forward the ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST 
message to the ESM sublayer. Upon receipt of an indication from the ESM sublayer that the default EPS bearer context 
has been activated, the UE shall send an ATTACH COMPLETE message together with an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message contained in the ESM message container information element to the 
network. 

Additionally, the UE shall reset the attach attempt counter and tracking area updating attempt counter, enter state EMM- 
REGISTERED and set the EPS update status to EUl UPDATED. 



Upon receiving an ATTACH COMPLETE message, the MME shall stop timer T3450, enter state EMM-REGISTERED 
and consider the GUTI sent in the ATTACH ACCEPT message as valid. 

[TS 24.301, clause 5.5.1.3.1] 

The combined attach procedure is used by a UE in CS/PS mode 1 or CS/PS mode 2 of operation to attach for both EPS 
and non-EPS services. 

The combined attach procedure is also used by a UE in CS/PS mode 1 or CS/PS mode 2 of operation to attach for EPS 
services if it is already IMSI attached for non-EPS services. 

When the UE initiates a combined attach procedure, the UE shall indicate "combined EPS/IMSI attach" in the EPS 
attach type IE. 

The combined attach procedure follows the attach procedure for EPS described in subclause 5.5.1.2. 

[TS 24.301, clause 5.5.1.3.2] 

If the UE is in EMM state EMM-DEREGISTERED, the UE initiates the combined attach procedure by sending an 
ATTACH REQUEST message to the network, starting timer T3410 and entering state EMM-REGISTERED- 
INITIATED (see example in figure 5.5.1.2.2.1). 

The UE shall include the TMSI status IE if no valid TMSI is available. Furthermore, if the UE has stored a valid 
location area identification, the UE shall include it in the Old location area identification IE in the ATTACH REQUEST 

message. 

[TS 24.301, clause 5.5.1.3.4.1] 

Depending on the value of the EPS attach result IE received in the ATTACH ACCEPT message, two different cases 
can be distinguished: 



2) The EPS attach result IE value indicates "EPS only": attach for EPS services has been successful but attach for 
non-EPS services has failed. 

[TS 24.301, clause 5.5.1.3.4.2] 

The description for attach for EPS services as specified in subclause 5.5.1.2.4 shall be followed. In addition, the 
following description for attach for non-EPS services applies. 



[TS 24.301, clause 5.5.1.3.4.3] 
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Apart from the actions on the tracking area updating attempt counter, the description for attach for EPS services as 
specified in subclause 5.5.1.2.4 shall be followed. In addition, the following description for attach for non-EPS services 
applies. 

The UE receiving the ATTACH ACCEPT message takes one of the following actions depending on the EMM cause 
value: 

#2 (IMSI unknown in HSS) 

The UE shall stop T3410 if still running and shall reset the tracking area updating attempt counter. The UE 
shall set the update status to U3 ROAMING NOT ALLOWED and shall delete any TMSI, LAI and ciphering 
key sequence number. The UE shall enter state EMM-REGISTERED.NORMAL-SERVICE. The new MM 
state is MM IDLE. The USIM shall be considered as invalid for non-EPS services until switching off or the 
UICC containing the USIM is removed. 



Other EMM cause values and the case that no EMM cause IE was received are considered as abnormal cases. The 
combined attach procedure shall be considered as failed for EPS and non-EPS services. The behaviour of the UE in 
those cases is specified in subclause 5.5.1.3.6. 

[TS 24.301, clause 5.5.2.3.2] 

When receiving the DETACH REQUEST message and the Detach type IE indicates "re-attach required", the UE shall 
deactivate the EPS bearer context(s) including the default EPS bearer context locally without peer-to-peer signalling 
between the UE and the MME. The UE shall store the native EPS security context, if valid, as specified in annex C. The 
UE shall then send a DETACH ACCEPT message to the network and enter state EMM-DEREGISTERED. The UE 
shall, after the completion of the detach procedure, and the existing N AS signalling connection has been released, 
initiate an attach or combined attach procedure. 

A UE which receives a DETACH REQUEST message with detach type indicating "re-attach required" or "re-attach not 
required" and no EMM cause IE, is detached only for EPS services. 



If the detach type IE indicates "IMSI detach" or "re-attach required", then the UE shall ignore the EMM cause IE if 
received. 

9.2.1.2.2.3 Test description 

9.2.1.2.2.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The USIM contains IMSI- 1 , GUTI- 1 and TAI- 1 , and EPS update status is "EU 1 : UPDATED" . 

- The USIM contains TMSI-1 and LAI-1 for CS service, and Location update status is "Ul: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1.2.2.3.2 



Test procedure sequence 

Table 9.2.1.2.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is powered up or switched on. 


- 


- 


- 


- 


2 


The UE transmits ATTACH REQUEST 
message with a PDN CONNECTIVITY 
REQUEST message to request PDN 
connectivity to the default PDN with EPS 
attach type set to "combined EPS/IMSI attach" 


-> 


ATTACH REQUEST 


1 


P 


3 


The SS starts an authentication procedure 


<- 


AUTHENTICATION REQUEST 


- 


- 


4 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






5 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<— 


SECURITY MODE COMMAND 


- 


- 


6 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 6Aa1 to 6Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










6A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






6A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






7 


The SS transmits ATTACH ACCEPT message 
with EPS Attach result IE set to "EPS only" and 
EMM cause set to "IMSI unknown in HSS", 
including the ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message as 
specified. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 8 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










8 


Check: Does the UE transmit an ATTACH 
COMPLETE message including an ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message as specified? 


-> 


ATTACH COMPLETE 


2 


P 


9 


The SS releases the RRC connection. 


- 


- 


- 


- 


10- 
12 


Void 










13 


The SS sends DETACH REQUEST message 
with Detach Type set to "re-attach required" 


<— 


DETACH REQUEST 


- 


- 


14 


Check: Does the UE send DETACH ACCEPT 
message? 


-> 


DETACH ACCEPT 


3 


P 


15 


The SS releases the RRC connection. 


- 


- 


- 


- 


16 


Check: Does the UE send ATTACH 
REQUEST message with EPS attach type set 
to "EPS attach", including the PDN 
CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


3 


P 


17 


The SS sends ATTACH ACCEPTmessage 
including the ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message 


<- 


ATTACH ACCEPT 
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EXCEPTION: In parallel to the event described 
in step 15 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










18 


Check: Does the UE send ATTACH 
COMPLETE message? 


-> 


ATTACH COMPLETE 


3 


P 


19 


The UE is switched off. 


- 


- 


- 


- 


20 


The UE is powered up or switched on. 


- 


- 


- 


- 


21 


Check: Does the UE transmits ATTACH 
REOUEST message with EPS attach type set 
to "combined EPS/IIVISI attach", including PDN 
CONNECTIVITY REOUEST message? 


~> 


ATTACH REQUEST 


4 


P 


22 


The SS transmits ATTACH ACCEPT message 
with EPS Attach result IE set to "combined 
EPS/IMSI attach" , including the ACTIVATE 
DEFAULT EPS BEARER CONTEXT 
REOUEST message. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 20 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










23 


Check: Does the UE transmit an ATTACH 
COIVIPLETE message including the 
ACTIVATE DEFAULT EPS BEARER 
CONTEXT ACCEPT message? 


— > 


ATTACH COMPLETE 


5 


P 




At the end of this test procedure sequence, the 
UE is in end state E-UTRA connected {E2) 
according to TS 36.508. 











NOTE: It is assumed in the test procedure sequence that the UE initially has a valid GUTI, hence it is included in 
ATTACH REQUEST message in step 2. However, it is not important for the test procedure sequence. 

9.2.1 .2.2.3.3 Specific message contents 

Table 9.2.1.2.2.3.3-1: Message ATTACH REQUEST (step 2, Table 9.2.1.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 


GUTI-1 






EPS attach type 


010 


"combined 
EPS/IMSI attach" 




ESM message container 


PDN CONNECTIVITY 
REQUEST message 






Last visited registered TAI 


TAI-1 






Old location area identification 


LAI-1 






TMSI status 


Not present 
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Table 9.2.1.2.2.3.3-2: Message ATTACH ACCEPT (step 7, Table 9.2.1.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS attach result 


001 


"EPS only" 

The SS accepts 
Combined attach 
for EPS services 
only. 




ESM message container 


ACTIVATE DEFAULT 
EPS BEARER 
CONTEXT REQUEST 
message 






GUTI 


GUTI-2 


The SS assigns a 
new GUTI 




LAI 


Not present 






MS identity 


Not Present 


No TMSI is 
assigned 




EIVIM cause 


00000010 


#2 "IMSI unknown 
in HSS" 





Table 9.2.1.2.2.3.3-3: Message DETACH REQUEST (step 13, Table 9.2.1.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 2 


Information Element 


Value/Remark 


Comment 


Condition 


Detach type 


001 


"re-attach 
required" 





Table 9.2.1.2.2.3.3-4: Message ATTACH REQUEST (step 16, Table 9.2.1.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 


GUTI-2 






EPS attach type 


001 


"EPS attach" 




ESM message container 


PDN CONNECTIVITY 
REOUEST message 






Last visited registered TAI 


TAI-1 






Old location area identification 


Not present 






TMSI status 


Not present 







Table 9.2.1.2.2.3.3-5: Message ATTACH ACCEPT (step 17, Table 9.2.1.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS attach result 


001 


" EPS only " 




ESM message container 


ACTIVATE DEFAULT 
EPS BEARER 
CONTEXT REQUEST 
message 






GUTI 


Not present 


The SS doesn't 
assign a new 
GUTI 
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Table 9.2.1.2.2.3.3-6: Message ATTACH REQUEST (step 21, Table 9.2.1.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUT! or IMS! 


GUTI-2 






EPS attach type 


010 


"combined 
EPS/IMSI attach- 




ESM message container 


PDN CONNECTIVITY 
REOUEST message 






Last visited registered TAI 


TAI-1 






Old location area identification 


Not present 






TMSI status 





no valid TMSI 
available 





Table 9.2.1.2.2.3.3-7: Message ATTACH ACCEPT (step 22, Table 9.2.1.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS attach result 


010 


"Combined 
EPS/IMSI attach" 




ESM message container 


ACTIVATE DEFAULT 
EPS BEARER 
CONTEXT REQUEST 
message 






GUTI 


Not present 


The SS doesn't 
assign a new 
GUTI 





9.2.1 .2.3 Successful combined attach procedure / EPS service only / MSC temporarily not 

reachable 



9.2.1.2.3.1 



Test Purpose (TP) 



(1) 



with { the UE has sent a combined ATTACH REQUEST message } 
ensure that { 

when { the UE receives an ATTACH ACCEPT message with EPS attach result set to "EPS only" and EMM 
reject cause set to "MSC temporarily not reachable" or "Network failure" or "Congestion" and 
including an ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST message with IE EPS Bearer Identity 
matching the ATTACH REQUEST message and including a PDN address, an APN and an uplink TFT } 

then { UE transmits an ATTACH COMPLETE message, containing the EPS bearer identity, together 
with ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT message and the UE resets the attach attempt counter 
and tracking area updating attempt counter and the UE increments tracking area updating attempt 
counter and starts timer T3411 and enters EMM-REGISTERED. ATTEMPTING-TO-UPDATE-MM state } 
} 

(2) 

with { the UE is in E-UTRA EMM-REGISTERED .ATTEMPTING-TO-UPDATE-MM state } 
ensure that { 

when { timer T3411 expires or timer T3402 expires } 

then { the UE initiates a combined tracking area update procedure indicating "combined TA/LA 
updating with IMSI attach" } 



(3) 



with { the UE is in E-UTRA EMM-REGISTERED .ATTEMPTING-TO-UPDATE-MM state } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE ACCEPT with EPS update result set to "EPS only" and EMM 
reject cause set to "MSC temporarily not reachable" or "Network failure" or "Congestion" } 

then { UE increments tracking area updating attempt counter unless it was already set to 5 and 
starts timer T3411 if tracking area updating attempt counter is less than 5 or starts timer T3402 if 
tracking area updating attempt counter is equal to 5 } 
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9.2.1.2.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.5.1.2.4, 
5.5.1.3.1, 5.5.1.3.2, 5.5.1.3.4.1, 5.5.1.3.4.2, 5.5.1.3.4.3, and 5.5.3.3.4.3. 

[TS 24.301, clause 5.5.1.2.4] 

If the attach request is accepted by the network, the MME shall send an ATTACH ACCEPT message to the UE and 
start timer T3450. The MME shall send the ATTACH ACCEPT message together with an ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message contained in the ESM message container information element to activate the 
default bearer (see subclause 6.4.1). The network may also initiate the activation of dedicated bearers towards the UE 
by invoking the dedicated EPS bearer context activation procedure (see subclause 6.4.2). 

If the attach request is accepted by the network, the MME shall delete the stored UE radio capability information, if 
any. 

If the UE has included the UE network capability IE or the MS network capability IE or both in the ATTACH 
REQUEST message, the MME shall store all octets received from the UE, up to the maximum length defined for the 
respective information element. 

NOTE: This information is forwarded to the new MME during inter-MME handover or to the new SGSN during 
inter-system handover to A/Gb mode or lu mode. 

The MME shall assign and include the TAI list the UE is registered to in the ATTACH ACCEPT message. The UE, 
upon receiving an ATTACH ACCEPT message, shall delete its old TAI list and store the received TAJ list. 

Upon receiving the ATTACH ACCEPT message, the UE shall stop timer T3410. 

The GUTI reallocation may be part of the attach procedure. When the ATTACH REQUEST message includes the 
IMSI, or the MME considers the GUTI provided by the UE is invalid, or the GUTI provided by the UE was assigned by 
another MME, the MME shall allocate a new GUTI to the UE. The MME shall include in the ATTACH ACCEPT 
message the new assigned GUTI together with the assigned TAI list. In this case the MME shall enter state EMM- 
COMMON-PROCEDURE-INITIATED as described in subclause 5.4.1. 



If the ATTACH ACCEPT message contains a GUTI, the UE shall use this GUTI as the new temporary identity. The 
UE shall delete its old GUTI and store the new assigned GUTI. If no GUTI has been included by the MME in the 
ATTACH ACCEPT message, the old GUTI, if any available, shall be kept. 

If A/Gb mode or lu mode is supported in the UE, the UE shall set its TIN to "GUTI" when receiving the ATTACH 
ACCEPT message. 



When the UE receives the ATTACH ACCEPT message combined with the ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message, it shall forward the ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST 
message to the ESM sublayer. Upon receipt of an indication from the ESM sublayer that the default EPS bearer context 
has been activated, the UE shall send an ATTACH COMPLETE message together with an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message contained in the ESM message container information element to the 
network. 

Additionally, the UE shall reset the attach attempt counter and tracking area updating attempt counter, enter state EMM- 
REGISTERED and set the EPS update status to EUl UPDATED. 



Upon receiving an ATTACH COMPLETE message, the MME shall stop timer T3450, enter state EMM-REGISTERED 
and consider the GUTI sent in the ATTACH ACCEPT message as valid. 

[TS 24.301, clause 5.5.1.3.1] 

The combined attach procedure is used by a UE in CS/PS mode 1 or CS/PS mode 2 of operation to attach for both EPS 
and non-EPS services. 
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The combined attach procedure is also used by a UE in CS/PS mode 1 or CS/PS mode 2 of operation to attach for EPS 
services if it is already IMSI attached for non-EPS services. 

When the UE initiates a combined attach procedure, the UE shall indicate "combined EPS/IMSI attach" in the EPS 
attach type IE. 

The combined attach procedure follows the attach procedure for EPS described in subclause 5.5.1.2. 

[TS 24.301, clause 5.5.1.3.2] 

If the UE is in EMM state EMM-DEREGISTERED, the UE initiates the combined attach procedure by sending an 
ATTACH REQUEST message to the network, starting timer T3410 and entering state EMM-REGISTERED- 
INITIATED (see example in figure 5.5.1.2.2.1). 

The UE shall include the TMSI status IE if no valid TMSI is available. Furthermore, if the UE has stored a valid 
location area identification, the UE shall include it in the Old location area identification IE in the ATTACH REQUEST 

message. 

[TS 24.301, clause 5.5.1.3.4.1] 

Depending on the value of the EPS attach result IE received in the ATTACH ACCEPT message, two different cases 
can be distinguished: 

1) The EPS attach result IE value indicates "combined EPS/IMSI attach": attach for EPS and non-EPS services 
have been successful. 

2) The EPS attach result IE value indicates "EPS only": attach for EPS services has been successful but attach for 
non-EPS services has failed. 

[TS 24.301, clause 5.5.1.3.4.2] 

The description for attach for EPS services as specified in subclause 5.5.1.2.4 shall be followed. In addition, the 
following description for attach for non-EPS services applies. 



[TS 24.301, clause 5.5.1.3.4.3] 

Apart from the actions on the tracking area updating attempt counter, the description for attach for EPS services as 
specified in subclause 5.5.1.2.4 shall be followed. In addition, the following description for attach for non-EPS services 
applies. 

The UE receiving the ATTACH ACCEPT message takes one of the following actions depending on the EMM cause 
value: 



#16 (MSC temporarily not reachable); 

#17 (Network failure); or 

#22 (Congestion) 

The UE shall stop timer T3410 if still running. The tracking area updating attempt counter shall be 
incremented, unless it was already set to 5. 

If the tracking area updating attempt counter is less than 5: 

- the UE shall start timer T341 1, shall set the EPS update status to EUl UPDATED and shall enter state 
EMM-REGISTERED.ATTEMPTING-TO-UPDATE-MM. When timer T341 1 expires the combined 
tracking area updating procedure indicating "combined TA/LA updating with IMSI attach" is triggered. 

If the tracking area updating attempt counter is equal to 5: 

a UE operating in CS/PS mode 2 of operation shall start timer T3402, shall set the EPS update status to 
EUl UPDATED and shall enter state EMM-REGISTERED.ATTEMPTING-TO-UPDATE-MM. When 
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timer T3402 expires the combined tracking area updating procedure indicating "combined TA/LA 
updating with IMSl attach" is triggered; 

a UE operating in CS/PS mode 1 of operation with "IMS voice not available" shall attempt to select 
GERAN or UTRAN radio access technology and proceed with appropriate MM or GMM specific 
procedures. The UE shall disable the E-UTRA capability (see subclause 4.5). If the UE is in the EMM- 
CONNECTED mode, the UE shall locally release the established NAS signalling connection and enter 
the EMM-IDLE mode before selecting GERAN or UTRAN radio access technology. 

NOTE 1 ; It is up to the UE implementation when to enable E-UTRAN radio access technology selection. 



Other EMM cause values and the case that no EMM cause IE was received are considered as abnormal cases. The 
combined attach procedure shall be considered as failed for EPS and non-EPS services. The behaviour of the UE in 
those cases is specified in subclause 5.5.1.3.6. 

[TS 24.301, clause 5.5.3.3.4.3] 

Apart from the actions on the tracking area updating attempt counter, the description for tracking area for EPS services 
as specified in subclause 5.5.3.2.4 shall be followed. In addition, the following description for location updating for 
non-EPS services applies. 

The UE receiving the TRACKING AREA UPDATE ACCEPT message takes one of the following actions depending 
on the EMM cause value: 



#16 (MSC temporarily not reachable); 

#17 (Network failure); or 

#22 (Congestion) 

The UE shall stop timer T3430 if still running. The tracking area updating attempt counter shall be 
incremented, unless it was already set to 5. 

If the tracking area updating attempt counter is less than 5: 

- the UE shall start timer T341 1, shall set the EPS update status to EUl UPDATED and shall enter state 
EMM-REGISTERED.ATTEMPTING-TO-UPDATE-MM. When timer T341 1 expires the combined 
tracking area updating procedure indicating "combined TA/LA updating with IMSI attach" is triggered 
again. 

If the tracking area updating attempt counter is equal to 5: 

a UE operating in CS/PS mode 2 of operation shall start timer T3402, shall set the EPS update status to 
EUl UPDATED and shall enter state EMM-REGISTERED.ATTEMPTING-TO-UPDATE-MM. When 
timer T3402 expires the combined tracking area updating procedure indicating "combined TA/LA 
updating with IMSI attach" is triggered again; 

a UE operating in CS/PS mode 1 of operation with "IMS voice not available" shall attempt to select 
GERAN or UTRAN radio access technology and proceed with appropriate MM or GMM specific 
procedures. The UE shall disable the E-UTRA capability (see subclause 4.5). If the UE is in the EMM- 
CONNECTED mode, the UE shall locally release the established NAS signalling connection and enter 
the EMM -IDLE mode before selecting GERAN or UTRAN radio access technology. 

NOTE 1 : It is up to the UE implementation when to enable E-UTRAN radio access technology selection. 
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9.2.1.2.3.3 Test description 

9.2.1.2.3.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI-1 

- T3402 is set to default (12 min.). 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The USIM contains GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED", and also P-TMSI 
signature 1. 

- The USIM contains TMSI-1 and LAI-1 for CS service, and Location update status is "Ul: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1 .2.3.3.2 Test procedure sequence 

The sequence is executed for execution counter k = 1, 2, 3. 

Table 9.2.1.2.3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmit a combined ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message as 
specified. 


-> 


ATTACH REQUEST 






3 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






4 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






5 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 


<~ 


SECURITY MODE COMMAND 


- 


- 


6 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 6Aa1 to 6Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










6A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






6A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






7 


The SS transmits an ATTACH ACCEPT 
message with EPS attach result indicating 
"EPS only" and MM cause indicating according 
to specific message contents and with IE EPS 
Bearer Identity set to default EPS bearer 
context. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT. 

Note 1 : SS allocates a PDN address of a PDN 
type which is compliant with from the PDN type 
requested by the UE. 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 8 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










8 


Check: Does the UE transmit an ATTACH 
COMPLETE message including a ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message as specified? 


~> 


ATTACH COMPLETE 


1 


P 


9 


The SS releases the RRC connection. 


- 


- 


- 


- 


10 


Checkl : Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with 
"combined TA/LA updating with IMSI attach"? 
Check2: Is the time between the previous 
ATTACH ACCEPT and TRACKING AREA 
UPDATE REQUEST equal to T341 1 ? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1,2 


P 
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Note: Tracking area updating attempt 
counter=2 










11 


SS transmits a TRACKING AREA UPDATE 
ACCEPT message with EPS update result 
indicating "TA updated" and IVIIVI cause 
indicating according to specific message 
contents. 


<- 


TRACKING AREA UPDATE 
ACCEPT 






12 


Checkl : Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with 
"combined TA/LA updating with IMSI attach"? 
Check2: Is the time between the previous 
TRACKING AREA UPDATE ACCEPT and 
TRACKING AREA UPDATE REQUEST equal 
toT3411? 

Note: Tracking area updating attempt 
counter=3 


-> 


TRACKING AREA UPDATE 
REQUEST 


2,3 


P 


13 


SS transmits a TRACKING AREA UPDATE 
ACCEPT message with EPS update result 
indicating "TA updated" and IVIM cause 
indicating according to specific message 
contents. 


<— 


TRACKING AREA UPDATE 
ACCEPT 






14 


Checkl : Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with 
"combined TA/LA updating with IMSI attach"? 
Check2: Is the time between the previous 
TRACKING AREA UPDATE ACCEPT and 
TRACKING AREA UPDATE REQUEST equal 
toT3411? 

Note: Tracking area updating attempt 
counter=4 


-> 


TRACKING AREA UPDATE 
REQUEST 


2,3 


P 


15 


SS transmits a TRACKING AREA UPDATE 
ACCEPT message with EPS update result 
indicating "TA updated" and IVIIVI cause 
indicating according to specific message 
contents 


<- 


TRACKING AREA UPDATE 
ACCEPT 






16 


Checkl : Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with 
"combined TA/LA updating with IMSI attach"? 
Check2: Is the time between the previous 
TRACKING AREA UPDATE ACCEPT and 
TRACKING AREA UPDATE REQUEST equal 
toT3411? 

Note: Tracking area updating attempt 
counter=5 


-> 


TRACKING AREA UPDATE 
REQUEST 


2,3 


P 


17 


SS transmits a TRACKING AREA UPDATE 
ACCEPT message with EPS update result 
indicating "TA updated" and MM cause 
indicating according to specific message 
contents. 


<~ 


TRACKING AREA UPDATE 
ACCEPT 






18 


Checkl : Does the UE send TRACKING AREA 
UPDATE REQUEST message with "combined 
TA/LA updating with IMSI attach"? 
Check2: Is the time between the previous 
TRACKING AREA UPDATE ACCEPT and 
TRACKING AREA UPDATE REQUEST equal 
to T3402? 

Note: Tracking area updating attempt 
counter=5 


-> 


TRACKING AREA UPDATE 
REQUEST 


2,3 


P 


19 


SS transmits a TRACKING AREA UPDATE 
ACCEPT message with EPS update result 
indicating " combined TA/LA updated " 
according to default message contents. 


<- 


TRACKING AREA UPDATE 
ACCEPT 






20 


Check: Does the result of test procedure in 
36.508 clause 6.4.2.3 indicate that the UE 


- 


- 


3 


- 
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answer to paging with S-TIVISI-1 (associated 
with GUTI-1) for PS domain? 












At the end of this test procedure sequence, the 
UE is in end state E-UTRA idle (E1) according 
to TS 36.508. 











9.2.1 .2.3.3.3 Specific message contents 

Table 9.2.1.2.3.3.3-1: Message ATTACH REQUEST (step 2, Table 9.2.1.2.3.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


EPS attach type 


010 


"combined 
EPS/IMSI attach" 




Old GUT! or IMS! 


GUTI-1 






Last visited registered TAI 


TAI-1 






Old location area identification 


LAI-1 






TMSI status 


Not present 







Table 9.2.1.2.3.3.3-2: Message ATTACH ACCEPT (step 7, Table 9.2.1.2.3.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-1 


Information Element 


Value/remark 


Comment 


Condition 


EPS attach result 


001 


"EPS only" 




GUT! 


Not present 






Location area identification 


Not present 


SS doesn't 
provide LAI 




IVIS identity 


Not Present 


SS doesn't 
provide TIVISI 




EIVIM cause 


00010000 for k=1 or 

00010001 fork=2or 
0001 01 10 for k=3 


#16(MSG 
temporarily not 
reachable) for k=1 
#17 (Network 
failure) for k=2 
#22 (Congestion) 
for k=3 





Table 9.2.1.2.3.3.3-3: Message TRACKING AREA UPDATE REQUEST (steps 10-12-14-16-18, Table 

9.2.1.2.3.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


EPS update type 


010 


"combined TA/LA 
updating with IIVISI 
attach" 




Old GUTI 


GUTI-1 






Old P-TMSI signature 


Not present 


This IE is included 
when the UE 
holds a valid P- 
TMSI signature. 




Additional GUTI 


Not present 


TIN = 'GUTI' 




Last visited registered TAI 


TAI-1 






Old location area identification 


LAI-1 






TMSI status 


Not present 
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Table 9.2.1.2.3.3.3-4: Message TRACKING AREA UPDATE ACCEPT (steps 11-13-15-17, Table 

9.2.1.2.3.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


EPS update result 


000 


"TA updated" 
SS accepts 
Combined TAU 
for EPS services 
only. 




GUT! 


Not present 






Location area identification 


Not present 


SS doesn't 
provide LAI 




MS identity 


Not Present 


SS doesn't 
provide TMSI 




EMM cause 


00010000 for k=1 or 

00010001 fork=2or 
0001 01 10 for k=3 


#16(MSC 
temporarily not 
reachable) for k=1 
#17 (Network 
failure) for k=2 
#22 (Congestion) 
for k=3 





9.2.1 .2.4 Successful combined attach procedure / EPS service only / CS domain not 

available 



9.2.1.2.4.1 



(1) 



Test Purpose (TP) 



with { UE is switched-off } 
ensure that { 

when { UE is powered on and a valid GUTI is available } 

then { the UE transmits an ATTACH REQUEST message with the EPS attach type set to "combined 
EPS/IMSI attach", including GUTI, last visited registered TAI and a PDN CONNECTIVITY REQUEST message 
with the request type set to "initial attach" } 



(2) 



with { UE has sent a combined ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH ACCEPT message including EPS attach result set to "EPS only" and EMM 
reject cause set to "CS domain not available" and including an ACTIVATE DEFAULT EPS BEARER CONTEXT 
REQUEST message with IE EPS Bearer Identity matching the PDN CONNECTIVITY REQUEST message } 

then { UE transmits ATTACH COMPLETE message, containing the EPS bearer identity, including an 
ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT message and sets the update status to U2 NOT UPDATED and 
enters EMM-REGISTERED state } 
} 

(3) 

with { The UE received an ATTACH ACCEPT message with EPS attach result set to "EPS only" and EMM 
cause set to "CS domain not available" } 
ensure that { 

when { UE enters a TA where it is not registered and which belongs to the PLMN where the UE 
received the EMM cause "CS domain not available" } 

then { UE initiates a normal tracking area update procedure indicating "TA updating" without 
valid LAI, TMSI, GSM ciphering key, UMTS integrity key, UMTS ciphering key or ciphering key sequence 
number } 

} 

(4) 

with { The UE received an ATTACH ACCEPT message with EPS attach result set to "EPS only" and EMM 
cause set to "CS domain not available" } 
ensure that { 

when { UE is powered up or switched on } 

then { UE initiates a combined attach procedure indicating "combined EPS/IMSI attach" } 
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9.2.1 .2.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.5.1.2.4, 
5.5.1.3.1, 5.5.1.3.2, 5.5.1.3.4.1, 5.5.1.3.4.2 and 5.5.1.3.4.3, and TS 24.008, clause 4.1.2.2. 

[TS 24.301, clause 5.5.1.2.4] 

If the attach request is accepted by the network, the MME shall send an ATTACH ACCEPT message to the UE and 
start timer T3450. The MME shall send the ATTACH ACCEPT message together with an ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message contained in the ESM message container information element to activate the 
default bearer (see subclause 6.4.1). The network may also initiate the activation of dedicated bearers towards the UE 
by invoking the dedicated EPS bearer context activation procedure (see subclause 6.4.2). 

If the attach request is accepted by the network, the MME shall delete the stored UE radio capability information, if 
any. 

If the UE has included the UE network capability IE or the MS network capability IE or both in the ATTACH 
REQUEST message, the MME shall store all octets received from the UE, up to the maximum length defined for the 
respective information element. 

NOTE: This information is forwarded to the new MME during inter-MME handover or to the new SGSN during 
inter-system handover to A/Gb mode or lu mode. 

The MME shall assign and include the TAI list the UE is registered to in the ATTACH ACCEPT message. The UE, 
upon receiving an ATTACH ACCEPT message, shall delete its old TAI list and store the received TAI list. 

Upon receiving the ATTACH ACCEPT message, the UE shall stop timer T3410. 

The GUTI reallocation may be part of the attach procedure. When the ATTACH REQUEST message includes the 
IMSI, or the MME considers the GUTI provided by the UE is invalid, or the GUTI provided by the UE was assigned by 
another MME, the MME shall allocate a new GUTI to the UE. The MME shall include in the ATTACH ACCEPT 
message the new assigned GUTI together with the assigned TAI list. In this case the MME shall enter state EMM- 
COMMON-PROCEDURE-INITIATED as described in subclause 5.4.1. 



If the ATTACH ACCEPT message contains a GUTI, the UE shall use this GUTI as the new temporary identity. The 
UE shall delete its old GUTI and store the new assigned GUTI. If no GUTI has been included by the MME in the 
ATTACH ACCEPT message, the old GUTI, if any available, shall be kept. 

If A/Gb mode or lu mode is supported in the UE, the UE shall set its TIN to "GUTI" when receiving the ATTACH 
ACCEPT message. 



When the UE receives the ATTACH ACCEPT message combined with the ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message, it shall forward the ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST 
message to the ESM sublayer. Upon receipt of an indication from the ESM sublayer that the default EPS bearer context 
has been activated, the UE shall send an ATTACH COMPLETE message together with an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message contained in the ESM message container information element to the 
network. 

Additionally, the UE shall reset the attach attempt counter and tracking area updating attempt counter, enter state EMM- 
REGISTERED and set the EPS update status to EUl UPDATED. 



Upon receiving an ATTACH COMPLETE message, the MME shall stop timer T3450, enter state EMM-REGISTERED 
and consider the GUTI sent in the ATTACH ACCEPT message as valid. 

[TS 24.301, clause 5.5.1.3.1] 

The combined attach procedure is used by a UE in CS/PS mode 1 or CS/PS mode 2 of operation to attach for both EPS 
and non-EPS services. 
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The combined attach procedure is also used by a UE in CS/PS mode 1 or CS/PS mode 2 of operation to attach for EPS 
services if it is already IMSI attached for non-EPS services. 

When the UE initiates a combined attach procedure, the UE shall indicate "combined EPS/IMSI attach" in the EPS 
attach type IE. 

The combined attach procedure follows the attach procedure for EPS described in subclause 5.5.1.2. 

[TS 24.301, clause 5.5.1.3.2] 



The UE shall include the TMSI status IE if no valid TMSI is available. Furthermore, if the UE has stored a valid 
location area identification, the UE shall include it in the Old location area identification IE in the ATTACH REQUEST 

message. 

[TS 24.301, clause 5.5.1.3.4.1] 

Depending on the value of the EPS attach result IE received in the ATTACH ACCEPT message, two different cases 
can be distinguished: 

1) The EPS attach result IE value indicates "combined EPS/IMSI attach": attach for EPS and non-EPS services 
have been successful. 

2) The EPS attach result IE value indicates "EPS only": attach for EPS services has been successful but attach for 
non-EPS services has failed. 

[TS 24.301, clause 5.5.1.3.4.2] 

The description for attach for EPS services as specified in subclause 5.5.1.2.4 shall be followed. In addition, the 
following description for attach for non-EPS services applies. 



[TS 24.301, clause 5.5.1.3.4.3] 

Apart from the actions on the tracking area updating attempt counter, the description for attach for EPS services as 
specified in subclause 5.5.1.2.4 shall be followed. In addition, the following description for attach for non-EPS services 
applies. 

The UE receiving the ATTACH ACCEPT message takes one of the following actions depending on the EMM cause 
value: 



#18 (CS domain not available) 

The UE shall stop timer T3410 if still running, shall reset the tracking area updating attempt counter, shall set 
the EPS update status to EUl UPDATED and shall enter state EMM-REGISTERED.NORMAL-SERVICE. 

The UE shall set the update status to U2 NOT UPDATED. 

A UE in CS/PS mode 1 of operation with "IMS voice not available" shall attempt to select GERAN or 
UTRAN radio access technology rather than E-UTRAN for the selected PLMN or equivalent PLMN. The 
UE shall disable the E-UTRA capability (see subclause 4.5). If the UE is in the EMM -CONNECTED mode, 
the UE shall locally release the established NAS signalling connection and enter the EMM -IDLE mode 
before selecting GERAN or UTRAN radio access technology. 

A UE in CS/PS mode 2 of operation may provide a notification to the user or the upper layers that the CS 
domain is not available. 



The UE shall not attempt combined attach or combined tracking area update procedure with current PLMN 
until switching off the UE or the UICC containing the USIM is removed. 
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Other EMM cause values and the case that no EMM cause IE was received are considered as abnormal cases. The 
combined attach procedure shall be considered as failed for EPS and non-EPS services. The behaviour of the UE in 
those cases is specified in subclause 5.5.1.3.6. 

[TS 24.008, clause 4. 1.2.2] 

In parallel with the sublayer states described in subclause 4. 1 .2. 1 and which control the MM sublayer protocol, an 
update status exists. 

The update status pertains to a specific subscriber embodied by a SIM/USIM. This status is defined even when the 
subscriber is not activated (SIM/USIM removed or connected to a switched-off ME). It is stored in a non volatile 
memory in the SIM/USIM. The update status is changed only as a result of a location updating procedure attempt (with 
the exception of an authentication failure and of some cases of CM service rejection). In some cases, the update status is 
changed as a result of a GPRS attach, GPRS routing area update, service request or network initiated GPRS detach 
procedure. 



U2 NOT UPDATED 

The last location updating attempt made failed procedurally (no significant answer was received from the 
network, including the cases of failures or congestion inside the network). 

For this status, the SIM/USIM does not contain any valid LAI, TMSI, GSM ciphering key, UMTS integrity 
key, UMTS ciphering key or ciphering key sequence number. For compatibility reasons, all these fields must 
be set to the "deleted" value at the moment the status is set to NOT UPDATED. However the presence of 
other values shall not be considered an error by the mobile station. The "Location update status" stored on the 
SIM/USIM shall be "not updated". 



9.2.1.2.4.3 Test description 

9.2.1.2.4.3.1 Pre-test conditions 

System Simulator: 

Cell A are Cell B are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI- 1 (home PLMN). 

- Cell B belongs to TAI-2(home PLMN, another TAC). 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The test USIM contains GUTIl and TAIl, and EPS update status is "EUl: UPDATED". 

- The test USIM contains TMSIl and LAIl for CS service, and Location update status is "Ul: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1.2.4.3.2 



Test procedure sequence 

Table 9.2.1 .2.4.3.2-1: Main Behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Set the cell type of cell A to the "Serving cell" 
Set the cell type of cell B to the "Non-suitable 
cell" 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


Check : Does the UE transmit a combined 
ATTACH REQUEST message including a 
PDN CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


1 


P 


4 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<~ 


AUTHENTICATION REQUEST 






5 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






6 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


7 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 7Aa1 to 7Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










7A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






7A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






8 


SS responds with ATTACH ACCEPT message 
with IE EPS Bearer Identity set to default EPS 
bearer context. The ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message is piggybacked in ATTACH 
ACCEPT. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 9 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










9 


Check: Does the UE transmit an ATTACH 
COMPLETE message including a ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message as specified? 


-> 


ATTACH COMPLETE 


2 


P 


10 


The SS releases the RRC connection. 


- 


- 


- 


- 


11 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.2 
indicate that the UE is in E-UTRA RRC IDLE 
state on Cell 1 ? 






2 




12 


Set the cell type of cell B to the "Serving cell" 
Set the cell type of cell A to the "Non-suitable 
cell" 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 
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13 


Checl<: Does the UE transmit TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


3 


P 


14 


SS responds with TRACKING AREA UPDATE 
ACCEPT message 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


15 


UE sends TRACKING AREA UPDATE 
COMPLETE 


-> 


TRACKING AREA UPDATE 
COMPLETE 






16 


The UE is switched off. 


- 


- 


- 


- 


17 


The UE is powered up or switched on. 


- 


- 


- 


- 


18 


Check : Does the UE transmit a combined 
ATTACH REQUEST message including a 
PDN CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


4 


P 


19 


SS responds with ATTACH ACCEPT message 
with IE EPS Bearer Identity set to default EPS 
bearer context. The ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message is piggybacked in ATTACH 
ACCEPT. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 20 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










20 


Check: Does the UE transmit an ATTACH 
COIVIPLETE message including a ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message as specified? 


-> 


ATTACH COMPLETE 








At the end of this test procedure sequence, the 
UE is in end state E-UTRA connected {E2) 
according to TS 36.508 but attached for EPS 
services only. 











9.2.1 .2.4.3.3 Specific message contents 

Table 9.2.1.2.4.3.3-1 : Message ATTACH REQUEST (step 3, Table 9.2.1.2.4.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


EPS attach type 


010 


"combined 
EPS/IMSI attach" 




Old GUTI or IMSI 


GUTI-1 






Last visited registered TAI 


TAI-1 






Old location area identification 


LAI-1 






TMSI status 


Not present 







Table 9.2.1.2.4.3.3-2: Message ATTACH ACCEPT (step 8, Table 9.2.1.2.4.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-1 


Information Element 


Value/remarl< 


Comment 


Condition 


EPS attach result 


001 


"EPS only" 




GUTI 


Not Present 






Location area identification 


Not present 


SS doesn't 
provide LAI 




MS identity 


Not Present 


SS doesn't 
provide TMSI 




EMM cause 


00010010 


#18 "CS domain 
not available" 
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Table 9.2.1.2.4.3.3-3: Message TRACKING AREA UPDATE REQUEST (step 13, Table 9.2.1.2.4.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


EPS update type 


000 


TA updating 




Old GUT! 


GUTI-1 






Last visited registered TAI 


TAI-1 


If available, the 
last TAI is 
included by UE 
and will be used 
to establish a 
good list of TAIs in 
subsequent 
ATTACH 
ACCEPT 
message. 




Old location area identification 


Not present 


Entering in U2 
NOT UPDATED 
state, UE deletes 
LAI 




TMSI status 





"no valid TIVISI 
available" 

Entering in U2 
NOT UPDATED 
state, UE deletes 
TMSI 





Table 9.2.1.2.4.3.3-4: Message TRACKING AREA UPDATE ACCEPT (step 14, Table 9.2.1.2.4.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


EPS update result 


000 


"TA only" 




GUTI 


GUTI-2 






Location area identification 


Not present 


SS doesn't 
provide LAI 




MS identity 


Not Present 


SS doesn't 
provide TMSI 




EMM cause 


00010010 


#18 "CS domain 
not available" 





Table 9.2.1.2.4.3.3-5: Message ATTACH REQUEST (step 18, Table 9.2.1.2.4.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


EPS attach type 


010 


"combined 
EPS/IMSI attach" 




Old GUTI or IMSI 


GUTI-2 






Last visited registered TAI 


TAI-2 






Old location area identification 


Not present 






TMSI status 





"no valid TMSI 
available" 





Table 9.2.1.2.4.3.3-6: Message ATTACH ACCEPT (step 19, Table 9.2.1.2.4.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-1 


Information Element 


Value/remark 


Comment 


Condition 


EPS attach result 


010 


"Combined 
EPS/IMSI attach" 




GUTI 


GUTI-2 






Location area identification 


LAI-2 






MS identity 


TMSI-2 
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9.2.1 .2.5 Combined attach / Rejected / IMSI invalid 

9.2.1 .2.5.1 Test Purpose (TP) 

(1) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the EMM cause set to 'Illegal UE ' } 

then { UE deletes GUTI , last visited registered TAI and KSI and considers the USIM as invalid 
for EPS services and non-EPS services and enters state EMM-DEREGISTERED } 



(2) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the EMM cause set to 'Illegal UE ' } 

then { UE deletes P-TMSI, P-TMSI signature, RAI , GPRS ciphering key sequence number, TMSI, LAI 
and ciphering key sequence number } 
} 

9.2.1.2.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.1.3.5 and 
TS 24.008, clause 4.7.3.2.4. 

[TS 24.301, clause 5.5.1.3.5] 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410, enter MM state MM IDLE, and take 
the following actions depending on the EMM cause value received. 

#3 (Illegal UE); 



The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. 

The UE shall consider the USIM as invalid for EPS and non-EPS services until switching off or the UICC 
containing the USIM is removed. Additionally, the UE shall delete the list of equivalent PLMNs and shall enter 
the state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the MM parameters update 
status, TMSI, LAI and ciphering key sequence number, and the GMM parameters GMM state, GPRS update 
status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as specified in 
3GPP TS 24.008 [13] for the case when the combined attach procedure is rejected with the GMM cause with the 
same value. 



[TS 24.008, clause 4.7.3.2.4] 

The MS shall then take one of the following actions depending upon the reject cause: 
# 3 (Illegal MS); 



The MS shall set the GPRS update status to GU3 ROAMING NOT ALLOWED (shall store it according to 
subclause 4.1.3.2) and shall delete any P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence 
number. The new GMM state is GMM-DEREGISTERED. The new MM state is MM IDLE. 
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The MS shall set the update status to U3 ROAMING NOT ALLOWED, shall delete any TMSI, LAI and 
ciphering key sequence number. The SIM/USIM shall be considered as invalid for GPRS and non-GPRS 
services until switching off or the SIM/USIM is removed. 



9.2.1.2.5.3 Test description 

9.2.1.2.5.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell B. 

- If pc_UTR AN supported by UE, Cell 5 . 

- Cell 5 belongs to LAI- 1 and RAI- 1 (home PLMN) 

- If pc_GERAN and NOT pc_UTRAN supported by UE, Cell 24. 

- Cell 24 belongs to LAI- 1 and RAI- 1 (home PLMN) 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The test USIM contains IMSI-1, GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 

- The test USIM contains P-TMSI-1 (belonging to RAI-1) and the GPRS update status is "GUI: UPDATED". 

- The test USIM contains TMSI-1 (belonging to LAI-1) and the update status is "Ul: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.2.5.3.2 



Test procedure sequence 

Table 9.2.1.2.5.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell", 

- Cell B as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with the EMM cause set to 'Illegal 
UE'. 


<— 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


The SS configures: 

- Cell A as a "Non-Suitable cell". 

- Cell B as the "Serving cell". 










7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell B or on Cell A? 


-> 


ATTACH REQUEST 


1 


F 




EXCEPTION: Steps 8a1 to 8a3 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










8a1 


IF pc_UTRAN or pc_GERAN THEN the SS 
configures: 

- Cell B as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as the "Serving cell". 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










8a2 


Void 


- 


- 


- 


- 


8a3 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


9 


If possible (see ICS) switch off is performed or 
the USIM is removed. 
Otherwise the power is removed. 










10 


The SS configures: 

- Cell A as the "Serving cell", 

- Cell B as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


11 


The UE is brought back to operation or the 
USIM is inserted. 


- 


- 


- 


- 


12 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


~> 


ATTACH REQUEST 


1 


P 


13 


The SS transmits an ATTACH REJECT 
message with the EMM cause set to 'Illegal 
UE'. 


<- 


ATTACH REJECT 






14 


The SS releases the RRC connection. 


- 


- 


- 


- 




EXCEPTION: Steps 15a1 to 15a9 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










15a1 


IF pc_UTRAN or pc_GERAN THEN If possible 
(see ICS) switch off is performed or the USIM 
is removed, otherwise the power is removed. 










15a2 


The SS configures: 


- 


- 


- 


- 
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- Cell A as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as the "Serving cell". 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










15a3 


The UE is brought back to operation or the 
USIIVI is inserted. 


- 


- 


- 


- 


15a4 


Void 


- 


- 


- 


- 


15a5 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


2 


P 


15a6 


The SS transmits an AUTHENTICATION AND 
CIPHERING REQUEST message to initiate 
the authentication and AKA procedure. 


<— 


AUTHENTICATION AND 
CIPHERING REQUEST 






15a7 


The UE transmits an AUTHENTICATION AND 
CIPHERING RESPONSE message. 


-> 


AUTHENTICATION AND 
CIPHERING RESPONSE 


- 


- 


15a8 


The SS transmits an ATTACH ACCEPT 
message. 


<~ 


ATTACH ACCEPT 


- 


- 


15a9 


The UE transmits an ATTACH COMPLETE 
message. 


-> 


ATTACH COMPLETE 


- 


- 



9.2.1 .2.5.3.3 Specific message contents 

Table 9.2.1.2.5.3.3-1 : Message ATTACH REJECT (step 4 and step 13, Table 9.2.1.2.5.3.2-1) 



Derivation Path : TS 36.508 Table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 001 1'B 


Illegal UE 





Table 9.2.1.2.5.3.3-2: Message ATTACH REQUEST (step 12, Table 9.2.1.2.5.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUTI or IMSI 


IMSI-1 






Last visited registered TAI 


Not present 






Old location area identification 


Not present 






TMSI status 


'O'B 


no valid TMSI 
available 





ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1113 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 9.2.1.2.5.3.3-3: Message ATTACH REQUEST (step 15a5, Table 9.2.1.2.5.3.2-1) 



Derivation Path: TS 24.008 , Table 9.4.1 


Information Element 


Value/remark 


Comment 


Condition 


MS network capability 


Any allowed value 






Attach type 


'011'B 


Combined 
GPRS/IMSI attach 




GPRS ciphering key sequence number 


'111'B 


No key is 
available (MS to 
network) 




DRX parameter 


Any allowed value 






P-TMSI or IMS! 


IMSI-1 






Old routing area identification 


All bits of octets 5 and 6 

are set to 1 , except bit 1 

of octet 6 which is set to 

0. 

Other bits are not 

checked. 






MS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Not present 






Requested READY timer 
value 


Not present or any 
allowed value 






TMSI status 


'O'B 


no valid TMSI 
available 




PS LCS Capability 


Not present or any 
allowed value 






Mobile station classmark 2 


Not present or any 
allowed value 






Mobile station classmark 3 


Not present or any 
allowed value 






Supported Codecs 


Not present or any 
allowed value 






UE network capability 


Not present or any 
allowed value 






Additional mobile identity 


Not present 






Additional old routing area identification 


Not present 







9.2.1.2.6 



9.2.1.2.6.1 



Combined attach / Rejected / Illegal ME 
Test Purpose (TP) 



(1) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the EMM cause set to 'Illegal ME' } 

then { UE (deletes GUTI , last visited registered TAI and KSI and considers the USIM as invalid 
for EPS services and non-EPS services and enters state EMM-DEREGISTERED } 
} 

(2) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the EMM cause set to 'Illegal ME' } 

then { UE deletes P-TMSI, P-TMSI signature, RAI , GPRS ciphering key sequence number, TMSI, LAI 
and ciphering key sequence number } 



9.2.1.2.6.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.1.3.5 and 
TS 24.008, clause 4.7.3.2.4. 

[TS 24.301, clause 5.5.1.3.5] 
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Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410, enter MM state MM IDLE, and take 
the following actions depending on the EMM cause value received. 



#6 (Illegal ME); or 



The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclauses. 1.3. 3) and shall delete any GUTI, last visited registered TAI and KSI. 

The UE shall consider the USIM as invalid for EPS and non-EPS services until switching off or the UICC 
containing the USIM is removed. Additionally, the UE shall delete the list of equivalent PLMNs and shall enter 
the state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the MM parameters update 
status, TMSI, LAI and ciphering key sequence number, and the GMM parameters GMM state, GPRS update 
status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as specified in 
3GPP TS 24.008 [13] for the case when the combined attach procedure is rejected with the GMM cause with the 
same value. 



[TS 24.008, clause 4.7.3.2.4] 



The MS shall then take one of the following actions depending upon the reject cause: 



# 6 (Illegal ME), or 



The MS shall set the GPRS update status to GU3 ROAMING NOT ALLOWED (shall store it according to 
subclause 4.1.3.2) and shall delete any P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence 
number. The new GMM state is GMM-DEREGISTERED. The new MM state is MM IDLE. 

The MS shall set the update status to U3 ROAMING NOT ALLOWED, shall delete any TMSI, LAI and 
ciphering key sequence number. The SIM/USIM shall be considered as invalid for GPRS and non-GPRS 
services until switching off or the SIM/USIM is removed. 



9.2.1.2.6.3 Test description 

9.2.1.2.6.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell B 

- If pc_UTR AN supported by UE, Cell 5 . 

- Cell 5 belongs to LAI-1 and RAI- 1 (home PLMN) 

- If pc_GERAN and NOT pc_UTRAN supported by UE, Cell 24. 

- Cell 24 belongs to LAI- 1 and RAI- 1 (home PLMN) 



UE: 



The UE is configured to initiate combined EPS/IMSI attach. 

The test USIM contains IMSI-1, GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 
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- The test USIM contains P-TMSI-1 (belonging to RAM) and the GPRS update status is "GUI: UPDATED". 

- The test USIM contains TMSI-1 (belonging to LAI-1) and the update status is "Ul: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.2.6.3.2 



Test procedure sequence 

Table 9.2.1.2.6.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell", 

- Cell B as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with the EMM cause set to 'Illegal 
ME'. 


<— 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


The SS configures: 

- Cell A as a "Non-Suitable cell". 

- Cell B as the "Serving cell". 










7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell B or on Cell A? 


-> 


ATTACH REQUEST 


1 


F 


8 


Void 


- 


- 


- 


- 


9 


Void 


- 


- 


- 


- 




EXCEPTION: Steps 10a1 to 10a5 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










10a1 


IF pc_UTRAN or pc_GERAN THEN the SS 
configures: 

- Cell B as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as the "Serving cell". 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










10a2 


Void 


- 


- 


- 


- 


10a3 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


10a4 


Void 


- 


- 


- 


- 


10a5 


Void 


- 


- 


- 


- 


11 


If possible (see ICS) switch off is performed or 
the USIM is removed. 
Otherwise the power is removed. 










12 


The SS configures: 

- Cell A as the "Serving cell", 

- Cell B as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


13 


The UE is brought back to operation or the 
USIM is inserted. 


- 


- 


- 


- 


14 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


1 


P 


15 


The SS transmits an ATTACH REJECT 
message with the EMM cause set to 'Illegal 
ME'. 


<— 


ATTACH REJECT 






16 


The SS releases the RRC connection. 


- 


- 


- 


- 




EXCEPTION: Steps 17a1 to 17a9 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 
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17a1 


IF pc_UTRAN or pc_GERAN THEN If possible 
(see ICS) switch off is performed or the USIIVI 
is removed, otherwise the power is removed. 










17a2 


The SS configures: 

- Cell A as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as the "Serving cell". 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










17a3 


The UE is brought back to operation or the 
USIIVI is inserted. 


- 


- 


- 


- 


17a4 


Void 


- 


- 


- 


- 


17a5 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


2 


P 


17a6 


The SS transmits an AUTHENTICATION AND 
CIPHERING REQUEST message to initiate 
the authentication and AKA procedure. 


<- 


AUTHENTICATION AND 
CIPHERING REQUEST 






17a7 


The UE transmits an AUTHENTICATION AND 
CIPHERING RESPONSE message. 


-> 


AUTHENTICATION AND 
CIPHERING RESPONSE 


- 


- 


17a8 


The SS transmits an ATTACH ACCEPT 
message. 


<- 


ATTACH ACCEPT 


- 


- 


17a9 


The UE transmits an ATTACH COMPLETE 
message. 


~> 


ATTACH COMPLETE 


- 


- 



9.2.1 .2.6.3.3 Specific message contents 

Table 9.2.1.2.6.3.3-1 : Message ATTACH REJECT (step 4 and step 15, Table 9.2.1.2.6.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'ooooono'B 


Illegal ME 





Table 9.2.1.2.6.3.3-2: Message ATTACH REQUEST (step 14, Table 9.2.1.2.6.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUTI or IMSI 


IMSI-1 






Last visited registered TAI 


Not present 






Old location area identification 


Not present 






TMSI status 


'O'B 


no valid TMSI 
available 
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Table 9.2.1.2.6.3.3-3: Message ATTACH REQUEST (step 17a5, Table 9.2.1.2.6.3.2-1) 



Derivation Path: TS 24.008 , Table 9.4.1 


Information Element 


Value/remark 


Comment 


Condition 


MS network capability 


Any allowed value 






Attach type 


'011'B 


Combined 
GPRS/IMSI attach 




GPRS ciphering key sequence number 


'111'B 


No key is 
available (MS to 
network) 




DRX parameter 


Any allowed value 






P-TMSI or IMS! 


IMSI-1 






Old routing area identification 


All bits of octets 5 and 6 

are set to 1 , except bit 1 

of octet 6 which is set to 

0. 

Other bits are not 

checked. 






MS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Not present 






Requested READY timer 
value 


Not present or any 
allowed value 






TMSI status 


'O'B 


no valid TMSI 
available 




PS LCS Capability 


Not present or any 
allowed value 






Mobile station classmark 2 


Not present or any 
allowed value 






Mobile station classmark 3 


Not present or any 
allowed value 






Supported Codecs 


Not present or any 
allowed value 






UE network capability 


Not present or any 
allowed value 






Additional mobile identity 


Not present 






Additional old routing area identification 


Not present 







9.2.1.2.7 
9.2.1.2.7.1 
(1) 



Combined attach / Rejected / EPS services and non-EPS services not allowed 
Test Purpose (TP) 



with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the EMM cause set to 'EPS services and non-EPS 
services not allowed' } 

then { UE deletes GUTI , last visited registered TAI and KSI and considers the USIM as invalid 
for EPS services and non-EPS services and enters state EMM-DEREGISTERED } 



(2) 

with { UE has sent an ATTACH REQUEST } 
ensure that { 

when { UE receives an ATTACH REJECT message with the EMM cause set to 'EPS services and non-EPS 
services not allowed' } 

then { UE deletes P-TMSI, P-TMSI signature, RAI , GPRS ciphering key sequence number, TMSI, LAI 
and ciphering key sequence number } 



9.2.1.2.7.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.1.3.5 and 
TS 24.008, clause 4.7.3.2.4. 

[TS 24.301, clause 5.5.1.3.5] 
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Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410, enter MM state MM IDLE, and take 
the following actions depending on the EMM cause value received. 



#8 (EPS services and non-EPS services not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclauses. 1.3. 3) and shall delete any GUTI, last visited registered TAI and KSI. 

The UE shall consider the USIM as invalid for EPS and non-EPS services until switching off or the UICC 
containing the USIM is removed. Additionally, the UE shall delete the list of equivalent PLMNs and shall enter 
the state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the MM parameters update 
status, TMSI, LAI and ciphering key sequence number, and the GMM parameters GMM state, GPRS update 
status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as specified in 
3GPP TS 24.008 [13] for the case when the combined attach procedure is rejected with the GMM cause with the 
same value. 



[TS 24.008, clause 4.7.3.2.4] 



The MS shall then take one of the following actions depending upon the reject cause: 



# 8 (GPRS services and non-GPRS services not allowed); 

The MS shall set the GPRS update status to GU3 ROAMING NOT ALLOWED (shall store it according to 
subclause 4.1.3.2) and shall delete any P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence 
number. The new GMM state is GMM-DEREGISTERED. The new MM state is MM IDLE. 

The MS shall set the update status to U3 ROAMING NOT ALLOWED, shall delete any TMSI, LAI and 
ciphering key sequence number. The SIM/USIM shall be considered as invalid for GPRS and non-GPRS 
services until switching off or the SIM/USIM is removed. 



9.2.1.2.7.3 Test description 

9.2.1.2.7.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell B. 

- If pc_UTR AN supported by UE, Cell 5 . 

- Cell 5 belongs to LAI-1 and RAI- 1 (home PLMN) 

- If pc_GERAN and NOT pc_UTRAN supported by UE, Cell 24. 

- Cell 24 belongs to LAI- 1 and RAI- 1 (home PLMN) 



UE: 



The UE is configured to initiate combined EPS/IMSI attach. 

The test USIM contains IMSI-1, GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 

The test USIM contains P-TMSI- 1 (belonging to RAM) and the GPRS update status is "GUI: UPDATED". 
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- The test USIM contains TMSI-1 (belonging to LAI-1) and the update status is "Ul: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.2.7.3.2 



Test procedure sequence 

Table 9.2.1.2.7.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell", 

- Cell B as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with the EMM cause set to 'EPS 
services and non-EPS services not allowed'. 


<— 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


The SS configures: 

- Cell A as a "Non-Suitable cell". 

- Cell B as the "Serving cell". 










7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell B or on Cell A? 


-> 


ATTACH REQUEST 


1 


F 




EXCEPTION: Steps 8a1 to 8a3 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










8a1 


IF pc_UTRAN or pc_GERAN THEN the SS 
configures: 

- Cell B as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as the "Serving cell". 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










8a2 


Void 


- 


- 


- 


- 


8a3 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


9 


If possible (see ICS) switch off is performed or 
the USIM is removed. 
Otherwise the power is removed. 










10 


The SS configures: 

- Cell A as the "Serving cell", 

- Cell B as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


11 


The UE is brought back to operation or the 
USIM is inserted. 


- 


- 


- 


- 


12 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


~> 


ATTACH REQUEST 


1 


P 


13 


The SS transmits an ATTACH REJECT 
message with the EMM cause set to 'EPS 
services and non-EPS services not allowed'. 


<- 


ATTACH REJECT 






14 


The SS releases the RRC connection. 


- 


- 


- 


- 




EXCEPTION: Steps 15a1 to 15a9 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










15a1 


IF pc_UTRAN or pc_GERAN THEN If possible 
(see ICS) switch off is performed or the USIM 
is removed, otherwise the power is removed. 










15a2 


The SS configures: 


- 


- 


- 


- 
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- Cell A as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as the "Serving cell". 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










15a3 


The UE is brought back to operation or the 
USIIVI is inserted. 


- 


- 


- 


- 


15a4 


Void 


- 


- 


- 


- 


15a5 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


2 


P 


15a6 


The SS transmits an AUTHENTICATION AND 
CIPHERING REQUEST message to initiate 
the authentication and AKA procedure. 


<— 


AUTHENTICATION AND 
CIPHERING REQUEST 






15a7 


The UE transmits an AUTHENTICATION AND 
CIPHERING RESPONSE message. 


-> 


AUTHENTICATION AND 
CIPHERING RESPONSE 


- 


- 


15a8 


The SS transmits an ATTACH ACCEPT 
message. 


<~ 


ATTACH ACCEPT 


- 


- 


15a9 


The UE transmits an ATTACH COMPLETE 
message. 


-> 


ATTACH COMPLETE 


- 


- 



9.2.1 .2.7.3.3 Specific message contents 

Table 9.2.1.2.7.3.3-1 : Message ATTACH REJECT (step 4 and step 13, Table 9.2.1.2.7.3.2-1) 



Derivation Path : TS 36.508 Table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 1000'B 


EPS services and 
non-EPS services 
not allowed 





Table 9.2.1.2.7.3.3-2: Message ATTACH REQUEST (step 12, Table 9.2.1.2.7.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-4 


Information Element 


Value/remarl< 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUTI or IMSI 


IMSI-1 






Last visited registered TAI 


Not present 






Old location area identification 


Not present 






TMSI status 


'O'B 


no valid TMSI 
available 
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Table 9.2.1.2.7.3.3-3: Message ATTACH REQUEST (step 15a5, Table 9.2.1.2.7.3.2-1) 



Derivation Path: TS 24.008 , Table 9.4.1 


Information Element 


Value/remark 


Comment 


Condition 


MS network capability 


Any allowed value 






Attach type 


'011'B 


Combined 
GPRS/IMSI attach 




GPRS ciphering key sequence number 


'111'B 


No key is 
available (MS to 
network) 




DRX parameter 


Any allowed value 






P-TMSI or IMS! 


IMSI-1 






Old routing area identification 


All bits of octets 5 and 6 

are set to 1 , except bit 1 

of octet 6 which is set to 

0. 

Other bits are not 

checked. 






MS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Not present 






Requested READY timer 
value 


Not present or any 
allowed value 






TMSI status 


'O'B 


no valid TMSI 
available 




PS LCS Capability 


Not present or any 
allowed value 






Mobile station classmark 2 


Not present or any 
allowed value 






Mobile station classmark 3 


Not present or any 
allowed value 






Supported Codecs 


Not present or any 
allowed value 






UE network capability 


Not present or any 
allowed value 






Additional mobile identity 


Not present 






Additional old routing area identification 


Not present 







9.2.1.2.8 
9.2.1.2.8.1 
(1) 



Combined attach / Rejected / EPS services not allowed 
Test Purpose (TP) 



with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "EPS services not 
allowed" } 

then { UE considers the USIM as invalid for EPS services and enters state EMM-DEREGISTERED and 
UE does not attempt to attach on any other cell } 



9.2.1.2.8.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.1.3.5. 

[TS 24.301, clause 5.5.1.3.5] 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410, enter MM state MM IDLE, and take 
the following actions depending on the EMM cause value received. 



#7 (EPS services not allowed); 
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The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. The UE shall consider the 
USIM as invalid for EPS services until switching off or the UICC containing the USIM is removed. 
Additionally, the UE shall delete the list of equivalent PLMNs and shall enter the state EMM-DEREGISTERED. 

A UE which is not yet IMSI attached for non-EPS services shall select GERAN or UTRAN radio access 
technology and perform an IMSI attach for non-EPS services, using the MM IMSI attach procedure as described 
in 3GPP TS 24.008 [13]. The UE shall not reselect E-UTRAN radio access technology until switching off or the 
UICC containing the USIM is removed. 

A UE which is already IMSI attached for non-EPS services is still IMSI attached for non-EPS services in the 
network. The UE shall select GERAN or UTRAN radio access technology and shall proceed with the 
appropriate MM specific procedure according to the MM service state. The UE shall not reselect E-UTRAN 
radio access technology until switching off or the UICC containing the USIM is removed. 

NOTE: Some interaction is required with the access stratum to disable E-UTRAN cell reselection. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM 
state, GPRS update status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as 
specified in 3GPP TS 24.008 [13] for the case when the combined attach procedure is rejected with the GMM 
cause with the same value. 



9.2.1.2.8.3 Test description 

9.2.1.2.8.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell B 

- If pc_UTR AN supported by UE, Cell 5 . 

- Cell 5 belongs to LAI-1 and RAI- 1 (home PLMN) 

- If pc_GERAN and NOT pc_UTRAN supported by UE, Cell 24. 

- Cell 24 belongs to LAI- 1 and RAI- 1 (home PLMN) 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The test USIM contains IMSIl, GUTIl and TAIl, and EPS update status is "EUl: UPDATED". 

- The test USIM contains P-TMSI-1 (belonging to RAM) and the GPRS update status is "GUI: UPDATED". 

- The test USIM contains TMSI-1 (belonging to LAI-1) and the update status is "Ul: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.2.8.3.2 



Test procedure sequence 

Table 9.2.1.2.8.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell". 

- Cell B as a "Suitable neighbour cell". 

- Cell 5 or Cell 24 as a "Suitable neighbour 
cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with EIVIM cause = "EPS services not 
allowed" as specified. 


<- 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 




EXCEPTION: Steps 6a1 to 6a3 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










6a1 


IF pc_UTRAN or pc_GERAN THEN the 
following messages are sent and shall be 
received on cell 5 or Cell 24. 










6a2 


Check: Does the UE transmit a LOCATION 
UPDATING REQUEST message on Cell 5 or 
Cell 24? 


-> 


LOCATION UPDATING 
REQUEST 


1 


P 


6a3 


The SS transmits a LOCATION UPDATING 
ACCEPT message with Location updating type 
= "IMSI attach" as specified in 3GPP TS 
24.008. 


<— 


LOCATION UPDATING ACCEPT 






7 


The SS configures: 

- Cell 5 or Cell 24 as a "Non-Suitable cell". 

- Cell A as the "Suitable neighbour cell". 

- Cell B as the "Suitable neighbour cell". 










8 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell A or on Cell B? 


-> 


ATTACH REQUEST 


1 


F 



9.2.1 .2.8.3.3 Specific message contents 

Table 9.2.1.2.8.3.3-1 : Message ATTACH REJECT (step 4, Table 9.2.1.2.8.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


EIVIM cause 


'0000 0111'B 


EPS services not 
allowed 





9.2.1.2.9 



9.2.1.2.9.1 



Combined attach / Rejected / PLMN not allowed 
Test Purpose (TP) 



(1) 



with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "PLMN not allowed" } 
then { UE deletes the GUTI , the last visited registered TAI and KSI and UE deletes the list of 
equivalent PLMNs and UE enters state EMM-DEREGISTERED. PLMN-SEARCH and UE stores the PLMN in the 
"forbidden PLMN list" } 
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(2) 

with { UE is switched off and a PLMN is stored in the "forbidden PLMN list" } 
ensure that { 

when { UE is powered on this PLMN } 

then { UE does not attempt to attach on the cell } 
} 

(3) 

with { UE in E-UTRA EMM-DEREGISTERED . PLMN-SEARCH state and a PLMN is stored in the "forbidden PLMN 
list" } 
ensure that { 

when { UE enters a PLMN which is not in the "forbidden PLMN list" } 
then { UE attempts to attach on the cell } 
} 

9.2.1.2.9.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.1.3.5. 

[TS 24.301, clause 5.5.1.3.5] 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410, enter MM state MM IDLE, and take 
the following actions depending on the EMM cause value received. 



#1 1 (PLMN not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAl, and KSI, and reset the attach attempt 
counter. The UE shall delete the Ust of equivalent PLMNs and enter the state EMM-DEREGISTERED.PLMN- 
SEARCH. 

The UE shall store the PLMN identity in the "forbidden PLMN list". 

The UE shall perform a PLMN selection according to 3GPP TS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the MM parameters update 
status, TMSl, LAI, ciphering key sequence number and location update attempt counter, and the GMM 
parameters GMM state, GPRS update status, P-TMSl, P-TMSl signature, RAl, GPRS ciphering key sequence 
number and GPRS attach attempt counter as specified in 3GPP TS 24.008 [13] for the case when the combined 
attach procedure is rejected with the GMM cause with the same value and no RR connection exists. 



9.2.1.2.9.3 Test description 

9.2.1.2.9.3.1 Pre-test conditions 

System Simulator: 

- Cell I and Cell G 

- Cell I belongs to TAI-9(visited PLMN) 

- Cell G belongs to TAl-7(visited PLMN, another PLMN) 

- If pc_UTRAN supported by UE, Cell 5 

- If pc_GERAN and NOT pc_UTRAN supported by UE, Cell 24. 

- Cell 5 and Cell 24 belong to RAI- 1 (visited PLMN, same PLMN as Cell I) 
UE: 
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The UE is configured to initiate combined EPS/IMSI attach. 

- The test USIM contains IMSIl, GUTIl and TAIl, and EPS update status is "EUl: UPDATED". 

- The "forbidden PLMN Hst" is empty. 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.2.9.3.2 



Test procedure sequence 

Table 9.2.1.2.9.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures: 

- Cell 1 as the "Serving cell". 

- Cell G as a "Non-Suitable cell". 

- Cell 5 or Cell 24 as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with EMM cause = "PLMN not 
allowed". 


<~ 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


- 


ATTACH REQUEST 


1 


F 


7 


The UE is powered off or switched off. 


- 


- 


- 


- 


8 


The UE is powered on or switched on. 


- 


- 


- 


- 




EXCEPTION: Steps 9a1 to 9a3 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










9a1 


IF pc_UTRAN or pc_GERAN THEN the SS 
configures: 

- Cell 1 as a "Non-Suitable cell". 

- Cell 5 or Cell 24 as the "Serving cell". 

Note: Cell 1, Cell 5 and Cell 24 are in the same 
PLMN. 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










9a2 


Void 


- 


- 


- 


- 


9a3 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


2 


F 


10 


The SS configures: 

Cell 1 as a "Non-Suitable cell". 

Cell G as the "Serving cell". 

Cell 5 or Cell 24 as a "Non-Suitable cell". 

Note: Cell G belongs to PLMN different from 
PLMN belonging to Cell 1. 










- 


The following messages are to be observed on 
Cell G unless explicitly stated otherwise. 


- 


- 


- 


- 


11 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message as 
specified? 


-> 


ATTACH REQUEST 


1,3 


P 


12 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






13 


The UE transmits an AUTHENTICATION 
RESPONSE message. 


-> 


AUTHENTICATION RESPONSE 


- 


- 


14 


The SS starts integrity protection and ciphering 


<- 


SECURITY MODE COMMAND 


- 


- 


15 


The UE responds to the SS. 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTION: Steps 15Aa1 to 15Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 
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15Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






15Aa 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






16 


The SS transmits an ATTACH ACCEPT 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 17 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










17 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 







9.2.1 .2.9.3.3 Specific message contents 

Table 9.2.1.2.9.3.3-1 : Message ATTACH REJECT (step 4, Table 9.2.1.2.9.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-3 


Information Element 


Value/remarl< 


Comment 


Condition 


EMM cause 


'0000 1011'B 


PLMN not allowed 





Table 9.2.1.2.9.3.3-2: Message ATTACH REQUEST (step 11, Table 9.2.1.2.9.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-4 


Information Element 


Value/remarl< 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUTI or IMSI 


IMSI1 






Last visited registered TAI 


Not present 







9.2.1.2.10 
9.2.1.2.10.1 
(1) 



Combined attach / Rejected / Tracking area not allowed 
Test Purpose (TP) 



with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "Tracking area not 
allowed" } 

then { UE deletes the GUTI, last visited registered TAI and KSI, UE enters the state EMM- 
DEREGISTERED. LIMITED-SERVICE and UE stores the current TAI in the list of "forbidden tracking areas 
for regional provision of service" } 
} 

(2) 

with { UE is in EMM-DEREGISTERED. LIMITED-SERVICE state and the current TAI in the list of "forbidden 
tracking areas for regional provision of service" } 
ensure that { 

when { serving cell belongs to TAI where UE was rejected } 
then { UE does not attempt to attach on any cell } 
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(3) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and the current TAI in the list of "forbidden 
tracking areas for regional provision of service" } 
ensure that { 

when { UE re- selects a new cell in the same TAI it was rejected } 
then { UE does not attempt to attach on the cell } 



(4) 

with { UE is switched off } 
ensure that { 

when { UE is powered on in the cell belonging to the TAI which was in the list of "forbidden 
tracking areas for regional provision of service" before the UE was swithed off } 
then { UE attempts to attach on the cell } 



9.2.1.2.10.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in; TS 24.301, clause 5.5.1.3.5. 

[TS 24.301, clause 5.5.1.3.5] 



Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410, enter MM state MM IDLE, and take 
the following actions depending on the EMM cause value received. 



#12 (Tracking area not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTl, last visited registered TAI and KSl. The UE shall reset the attach 
attempt counter and enter the state EMM-DEREGISTERED.LIMITED-SERVICE. 

The UE shall store the current TAI in the list of "forbidden tracking areas for regional provision of service". 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the MM parameters update 
status, TMSl, LAI, ciphering key sequence number and location update attempt counter, and the GMM 
parameters GMM state, GPRS update status, P-TMSl, P-TMSl signature, RAl, GPRS ciphering key sequence 
number and GPRS attach attempt counter as specified in 3GPP TS 24.008 [13] for the case when the combined 
attach procedure is rejected with the GMM cause with the same value. 



9.2.1.2.10.3 Test description 

9.2.1.2.10.3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell B and Cell M 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The test USIM contains IMSIl, GUTIl and TAll, and EPS update status is "EUl: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1.2.10.3.2 Test procedure sequence 

Table 9.2.1 .2.10.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell". 

- Cell B as a "Suitable neighbour cell". 

- Cell IVI as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with EMM cause = "Tracking area 
not allowed". 


<— 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


Check: Does the UE transmit the ATTACH 
REQUEST message in the next 30 seconds on 
Cell A or Cell B? 




ATTACH REQUEST 


1,2 


F 


7 


The SS configures: 

- Cell A as the "Non-Suitable cell". 

- Cell B as a "Non-Suitable cell". 

- Cell M as a "Serving cell". 










8 


Check: Does the UE transmit the ATTACH 
REQUEST message in the next 30 seconds on 
Cell M? 




ATTACH REQUEST 


3 


F 


- 


The following messages are to be observed on 
Cell M unless explicitly stated otherwise. 


- 


- 


- 


- 


9 


The UE is powered off or switched off. 


- 


- 


- 


- 


10 


The UE is powered on or switched on. 


- 


- 


- 


- 


11 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message as 
specified? 


-> 


ATTACH REQUEST 


1,4 


P 


12 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






13 


The UE transmits an AUTHENTICATION 
RESPONSE message. 


-> 


AUTHENTICATION RESPONSE 


- 


- 


14 


The SS starts integrity protection and ciphering 


<- 


SECURITY MODE COMMAND 


- 


- 


15 


The UE responds to the SS. 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTION: Steps 15Aa1 to 15Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










15Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






15Aa 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






16 


The SS transmits an ATTACH ACCEPT 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 17 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
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performing IP address allocation in the U-plane 
If requested by the UE. 










17 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 







9.2.1.2.10.3.3 Specific message contents 

Table 9.2.1.2.10.3.3-1 : Message ATTACH REJECT (step 4, Table 9.2.1.2.10.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 1100'B 


Tracking Area not 
allowed 





Table 9.2.1.2.10.3.3-2: Message ATTACH REQUEST (step 11, Table 9.2.1.2.10.3.2-1) 



Derivation Path : TS 36.508 Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




OldGUTIorlMSI 


IMSI1 






Last visited registered TAI 


Not present 







9.2.1 .2.1 1 Combined attach / Rejected / Roaming not allowed in this tracking area 

9.2.1 .2.1 1 .1 Test Purpose (TP) 

(1) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the EMM cause set to "Roaming not allowed in this 
tracking area" } 

then { UE sets the EPS update status to EU3 ROAMING NOT ALLOWED and UE deletes the GUTI , the 
last visited registered TAI and KSI and UE enters the state EMM-DEREGISTERED .LIMITED-SERVICE or 
optionally EMM-DEREGISTERED . PLMN-SEARCH and UE stores the current TAI in the list of "forbidden 
tracking areas for roaming" and deletes the TMSI, the LAI and the ciphering key sequence number } 
} 

(2) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE or EMM-DEREGISTERED . PLMN-SEARCH state and the 
current TAI is in the list of "forbidden tracking areas for roaming" } 
ensure that { 

when { UE re- selects a new cell in the same TA where it was rejected } 
then { UE does not attempt to attach } 



(3) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE or EMM-DEREGISTERED . PLMN-SEARCH state and the TAI 
of the current cell belongs to the list of "forbidden tracking areas for roaming" } 
ensure that { 

when { UE enters a cell belonging to a tracking area not in the list of "forbidden tracking areas 
for roaming" } 

then { UE attempts to attach with IMSI } 



(4) 



with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE or EMM-DEREGISTERED . PLMN-SEARCH state and the list 
of "forbidden tracking areas for roaming" contains more than one TAI } 
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ensure that { 

when { UE selects a cell belonging to one of the TAIs in the list of "forbidden tracking areas for 
roaming" } 

then { UE does not attempt to attach } 



(5) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the EMM cause set to "Roaming not allowed in this 
tracking area" } 

then { UE deletes RAI , P-TMSI, P-TMSI signature and GPRS ciphering key sequence number and sets 
the GPRS update status to GU3 ROAMING NOT ALLOWED } 
} 

(6) 

with { UE is switched off or the UICC containing the USIM is removed } 
ensure that { 

when { UE is powered on in the cell belonging to the TAI which was in the list of "forbidden 
tracking areas for roaming" before UE was switched off or the USIM is inserted again on that cell } 
then { UE performs registration on that cell } 
} 

(7) 

with { a cell of the HPLMN is available } 
ensure that { 

when { UE performs a PLMN selection } 

then { UE returns to a cell of the HPLMN } 
} 

9.2.1 .2.1 1 .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.3.2 and 
5.5.1.3.5 and TS 24.008, clause 4.7.3.2.4. 

[TS 24.301, clause 5.3.2] 

The UE shall store a list of "forbidden tracking areas for roaming", as well as a list of "forbidden tracking areas for 
regional provision of service". These lists shall be erased when the UE is switched off or when the UICC containing the 
USIM is removed, and periodically (with a period in the range 12 to 24 hours). One or more tracking areas is removed 
from the list of "forbidden tracking areas for roaming" in the UE, as well as the list of "forbidden tracking areas for 
regional provision of service" if, after a subsequent procedure e.g. attach procedure, tracking area updating procedure 
and GUTl reallocation procedure, one or more tracking areas in the lists is received from the network. 

In SI mode, the UE shall update the suitable list whenever an ATTACH REJECT, TRACKING AREA UPDATE 
REJECT, SERVICE REJECT or DETACH REQUEST message is received with the EMM cause #12 "tracking area not 
allowed", #13 "roaming not allowed in this tracking area", or #15 "no suitable cells in tracking area". 

Each list shall accommodate 40 or more TAIs. When the list is full and a new entry has to be inserted, the oldest entry 
shall be deleted. 

[TS 24.301, clause 5.5.1.3.5] 

If the attach request can neither be accepted by the network for EPS nor for non-EPS services, the MME shall send an 
ATTACH REJECT message to the UE including an appropriate EMM cause value. If the attach procedure fails due to a 
default EPS bearer setup failure or an ESM procedure failure, the MME shall combine the ATTACH REJECT message 
with a PDN CONNECTIVITY REJECT message. In this case the EMM cause value in the ATTACH REJECT message 
shall be set to #19, "ESM failure". 

Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410, enter MM state MM IDLE, and take 
the following actions depending on the EMM cause value received. 



#13 (Roaming not allowed in this tracking area); 
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The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. The UE shall delete the list of 
equivalent PLMNs and reset the attach attempt counter. Additionally the UE enter the state EMM- 
DEREGISTERED .LIMITED-SERVICE or optionally EMM-DEREGISTERED.PLMN-SEARCH. 

The UE shall store the current TAI in the list of "forbidden tracking areas for roaming". 

The UE shall perform a PLMN selection according to 3GPP TS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the MM parameters update 
status, TMSI, LAI, ciphering key sequence number and location update attempt counter, and the GMM 
parameters GMM state, GPRS update status, P-TMSI, P-TMSI signature, RAI, GPRS ciphering key sequence 
number and GPRS attach attempt counter as specified in 3GPP TS 24.008 [13] for the case when the combined 
attach procedure is rejected with the GMM cause with the same value. 



[TS 24.008, clause 4.7.3.2.4] 

If the attach request can neither be accepted by the network for GPRS nor for non-GPRS services, an ATTACH 
REJECT message is transferred to the MS. The MS receiving the ATTACH REJECT message stops timer T3310, and 
for all causes except #12, #14, #15 and #25 deletes the list of "equivalent PLMNs". 

The MS shall then take one of the following actions depending upon the reject cause: 



#13 (Roaming not allowed in this location area); 

The MS shall delete any RAI, P-TMSI, P-TMSI signature and GPRS ciphering key sequence number, shall set 
the GPRS update status to GU3 ROAMING NOT ALLOWED(and shall store it according to clause 4.1.3.2) and 
shall reset the GPRS attach attempt counter. The state is changed to GMM-DEREGISTERED.LIMITED- 
SERVICE or optionally to GMM-DEREGISTERED.PLMN-SEARCH. 

The MS shall set the update status to U3 ROAMING NOT ALLOWED, reset the location update attempt 
counter and shall delete any TMSI, LAI and ciphering key sequence number. The new MM state is MM IDLE. 



9.2.1.2.11.3 Test description 

9.2.1 .2.1 1 .3.1 Pre-test conditions 

System Simulator: 

- Cell C, Cell I, Cell K, Cell L and if pc_UTRAN Cell 5 and if (NOT pc_UTRAN AND pc_GERAN) Cell 24 are 
configured according to Table 6.3.2.2-1 in [18], but at most two cells are simultaneously activated: 

- Cell I and Cell K (visited PLMN, same TA), 

- Cell L (same visited PLMN, another TA), 

- Cell C (home PLMN), 

if pc_UTRAN, Cell 5 (only active when stated), 

- same PLMN like visited PLMN above 

- RAI-1 (RAC & LAC values chosen by SS) 
System information indicate that NMO 1 is used 

- if pc_GERAN and NOT pc_UTRAN, Cell 24 (only active when stated). 

- same PLMN like visited PLMN above 

- RAC-1 (RAC & LAC values chosen by SS) 
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- System information indicate that NMO 1 is used 

NOTE 1: Cell K is present to confirm that UE does not attempt attach to the cell in same TAI after reject from the 
SS. 

NOTE 2: Cell C is present to confirm that UE does attempt attach to the cell in HPLMN after reject from the SS. 

NOTE 3: The requirement in 3GPP TS 24.301 to store at least 40 entries in the list of "forbidden tracking areas for 
roaming" is not fully tested. 

NOTE 4: Different types of UE may use different methods to periodically clear the list of forbidden areas (e.g. 

every day at 12 am) for roaming. If the list is cleared while the test is being run, it may be necessary to re- 
run the test. 

UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The test USIM contains IMSI-1, GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 

- The test USIM contains P-TMSI-1 (belonging to RAM) and the GPRS update status is "GUI: UPDATED". 

- The test USIM contains TMSI-1 (belonging to LAI-1) and the update status is "Ul: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1 .2. 11 .3.2 Test procedure sequence 

Table 9.2.1.2.11.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures: 
Cell 1 as the "Serving cell". 
Cell K as a "Non-Suitable cell", 
Cell L as a "Non-Suitable cell", 
Cell C as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with the EIVIM cause set to "Roaming 
not allowed in this tracking area" on Cell 1. 
(The list of "forbidden tracking areas for 
roaming" in the UE should now contain TAI-9) 


<- 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell 1? 


-> 


ATTACH REQUEST 


1,4 


F 


7 


The SS reconfigures: 
Cell 1 as a "Suitable cell", 
Cell K as the "Serving cell". 
Cell L as a "Non-Suitable cell". 
Cell C as a "Non-Suitable cell". 










8 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
any cell? 


-> 


ATTACH REQUEST 


2 


F 


9 


The SS reconfigures: 
Cell 1 as a "Non-Suitable cell", 
Cell K as a "Suitable cell". 
Cell L as the "Serving cell". 
Cell C as a "Non-Suitable cell". 










10 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message on Cell 
L? 


-> 


ATTACH REQUEST 


3 


P 


11 


The SS transmits an ATTACH REJECT 
message with the EIVIM cause set to "Roaming 
not allowed in this tracking area" on Cell L. 
(The list of "forbidden tracking areas for 
roaming" in the UE should now contain TAI-9 
andTAI-11) 


<— 


ATTACH REJECT 






12 


The SS releases the RRC connection. 


- 


- 


- 


- 


13 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell Lor Cell K? 


-> 


ATTACH REQUEST 


1,4 


F 


14 


The SS reconfigures: 

Cell 1 as a "Serving cell". 

Cell K as a " Non-Suitable cell", 

Cell L as a "Suitable cell". 

Cell C as the "Non-Suitable cell". 










15 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
any cell? 


-> 


ATTACH REQUEST 


2,4 


F 




EXCEPTION: Steps 16a1 to 16a2 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










16a1 


IF pc_UTRAN or pc_GERAN THEN the SS 
reconfigures: 


- 


- 


- 


- 
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Cell 1 as "Serving cell", 
Cell K as "Non-suitable cell", 
Cell 5 or Cell 24 as "Suitable cell". 










16a2 


Check: Does the UE transmit an ATTACH 
REQUEST message without P-TIVISI, P-TMSI 
signature, RAI, TMSI on Cell 5 or Cell 24? 


-> 


ATTACH REQUEST 


5 


P 


16a3 


The SS transmits an ATTACH REJECT 
message with the GIVIM cause set to "Roaming 
not allowed in this location area" on Cell 5 or 
Cell 24. 


<— 


ATTACH REJECT 






17 


If possible (see ICS) switch off is performed or 
the USIM is removed. 
Otherwise the power is removed. 










18 


The SS reconfigures: 
Cell 1 as the "Serving cell", 
Cell K as a "Non-Suitable cell". 
Cell L as a "Non-Suitable cell". 
Cell C as a "Non-Suitable cell". 










19 


The UE is brought back to operation or the 
USIM is inserted. 


- 


- 


- 


- 


20 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message on Cell 1. 


-> 


ATTACH REQUEST 


6 


P 


21 


The SS transmits an ATTACH REJECT 
message with the EIVIM cause set to "Roaming 
not allowed in this tracking area" on Cell 1. 
(The list of "forbidden tracking areas for 
roaming" in the UE should now contain TAI-9) 


<- 


ATTACH REJECT 






22 


The SS reconfigures: 
Cell 1 as the "Serving cell", 
Cell K as a "Non-Suitable cell". 
Cell L as a "Non-Suitable cell". 
Cell C as a "Suitable cell". 










- 


The following messages are to be observed on 
Cell C unless explicitly stated otherwise. 


- 


- 


- 


- 


23 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


7 


P 


24 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






25 


The UE transmits an AUTHENTICATION 
RESPONSE message. 


-> 


AUTHENTICATION RESPONSE 


- 


- 


26 


The SS transmits a NAS SECURITY MODE 
COMMAND message. 


<— 


SECURITY MODE COMMAND 


- 


- 


27 


The UE transmits a NAS SECURITY MODE 
COMPLETE message. 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTION: Steps 28a1 to 28a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred after 
NAS SECURITY MODE COMPLETE 
message. 










28a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






28a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






29 


The SS responds with an ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message. 


<- 


ATTACH ACCEPT 






- 


EXCEPTION: In parallel to the event described 


- 


- 


- 


- 
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in step 30 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










30 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 







9.2.1 .2.1 1 .3.3 Specific message contents 

Table 9.2.1.2.11.3.3-1 : Message ATTACH REJECT (step 4, step 11 and step 21, Table 9.2.1.2.11.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 1101'B 


Roaming not 
allowed in this 
tracking area 





Table 9.2.1.2.11.3.3-2: Message ATTACH REQUEST (step 10, step 20 and step23. Table 9.2.1.2.11.3.2- 

1) 



Derivation Path: TS 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUTI or IMS! 


IMSI-1 






Last visited registered TAI 


Not present 






Old location area identification 


Not present 






TMSI status 


'O'B 


no valid TMSI 
available 





ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1139 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 9.2.1.2.11.3.3-3: Message ATTACH REQUEST (step 16a2, Table 9.2.1.2.11.3.2-1) 



Derivation Path: TS 24.008 , Table 9.4.1 


Information Element 


Value/remark 


Comment 


Condition 


MS network capability 


Any allowed value 






Attach type 


'011'B 


Combined 
GPRS/IMSI attach 




GPRS ciphering key sequence number 


'111'B 


No key is 
available (MS to 
network) 




DRX parameter 


Any allowed value 






P-TMSI or IMS! 


IMSI-1 






Old routing area identification 


All bits of octets 5 and 6 

are set to 1 , except bit 1 

of octet 6 which is set to 

0. 

Other bits are not 

checked. 






MS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Not present 






Requested READY timer 
value 


Not present or any 
allowed value 






TMSI status 


'O'B 


no valid TMSI 
available 




PS LCS Capability 


Not present or any 
allowed value 






Mobile station classmark 2 


Not present or any 
allowed value 






Mobile station classmark 3 


Not present or any 
allowed value 






Supported Codecs 


Not present or any 
allowed value 






UE network capability 


Not present or any 
allowed value 






Additional mobile identity 


Not present 






Additional old routing area identification 


Not present 







Table 9.2.1.2.11.3.3-4: Message ATTACH REJECT (step 16a3, Table 9.2.1.2.11.3.2-1) 



Derivation Path: TS 24.008 , Table 9.4.4 


Information Element 


Value/remark 


Comment 


Condition 


GMM cause 


'0000 1101'B 


Roaming not 
allowed in this 
location area 




T3302 value 


Not present 







9.2.1.2.12 Combined attach / Rejected / EPS services not allowed in this PLMN 

9.2.1 .2.12.1 Test Purpose (TP) 

(1) 

with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "EPS services not allowed 
in this PLMN" } 

then { UE stores the PLMN identity in the "forbidden PLMNs for GPRS service" list and deletes 
any GUTI , last visited registered TAI , KSI and enters EMM-DEREGISTERED . PLMN-SEARCH state} 
} 

(2) 

with { UE in E-UTRA EMM-DEREGISTERED . PLMN-SEARCH state, and a PLMN is stored in the "forbidden PLMNs 
for GPRS service" list } 
ensure that { 
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when { UE detects a cell which belongs to a PLMN which is not in the "forbidden PLMNs for GPRS 
service" list } 

then { UE performs an attach procedure } 

} 

(3) 

with { UE is switched off when a PLMN is stored in the "forbidden PLMNs for GPRS service" list } 
ensure that { 

when { UE is powered on in a cell which belongs to this PLMN } 
then { UE performs an attach procedure } 
} 

9.2.1.2.12.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in; TS 24.301, clause 5.4.4.3. 

[TS 24.301, clause5.5. 1.3.5] 

If the attach request can neither be accepted by the network for EPS nor for non-EPS services, the MME shall send an 
ATTACH REJECT message to the UE including an appropriate EMM cause value. If the attach procedure fails due to a 
default EPS bearer setup failure or an ESM procedure failure, the MME shall combine the ATTACH REJECT message 
with a PDN CONNECTIVITY REJECT message. In this case the EMM cause value in the ATTACH REJECT message 
shall be set to #19, "ESM failure". 

Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410, enter MM state MM IDLE, and take 
the following actions depending on the EMM cause value received. 



#14 (EPS services not allowed in this PLMN); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. Additionally the UE shall 
reset the attach attempt counter and enter the state EMM-DEREGISTERED.PLMN-SEARCH. 

The UE shall store the PLMN identity in the "forbidden PLMNs for GPRS service" list. 

A UE operating in CS/PS mode 1 which is not yet IMSl attached for non-EPS services may select GERAN or 
UTRAN radio access technology and perform an IMSl attach for non-EPS services, using the MM IMSl attach 
procedure as described in 3GPP TS 24.008 [13]. In this case the UE shall not reselect E-UTRAN radio access 
technology for the duration the UE is on the PLMN or an equivalent PLMN. 

A UE operating in CS/PS mode 1 which is already IMSl attached for non-EPS services in the network is still 
IMSl attached for non-EPS services in the network. The UE may select GERAN or UTRAN radio access 
technology and proceed with the appropriate MM specific procedure according to the MM service state. In this 
case the UE shall not reselect E-UTRAN radio access technology for the duration the UE is on the PLMN or an 
equivalent PLMN. 

A UE in CS/PS mode 1 of operation may perform a PLMN selection according to 3GPP TS 23.122 [6]. 

A UE operating in CS/PS mode 2 which is already IMSl attached for non-EPS services in the network is still 
IMSl attached for non-EPS services in the network. 

A UE operating in CS/PS mode 2 of operation shall perform a PLMN selection according to 
3GPPTS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM 
state, GPRS update status, P-TMSI, P-TMSI signature, RAI, GPRS ciphering key sequence number and GPRS 
attach attempt counter as specified in 3GPP TS 24.008 [13] for the case when the combined attach procedure is 
rejected with the GMM cause with the same value. 
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9.2.1.2.12.3 Test description 

9.2.1 .2.12.3.1 Pre-test conditions 

System Simulator: 

- Cell I, Cell J and Cell A 

Cell I, Cell J and Cell A belong to different PLMNs and different frequencies. 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The test USIM contains IMSIl, GUTIl and TAIl, and EPS update status is "EUl: UPDATED". 

- If pc_GERAN or pc_UTRAN, the test USIM contains TMSI-1 and a valid LAI-1 for CS service, and Location 
update status is " Ul: UPDATED". 

Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1 .2.12.3.2 Test procedure sequence 

Table 9.2.1 .2.12.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures: 

- Cell A as the "Serving cell". 

- Cell 1 as a "Not suitable neighbour cell". 

- Cell J as a "Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with EIVIM cause = "EPS services not 
allowed in this PLIVIN" as specified. 


<~ 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 




EXCEPTION: In parallel with step 6 below, the 
test steps in the parallel behaviour in table 
9.2.1 .2.12.3.2-2 is taking place if the UE is 
operating in CS/PS mode 2. 










6 


Check: Does the test result of generic 
procedure in TS 36.508 subclause 6.4.2.5 
indicate that the UE does not respond to 
paging when paged with GUTI-1 and with CM 
domain indicator set to "PS"? 






1 




7 


Check: Does the test result of generic 
procedure in TS 36.508 subclause 6.4.2.5 
indicate that the UE does not respond to 
paging when paged with IMSI and with CM 
domain indicator set to "PS"? 






1 




8 


The SS configures: 

- Cell A as the "Serving cell". 

- Cell 1 as a "Suitable cell". 

- Cell J as a "Not suitable neighbour cell". 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


9 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


2 


P 


10 


The SS transmits an ATTACH REJECT 
message with EIVIM cause = "EPS services not 
allowed in this PLIVIN" . 


<— 


ATTACH REJECT 






11 


The SS releases the RRC connection. 


- 


- 


- 


- 


12 


The UE is switched off. 


— > 




- 


- 




The SS configures: 

- Cell A as the "Not Suitable off cell". 

- Cell 1 as the "Serving cell". 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


13 


The UE is powered up or switched on. 


- 


- 


- 


- 


14 


Check: Does the UE transmit an ATTACH 
REQUEST message on Cell 1? 


-> 


ATTACH REQUEST 


3 


P 


15 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






16 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






17 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


18 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 






- 


EXCEPTION: Steps 19a1 to 19a2 describe 


- 


- 


- 


- 
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behaviour that depends on UE configuration. 










19a1 


IF the UE sets the ESIVI information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






19a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






20 


SS responds with ATTACH ACCEPT message 
with IE EPS Bearer Identity set to default EPS 
bearer context. The ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message is piggybacked in ATTACH 
ACCEPT. 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 20 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










21 


Check: Does the UE transmit an ATTACH 
COMPLETE message including a ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message as specified? 


-> 


ATTACH COMPLETE 







Table 9.2.1 .2.12.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


- 


The following messages are sent and shall be 
received on Cell J. 


- 


- 


- 


- 


1 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


- 


- 


2 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






3 


The UE transmits an AUTHENTICATION 
RESPONSE message. 


-> 


AUTHENTICATION RESPONSE 


- 


- 


4 


The SS transmits a NAS SECURITY MODE 
COMMAND message. 


<— 


SECURITY MODE COMMAND 


- 


- 


5 


The UE transmits a NAS SECURITY MODE 
COMPLETE message. 


-> 


SECURITY MODE COMPLETE 


- 


- 


6 


The SS responds with an ATTACH ACCEPT 
message. 


<- 


ATTACH ACCEPT 


- 


- 


7 


The UE transmits an ATTACH COMPLETE 
message. 


-> 


ATTACH COMPLETE 


- 


- 



9.2.1 .2.12.3.3 Specific message contents 

Table 9.2.1.2.12.3.3-1: Message ATTACH REQUEST (step 3, Table 9.2.1.2.12.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 
Last visited registered TAI 
Old location area identification 
TMSI status 


GUTI-1 

TAI-1 

LAI-1 

Not Present 
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Table 9.2.1.2.12.3.3-2: Message ATTACH REJECT (step 4, step 10, Table 9.2.1.2.12.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


EMIVI cause 


'0000 1110'B 


EPS services not 
allowed in this 
PLMN 





Table 9.2.1.2.12.3.3-3: Message ATTACH REQUEST (step 9, step 14, Table 9.2.1.2.12.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUTI or IMSI 


IMSI1 






Last visited registered TAI 


Not present 







Table 9.2.1.2.12.3.3-4: Message ATTACH ACCEPT (step 20, Table 9.2.1.2.12.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-1 


Information Element 


Value/remark 


Comment 


Condition 


EPS attach result 


001 


"EPS only" 




GUTI 


Not Present 






Location area identification 


Not present 


SS doesn't 
provide LAI 




IVIS identity 


Not Present 


SS doesn't 
provide TIVISI 




EIVIM cause 


00010010 


#18 "CS domain 
not available" 





9.2.1.2.13 
9.2.1.2.13.1 
(1) 



Combined attach / Rejected / No suitable cells in tracking area 
Test Purpose (TP) 



with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the EMM cause set to 'No Suitable Cells In 
tracking area' } 

then { UE sets the EPS update status to EU3 ROAMING NOT ALLOWED, deletes any GUTI, last visited 
registered TAI and KSI, resets the attach attempt counter, enters the state EMM- 

DEREGISTERED. LIMITED-SERVICE and stores the current TAI in the list of "forbidden tracking areas for 
roaming" } 



(2) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and the current TAI is in the list of 
"forbidden tracking areas for roaming" } 
ensure that { 

when { UE re- selects a cell that belongs to the TAI where UE was rejected } 
then { UE does not attempt to attach } 



(3) 



with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and the current TAI is in the list of 
"forbidden tracking areas for roaming" and KSI was deleted } 
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ensure that { 

when { in the same PLMN, UE enters a cell which provides normal service and belongs to the 
tracking area not in the list of "forbidden tracking areas for roaming" } 

then { UE attempts to attach with IMSI indicated that no key is available } 



(4) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and the current TAI is in the list of 
"forbidden tracking areas for roaming" } 
ensure that { 

when { there are cells in the same PLMN and other PLMN that provide normal service and belong to 
the tracking area not in the list of "forbidden tracking areas for roaming" } 
then { UE attempts to attach to the cell in the same PLMN } 
} 

(5) 

with { UE is in EMM-DEREGISTERED. LIMITED-SERVICE state and the list of "forbidden tracking areas for 
roaming" contains more than one TAI } 
ensure that { 

when { UE re-selects a cell that belongs to one of the TAIs in the list of "forbidden tracking 
areas for roaming" } 

then { UE does not attempt to attach } 
} 

(6) 

with { UE has sent an ATTACH REQUEST message } 
ensure that { 

when { UE receives an ATTACH REJECT message with the EMM cause set to 'No Suitable Cells In 
tracking area' } 

then { UE deletes RAI , P-TMSI, P-TMSI signature, GPRS ciphering key sequence number, TMSI, LAI 
and ciphering key sequence number } 



(7) 

with { UE is swithched off } 
ensure that { 

when { UE is powered on in the cell belonging to the TAI which was in the list of "forbidden 
tracking areas for roaming" before UE was switched off } 
then { UE attempts to attach } 
} 

9.2.1.2.13.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.3.2 and 
5.5.1.3.5 and TS 24.008, clause 4.7.3.2.4. 

[TS 24.301, clause 5.3.2] 

The UE shall store a list of "forbidden tracking areas for roaming", as well as a list of "forbidden tracking areas for 
regional provision of service". These lists shall be erased when the UE is switched off or when the UlCC containing the 
USIM is removed, and periodically (with a period in the range 12 to 24 hours). One or more tracking areas is removed 
from the list of "forbidden tracking areas for roaming" in the UE, as well as the list of "forbidden tracking areas for 
regional provision of service" if, after a subsequent procedure e.g. attach procedure, tracking area updating procedure 
and GUTI reallocation procedure, one or more tracking areas in the lists is received from the network. 

In SI mode, the UE shall update the suitable list whenever an ATTACH REJECT, TRACKING AREA UPDATE 
REJECT, SERVICE REJECT or DETACH REQUEST message is received with the EMM cause #12 "tracking area not 
allowed", #13 "roaming not allowed in this tracking area", or #15 "no suitable cells in tracking area". 

Each list shall accommodate 40 or more TAIs. When the list is full and a new entry has to be inserted, the oldest entry 
shall be deleted. 

[TS 24.301, clause 5.5.1.3.5] 
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If the attach request can neither be accepted by the network for EPS nor for non-EPS services, the MME shall send an 
ATTACH REJECT message to the UE including an appropriate EMM cause value. If the attach procedure fails due to a 
default EPS bearer setup failure or an ESM procedure failure, the MME shall combine the ATTACH REJECT message 
with a PDN CONNECTIVITY REJECT message. In this case the EMM cause value in the ATTACH REJECT message 
shall be set to #19, "ESM failure". 

Upon receiving the ATTACH REJECT message, the UE shall stop timer T3410, enter MM state MM IDLE, and take 
the following actions depending on the EMM cause value received. 



#15 (No suitable cells in tracking area); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI and KSI. Additionally the UE shall 
reset the attach attempt counter and enter the state EMM-DEREGISTERED.LIMITED-SERVICE. 

The UE shall store the current TAI in the list of "forbidden tracking areas for roaming". 

The UE shall search for a suitable cell in another tracking area or in another location area in the same PLMN 
according to 3GPP TS 36.304 [21]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the MM parameters update 
status, TMSI, LAI, ciphering key sequence number and location update attempt counter, and the GMM 
parameters GMM state, GPRS update status, P-TMSI, P-TMSI signature, RAI, GPRS ciphering key sequence 
number and GPRS attach attempt counter as specified in 3GPP TS 24.008 [13] for the case when the combined 
attach procedure is rejected with the GMM cause with the same value. 



[TS 24.008, clause 4.7.3.2.4] 



The MS shall then take one of the following actions depending upon the reject cause: 



# 15 (No Suitable Cells In Location Area); 

The MS shall delete any RAI, P-TMSI, P-TMSI signature and GPRS ciphering key sequence number, shall set 
the GPRS update status to GU3 ROAMING NOT ALLOWED(and shall store it according to clause 4.1.3.2) and 
shall reset the GPRS attach attempt counter. The state is changed to GMM-DEREGISTERED.LIMITED- 
SERVICE. 

The MS shall set the update status to U3 ROAMING NOT ALLOWED, reset the location update attempt 
counter and shall delete any TMSI, LAI and ciphering key sequence number. The new MM state is MM IDLE. 



9.2.1.2.13.3 Test description 

9.2.1 .2.1 3.3.1 Pre-test conditions 

System Simulator: 

Cell I, Cell J, Cell K and Cell L are configured according to Table 6.3.2.2-1 in [18] (maximum 3 cells are 
simultaneously active): 

- Cell I and Cell K (visited PLMN, same TA), 

- Cell L (same visited PLMN, another TA), 

- Cell J (another VPLMN), 

if pc_UTRAN, Cell 5 (only active when stated). 
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- same PLMN like visited PLMN above 

- RAI-1 (RAC & LAC values chosen by SS) 

- System information indicate that NMO 1 is used 

- if pc_GERAN and NOT pc_UTRAN, Cell 24 (only active when stated). 

- same PLMN like visited PLMN above 

- RAC-1 (RAC & LAC values chosen by SS) 
System information indicate that NMO 1 is used 

NOTE 1: Cell L is present to confirm that UE searches in the same PLMN after reject from the SS. 

NOTE 2: Cell K is present to confirm that UE shall not attempt attach to the cell in same TAI it was once rejected 
from. 

NOTE 3: The requirement in 3GPP TS 24.301 to store at least 40 entries in the list of "forbidden tracking areas for 
roaming" is not fully tested. 

NOTE 4: Different types of UE may use different methods to periodically clear the list of forbidden areas (e.g. 

every day at 12 am) for roaming. If the list is cleared while the test is being run, it may be necessary to re- 
run the test. 

UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The test USIM contains IMSI-1, GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 

- The test USIM contains P-TMSI-1 (belonging to RAM) and the GPRS update status is "GUI: UPDATED". 

- The test USIM contains TMSI-1 (belonging to LAI-1) and the update status is "Ul: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1 .2.13.3.2 Test procedure sequence 

Table 9.2.1 .2.13.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS configures: 
Cell 1 as the "Serving cell", 
Cell K as a "Suitable cell", 
Cell L as a "Non-Suitable cell". 
Cell J as a "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with the EIVIM cause set to 'No 
suitable cells in tracking area' on Cell 1. 
(The list of "forbidden tracking areas for 
roaming" in the UE should now contain TAI-9) 


<- 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


The SS reconfigures: 
Cell 1 as a "Suitable cell", 
Cell K as the "Serving cell". 
Cell L as a "Non-Suitable cell". 
Cell J as a "Non-Suitable cell ". 










7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell K or Cell 1? 


-> 


ATTACH REQUEST 


2 


F 


8 


The SS reconfigures: 
Cell 1 as a "Non-Suitable cell", 
Cell K is the "Serving cell", 
Cell L as a "Suitable cell". 
Cell J as a "Suitable cell". 










9 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message on Cell 
L? 


-> 


ATTACH REQUEST 


1,3, 
4,6 


P 


10 


The SS transmits an ATTACH REJECT 
message with the EIVIM cause set to 'No 
suitable cells in tracking area' on Cell L. 
(The list of "forbidden tracking areas for 
roaming" in the UE should now contain TAI-9 
andTAI-11) 


<- 


ATTACH REJECT 






11 


The SS releases the RRC connection 


- 


- 


- 


- 


12 


The SS reconfigures: 
Cell 1 as the "Serving cell". 
Cell K as a "Non-Suitable cell". 
Cell L as a "Suitable cell". 
Cell J as a "Non-Suitable cell". 










13 


Check: Does the UE transmit the ATTACH 
REQUEST message in the next 30 seconds on 
Cell 1? 


-> 


ATTACH REQUEST 


5 


F 




EXCEPTION: Steps 14a1 to 14a4 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










14a1 


IF pc_UTRAN or pc_GERAN THEN the SS 

configures: 

Cell 1 as a "Non-Suitable cell", 

Cell L as a "Non-Suitable cell". 

Cell 5 or Cell 24 as the "Serving cell". 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 
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14a2 


Void 


- 


- 


- 


- 


14a3 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


6 


P 


14a4 


The SS transmits an ATTACH REJECT 
message with the GIVIIVI cause set to 'No 
Suitable Cells In Location Area'. 


<~ 


ATTACH REJECT 






15 


The SS reconfigures: 

Cell 1 as the "Serving cell". 

Cell K as a "Non-Suitable cell", 

Cell L as a "Suitable cell", 

Cell J as a "Non-Suitable cell". 

Cell 5 or Cell 24 as the "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell 1 unless explicitly stated otherwise. 


- 


- 


- 


- 


16 


If possible (see ICS) switch off is performed. 
Otherwise the power is removed. 


- 


- 


- 


- 


17 


The UE is brought back to operation. 


- 


- 


- 


- 


18 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


7 


P 


19 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






20 


The UE transmits an AUTHENTICATION 
RESPONSE message. 


-> 


AUTHENTICATION RESPONSE 


- 


- 


21 


The SS transmits a NAS SECURITY MODE 
COMMAND message. 


<~ 


SECURITY MODE COMMAND 


- 


- 


22 


The UE transmits a NAS SECURITY MODE 
COMPLETE message. 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTION: Steps 23a1 to 23a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred after 
NAS SECURITY MODE COMPLETE 
message. 










23a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






23a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






24 


The SS responds with an ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 25 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
If requested by the UE. 










25 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 
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9.2.1 .2.13.3.3 Specific message contents 

Table 9.2.1.2.13.3.3-1 : Message ATTACH REJECT (step 4 and step 10, Table 9.2.1.2.13.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 1111'B 


No Suitable Cells 
In tracking area 





Table 9.2.1.2.13.3.3-2: Message ATTACH REQUEST (step 9 and step 18, Table 9.2.1.2.13.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


MAS key set identifier 








MAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUTI or IMS! 


IMSI-1 






Last visited registered TAI 


Not present 






Old location area identification 


Not present 






TMSI status 


'O'B 


no valid TMSI 
available 





Table 9.2.1.2.13.3.3-3: Message ATTACH REQUEST (step 14a3, Table 9.2.1.2.13.3.2-1) 



Derivation Path: TS 24.008 , Table 9.4.1 


Information Element 


Value/remark 


Comment 


Condition 


MS network capability 


Any allowed value 






Attach type 


'011'B 


Combined 
GPRS/IMSI attach 




GPRS ciphering key sequence number 


'111'B 


No key is 
available (MS to 
network) 




DRX parameter 


Any allowed value 






P-TMSI or IMSI 


IMSI-1 






Old routing area identification 


All bits of octets 5 and 6 

are set to 1 , except bit 1 

of octet 6 which is set to 

0. 

Other bits are not 

checked. 






MS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Not present 






Requested READY timer 
value 


Not present or any 
allowed value 






TMSI status 


'O'B 


no valid TMSI 
available 




PS LCS Capability 


Not present or any 
allowed value 






Mobile station classmark 2 


Not present or any 
allowed value 






Mobile station classmark 3 


Not present or any 
allowed value 






Supported Codecs 


Not present or any 
allowed value 






UE network capability 


Not present or any 
allowed value 






Additional mobile identity 


Not present 






Additional old routing area identification 


Not present 
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Table 9.2.1.2.13.3.3-4: Message ATTACH REJECT (step 14a4, Table 9.2.1.2.13.3.2-1) 



Derivation Path: TS 24.008 , Table 9.4.4 


Information Element 


Value/remark 


Comment 


Condition 


GIVIIVI cause 


'0000 1111'B 


No Suitable Cells 
In Location Area 




T3302 value 


Not present 







9.2.1.2.14 
9.2.1.2.14.1 
(1) 



Combined attach / Rejected / Not authorized for this CSG 
Test Purpose (TP) 



with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message on a CSG 
cell } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "Not authorized for this 
CSG" and without integrity protection } 
then { UE discards this message } 
} 

(2) 

with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message on a CSG 
cell which is contained in the Allowed CSG list } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "Not authorized for this 
CSG" and with integrity protection } 

then { UE removes the CSG ID from the Allowed CSG list } 

(3) 

with { UE has sent an ATTACH REQUEST message including a PDN CONNECTIVITY REQUEST message on a CSG 
cell } 
ensure that { 

when { UE receives an ATTACH REJECT message with the reject cause set to "Not authorized for this 
CSG" and with integrity protection } 

then { UE searches for a suitable cell in the same PLMN } 

9.2.1.2.14.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.1.2.5. 

[TS 24.301, clause 5.5.1.2.5] 



#25 (Not authorized for this CSG); 

Cause #25 is only applicable when received from a CSG cell. Cause #25 received from a non-CSG cell is 
considered as an abnormal case and the behaviour of the UE is specified in subclause 5.5.1.2.6. 

If the ATTACH REJECT message with cause #25 was received without integrity protection, then the UE shall 
discard the message. 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3). Additionally, the UE shall reset the attach attempt counter and shall enter the state EMM- 
DEREGISTERED.LIMITED-SERVICE. 

The UE shall remove the CSG ID of the cell where the UE has sent the ATTACH REQUEST message from the 
Allowed CSG Ust. 

The UE shall search for a suitable cell in the same PLMN according to 3GPP TS 36.304 [21]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM 
state, GPRS update status and GPRS attach attempt counter as specified in 3GPP TS 24.008 [13] for the case 
when the normal attach procedure is rejected with the GMM cause with the same value. 
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9.2.1.2.14.3 Test description 

9.2.1 .2.14.3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell B, Cell G. 

- Cell A (TAC- 1 , frequency 1 , not a CSG cell) 

- Cell B (TAC-2, frequency 1, a CSG cell whose CSG Identity is included in the Allowed CSG list) 

- Cell G (another PLMN, frequency 2 and not a CSG cell) 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The UE has a vaHd GUTI (GUTI-1). 

- The test USIM contains IMSI- 1 , GUTI- 1 and TAI- 1 , and EPS update status is "EU 1 : UPDATED" . 

- The test USIM contains an Allowed CSG list which includes CSG ID of Cell B. 
Preamble: 

The UE is in state Switched OFF (state 1) according to clause [18]. 
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9.2.1 .2.14.3.2 Test procedure sequence 

Table 9.2.1 .2.14.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell A as a "Not Suitable cell". 

- Cell B as a "Serving cell". 

- Cell G as a "Not Suitable cell". 










2 


The UE is switched on. 


- 


- 


- 


- 


3 


UE initiate attach procedure and send 
ATTACH REQUEST including a PDN 
CONNECTIVITY REQUEST message on cell 
B. 


— > 


ATTACH REQUEST 






4 


The SS transmits an ATTACH REJECT 
message with EIVIM cause = "Not authorized 
for this CSG" without integrity protection. 


<— 


ATTACH REJECT 






5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


Check; Does the UE transmit an ATTACH 
REQUEST message on Cell B after the expiry 
of timer T3410 and T3411? 
Note 1 : IF UE initiate ATTACH procedure 
again, it can prove that this UE has discard the 
unprotected ATTACH REJECT message. 
Note 2: Default value of T3410 is 15s; default 
value of T3411 is 10s. In this TC, the network 
will wait for total 30 seconds. 


— > 


ATTACH REQUEST 


1 


P 


7 


The SS transmits an ATTACH REJECT 
message with EMM cause = ""Not authorized 
for this CSG" with integrity protection. 


<— 


ATTACH REJECT 






8 


The SS releases the RRC connection. 


- 


- 


- 


- 


9 


The UE is switched off and switched on. 


- 


- 


- 


- 


10 


Check: Does the UE transmit an ATTACH 
REQUEST message on Cell B in the next 30 
seconds? 


— > 


ATTACH REQUEST 


2 


F 


11 


The SS configures: 

- Cell B as a "Not Suitable cell". 

- Cell G as a "Serving cell". 

- Cell A as a "Suitable cell". 










12 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell A? 


— > 


ATTACH REQUEST 


3 


P 


13 


Steps 5 to 17 of generic test procedure in TS 
36.508 subclause 4.5.2.3 are performed. 
NQTE: The UE performs an ATTACH 
procedure and the RRC connection is 
released. 











9.2.1 .2.14.3.3 Specific message contents 

Table 9.2.1.2.14.3.3-1: Message ATTACH REQUEST (step 3, step 6, step 12,Table 9.2.1.2.14.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


Old GUTI or IMSI 


GUTI-1 






Last visited registered TAI 


TAI-1 






Old location area identification 


LAI-1 






TMSI status 


Not present 
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Table 9.2.1.2.14.3.3-2: Message ATTACH REJECT (step 4, Table 9.2.1.2.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


Security header type 


'OOOO'B 


" Plain NAS 
message, not 
security protected " 




ElVIIVi cause 


'00011001'B 


#25 " Not authorized 
for this CSG" 





Table 9.2.1.2.14.3.3-3: Message ATTACH REJECT (step 7, Table 9.2.1.2.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-3 


Information Element 


Value/Remark 


Comment 


Condition 


EIVIM cause 


'00011 001 'B 


#25 " Not authorized 
for this CSG" 





Table 9.2.1.2.14.3.3-4: SystemlnformationBlockTypel for Cell A, B, G (Pre-test conditions and all 

steps in Table 9.2.1.2.14.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








csg-lndication 


TRUE 




Cell B 




FALSE 




CellG 




FALSE 




Cell A 


csg-ldentity 


Not present 




Cell A 




'000 0000 0000 0000 
0000 0000 001 0'B 




CellB 




Not present 




CellG 



9.2.1.2.15 
9.2.1.2.15.1 
(1) 



Combined attach / Abnormal case / Handling of the EPS attach attempt counter 
Test Purpose (TP) 



with { UE has detected T3410 expiry after sending an ATTACH REQUEST message and has the attach 
attempt counter set to the value less than four } 
ensure that { 

when { UE detects T3411 expiry } 

then { UE restarts the attach procedure } 



(2) 

with { UE has sent an ATTACH REQUEST message and has the attach attempt counter set to four 
ensure that { 

when { UE detects T3410 expiry } 

then { UE deletes GUTI , TAI list, last visited registered TAI and KSI } 



(3) 

with { UE has sent an ATTACH REQUEST message and has the attach attempt counter set to four } 
ensure that { 

when { UE detects T3410 expiry } 

then { UE deletes LAI, TMSI, ciphering key sequence number, RAI , P-TMSI, P-TMSI signature, and 
GPRS ciphering key sequence number } 



(4) 



with { UE has started T3402 
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ensure that { 

when { UE detects T3402 expiry } 

then { UE restarts the attach procedure 



9.2.1.2.15.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.1.1, 
5.5.1.2.6 and 5.5.1.3.6 and TS 24.008, clause 4.7.3.1.5. 

[TS 24.301, clause 5.5.1.1] 



An attach attempt counter is used to limit the number of subsequently rejected attach attempts. The attach attempt 
counter shall be incremented as specified in subclause 5.5.1.2.6. Depending on the value of the attach attempt counter, 
specific actions shall be performed. The attach attempt counter shall be reset when: 

the UE is powered on; 

- a USIM is inserted; 

an attach or combined attach procedure is successfully completed; 

a combined attach procedure is completed for EPS services only with cause #2, #16, #17, #18 or #22; 

an attach or combined attach procedure is rejected with cause #11, #12, #13, #14, #15 or #25; or 

a network initiated detach procedure is completed with cause #11, #12, #13, #14, #15 or #25. 

Additionally the attach attempt counter shall be reset when the UE is in substate EMM- 
DEREGISTERED.ATTEMPTING-TO-ATTACHand: 

a new tracking area is entered; or 

- T3402 expires. 

[TS 24.301, clause 5.5.1.2.6] 

The following abnormal cases can be identified: 

c) T3410 timeout 

The UE shall abort the attach procedure and proceed as described below. The NAS signalling connection shall 
be released locally. 

For the cases b, c, and d the UE shall proceed as follows: 

Timer T3410 shall be stopped if still running. The attach attempt counter shall be incremented, unless it was 
already set to 5. 

If the attach attempt counter is less than 5: 

- timer T341 1 is started and the state is changed to EMM-DEREGISTERED.ATTEMPTING-TO- ATTACH. 
When timer T341 1 expires the attach procedure shall be restarted. 

If the attach attempt counter is equal to 5: 

the UE shall delete any GUTl, TAI list, last visited registered TAI, list of equivalent PLMNs and KSI, shall set 
the update status to EU2 NOT UPDATED, and shall start timer T3402. The state is changed to EMM- 
DEREGISTERED.ATTEMPTING-TO-ATTACH or optionally to EMM-DEREGISTERED.PLMN-SEARCH in 
order to perform a PLMN selection according to 3GPP TS 23.122 [6]. 
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If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM 
state, GPRS update status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as 
specified in 3GPP TS 24.008 [13] for the abnormal case when a normal attach procedure fails and the attach 
attempt counter is equal to 5. 

[TS 24.301, clause 5.5.1.3.6] 



If the attach attempt counter is incremented according to subclause 5.5.1.2.6 the next actions depend on the value of the 
attach attempt counter: 

if the update status is Ul UPDATED and the attach attempt counter is less than 5, then the UE shall keep the 
update status to Ul UPDATED, the new MM state is MM IDLE substate NORMAL SERVICE; 

if the attach attempt counter is less than 5 and, additionally, the update status is different from Ul UPDATED, 
then the UE shall delete any LAI, TMSI, ciphering key sequence number and list of equivalent PLMNs and set 
the update status to U2 NOT UPDATED. The MM state remains MM LOCATION UPDATING PENDING; or 

if the attach attempt counter is equal to 5, then the UE shall delete any LAI, TMSI, ciphering key sequence 
number and list of equivalent PLMNs and set the update status to U2 NOT UPDATED. A UE operating in 
CS/PS mode 1 of operation shall select GERAN or UTRAN radio access technology and proceed with 
appropriate MM or GMM specific procedures. 

NOTE: It is up to the UE implementation when to enable E-UTRAN radio access technology selection. 

[TS 24.008, clause 4.7.3.1.5] 



If the GPRS attach attempt counter is greater than or equal to 5: 

- the MS shall delete any RAI, P-TMSI, P-TMSI signature, list of equivalent PLMNs, and GPRS ciphering key 
sequence number, shall set the GPRS update status to GU2 NOT UPDATED, shall start timer T3302. The state 
is changed to GMM-DEREGISTERED. ATTEMPTING-TO-ATTACH or optionally to GMM- 
DEREGISTERED.PLMN-SEARCH (see subclause 4.2.4.1.2) in order to perform a PLMN selection according 
to 3GPPTS 23.122 [14]. 



9.2.1.2.15.3 Test description 

9.2.1 .2.1 5.3.1 Pre-test conditions 

System Simulator: 

- Cell A, if pc_UTRAN Cell 5 and if (NOT pc_UTRAN AND pc_GERAN) Cell 24 are configured. 

- Cell A, 

if pc_UTRAN, Cell 5 (only active when stated), 

- same PLMN like visited PLMN above 

- RAI-1 (RAC & LAC values chosen by SS) 
System information indicate that NMO 1 is used 

- if pc_GERAN and NOT pc_UTRAN, Cell 24 (only active when stated). 

- same PLMN like visited PLMN above 

- RAC-1 (RAC & LAC values chosen by SS) 

- System information indicate that NMO 1 is used 
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UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The test USIM contains IMSI-1, GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 

- The test USIM contains P-TMSI-1 (belonging to RAM) and the GPRS update status is "GUI: UPDATED". 

- The test USIM contains TMSI-1 (belonging to LAI-1) and the update status is "Ul: UPDATED". 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.1.2.15.3.2 Test procedure sequence 

Table 9.2.1 .2.15.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS reconfigures: 

Cell A as "Serving cell", 

Cell 5 or Cell 24 as "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is powered on or switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






4 


Wait for 25s to ensure that T3410 and T341 1 
expire and the UE releases locally the MAS 
signalling connection. 
NQTE 1 : The attach attempt counter is 1 . 










5 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


1 


P 


6 


Wait for 25s to ensure that T341 and T341 1 
expire and the UE releases locally the MAS 
signalling connection. 
NQTE 2: The attach attempt counter is 2. 










7 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






8 


Wait for 25s to ensure that T3410 and T341 1 
expire and the UE releases locally the MAS 
signalling connection. 
NQTE 3: The attach attempt counter is 3. 










9 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






10 


Wait for 25s to ensure that T341 and T341 1 
expire and the UE releases locally the MAS 
signalling connection. 
NQTE 4: The attach attempt counter is 4. 










11 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






12 


Wait for 25s to ensure that T3410 expire and 

the UE releases locally the MAS signalling 

connection. 

NQTE 5: The attach attempt counter is 5. 












EXCEPTION: Steps 13a1 to 13a2 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










13a1 


IF pc_UTRAN or pc_GERAN THEN the SS 

reconfigures: 

Cell A as "Non-suitable cell", 

Cell 5 or Cell 24 as "Serving cell". 










13a2 


Check: Does the UE transmit an ATTACH 
REQUEST message without P-TMSI, P-TMSI 
signature, RAI, TMSI on Cell 5 or Cell 24? 


-> 


ATTACH REQUEST 


3 


P 


14 


The SS reconfigures: 

Cell A as "Serving cell". 

Cell 5 or Cell 24 as "Non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


15 


If possible (see ICS) switch off is performed. 
Otherwise the power is removed. 


- 


- 


- 


- 


16 


The UE is brought back to operation. 


- 


- 


- 


- 
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NOTE 6: The attach attempt counter is reset. 










17 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REOUEST message. 


-> 


ATTACH REQUEST 






18 


Wait for 25s to ensure that T341 and T341 1 
expire and the UE releases locally the MAS 
signalling connection. 
NOTE 7: The attach attempt counter is 1 . 










19 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


~> 


ATTACH REQUEST 






20 


Wait for 25s to ensure that T3410 and T341 1 
expire and the UE releases locally the MAS 
signalling connection. 
NOTE 8: The attach attempt counter is 2. 










21 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






22 


Wait for 25s to ensure that T341 and T341 1 
expire and the UE releases locally the MAS 
signalling connection. 
NOTE 9: The attach attempt counter is 3. 










23 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






24 


Wait for 25s to ensure that T3410 and T341 1 
expire and the UE releases locally the MAS 
signalling connection. 
NOTE 1 1 : The attach attempt counter is 4. 










25 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message. 


-> 


ATTACH REQUEST 






26 


Wait for 15s to ensure that T3410 expire and 

the UE releases locally the MAS signalling 

connection. 

NOTE 12: The attach attempt counter is 5 and 

the UE starts T3402. 










27 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message after 12 
minutes? 


-> 


ATTACH REQUEST 


2,4 


P 


28 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






29 


The UE transmits an AUTHENTICATION 
RESPONSE message. 


~> 


AUTHENTICATION RESPONSE 


- 


- 


30 


The SS transmits a NAS SECURITY MODE 
COMMAND message. 


<— 


SECURITY MODE COMMAND 


- 


- 


31 


The UE transmits a NAS SECURITY MODE 
COMPLETE message. 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTION: Steps 32a1 to 32a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred after 
NAS SECURITY MODE COMPLETE 
message. 










32a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






32a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






33 


The SS responds with an ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 


<— 


ATTACH ACCEPT 


- 


- 
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BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message. 












EXCEPTION: In parallel to the event described 
in step 34 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










34 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 







9.2.1.2.15.3.3 Specific message contents 

Table 9.2.1.2.15.3.3-1: Message ATTACH REQUEST (step 13a2, Table 9.2.1.2.15.3.2-1) 



Derivation Path: TS 24.008 , Table 9.4.1 


Information Element 


Value/remark 


Comment 


Condition 


MS network capability 


Any allowed value 






Attach type 


'011'B 


Combined 
GPRS/IMSI attach 




GPRS ciphering key sequence number 


'111'B 


No key is 
available (MS to 
network) 




DRX parameter 


Any allowed value 






P-TMSI or IMSI 


IMSI-1 






Old routing area identification 


All bits of octets 5 and 6 

are set to 1 , except bit 1 

of octet 6 which is set to 

0. 

Other bits are not 

checked. 






MS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Not present 






Requested READY timer 
value 


Not present or any 
allowed value 






TMSI status 


'O'B 


no valid TMSI 
available 




PS LCS Capability 


Not present or any 
allowed value 






Mobile station classmark 2 


Not present or any 
allowed value 






Mobile station classmark 3 


Not present or any 
allowed value 






Supported Codecs 


Not present or any 
allowed value 






UE network capability 


Not present or any 
allowed value 






Additional mobile identity 


Not present 






Additional old routing area identification 


Not present 
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Table 9.2.1.2.15.3.3-2: Message ATTACH REQUEST (step 17, step19, step 21, step 23, step 25 and 27, 

Table 9.2.1.2.15.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS l<ey set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUTI or IMS! 


IMSI-1 






Last visited registered TAI 


Not present 






Old location area identification 


Not present 






TMSI status 


'O'B 


no valid TMSI 
available 





9.2.2 Detach procedure 

9.2.2.1 UE initiated detach procedure 

9.2.2.1 .1 UE initiated detach / UE switched off 

9.2.2.1 .1 .1 Test Purpose (TP) 

(1) 

with { UE in EMM-REGISTERED state } 
ensure that { 

when { the UE is switched off } 
then { the UE establishes the RRC connection with the RRC establishmentCause set to 'mo- 
Signalling' and sends DETACH REQUEST message, keeps the native security context, and deactivates the 
EPS bearer context (s) locally } 



} 



9.2.2.1.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 5.3.1.1, 
5.5.2.2.1, 5.5.2.2.2 and Annex D and TS 36.331 clause 5.3.3.3. 

[TS 24.301 clause 5.3.1.1] 

When the UE is in EMM-IDLE mode and needs to transmit an initial NAS message, the UE shall request the lower 
layer to establish a NAS signalling connection. In this request to the lower layer the NAS shall provide to the lower 
layer the RRC establishment cause and the call type as specified in annex D of this specification. 

[TS24.301 clause 5.5.2.2.1] 

The detach procedure is initiated by the UE by sending a DETACH REQUEST message. The Detach type IE included 
in the message indicates whether detach is due to a "switch off or not. The Detach type IE also indicates whether the 
detach is for EPS services only, for non-EPS services only, or for both. If the UE has a mapped EPS security context as 
the current EPS security context, the UE shall set the type of security context flag to "mapped security context". 
Otherwise, the UE shall set the type of security context flag to "native security context". 



If the UE is to be switched off, the UE shall try for a period of 5 seconds to send the DETACH REQUEST message. 
During this period, the UE may be switched off as soon as the DETACH REQUEST message has been sent. However, 
after the last DETACH REQUEST message is sent and before the UE is actually switched off, the UE shall proceed as 
follows: 

if the current EPS security context is a native EPS security context, then the UE shall store the current EPS 
security context as specified in annex C and mark it as valid; 
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else if the current EPS security context is a mapped EPS security context and non-current full native EPS security 
context exists, then the UE shall store the non-current EPS security context as specified in annex C and mark it as valid, 
and finally the UE shall delete the current EPS security context stored as specified in annex C. 

[TS24.301 clause 5.5.2.2.2] 

When the DETACH REQUEST message is received by the network, the network shall send a DETACH ACCEPT 
message to the UE and store the current EPS security context, if the Detach type IE does not indicate "switch off". 
Otherwise, the procedure is completed when the network receives the DETACH REQUEST message. On reception of a 
DETACH REQUEST message indicating "switch off", the MME shall delete the current EPS security context, if it is a 
mapped EPS security context. 

The network and the UE shall deactivate the EPS bearer context(s) for this UE locally without peer-to-peer signalling 
between the UE and the MME. 

The UE, when receiving the DETACH ACCEPT message, shall stop timer T3421. 

The UE is marked as inactive in the network for EPS services. State EMM-DEREGISTERED is entered in the network. 

The UE in PS mode of operation shall enter the EMM-DEREGISTERED state. 

The UE in CS/PS mode 1 or CS/PS mode 2 of operation shall set the update status to U2 NOT UPDATED, disable 
E-UTRAN and select GERAN or UTRAN access technology and enter the EMM-NULL state. 

[TS 24.301, Annex D] 



Table D.1.1 : Mapping of NAS procedure to establishment cause and call type 



NAS procedure 


RRC establishment cause (according 3GPP TS 36.331 [22]) 


Call type 








Detach 


IVIO signalling (See Note 1) 


"originating signalling" 








Note 1: For these NAS procedures initiated by UEs of access class 12, 13 or 14 in their home country, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". For this purpose the home country is 
defined as the country of the MCC part of the IIVISI, see 3GPP TS 22.01 1 [1 A]. 

For these NAS procedures initiated by UE of access class 11 or 1 5 in their HPLMN or EHPLMN, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". 



[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 
1> set the ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 
2> else 

3> draw a random value and set the ue-Identity to this value; 
NOTE 1 : Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 
1> Set the establishmentCause in accordance with the information received from upper layers; 
9.2.2.1.1.3 Test description 

9.2.2.1.1.3.1 Pre-test conditions 

System Simulator: 
- Cell A (HPLMN) 
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UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (State 2) according to [18]. 

UE has a valid GUTI-1 and is registered in TAI-1 
9.2.2.1 .1 .3.2 Test procedure sequence 

Table 9.2.2.1.1.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Cause switch off 


- 


- 


- 


- 


2 


Check: does the UE transmit an 
RRCConnectionRequest message with 
establishmentCause set to 'mo-Signalling' 
followed by a DETACH REQUEST with the 
Detach Type IE indicating "switch off"? 


-> 


DETACH REQUEST 


1 


P 


3 


Void 


- 


- 


- 


- 


4 


Void 


- 


- 


- 


- 


5 


Void 


- 


- 


- 


- 


6 


Void 


- 


- 


- 


- 


7 


Void 


- 


- 


- 


- 


8 


The UE is switched on 


- 


- 


- 


- 


9 


Check: Does the UE transmit ATTACH 
REQUEST message using KSIasme of the 
previously allocated EPS native security 
context? 


-> 


ATTACH REQUEST 


1 


P 



9.2.2.1 .1 .3.3 Specific message contents 

Table 9.2.2.1 .1 .3.3-1 : Message RRCConnectionRequest (step 2, Table 9.2.2.1 .1 .3.2-1) 



Derivation path: 36.508 table 4.6.1-16 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 
criticalExtensions CHOICE { 
rrcConnectionRequest-r8 SEQUENCE { 
establishmentCause 
} 
} 
} 


mo-Signalling 







Table 9.2.2.1.1.3.3-2: Message ATTACH REQUEST (step 9, Table 9.2.2.1.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 (Security protected NAS message) 


Information Element 


Value/Remark 


Comment 


Condition 


NAS key set identifier 
TSC 


native security context 
(for KSIasme) 







9.2.2.1.2 
9.2.2.1.2.1 
(1) 



UE initiated detach / USIM removed from the UE 
Test Purpose (TP) 



with { UE in EMM-REGISTERED } 
ensure that { 

when { the USIM is removed from the UE 
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then { the UE sends DETACH REQUEST message and indicates that the detach is for both EPS services 
and non-EPS services or for EPS services depending on the EPS attach type used } 
} 

9.2.2.1.2.2 Conformance requirements 

References: The conformance requirements covered in tlie present TC are specified in: 3GPP TS 24.301 clauses 
5.5.2.2.1 and 5.5.2.2.3. 

[TS24.301 clause 5.5.2.2.1] 

The detach procedure is initiated by the UE by sending a DETACH REQUEST message. The Detach type IE included 
in the message indicates whether detach is due to a "switch off or not. The Detach type IE also indicates whether the 
detach is for EPS services only, for non-EPS services only, or for both. If the UE has a mapped EPS security context as 
the current EPS security context, the UE shall set the type of security context flag to "mapped security context". 
Otherwise, the UE shall set the type of security context flag to "native security context". 

If the UE has a valid GUTI, the UE shall populate the GUTl or IMSl IE with the valid GUTI. If the UE does not have a 
valid GUTI, the UE populates the GUTI or IMSI IE with its IMSl. 

If the detach is not due to switch off and the UE is in the state EMM-REGISTERED or EMM-REGIS TERED- 
INITIATED, timer T3421 shall be started in the UE after the DETACH REQUEST message has been sent. If the detach 
type indicates that the detach is for non-EPS services only the UE shall enter the state EMM-REGISTERED. IMSI- 
DETACH-INITIATED, otherwise the UE shall enter the state EMM-DEREGISTERED-INITIATED. If the detach type 
indicates that the detach is for non-EPS services or both EPS and non-EPS services, the UE shall enter the state MM 
IMSI DETACH PENDING. 

[TS24.301 clause 5.5.2.2.3] 

When the DETACH REQUEST message is received by the network, a DETACH ACCEPT message shall be sent to the 
UE, if the Detach type IE value indicates that the detach request has not been sent due to switching off. Depending on 
the value of the Detach type IE the following applies: 

- combined EPS/IMSI detach: 

The UE is marked as inactive in the network for EPS and for non-EPS services. The states EMM- 
DEREGISTERED and MM-NULL are entered in both the UE and the network. 

9.2.2.1.2.3 Test description 
9.2.2.1.2.3.1 Pre-test conditions 
System Simulator: 

- Cell A (HPLMN). 
UE: 

None. 
Preamble: 

UE is in state Registered, Idle mode (State 2) according to [18] 
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9.2.2.1.2.3.2 



Test procedure sequence 

Table 9.2.2.1.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Cause removal of USIM from the UE without 
powering down 


- 


- 


- 


- 


2 


Checl<: does the UE transmit a DETACH 
REQUEST with the Detach Type IE indicating 
"normal detach" and "combined EPS/IIVISI 
detach" or "EPS detach" depending on the UE 
configuration? 


-> 


DETACH REQUEST 


1 


P 


3 


SS responds with DETACH ACCEPT message 


<- 


DETACH ACCEPT 


- 


- 


4 


Check: Does the test result of generic 
procedure in TS 36.508 subclause 6.4.2.5 
indicate that the UE does not respond to 
paging when paged with GUTI-1 and with CN 
domain indicator set to "PS"? 






1 





9.2.2.1 .2.3.3 Specific message contents 

Table 9.2.2.1.2.3.3-1 : DETACH REQUEST (step 2, Table 9.2.2.1.2.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-1 1 


Information Element 


Value/remark 


Comment 


Condition 


Detach type 








Type of detach 


001 


EPS detach 


EPSQnIyAtt 
ach 




011 


combined 
EPS/IMSI detach 


CombinedAt 
tach 


Switch off 





normal detach 




GUTI or IMSI 


GUTI-1 







9.2.2.1.3 
9.2.2.1.3.1 
(1) 



UE initiated detach / EPS capability of the UE is disabled 
Test Purpose (TP) 



with { UE in EMM-REGISTERED state } 
ensure that { 

when { EPS capability of the UE is disabled } 
then { UE sends the DETACH REQUEST message on the Cell registered and indicates that the detach 
is for EPS services } 



9.2.2.1.3.2 



Conformance requirements 



References: The conformance requirement covered in the present TC is specified in: 3GPP TS 24.301 clause 4.5,clause 
5.5.2.1 and clauses 5.5.2.2 

[TS24.301,clause4.5] 

When the UE supporting the A/Gb and/or lu mode together with the S 1 mode needs to stay in A/Gb or lu mode, in 
order to prevent unwanted handover or cell reselection from UTRAN/GERAN to E-UTRAN, the UE shall disable the 
E-UTRA capability. 

- The UE shall not set the E-UTRA support bits of the MS Radio Access capability IE (see 3GPP TS 24.008 [13], 
subclause 10.5.5.12a), the E-UTRA support bits of Mobile Station Classmark 3 IE (see 3GPP TS 24.008 [13], 
subclause 10.5.1.7) and the ISR support bit of the MS network capabiHty IE (see 3GPP TS 24.008 [13], 
subclause 10.5.5.12) in the ATTACH REQUEST message and the ROUTING AREA UPDATE REQUEST 
message after it selects GERAN or UTRAN; and 

the UE NAS layer shall indicate the access stratum layer(s) of disabling of the E-UTRA capability. 
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NOTE: The UE can only disable the E-UTRAN capabilities when in EMM-IDLE mode. 

[TS24.301,clause 5.5.2.1] 



The detach procedure with appropriate detach type shall be invoked by the UE if the UE is switched off, the USIM card 
is removed from the UE or the EPS capability of the UE is disabled or the UE wishes to detach for non-EPS services. 



If the detach procedure for EPS services is performed, the EPS bearer context(s) for this particular UE are deactivated 
locally without peer-to-peer signalling between the UE and the MME. 

Upon successful completion of the detach procedure, if the UE and the MME enter the EMM-DEREGISTERED state, 
the UE and the MME shall delete any mapped EPS security context or partial native EPS security context. 

If the UE supports A/Gb mode or lu mode, the UE shall store the TIN in the non-volatile memory in the ME, as 
described in annex C, for a subsequent attach procedure. 

[TS 24.301, clause 5.5.2.2.1] 

The detach procedure is initiated by the UE by sending a DETACH REQUEST message. The Detach type IE included 
in the message indicates whether detach is due to a "switch off or not. The Detach type IE also indicates whether the 
detach is for EPS services only, for non-EPS services only, or for both. If the UE has a mapped EPS security context as 
the current EPS security context, the UE shall set the type of security context flag to "mapped security context". 
Otherwise, the UE shall set the type of security context flag to "native security context". 

If the UE has a valid GUTI, the UE shall populate the GUTI or IMSI IE with the valid GUTI. If the UE does not have a 
valid GUTI, the UE populates the GUTI or IMSI IE with its IMSI. 

If the detach is not due to switch off and the UE is in the state EMM-REGISTERED or EMM-REGISTERED- 
INITIATED, timer T3421 shall be started in the UE after the DETACH REQUEST message has been sent. If the detach 
type indicates that the detach is for non-EPS services only the UE shall enter the state EMM-REGISTERED. IMSI- 
DETACH-INITIATED, otherwise the UE shall enter the state EMM-DEREGISTERED-INITIATED. If the detach type 
indicates that the detach is for non-EPS services or both EPS and non-EPS services, the UE shall enter the state MM 
IMSI DETACH PENDING. 



[TS 24.301, clause 5.5.2.2.2] 

The network and the UE shall deactivate the EPS bearer context(s) for this UE locally without peer-to-peer signalling 
between the UE and the MME. 

The UE, when receiving the DETACH ACCEPT message, shall stop timer T3421. 

The UE is marked as inactive in the network for EPS services. State EMM-DEREGISTERED is entered in the network. 

The UE in PS mode of operation shall enter the EMM-DEREGISTERED state. 

The UE in CS/PS mode 1 or CS/PS mode 2 of operation shall set the update status to U2 NOT UPDATED, disable 
E-UTRAN and select GERAN or UTRAN access technology and enter the EMM-NULL state. 

9.2.2.1.3.3 Test description 

9.2.2.1.3.3.1 Pre-test conditions 

System Simulator: 

- Cell A is set to "Serving cell". 
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UE: 

- The test USIM contains GUTI-1 (belonging to TAI-1) and the update status is "EUl: UPDATED". 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 
9.2.2.1 .3.3.2 Test procedure sequence 

Table 9.2.2.1.6.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Cause EPS capability of tlie UE to be 
disabled. 


- 


- 


- 


- 


2 


Check:Does the UE transmits a DETACH 
REQUEST message with the Detach type IE 
indicating "EPS detach" and "normal detach". 


-> 


DETACH REQUEST 


1 


P 


3 


The SS responds the DETACH ACCEPT 
message. 


- 


DETACH ACCEPT 


- 


- 


4 


Check: Does the test result of generic 
procedure in TS 36.508 subclause 6.4.2.5 
indicate that the UE does not respond to 
paging when paged with GUTI-1 and with CN 
domain indicator set to "PS"? 






1 





9.2.2.1 .3.3.3 Specific message contents 

Table 9.2.2.1.3.3.3-1: DETACH REQUEST (steps 2 in Table 9.2.2.1.3.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-1 1 


Information Element 


Value/remark 


Comment 


Condition 


Detach type 








Type of detach 


001 


EPS detach only 




Switch off 





normal detach 




GUTI or IMSI 


GUTI-1 







9.2.2.1.6 



9.2.2.1.6.1 



UE initiated detach / Abnormal case / Local detach after 5 attempts due to no 
network response 

Test Purpose (TP) 



(1) 

with { UE in EMM-REGISTERED state } 
ensure that { 

when { the UE receives no response to the UE initiated DETACH REQUEST } 
then { the UE re-transmits the DETACH REQUEST up to 4 times on the expiry of timer T3421 } 
} 

(2) 

with { UE in EMM-REGISTERED state } 
ensure that { 

when { the UE receives no response to the UE initiated DETACH REQUEST } 
then { the UE aborts the detach procedure and perform local detach on the s"* expiry of timer 
T3421 I 



9.2.2.1.6.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.2.2. 

[TS 24.301, clause 5.5.2.2.1] 
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The detach procedure is initiated by the UE by sending a DETACH REQUEST message. The Detach type IE included 
in the message indicates whether detach is due to a "switch off or not. The Detach type IE also indicates whether the 
detach is for EPS services only, for non-EPS services only, or for both. If the UE has a mapped EPS security context as 
the current EPS security context, the UE shall set the type of security context flag to "mapped security context". 
Otherwise, the UE shall set the type of security context flag to "native security context". 

If the UE has a valid GUTI, the UE shall populate the GUTI or IMSI IE with the valid GUTI. If the UE does not have a 
valid GUTI, the UE populates the GUTI or IMSI IE with its IMSI. 

If the detach is not due to switch off and the UE is in the state EMM-REGISTERED or EMM-REGISTERED- 
INITIATED, timer T3421 shall be started in the UE after the DETACH REQUEST message has been sent. If the detach 
type indicates that the detach is for non-EPS services only the UE shall enter the state EMM-REGISTERED. IMSI- 
DETACH-INITIATED, otherwise the UE shall enter the state EMM-DEREGISTERED-INITIATED. If the detach type 
indicates that the detach is for non-EPS services or both EPS and non-EPS services, the UE shall enter the state MM 
IMSI DETACH PENDING. 

[TS 24.301, clause 5.5.2.2.4 c)] 

The following abnormal cases can be identified: 



c) T3421 timeout 

On the first four expiries of the timer, the UE shall retransmit the DETACH REQUEST message and shall reset 
and restart timer T3421. On the fifth expiry of timer T3421, the detach procedure shall be aborted and the UE 
shall change to state: 

- EMM-REGISTERED.NORMAL-SERVICE and MM-NULL if "IMSI detach" was requested; 

- EMM-DEREGISTERED if "EPS detach" was requested; 

- EMM-DEREGISTERED and MM-NULL if "combined EPS/IMSI detach" was requested. 
9.2.2.1.6.3 Test description 

9.2.2.1.6.3.1 Pre-test conditions 

System Simulator: 

- Cell A (HPLMN) 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle Mode (State 2) according to [18]. 
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9.2.2.1.6.3.2 



Test procedure sequence 

Table 9.2.2.1.6.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Cause UE to initiate detach from the EPS 
services only. 


- 


- 


- 


- 


2 


The UE transmits a DETACH REQUEST 
message with the Detach type IE indicating 
"EPS detach" and "normal detach"? The UE 
starts timer T3421 . 


-> 


DETACH REQUEST 






3 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 


4 


Check: When the timer T3421 expires does 
the UE re-transmit DETACH REQUEST 
message. Timer T3421 is re-started (I*" 
expiry). 


-> 


DETACH REQUEST 


1 


P 


5 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 


6 


Check: When the timer T3421 expires does 
the UE re-transmit DETACH REQUEST 
message. Timer T3421 is re-started (2"^^ 
expiry). 


~> 


DETACH REQUEST 


1 


P 


7 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 


8 


Check: When the timer T3421 expires does 
the UE re-transmit DETACH REQUEST 
message. Timer T3421 is re-started (3''' 
expiry). 


-> 


DETACH REQUEST 


1 


P 


9 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 


10 


Check: When the timer T3421 expires does 
the UE re-transmit DETACH REQUEST 
message. Timer T3421 is re-started (4* 
expiry). 


-> 


DETACH REQUEST 


1 


P 


11 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 


12 


When the timer T3421 expires the UE aborts 
the detach procedure and performs a local 
detach (S*" expiry). 






2 


P 


13 


The SS starts the EPS bearer context 
modification procedure using the previously 
allocated EPS bearer identity 


<~ 


MQDIFY EPS BEARER 
CONTEXT REQUEST 






14 


Check: does the UE transmit a MQDIFY EPS 
BEARER CQNTEXT ACCEPT message within 
the next 10s? 


-> 


MQDIFY EPS BEARER 
CONTEXT ACCEPT 


2 


F 


Note: T3421 value is specified as 1 5s in TS 24.301 . 



9.2.2.1 .6.3.3 Specific message contents 

Table 9.2.2.1.6.3.3-1 : DETACH REQUEST (steps 2, 4, 6, 8 and 10 Table 9.2.2.1.6.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-1 1 


Information Element 


Value/remark 


Comment 


Condition 


Detach type 








Type of detach 


001 


EPS detach 




Switch off 





normal detach 




GUTI or IMSI 


GUTI-1 
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9.2.2.1 .7 UE initiated detach / Abnormal case / Detach procedure collision 

9.2.2.1 .7.1 Test Purpose (TP) 
(1) 

with { UE in EMM-DEREGISTERED- INITIATED state } 
ensure that { 

when { the UE receives the DETACH REQUEST message from the network } 
then { the UE aborts the UE initiated detach procedure and completes the network initiated detach 
procedure } 
} 

(2) 

with { UE in EMM-DEREGISTERED state } 
ensure that { 

when { the UE has completed the network initiated detach procedure with re-attach required } 
then { the UE initiates the attach procedure } 
} 

9.2.2.1.7.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.2.2.4 and 
5.5.2.3.2. 

[TS 24.301, clause 5.5.2.2.4] 

The following abnormal cases can be identified: 



d) Detach procedure collision 

If the UE receives a DETACH REQUEST message before the UE initiated detach procedure has been 
completed, it shall treat the message as specified in subclause 5.5.2.3.2 and send a DETACH ACCEPT message 
to the network. 

[TS 24.301, clause 5.5.2.3.2] 

When receiving the DETACH REQUEST message and the Detach type IE indicates "re-attach required", the UE shall 
deactivate the EPS bearer context(s) including the default EPS bearer context locally without peer-to-peer signalling 
between the UE and the MME. The UE shall then send a DETACH ACCEPT message to the network and enter state 
EMM-DEREGISTERED. Furthermore, the UE shall, after the completion of the detach procedure, and the existing 
NAS signalling connection has been released, initiate an attach or combined attach procedure. 

9.2.2.1.7.3 Test description 

9.2.2.1.7.3.1 Pre-test conditions 

System Simulator: 

Cell A configured according to Table 6.3.2.2-1 in [18]. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (State 2) according to [18]. 

UE has a valid GUTI-1 and is registered in TAl-1 
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9.2.2.1.7.3.2 



Test procedure sequence 

Table 9.2.2.1.7.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Cause UE to initiate detach from the EPS 
services. 


- 


- 


- 


- 


2 


The UE transmits a DETACH REQUEST 
message with the Detach type IE indicating 
"EPS detach" and "normal detach". The UE 
starts timer T3421 . 


-> 


DETACH REQUEST 






3 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 


4 


With T3421 still running the SS shall send 
DETACH REQUEST message with the Detach 
type IE indicating "re-attach required". 


<- 


DETACH REQUEST 






5 


Check: Does the UE transmit a DETACH 
ACCEPT message? 


-> 


DETACH ACCEPT 


1 


P 


6 


The SS releases the RRC connection. 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CQNNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


2 


P 


8 


The SS transmits an AUTHENTICATIQN 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<~ 


AUTHENTICATIQN REQUEST 






9 


The UE transmits an AUTHENTICATIQN 
RESPQNSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATIQN RESPQNSE 






10 


The SS transmits a NAS SECURITY MQDE 
CQIVIMAND message to activate NAS security. 


<- 


SECURITY MQDE COMMAND 


- 


- 


11 


The UE transmits a NAS SECURITY MQDE 
CQMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MQDE CQMPLETE 








EXCEPTIQN: Steps 11 a1 to 11 a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESIVI 
information which needs to be transferred. 










11a 
1 


IF the UE sets the ESM information transfer 
flag in the last PDN CQNNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFQRMATIQN REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFQRMATIQN REQUEST 






11 
a2 


The UE transmits an ESM INFQRMATIQN 
RESPQNSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFQRMATIQN RESPQNSE 






12 


SS responds with ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CQNTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message. 


<~ 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 13 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










13 


The UE transmits an ATTACH CQMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CQNTEXT ACCEPT message. 


-> 


ATTACH CQMPLETE 
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9.2.2.1 .7.3.3 Specific message contents 

Table 9.2.2.1.7.3.3-1: DETACH REQUEST (step 2 Table 9.2.2.1 .7.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-1 1 


Information Element 


Value/remark 


Comment 


Condition 


Detach type 








Type of detach 


001 


EPS detach 




Switch off 





normal detach 




GUT! or IMS! 


GUTI-1 







Table 9.2.2.1.7.3.3-2: DETACH REQUEST (step 4 Table 9.2.2.1.7.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-12 


Information Element 


Value/remark 


Comment 


Condition 


Detach type 








Type of detach 


001 


re-attach required 





9.2.2.1.8 

9.2.2.1.8.1 

(1) 



UE initiated detach / Abnormal case / Detach and EMM common procedure 
collision 

Test Purpose (TP) 



with { UE in EMM-DEREGISTERED- INITIATED state due to switch off } 
ensure that { 

when { the UE receives an EMM common procedure message from the network 
then { the UE ignores the message and continues the detach procedure } 



(2) 

with { UE in EMM-DEREGISTERED- INITIATED state due to normal detach } 
ensure that { 

when { the UE receives GUTI REALLOCATION COMMAND from the network } 
then { the UE ignores the message and continues the detach procedure } 
} 

(3) 

with { UE in EMM-DEREGISTERED- INITIATED state due to normal detach } 
ensure that { 

when { the UE receives AUTHENTICATION REQUEST, SECURITY MODE COMMAND or IDENTITY REQUEST message 
from the network } 

then { the UE responds to the message and then continues the detach procedure } 
} 

9.2.2.1.8.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.2.2.4. 

[TS 24.301, clause 5.5.2.2.4] 

The following abnormal cases can be identified: 

e) Detach and EMM common procedure collision 

Detach containing cause "switch off": 

If the UE receives a message used in an EMM common procedure before the detach procedure has been 
completed, this message shall be ignored and the detach procedure shall continue 

Detach containing other causes than "switch off: 
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- If the UE receives a GUTI REALLOCATION COMMAND, an EMM STATUS or an EMM 
INFORMATION message before the detach procedure is completed, this message shall be ignored and the 
detach procedure shall continue. 

- If the UE receives an AUTHENTICATION REQUEST, SECURITY MODE COMMAND or IDENTITY 
REQUEST message before the detach procedure has been completed, the UE shall respond to it as described 
in subclause 5.4.2, 5.4.3 and 5.4.4 respectively and the detach procedure shall continue. 

9.2.2.1.8.3 Test description 

9.2.2.1.8.3.1 Pre-test conditions 

System Simulator: 

Cell A configured according to Table 6.3.2.2-1 in [18]. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (State 2) according to [18]. 

UE has a valid GUTI-1 and is registered in TAI-1 
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9.2.2.1.8.3.2 



Test procedure sequence 

Table 9.2.2.1.8.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Cause switch off. 


- 


- 


- 


- 


2 


The UE transmits a DETACH REQUEST 
message with the Detach type IE indicating 
"switch off". 


-> 


DETACH REQUEST 






3 


The SS transmits a GUTI REALLOCATION 
COIVIIVIAND message. 


<- 


GUTI REALLOCATION 
COMMAND 


- 


- 


4 


Checl<: Does the UE transmit an GUTI 
REALLOCATION COMPLETE message? 


-> 


GUTI REALLOCATION 
COMPLETE 


1 


F 


5 


Check: Does the test result of generic 
procedure in TS 36.508 subclause 6.4.2.5 
indicate that the UE does not respond to 
paging when paged with GUTI-1 and with CN 
domain indicator set to "PS"? 






1 




6 


The UE is switched on and performs an 
ATTACH procedure. 


- 


- 


- 


- 


7 


Cause UE to initiate detach from the EPS 
services only. 


- 


- 


- 


- 


8 


The UE transmits a DETACH REQUEST 
message with the Detach type IE indicating 
"EPS detach" and "normal detach"? The UE 
starts timer T3421 . 


-> 


DETACH REQUEST 


2 


P 


9 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 


10 


With T3421 still running the SS shall send 
GUTI REALLOCATION COMMAND. 


<~ 


GUTI REALLOCATION 
COMMAND 


- 


- 


11 


Check: Does the UE transmit a GUTI 
REALLOCATION COMPLETE message? 


~> 


GUTI REALLOCATION 
COMPLETE 


2 


F 


12 


SS responds with DETACH ACCEPT 
message. 


<- 


DETACH ACCEPT 


- 


- 


13 


The SS releases the RRC connection. 


- 


- 


- 


- 


14 


Cause UE to initiate attach for the EPS 
services. The generic procedure in 36.508 
clause 4.5.2.3-1 is executed so as to complete 
the attach procedure. 










15 


Cause UE to initiate detach from the EPS 
services only. 


- 


- 


- 


- 


16 


The UE transmits a DETACH REQUEST 
message with the Detach type IE indicating 
"EPS detach" and "normal detach"? The UE 
starts timer T3421 . 


-> 


DETACH REQUEST 






17 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 


18 


With T3421 still running the SS shall send 
AUTHENTICATION REQUEST. 


<- 


AUTHENTICATION REQUEST 


- 


- 


19 


Check: Does the UE transmit an 
AUTHENTICATION RESPONSE message? 


-> 


AUTHENTICATION RESPONSE 


3 


P 


20 


SS responds with DETACH ACCEPT 
message. 


<- 


DETACH ACCEPT 


- 


- 


21 


The SS releases the RRC connection. 


- 


- 


- 


- 


22 


Cause UE to initiate attach for the EPS 
services. The generic procedure in 36.508 
clause 4.5.2.3-1 is executed so as to complete 
the attach procedure. 










23 


Cause UE to initiate detach from the EPS 
services only. 


- 


- 


- 


- 


24 


The UE transmits a DETACH REQUEST 
message with the Detach type IE indicating 
"EPS detach" and "normal detach"? The UE 
starts timer T3421 . 


-> 


DETACH REQUEST 






25 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 
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26 


With T3421 still running the SS shall send 
SECURITY MODE COMMAND. 


<- 


SECURITY MODE COMMAND 


- 


- 


27 


Check: Does the UE transmit a SECURITY 
MODE COMPLETE message? 


-> 


SECURITY MODE COMPLETE 


3 


P 


28 


SS responds with DETACH ACCEPT 
message. 


<- 


DETACH ACCEPT 


- 


- 


29 


The SS releases the RRC connection. 


- 


- 


- 


- 


30 


Cause UE to initiate attach for the EPS 
services. The generic procedure in 36.508 
clause 4.5.2.3-1 is executed so as to complete 
the attach procedure. 










31 


Cause UE to initiate detach from the EPS 
services only. 


- 


- 


- 


- 


32 


The UE transmits a DETACH REOUEST 
message with the Detach type IE indicating 
"EPS detach" and "normal detach"? The UE 
starts timer T3421 . 


-> 


DETACH REQUEST 






33 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 


34 


With T3421 still running the SS shall send 
IDENTITY REQUEST. 


<- 


IDENTITY REQUEST 


- 


- 


35 


Check: Does the UE transmit an IDENTITY 
RESPONSE message? 


-> 


IDENTITY RESPONSE 


3 


P 


36 


SS responds with DETACH ACCEPT 
message. 


<- 


DETACH ACCEPT 


- 


- 



9.2.2.1 .8.3.3 Specific message contents 

Table 9.2.2.1.8.3.3-1: DETACH REQUEST (steps 8, 16, 24 and 32 Table 9.2.2.1.8.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-1 1 


Information Element 


Value/remark 


Comment 


Condition 


Detach type 








Type of detach 


001 


EPS detach 




Switch off 





normal detach 





Table 9.2.2.1.8.3.3-2: GUTI REALLOCATION COMMAND (step 3 Table 9.2.2.1.8.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-15 


Information Element 


Value/remark 


Comment 


Condition 


GUTI 


GUTI-2 






TAI list 


Not present 







Table 9.2.2.1.8.3.3-3: GUTI REALLOCATION COMMAND (step 10 Table 9.2.2.1.8.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-15 


Information Element 


Value/remark 


Comment 


Condition 


GUTI 


GUTI-3 






TAI list 


Not present 







9.2.2.1.9 



9.2.2.1.9.1 



UE initiated detach / Abnormal case / Change of cell into a new tracking area 
Test Purpose (TP) 



(1) 



with { UE in EMM-DEREGISTERED- INITIATED state } 
ensure that { 

when { the UE changes into a new tracking area that is not in the stored TAI list } 
then { the UE aborts the detach procedure and initiates a Tracking Area Updating procedure 
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(2) 

with { UE in EMM-TRACKING-AREA-UPDATING- INITIATED state } 
ensure that { 

when { the UE receives TRACKING AREA UPDATE ACCEPT message } 
then { the UE re- initiates the detach procedure after completing the Tracking Area Updating 
procedure } 
} 

9.2.2.1.9.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.2.2.4. 

[TS 24.301, clause 5.5.2.2.4] 

The following abnormal cases can be identified: 



f) Change of cell into a new tracking area 

If a cell change into a new tracking area that is not in the stored TAI list occurs before the UE initiated detach 
procedure is completed, the detach procedure shall be aborted and re-initiated after successfully performing a 
tracking area updating procedure. If the detach procedure was initiated due to removal of the USIM, the UE shall 
abort the detach procedure and enter the state EMM-DEREGISTERED. 

9.2.2.1.9.3 Test description 

9.2.2.1.9.3.1 Pre-test conditions 

System Simulator: 

Cell A and Cell B are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAl-1 (home PLMN) and is set to "Serving cell" 

- Cell B belongs to TAl-2 (home PLMN, another TAC) and is set to "Non-Suitable cell" 
UE: 

None. 
Preamble: 

The UE is in state Registered, Idle mode (State 2) according to [18]. 

UE has a valid GUTI-1 and is registered in TAI-1 
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9.2.2.1.9.3.2 



Test procedure sequence 

Table 9.2.2.1.9.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


1 


Cause UE to initiate detach from the EPS 
services. 


- 


- 


- 


- 


2 


The UE transmits a DETACH REQUEST 
message with the Detach type IE indicating 
"EPS detach" and "normal detach". The UE 
starts timer T3421 . 


-> 


DETACH REQUEST 






3 


The SS does not respond to the DETACH 
REQUEST message. 


- 


- 


- 


- 


4 


Set the cell type of cell A to the "Non-Suitable 

cell". 

Set the cell type of cell B to the "Serving cell". 

Note: T3421 value is specified as 15s in TS 
24.301 and it is assumed that SS can 
configure cells within this time. 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


5 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


6 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


7 


Check: Does the UE transmit a TRACKING 
AREA UPDATE CQMPLETE message? 


-> 


TRACKING AREA UPDATE 
CQMPLETE 


- 


- 


8 


The UE transmits a DETACH REQUEST 
message with the Detach type IE indicating 
"EPS detach" and "normal detach". 


-> 


DETACH REQUEST 


2 


P 


9 


SS responds with DETACH ACCEPT message 


<- 


DETACH ACCEPT 


- 


- 


10 


Check: Does the test result of generic 
procedure in TS 36.508 subclause 6.4.2.5 
indicate that the UE does not respond to 
paging when paged with GUTI-2 and with CN 
domain indicator set to "PS"? 











9.2.2.1.9.3.3 Specific message contents 

Table 9.2.2.1 .9.3.3-1 : DETACH REQUEST (steps 2 and 8 Table 9.2.2.1 .9.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-1 1 


Information Element 


Value/remark 


Comment 


Condition 


Detach type 








Type of detach 


001 


EPS detach 




Switch off 





normal detach 




GUTI or IMSI 


GUTI-1 







Table 9.2.2.1.9.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 6, Table 9.2.2.1.9.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 


GUTI-2 
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9.2.2.2 Network initiated detach procedure 
9.2.2.2.1 NW initiated detach / Re-attach required 

9.2.2.2.1 .1 Test Purpose (TP) 
(1) 

with { UE in EMM-REGISTERED state } 
ensure that { 

when { SS sends DETACH REQUEST message with the Detach type IE "re-attach required" } 
then { UE sends DETACH ACCEPT message and UE intiates an attach procedure with the current EPS 
security context} 
} 

9.2.2.2.1.2 Conformance requirements 

References: The conformance requirement covered in the present TC is specified in: 3GPP TS 24.301 clauses 5.5.2.3.2. 

[TS24.301 clause5.5.2.3.2] 

When receiving the DETACH REQUEST message and the Detach type IE indicates "re-attach required", the UE shall 
deactivate the EPS bearer context(s) including the default EPS bearer context locally without peer-to-peer signalling 
between the UE and the MME. If the Detach type IE indicates "re-attach required", the UE shall store the current EPS 
security context. The UE shall then send a DETACH ACCEPT message to the network and enter state EMM- 
DEREGISTERED. The UE shall, after the completion of the detach procedure, and the existing NAS signalling 
connection has been released, initiate an attach procedure.. 

A UE which receives a DETACH REQUEST message with detach type indicating "re-attach required" or "re-attach not 
required" and no EMM cause IE, is detached only for EPS services. 

...If the detach type IE indicates "IMSl detach" or "re-attach required" then the UE shall ignore the EMM cause IE if 
received. 

9.2.2.2.1.3 Test description 
9.2.2.2.1.3.1 Pre-test conditions 
System Simulator: 

- Cell A 

- Cell A belongs to TAl- 1 (home PLMN). 
UE: 

The UE has a valid GUTI (GUTI-1), a valid NAS security context and is registered in TAI-1 
Preamble: 

The UE is in state Generic RB established (state 3) on Cell A according to [18]. 
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9.2.2.2.1.3.2 



Test procedure sequence 

Table 9.2.2.2.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message/PDU/SDU 


1 


The SS initiates Detach procedure with the 
Detach Type IE "re-attach required" 


<— 


DETACH REQUEST 


- 


- 


2 


Check: Does the UE send DETACH ACCEPT 
message? 


— > 


DETACH ACCEPT 


1 


P 


3 


The SS releases RRC connection. 










4 


Check: Does the UE send ATTACH 
REQUEST message including a PDN 
CONNECTIVITY REQUEST message? 


— > 


ATTACH REQUEST 


1 


P 




EXCEPTION: Steps 4Aa1 to 4Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESIVI 
information which needs to be transferred. 










4Aa1 


IF the UE sets the ESIVI information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






4Aa2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


— > 


ESM INFORMATION RESPONSE 






5 


The SS sends ATTACH ACCEPT to assign the 
new GUTI (GUTI-2). The ACTIVATE 
DEFAULT EPS BEARER CONTEXT 
REQUEST message is piggybacked in 
ATTACH ACCEPT message 


<— 


ATTACH ACCEPT 






6 


Check: Does the UE send ATTACH 
COMPLETE message including an ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message? 


— > 


ATTACH COMPLETE 


1 


P 



9.2.2.2.1 .3.3 Specific message contents 

Table 9.2.2.2.1.3.3-1: Message DETACH REQUEST (step 1, Table 9.2.2.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 2 


Information Element 


Value/Remark 


Comment 


Condition 


Detach type 


'001 'B 


"re-attach 
required" 





Table 9.2.2.2.1.3.3-2: Message ATTACH REQUEST (step 4, Table 9.2.2.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


NAS key set identifier 








TSC 


'O'B 


native security 
context 




NAS key set identifier 


The value is a same 
value to be allocated by 
SS in Preamble. 






Old GUTI or IMSI 


GUTI-1 







NOTE: This message is sent within the SECURITY NAS PROTECTED MESSAGE in Table 9.2.2.2.1.3.3-3. 
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Table 9.2.2.2.1.3.3-3: Message SECURITY PROTECTED NAS MESSAGE (step 4, Table 9.2.2.2.1.3.2-1) 



Derivation Path: 36.508 Table 4.7.1-1 


Information Element 


Value/remark 


Comment 


Condition 


Security header type 


'0001 'B 


Integrity protected 




NAS message 


'01 000001 'B 


"ATTACH 
REQUEST" 





Table 9.2.2.2.1.3.3-4: Message ATTACH ACCEPT (step 5, Table 9.2.2.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


TAI list 








Length of tracking area identity list contents 


'000001 10'B 


6 octets 




Number of elements 


'OOOOO'B 


1 element 




Type of list 


'OO'B 


"list of TAGs 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




Partial tracking area identity list 


TAI-1 






GUTI 


GUTI-2 







9.2.2.2.2 



9.2.2.2.2.1 



NW initiated detach / IMS! detach 
Test Purpose (TP) 



(1) 

with { UE in EMM-REGISTERED state} 
ensure that { 

when { UE receives DETACH REQUEST message with the Detach type IE = "IMSI detach" } 
then { UE sends TRACKING AREA UPDATE REQUEST message with EPS update type IE = "Combined TA/LA 
updating with IMSI attach" } 
} 

(2) 

with { UE in EMM-TRACKING-AREA-UPDATING- INITIATED state } 
ensure that { 

when { UE recieves TRACKING AREA UPDATE ACCEPT message } 
then { UE enters EMM-REGISTERED and enters MM IDLE and sends TRACKING AREA UPDATE COMPLETE 
message } 



9.2.2.2.2.2 Conformance requirements 

References: The conformance requirement covered in the present TC is specified in: 3GPP TS 24.301 clauses 5.5.2.3.2. 

[TS24.301 clause5.5.2.3.2] 



When receiving the DETACH REQUEST message and the Detach type IE indicates "IMSI detach", the UE shall not 
deactivate the EPS bearer context(s) including the default EPS bearer context. The UE shall set the MM update status to 
U2 NOT UPDATED. A UE may send a DETACH ACCEPT message to the network, and shall re-attach to non-EPS 
services by performing the combined tracking area updating procedure according to subclause 5.5.3.3, sending a 
TRACKING AREA UPDATE REQUEST message with EPS update type IE indicating "combined TA/LA updating 
with IMSI attach". 



If the detach type IE indicates "IMSI detach" or "re-attach required", then the UE shall ignore the EMM cause IE if 
received. 
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Test description 
Pre-test conditions 



9.2.2.2.2.3 
9.2.2.2.2.3.1 
System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI- 1 (HPLMN). 
UE: 

UE configured to initiate combined EPS/IMSI attach 
Preamble: 

UE is in state Generic RB established (state 3) on Cell A according to [18]. 
9.2.2.2.2.3.2 Test procedure sequence 

Table 9.2.2.2.2.3.2-1 : Main Behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message/PDU/SDU 


1 


Force the SS to initiate Detach procedure with 
the Detach Type IE "IIVISI detach" 


<— 


DETACH REQUEST 


- 


- 


2 


The UE may send DETACH ACCEPT 
message. (Optional) 


— > 


DETACH ACCEPT 


- 


- 


3 


Check: Does the UE send TRACKING AREA 
UPDATE REQUEST message? 


— > 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


4 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<— 


SECURITY MODE COMMAND 






5 


The UE responds properly to the NAS security 
mode command procedure. 


— > 


SECURITY MODE COMPLETE 






6 


The SS sends TRACKING AREA UPDATE 
ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 






7 


Check: Does the UE send TRACKING AREA 
UPDATE COMPLETE message. 


— > 


TRACKING AREA UPDATE 
COMPLETE 


2 


P 


8 


The SS releases the RRC connection. 


- 




- 


- 


9 


Check: Does the UE respond to paging on cell 
A with S-TMSI2 for CS domain? 
Generic Procedure (TS36.508 subclause 
6.4.2.4) 






2 




10 


Check: Does the UE respond to paging on cell 
A with S-TMSI2 for PS domain? 
Generic Procedure (TS36.508 subclause 
6.4.2.4) 






2 





9.2.2.2.2.3.3 Specific message contents 

Table 9.2.2.2.2.3.3-1 : Message DETACH REQUEST (step 1, Table 9.2.2.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 2 


Information Element 


Value/Remark 


Comment 


Condition 


Detach type 


'011'B 


"IMSI detach" 
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Table 9.2.2.2.2.3.3-2: Message TRACKING AREA UPDATE REQUEST (step 3, Table 9.2.2.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remarl< 


Comment 


Condition 


EPS update type 








EPS update type value 


'010'B 


"Gombined TA/LA 
updating with 
IIVISI attach" 




Old GUTI 


GUTI-1 






Last visited registered TAI 


TAI-1 






Old location area identification 


LAI-1 






TMSI status 


'1'B 


"valid TMSI 
available" 





Table 9.2.2.2.2.3.3-3: Message TRACKING AREA UPDATE ACCEPT (step 6, Table 9.2.2.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remarl< 


Comment 


Condition 


GUTI 


GUTI-2 






TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 






Number of elements 


'OOOOO'B 






Type of list 


'OO'B 


"list of TAGS 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




Partial tracking area identity list 








Number of elements 


'00001 'B 






Type of list 


'OO'B 


"list of TAGS 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




MGG 
MNG 
TAC1 


TAI-1 






Location area identification 


LAI-1 






MS identity 


TMSI-1 







9.2.2.2.4 



Void 



9.2.2.2.6 



Void 



9.2.2.2.7 



Void 



9.2.2.2.8 



Void 



9.2.2.2.14 
9.2.2.2.14.1 
(1) 



NW initiated detach / Abnormal case / EMM cause not included 
Test Purpose (TP) 



with { UE in EMM-REGISTERED state } 
ensure that { 

when { UE receives a DETACH REQUEST message with the Detach type IE "re-attach not required" and 
with no EMM cause IE included } 
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then { UE delete any GUTI , TAI list, last visited registered TAI , list of equivalent PLMNs, KSI, 
set the update status to EU2 NOT UPDATED and start timer T3402. when T3402 expired, the UE attempts 
to attach again } 
} 

9.2.2.2.14.2 Conformance requirements 

References: The conformance requirement covered in the present TC is specified in: 3GPP TS 24.301 clauses 5.5.2.3.4. 

[TS24.301 clause5.5.2.3.4] 

The following abnormal cases can be identified: 

b) DETACH REQUEST, other EMM cause values than those treated in subclause 5.5.2.3.2 or no EMM cause IE is 
included, and the Detach type IE indicates "re-attach not required". 

The UE shall delete any GUTI, TAI list, last visited registered TAI, list of equivalent PLMNs, KSI, shall set the 
update status to EU2 NOT UPDATED and shall start timer T3402. The UE may enter the state EMM- 
DEREGISTERED.PLMN-SEARCH in order to perform a PLMN selection according to 3GPP TS 23.122 [6]; 
otherwise the UE shall enter the state EMM-DEREGISTERED.ATTEMPTING-TO-ATTACH. 

9.2.2.2.14.3 Test description 
9.2.2.2.14.3.1 Pre-test conditions 
System Simulator: 

Cell I are configured according to Table 6.3.2.2-3 in [18]. 

- Cell I (VPLMN and set as a Serving cell) 
UE: 

- The test USIM contains GUTI-9 and TAI-9, and EPS update status is "EUl: UPDATED". 
Preamble: 

UE is in state Generic RB established (state 3) on Cell I according to [18]. 
T3402 in the UE is set to 2 minutes. 
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9.2.2.2.14.3.2 Test procedure sequence 

Table 9.2.2.2.14.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message/PDU/SDU 


1 


SS initiates Detach procedure with the Detach 
Type IE "re-attach not required" and no ElVIIVI 
cause IE included 


<— 


DETACH REQUEST 






2 


The UE transmits a DETACH ACCEPT 

message on Cell 1. 

Note: Now UE should start timer T3402 


— > 


DETACH ACCEPT 






3 


The SS releases the RRC connection. 


- 


- 


- 


- 


4 


Check: When the timer T3402 expires does 
the UE transmit ATTACH REQUEST message 
on cell 1? 


-> 


ATTACH REQUEST 


1 


P 


5 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






6 


The UE transmits an AUTHENTICATION 
RESPONSE message. 


— > 


AUTHENTICATION RESPONSE 


- 


- 


7 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


8 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


— > 


SECURITY MODE COMPLETE 






- 


EXCEPTION: Steps 9a1 to 9a2 describe 
behaviour that depends on UE configuration. 


- 


- 


- 


- 


9a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






9a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


— > 


ESM INFORMATION RESPONSE 






10 


The SS transmits an ATTACH ACCEPT 
message. 


<— 


ATTACH ACCEPT 


- 


- 




EXCEPTION: In parallel to the event described 
in step 10 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










11 


The UE transmits an ATTACH COMPLETE 
message. 


— > 


ATTACH COMPLETE 


- 


- 



9.2.2.2.14.3.3 Specific message contents 

Table 9.2.2.2.14.3.3-1 : IVIessage DETACH REQUEST (step 1, Table 9.2.2.2.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 2 


Information Element 


Value/Remark 


Comment 


Condition 


Detach type 


'010'B 


"re-attach not 
required" 




EMM cause 


Not present 
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Table 9.2.2.2.14.3.3-2: Message ATTACH REQUEST (step 4, Table 9.2.2.2.14.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS l<ey set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUT! or IMS! 


IMSI1 






Last visited registered TAI 


Not present 







Table 9.2.2.2.14.3.3-3: Message ATTACH ACCEPT ( preamble, 9.2.2.2.14.3.1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


T3402 value 


2 minute 


The default value 
is 12 minutes, use 
2 minute to 
shorten the whole 
TC execute time 





9.2.3 Tracking area updating procedure (S1 mode only) 

9.2.3.1 Normal and periodic tracking area updating 

9.2.3.1 .1 Normal tracking area update / Accepted 

9.2.3.1 .1 .1 Test Purpose (TP) 

(1) 

with { UE in state EMM-REGISTERED and EMM- IDLE mode} 
ensure that { 

when { UE detects entering a new tracking area already included in the TAI list } 
then { UE does not send TRACKING AREA UPDATE REQUEST message } 
} 

(2) 

with { UE in state EMM-REGISTERED and EMM- IDLE mode} 
ensure that { 

when { UE detects entering a new tracking area not included in the TAI list } 
then { UE sends TRACKING AREA UPDATE REQUEST message with 'EPS update type = TA updating' 



} 



(3) 



with { UE in state EMM-REGISTERED and EMM- IDLE mode and has a valid TAI value } 
ensure that { 

when { UE detects entering a new tracking area not included in the TAI list } 
then { UE sends TRACKING AREA UPDATE REQUEST message with the TAI value in 'Last visited 
registered TAI ' IE } 



9.2.3.1.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 5.5.3.1, 
5.5.3.2.2 and 5.5.3.2.4. 

[TS24.301 clause5.5.3.1] 

The tracking area updating procedure is always initiated by the UE and is used for the following purposes: 

- normal tracking area updating to update the registration of the actual tracking area of a UE in the network; 
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[TS24.301 clauses. 5. 3. 2.2] 

The UE in state EMM-REGISTERED shall initiate the tracking area updating procedure by sending a TRACKING 
AREA UPDATE REQUEST message to the MME, 

a) when the UE detects entering a tracking area that is not in the list of tracking areas that the UE previously 
registered in the MME; 



After sending the TRACKING AREA UPDATE REQUEST message to the MME, the UE shall start timer T3430 and 
enter state EMM-TRACKING-AREA-UPDATING-INITIATED (see example in figure 5.5.3.2.2). If timer T3402 is 
currently running, the UE shall stop timer T3402. If timer T341 1 is currently running, the UE shall stop timer T3411 . If 
timer T3442 is currently running, the UE shall stop timer T3442. 

If the UE supports A/Gb mode or lu mode, the UE shall handle the Old GUTI IE as follows: 

- If the TIN indicates "P-TMSI" and the UE holds a valid P-TMSI and RAI, the UE shall map the P-TMSI and 
RAI into the Old GUTI IE. Additionally, if the UE holds a valid GUTI, the UE shall indicate the GUTI in the 
Additional GUTI IE. 

NOTE: The mapping of the P-TMSI and RAI to the GUTI is specified in 3GPP TS 23 .003 [2] . 

- If the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI IE. 



[TS24.301 clause5.5.3.2.4] 



Upon receiving a TRACKING AREA UPDATE ACCEPT message, the UE shall stop timer T3430, reset the routing 
area updating attempt counter, enter state EMM-REGISTERED and set the EPS update status to EUl UPDATED. If the 
message contains a GUTI, the UE shall use this GUTI as new temporary identity for EPS services and shall store the 
new GUTI. If no GUTI was included by the MME in the TRACKING AREA UPDATE ACCEPT message, the old 
GUTI shall be used. If the UE receives a new TAI Ust in the TRACKING AREA UPDATE ACCEPT message, the UE 
shall consider the new TAI list as valid and the old TAI list as invalid; otherwise, the UE shall consider the old TAI list 
as valid. 



If the TRACKING AREA UPDATE ACCEPT message contained a GUTI, the UE shall return a TRACKING AREA 
UPDATE COMPLETE message to the MME to acknowledge the received GUTI. 

9.2.3.1.1.3 Test description 

9.2.3.1.1.3.1 Pre-test conditions 

System Simulator: 

Cell A, Cell C and Cell D are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI- 1 (home PLMN) and is set to "Serving cell" 

- Cell C belongs to TAI-3(home PLMN, another TAC) and is set to "Non- Suitable cell" 

- Cell D belongs to TAI-4 (home PLMN, another TAC) and is set to "Non- Suitable cell" 



UE: 



The UE is configured to initiate EPS attach. 
The UE has a vaHd GUTI (GUTI-1). 
The UE is registered on TAI-l. 
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Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
9.2.3.1 .1 .3.2 Test procedure sequence 

Table 9.2.3.1.1.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 




The following messages are sent and shall be 
received on cell C. 


- 


- 


- 


- 


1 


Set the cell type of cell A to the "Non-Suitable 

cell ". 

Set the cell type of cell C to the " Serving cell" 










2 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2,3 


P 


3 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


4 


Check: Does the UE transmit a TRACKING 
AREA UPDATE COMPLETE message? 


-> 


TRACKING AREA UPDATE 
COMPLETE 


2 


P 


5 


The SS releases the RRC connection. 






- 


- 


6 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.4 
indicate that the UE is in EIVIM-REGISTERED 
state on cell C with Paging UE-ldentity =S- 
TIVISI2 and with CM domain indicator set to 
"PS"? 






2 




7 


Set the cell type of cell C to the "Non-Suitable 

cell ". 

Set the cell type of cell D to the " Serving cell" 










8 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message in the 
next 30 seconds? 






1 


F 


9 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.4 
indicate that the UE is in EIVIM-REGISTERED 
state on cell D with Paging UE-ldentity =S- 
TMSI1 and with CM domain indicator set to 
"PS"? 






1 






The following messages are sent and shall be 
received on cell A. 


- 


- 


- 


- 


10 


Set the cell type of cell D to the "Non-Suitable 

cell ". 

Set the cell type of cell A to the " Serving cell" 










11 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2,3 


P 


12 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


13 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message? 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


14 


The SS releases the RRC connection. 


- 


- 


- 


- 
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9.2.3.1 .1 .3.3 Specific message contents 

Table 9.2.3.1.1.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.1.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 

Last visited registered TAI TAI 


GUTI-1 

1 


"Old GUTI is 
included by UE if 
valid, IMSI 
otherwise" 





Table 9.2.3.1.1.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 3, Table 9.2.3.1.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 


GUTI-2 






TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'OOOOO'B 






Type of list 


'OO'B 


"list of TAGS 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




MGG 


PLMN= MGG/MNG 


"PLMN is set to 




MNG 


TAG 1 =3 


the same 




TAG1 


TAG 2=4 


MGG/MNG stored 
in EFiMsi" 
"TAI-3" 
"TAI-4" 





Table 9.2.3.1 .1 .3.3-3: Message TRACKING AREA UPDATE REQUEST (step 1 1 , Table 9.2.3.1 .1 .3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 


GUTI-2 






Last visited registered TAI 


TAI-4 







Table 9.2.3.1.1.3.3-4: Message TRACKING AREA UPDATE ACCEPT (step 12, Table 9.2.3.1.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 


GUTI-3 






TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'OOOOO'B 






Type of list 


'OO'B 


"list of TAGS 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




MGG 


PLMN= MGG/MNG 


"PLMN is set to 




MNG 


TAG 1=1 


the same 




TAG1 


TAG 2=2 


MGG/MNG stored 
in EFiMsi" 
"TAI-1" 
"TAI-2" 
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9.2.3.1 .2 Normal tracking area update / Accepted / "Active" flag set 

9.2.3.1 .2.1 Test Purpose (TP) 
(1) 

with { UE in state EMM-SERVICE-REQUEST-INITIATED and EMM- CONNECTED} 
ensure that { 

when { UE detects entering a new tracking area already not included in the TAI list } 
then { UE sends TRACKING AREA UPDATE REQUEST message with ' 'Active' ' flag before expiring T3417} 
} 

(2) 

with { UE in state EMM-REGISTERED and EMM- CONNECTED} 
ensure that { 

when { UE sends TRACKING AREA UPDATE COMPLETE to NW } 
then { UE keeps the NAS signalling connection } 
} 

9.2.3.1.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 5.5.3.1, 
5.5.3.2.2, 5.5.3.2.4 and 5.6.1.5. 

[TS24.301 clause5.5.3.1] 

The tracking area updating procedure is always initiated by the UE and is used for the following purposes: 

normal tracking area updating to update the registration of the actual tracking area of a UE in the network; 



[TS24.301 clause5.5.3.2.2] 

The UE in state EMM-REGISTERED shall initiate the tracking area updating procedure by sending a TRACKING 
AREA UPDATE REQUEST message to the MME, 

i) when the UE detects entering a tracking area that is not in the list of tracking areas that the UE previously 
registered in the MME; 



After sending the TRACKING AREA UPDATE REQUEST message to the MME, the UE shall start timer T3430 and 
enter state EMM-TRACKING-AREA-UPDATING-INITIATED (see figure 5.5.3.2.2). If timer T3402 is currently 
running, the UE shall stop timer T3402. If timer T341 1 is currently running, the UE shall stop timer T341 1. If timer 
T3442 is currently running, the UE shall stop timer T3442. 



If the UE supports A/Gb mode or lu mode, the UE shall handle the Old GUTI IE as follows: 

- If the TIN indicates "P-TMSI" and the UE holds a valid P-TMSl and RAI, the UE shall map the P-TMSI and 
RAl into the Old GUTI IE. Additionally, if the UE holds a valid GUTI, the UE shall indicate the GUTI in the 
Additional GUTI IE. 

NOTE: The mapping of the P-TMSI and RAI to the GUTI is specified in 3GPP TS 23.003 [2]. 

- If the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI IE. 

In the TRACKING AREA UPDATE REQUEST message the UE shall set the value of the EPS update type IE to 
"periodic updating", if the procedure initiated due to expiry of T3412; otherwise, the UE shall set the value to "TA 
updating". If a UE has uplink user data pending when it initiates the tracking area updating procedure, or uplink 
signalling not related to the tracking area updating procedure, it may also set an "active" flag in the TRACKING AREA 
UPDATE REQUEST message to indicate the request to establish the user plane to the network and to keep the NAS 
signalling connection after the completion of the tracking area updating procedure. 
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When the tracking area updating procedure is initiated in EMM-IDLE mode to perform an inter-system change from 
A/Gb mode or lu mode to SI mode and the TIN is set to "P-TMSI", the UE shall include the GPRS ciphering key 
sequence number applicable for A/Gb mode or lu mode and a nonccuE in the TRACKING AREA UPDATE REQUEST 

message. 

[TS24.301 clause5.5.3.2.4] 



If the "active" flag is included in the TRACKING AREA UPDATE REQUEST message, the MME shall re-establish 
the radio and S 1 bearers for all active EPS bearer contexts. 

Upon receiving a TRACKING AREA UPDATE ACCEPT message, the UE shall stop timer T3430, reset the tracking 
area updating attempt counter, enter state EMM-REGISTERED and set the EPS update status to EUl UPDATED. If the 
message contains a GUTI, the UE shall use this GUTI as new temporary identity for EPS services and shall store the 
new GUTI. If no GUTI was included by the MME in the TRACKING AREA UPDATE ACCEPT message, the old 
GUTI shall be used. If the UE receives a new TAI list in the TRACKING AREA UPDATE ACCEPT message, the UE 
shall consider the new TAI list as valid and the old TAI list as invalid; otherwise, the UE shall consider the old TAI list 
as valid. 



If the TRACKING AREA UPDATE ACCEPT message contained a GUTI, the UE shall return a TRACKING AREA 
UPDATE COMPLETE message to the MME to acknowledge the received GUTI. 



[TS24.301clause5.6.1.5] 



f) Tracking area updating procedure is triggered 

The UE shall abort the service request procedure, stop timer T3417 and perform the tracking area updating 
procedure. The "active" flag shall be set in the TRACKING AREA UPDATE REQUEST message. 



i) Transmission failure of SERVICE REQUEST message indication with TAI change from lower layers 

If the current TAI is not in the TAI list, the service request procedure shall be aborted to perform the tracking 
area updating procedure. The "active" flag shall be set in the TRACKING AREA UPDATE REQUEST 

message. 

If the current TAI is still part of the TAI list, the UE shall restart the service request procedure. 



9.2.3.1.2.3 Test description 

9.2.3.1.2.3.1 Pre-test conditions 

System Simulator: 

- Cell A (TAI-1:MCC1/MNC1/TAC1) (HPLMN) 

- Cell B(TAI-2:MCC1/MNC1/TAC2) (HPLMN with different TAC) 

- Cell A is set to the "Serving cell" 

Cell B is set to the "Suitable neighbour cell". 
UE: 
None 
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Preamble: 

- The UE is in state Generic RB Established (state 3) with condition SRB2-DRB(2,0) on Cell A according to [18]. 
9.2.3.1 .2.3.2 Test procedure sequence 

Table 9.2.3.1.2.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Force the UE to initiate uplink user data. 
(Note1) 


- 


- 


- 


- 


2 


The UE transmits SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS does not perform a radio bearer 
establishment procedure. (Note2) 


- 


- 


- 


- 




The following messages are sent and shall be 
received on cell B. 


- 


- 


- 


- 


4 


Set the cell type of cell A to the "Non-suitable 
cell". Set the cell type of cell B to the "Serving 
cell". 










5 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with 
"Active" flag before expiring T3417 timer (5 
seconds)? 


~> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


7 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<— 


SECURITY MODE COMMAND 


- 


- 


8 


The UE responds to the NAS security mode 
command procedure. 


~> 


SECURITY MODE COMPLETE 


- 


- 


9 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


10 


Check: Does the UE transmit a TRACKING 
AREA UPDATE COMPLETE message? 


-> 


TRACKING AREA UPDATE 
COMPLETE 


1 


P 


11 


The SS waits lOseconds (T3440). 


- 


- 


- 


- 


12 


Check: does the test result of generic 
procedure indicate that a dedicated EPS 
bearer context is active? 






2 


P 


Note1 : This could be done by e.g. MMI or by AT command. 
Note2: The SS does not send any AS or NAS messages to UE. 



9.2.3.1 .2.3.3 Specific message contents 

Table 9.2.3.1.2.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 3, Table 9.2.3.1.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 








"Active" flag 


'1'B 


Bearer 

establishment 

requested 




Old GUTI 


GUTI-1 


Old GUTI is 
included by UE if 
valid, IMSI 
otherwise. 
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Table 9.2.3.1.2.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 6, Table 9.2.3.1.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


GUT! 


GUTI-2 






TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 


8 octets 




Partial tracking area identity list 








Number of elements 


'OOOOO'B 


1 element 




Type of list 


'OO'B 


"list of TAGS 
belonging to one 
PLIVIN, with non- 
consecutive TAG 
values" 




MGG 


TAI-2 






MNG 








TAG1 









9.2.3.1.4 



9.2.3.1.4.1 



Normal tracking area update / List of equivalent PLMNs in the TRACKING AREA 
UPDATE ACCEPT message 

Test Purpose (TP) 



(1) 



with { UE in EMM-TRACKING-AREA-UPDATING- INITIATED state } 
ensure that { 

when { the UE receives TRACKING AREA UPDATE ACCEPT message including a list of equivalent PLMNs } 
then { the UE stores correctly the list and considers a forbidden PLMN if the forbidden PLMN is 
included in the equivalent list } 
} 

(2) 

with { UE in EMM-TRACKING-AREA-UPDATING- INITIATED state } 
ensure that { 

when { the UE receives TRACKING AREA UPDATE ACCEPT message without a list of equivalent PLMNs } 
then { the UE deletes the stored list and applies a normal PLMN selection process } 



9.2.3.1.4.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.3.2.4. 

[TS 24.301, clause 5.5.3.2.4] 

The MME may also include of list of equivalent PLMNs in the TRACKING AREA UPDATE ACCEPT message. Each 
entry in the list contains a PLMN code (MCCh-MNC). The UE shall store the list as provided by the network, after 
having removed from the list any PLMN code that is already in the list of forbidden PLMNs. In addition, the UE shall 
add to the stored list the PLMN code of the registered PLMN that sent the list. The UE shall replace the stored list on 
each receipt of the TRACKING AREA UPDATE ACCEPT message. If the TRACKING AREA UPDATE ACCEPT 
message does not contain a list, then the UE shall delete the stored list. 



Test description 
Pre-test conditions 



9.2.3.1.4.3 
9.2.3.1.4.3.1 
System Simulator: 

- Cell A, Cell B, Cell G, Cell I and Cell J are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI-1 (PLMNl). 

- Cell B belongs to TAI-2 (PLMNl). 

- Cell G belongs to TAI-7 (PLMN2). 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1193 ETSI TS 136 523-1 V9.1.1 (2010-07) 

- Cell I belongs to TAI-9 (PLMN3). 

- CellJ belongs to TAI-IO (PLMN4). 
UE: 

- The UE has a vaUd GUTI (GUTI-1). 

- The "forbidden PLMN hst" contains PLMN3 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
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9.2.3.1.4.3.2 



Test procedure sequence 

Table 9.2.3.1.4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell A to the "Non--Suitable 

cell". 

Set the cell type of cell B to the "Serving cell". 

Set the cell type of cell G to the " Non-Suitable 

off cell" 

Set the cell type of cell 1 to the " Non-Suitable 

off cell" 

Set the cell type of cell J to the " Non-Suitable 

off cell" 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message. 


~> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


4 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 






5 


SS responds with a TRACKING AREA 
UPDATE ACCEPT message including PLMN2 
and PLMN3 in the list of equivalent PLMNs. 


<~ 


TRACKING AREA UPDATE 
ACCEPT 






6 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


7 


Set the cell type of cell B to the "Non-Suitable 
off cell". 

Set the cell type of cell G to the " Suitable cell" 
Set the cell type of cell J to the " Suitable cell" 










8 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message on cell G 
(PLMN2)? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


9 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


10 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 






11 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message including PLMN1 
and PLMN3 in the list of equivalent PLMNs. 


<— 


TRACKING AREA UPDATE 
ACCEPT 






12 


Check: Does the UE transmit a TRACKING 
AREA UPDATE COMPLETE message? 


-> 


TRACKING AREA UPDATE 
COMPLETE 


1 


P 


13 


Set the cell type of cell G to the "Non-Suitable 
off cell" 

Set the cell type of cell 1 to the " Serving cell" 
Set the cell type of cell J to the " Non-Suitable 
off cell" 

Note: Cell 1 (PLMN3) belongs to the forbidden 
PLMN. 










14 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message on cell 1 
(PLMN3) in next 30 seconds? 


~> 


TRACKING AREA UPDATE 
REQUEST 


1 


F 


15 


The UE is switched to manual PLMN selection 
mode and is made to select PLMN3 in order to 
remove PLMN3 in the forbidden PLMN list in 
the UE. 










16 


Check: The UE transmits a TRACKING AREA 
UPDATE REQUEST message on cell 1 
(PLMN3). 


-> 


TRACKING AREA UPDATE 
REQUEST 






17 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


18 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 






19 


The SS transmits a TRACKING AREA 


<— 


TRACKING AREA UPDATE 


- 


- 
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UPDATE ACCEPT message without the list of 
equivalent PLMNs. 




ACCEPT 






20 


Check: Does the UE transmit a TRACKING 
AREA UPDATE COMPLETE message? 


-> 


TRACKING AREA UPDATE 
COMPLETE 


1 


P 


21 


The UE is switched back to automatic PLMN 
selection mode. 


- 


- 


- 


- 


22 


Set the cell type of cell B to the "Suitable cell" 
Set the cell type of cell G to the "Serving cell" 
Set the cell type of cell 1 to the " Non-Suitable 
off cell" 










23 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message on Cell 
G (PLMN2)? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


24 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM cause 
"No suitable cells in tracking area". 


<— 


TRACKING AREA UPDATE 
REJECT 






25 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message on Cell B 
(PLMN1)? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


26 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM cause 
"No suitable cells in tracking area". 


<- 


TRACKING AREA UPDATE 
REJECT 







9.2.3.1 .4.3.3 Specific message contents 

Table 9.2.3.1.4.3.3-1 : Message TRACKING AREA UPDATE ACCEPT (step 5, Table 9.2.3.1.4.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remarl< 


Comment 


Condition 


Equivalent PLMNs 




Includes MCC and 
MNC digits for 
PLMN2 and 
PLMNS. 





Table 9.2.3.1.4.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 11, Table 9.2.3.1.4.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remarl< 


Comment 


Condition 


Equivalent PLMNs 




Includes MCC and 
MNC digits for 
PLMN1 and 
PLMNS. 





Table 9.2.3.1.4.3.3-3: Message TRACKING AREA UPDATE REJECT (steps 24 and 26, Table 

9.2.3.1.4.3.2-1) 



Derivation path: 36.508 table 4.7.2-26 


Information Element 


Value/Remarl< 


Comment 


Condition 


EMM cause 


'00001111' B 


No suitable cells 
in tracking area 





9.2.3.1.5 
9.2.3.1.5.1 
(1) 



Periodic tracking area update / Accepted 
Test Purpose (TP) 



with { UE in state EMM-REGISTERED and EMM- IDLE mode} 
ensure that { 

when { the periodic tracking area updating timer T3412 expires } 
then { UE sends TRACKING AREA UPDATE REQUEST message with EPS update type 



'Periodic updating' 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1196 ETSI TS 136 523-1 V9.1.1 (2010-07) 

(2) 

with { UE in 'out of E-UTRAN coverage' and the periodic tracking area updating timer T3412 expires } 
ensure that { 

when { the UE enters E-UTRAN coverage } 
then { UE sends TRACKING AREA UPDATE REQUEST message with EPS update type = 'Periodic updating'} 
} 

9.2.3.1.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS23.401 clause 4.3.5.2 
and TS 24.301 clauses 5.3.5, 5.5.3.2.1, 5.5.3.2.2 and 5.5.3.2.4. 

[TS23.401 clause 4.3.5.2] 



An EMM-REGISTERED UE performs periodic Tracking Area Updates with the network after the expiry of the 
periodic TAU timer. 

If the UE is out of E-UTRAN coverage (including the cases when the UE is camped on 2G/3G cells) when its periodic 
TAU update timer expires, and ISR is activated the UE shall start the E-UTRAN Deactivate ISR timer. After the E- 
UTRAN Deactivate ISR timer expires the UE shall deactivate ISR by setting its TIN to "P-TMSI". The EMM- 
REGISTERED UE shall remember it has to perform a Tracking Area Update when it next returns to E-UTRAN 
coverage. 

[TS24.301 clause5.3.5] 

Periodic tracking area updating is used to periodically notify the availability of the UE to the network. The procedure is 
controlled in the UE by the periodic tracking area update timer (timer T3412). The value of timer T3412 is sent by the 
network to the UE in the ATTACH ACCEPT message and can be sent in the TRACKING AREA UPDATE ACCEPT 
message. The UE shall apply this value in all tracking areas of the list of tracking areas assigned to the UE, until a new 
value is received. 

The timer T3412 is reset and started with its initial value, when the UE goes from EMM-CONNECTED to EMM-IDLE 
mode. The timer T3412 is stopped when the UE enters EMM-CONNECTED mode or EMM-DEREGISTERED state. 

When timer T3412 expires, the periodic tracking area updating procedure shall be started and the timer shall be set to its 
initial value for the next start. 

If the UE is in another state than EMM-REGISTERED.NORMAL-SERVICE when the timer expires the periodic 
tracking area updating procedure is delayed until the UE returns to EMM-REGISTERED.NORMAL-SERVICE. 



The mobile reachable timer shall be reset and started with its initial value, when the MME releases the NAS signalling 
connection for the UE. The mobile reachable timer shall be stopped when a NAS signalling connection is established 
for the UE. 



[TS24.301 clause5.5. 3.2.1] 

The periodic tracking area updating procedure is controlled in the UE by timer T3412. When timer T3412 expires, the 
periodic tracking area updating procedure is started. Start and reset of timer T3412 is described in subclause 5.5.3.2. 

[TS24.301 clause5.5. 3.2.2] 

The UE in state EMM-REGISTERED shall initiate the tracking area updating procedure by sending a TRACKING 
AREA UPDATE REQUEST message to the MME, 



b) when the periodic tracking area updating timer T3412 expires; 
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After sending the TRACKING AREA UPDATE REQUEST message to the MME, the UE shall start timer T3430 and 
enter state EMM-TRACKING-AREA-UPDATING-INITIATED (see example in figure 5.5.3.2.2). If timer T3402 is 
currently running, the UE shall stop timer T3402. If timer T341 1 is currently running, the UE shall stop timer T341 1 . If 
timer T3442 is currently running, the UE shall stop timer T3442. 

If the UE supports A/Gb mode or lu mode, the UE shall handle the Old GUTI IE as follows: 

- If the TIN indicates "P-TMSI" and the UE holds a vaUd P-TMSI and RAI, the UE shall map the P-TMSI and 
RAI into the Old GUTI IE. Additionally, if the UE holds a valid GUTI, the UE shall indicate the GUTI in the 
Additional GUTI IE. 

NOTE: The mapping of the P-TMSI and RAI to the GUTI is specified in 3GPP TS 23.003 [2]. 

- If the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI IE. 



When the tracking area updating procedure is initiated in EMM-IDLE mode, the UE may also include an EPS bearer 
context status IE in the TRACKING AREA UPDATE REQUEST message, indicating which EPS bearer contexts are 
active in the UE. 

[TS24.301 clause5.5. 3.2.4] 



Upon receiving a TRACKING AREA UPDATE ACCEPT message, the UE shall stop timer T3430, reset the routing 
area updating attempt counter, enter state EMM-REGISTERED and set the EPS update status to EUl UPDATED. If the 
message contains a GUTI, the UE shall use this GUTI as new temporary identity for EPS services and shall store the 
new GUTI. If no GUTI was included by the MME in the TRACKING AREA UPDATE ACCEPT message, the old 
GUTI shall be used. If the UE receives a new TAI list in the TRACKING AREA UPDATE ACCEPT message, the UE 
shall consider the new TAJ list as valid and the old TAI list as invalid; otherwise, the UE shall consider the old TAJ list 
as valid. 



If the TRACKING AREA UPDATE ACCEPT message contained a GUTI, the UE shall return a TRACKING AREA 
UPDATE COMPLETE message to the MME to acknowledge the received GUTI. 

9.2.3.1.5.3 Test description 

9.2.3.1.5.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI- 1 . (home PLMN) 
UE: 

- The UE has no vahd GUTI. 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.3.1.5.3.2 



Test procedure sequence 

Table 9.2.3.1.5.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is powered up or switched on. 


- 




- 


- 


2 


The UE transmits an ATTACH REQUEST 
message with a PDN CONNECTIVITY 
REQUEST message to request PDN 
connectivity to the default PDN 


-> 


ATTACH REQUEST 






3 


The SS starts an authentication procedure 


<- 


AUTHENTICATION REQUEST 


- 


- 


4 


The UE responds to the authentication 
procedure 


-> 


AUTHENTICATION RESPONSE 


- 


- 


5 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<- 


SECURITY MODE COMMAND 


- 


- 


6 


The UE responds to the NAS security mode 
command procedure 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTION: Steps 6Aa1 to 6Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESIVI 
information which needs to be transferred. 










6A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






6A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






7 


The SS transmits an ATTACH ACCEPT 
message with GUTI-1 and with the ACTIVATE 
DEFAULT EPS BEARER CONTEXT 
REQUEST message. 


<— 


ATTACH ACCEPT 






8 


The UE transmits an ATTACH COMPLETE 
message with the ACTIVATE DEFAULT EPS 
BEARER CONTEXT ACCEPT message 


-> 


ATTACH COMPLETE 






9 


The SS releases the RRC connection. 






- 


- 


10 


The SS waits 6minutes. (Expire of T3412) 


- 








11 


Check: Does the UE send TRACKING AREA 
UPDATE REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


12 


The SS sends TRACKING AREA UPDATE 
ACCEPT. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


13 


Check: Does the UE send TRACKING AREA 
UPDATE COMPLETE message? 


-> 


TRACKING AREA UPDATE 
COMPLETE 


1 


P 


14 


The SS releases the RRC connection. 






- 


- 


15 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.4 
indicate that the UE is in EMM-REGISTERED 
state on cell A with PagingUE-ldentity = S- 
TMSI2 and with CN domain indicator set to 
"PS"? 






1 




16 


Set the cell type of cell A to the "non-Suitable 
cell". 


- 




- 


- 


17 


The SS waits Sminutes. 


- 




- 


- 


18 


Set the cell type of cell A to the "Serving cell". 


- 




- 


- 


19 


Check: Does the UE send TRACKING AREA 
UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


20 


The SS sends TRACKING AREA UPDATE 
ACCEPT. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


21 


Check: Does the UE send TRACKING AREA 
UPDATE COMPLETE message? 


-> 


TRACKING AREA UPDATE 
COMPLETE 


2 


P 


22 


The SS releases the RRC connection. 


- 




- 


- 


23 


Check: Does the test result of generic test 


- 




2 


- 
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procedure in TS 36.508 subclause 6.4.2.4 
indicate that the UE is in EIVIM-REGISTERED 
state in cell A with PagingUE-ldentity = S- 
TIVISI3 and with CN domain indicator set to 
"PS"? 











9.2.3.1 .5.3.3 Specific message contents 

Table 9.2.3.1.5.3.3-1 : Message ATTACH ACCEPT (step 7, Table 9.2.3.1.5.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


T3412 value 








Unit 


'010' 


"value is 
incremented in 
multiples of 
decihours" 




Timer value 


'00001' 


"6 minutes" 




TAI list 








Length of tracking area identity list contents 


'00001 01 0'B 






Partial tracking area identity list 








Number of elements 


'00001 'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAC 
values" 




MCC 
MNC 
TAC1 


TAI-1 






GUT! 


GUTI-1 







Table 9.2.3.1.5.3.3-2: Message TRACKING AREA UPDATE REQUEST (step 11, Table 9.2.3.1.5.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 
EPS update type value 

Old GUTI 


'011'B 
GUTI-1 


"Periodic 
updating" 
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Table 9.2.3.1.5.3.3-3: Message TRACKING AREA UPDATE ACCEPT (step 12, Table 9.2.3.1.5.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remarl< 


Comment 


Condition 


T3412value 








Unit 


'010' 


"value is 
Incremented in 
multiples of 
decihours" 




Timer value 


'00001' 


"6 minutes" 




GUT! 
TAI list 
Length of tracking area identity list contents 


GUTI-2 
'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'00001 'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAC 
values" 




MCC 
MNC 
TAC1 


TAI-1 







Table 9.2.3.1.5.3.3-4: Message TRACKING AREA UPDATE REQUEST (step 19, Table 9.2.3.1.5.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 
EPS update type value 

Old GUTI 


'011'B 
GUTI-2 


"Periodic 
updating" 





Table 9.2.3.1.5.3.3-5: Message TRACKING AREA UPDATE ACCEPT (step 20, Table 9.2.3.1.5.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 
TAI list 
Length of tracking area identity list contents 


GUTI-3 
'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'00001 'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAC 
values" 




MCC 
MNC 
TAC1 


TAI-1 







9.2.3.1.6 
9.2.3.1.6.1 

(1) 



Normal tracking area update / UE with ISR active moves to E-UTRAN 
Test Purpose (TP) 



with { ISR activateca UE in state EMM-REGISTERED ancJ ECM_IDLE mocJe } 
ensure that { 

when { ISR activatecJ UE reselects from E-UTRAN to UTRAN/GERAN cell belonging to the RA where the 
UE is registerecJ } 

then { UE cJoes not send ROUTING AREA UPDATE REQUEST message } 
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(2) 

with { ISR activated UE in state EMM-REGISTERED and ECM_IDLE mode } 
ensure that { 

when { ISR activated UE reselects from E-UTRAN to UTRAN/GERAN cell belonging to a RA which is not 
the RA where the UE is registered } 

then { UE sends ROUTING AREA UPDATE REQUEST message } 
} 

(3) 

with { ISR activated UE in state GMM-REGISTERED and PMM_IDLE mode } 
ensure that { 

when { ISR activated UE reselects from UTRAN/GERAN to E-UTRAN cell belonging to one of the TAs of 
the list of TAs where the UE is registered } 

then { UE does not send TRACKING AREA UPDATE REQUEST message } 

} 

(4) 

with { ISR activated UE in state GMM-REGISTERED and PMM_IDLE mode } 
ensure that { 

when { ISR activated UE reselects from UTRAN/GERAN to E-UTRAN cell belonging to a TA which is not 
in the list of TAs where the UE is registered } 

then { UE sends TRACKING AREA UPDATE REQUEST message } 

} 

(5) 

with { ISR activated UE has a stored TIN value = "RAT-related TMSI" } 
ensure that { 

when { SS sends a Paging with "P-TMSI" to ISR activated UE on UTRAN/GERAN cell } 
then { UE responds to the paging message } 
} 

(6) 

with { ISR activated UE has a stored TIN value = "RAT-related TMSI" } 
ensure that { 

when { SS sends a Paging with "GUTI" to ISR activated UE on E-UTRAN cell } 
then { UE responds to the paging message } 
} 

9.2.3.1.6.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS23.401 clause 4.3.5.6, 
3GPPTS24.008 clauses 4.7.5.1.1 and 4.7.5.1.3 and 3GPP TS 24.301 clauses 5.5.3.2.2 and 5.5.3.2.4. 

[TS23.401 clause 4.3.5.6] 

The Idle mode Signalling Reduction (ISR) function provides a mechanism to limit signalling during inter-RAT cell- 
reselection in idle mode (ECM-IDLE, PMM-IDLE, GPRS STANDBY states). 

NOTE: The Idle mode Signalling Reduction function is mandatory for E-UTRAN UEs that support GERAN 
and/or UTRAN and optional for core network. The UE's ISR capability in the UE Network Capability 
element is for test purpose. 

ISR is activated by decision of the CN nodes and shall be explicitly signalled to the UE as "ISR activation" in the RAU 
and TAU signalling. The UE may have valid MM parameters both from MME and from SGSN. The "Temporary 
Identity used in Next update" (TIN) is a parameter of the UE's MM context, which identifies the UE identity that the UE 
shall indicate in the next RAU Request or TAU Request message. The TIN also identifies the status of ISR activation in 
the UE. 

The TIN can take one of the three values, "P-TMSI", "GUTI" or "RAT-related TMSI". The UE shall set the TIN when 
receiving an Attach Accept, a TAU Accept or RAU Accept message according to the rules in table 4.3.5.6-1. 
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Table 4.3.5.6-1 : Setting of the TIN 



lUlessage received by UE 


Current TIN value stored 
byUE 


TIN value to be set by 
the UE when 
receiving message 


Attach Accept via E-UTRAN 
(never indicates ISR 
activation) 


Any value 


GUTI 


Attach Accept via 
GERAN/UTRAN 
(never indicates ISR 
activation) 


Any value 


P-TMSI 


TAU Accept not indicating 
ISR 


Any value 


GUTI 


TAU Accept indicating ISR 


GUTI 
P-TMSI or RAT-related 
IMS! 


GUTI 
RAT-related TMSI 


RAU Accept not indicating 
ISR 


Any value 


P-TMSI 


RAU Accept indicating ISR 


P-TMSI 
GUTI or RAT-related TMSI 


P-TMSI 
RAT-related TMSI 



When ISR activation is indicated by the RAU/TAU Accept message but the UE shall not set the TIN to "RAT-related 
TMSI" is a special situation. Here the UE has deactivated ISR due to special situation handling. By maintaining the old 
TIN value the UE remembers to use the RAT specific TMSI indicated by the TIN when updating with the CN node of 
the other RAT. 



Only if the TIN is set to "RAT-related TMSI" ISR behaviour is enabled for the UE, i.e. the UE can change between all 
registered areas and RATs without any update signalling and it listens for paging on the RAT it is camped on. If the 
TIN is set to "RAT-related TMSI", the UE's P-TMSI and RAI as well as its GUTI and TAI(s) shall remain registered 
with the network and shall remain valid in the UE. 

Table 4.3.5.6-1 : Old temporary UE Identity that the UE shall indicate in TAU/RAU Request (as old 

GUTI or as old P-TMSI/RAI) 



Message to be sent 
byUE 


TIN value: P-TMSI 


TIN value: GUTI 


TIN value: RAT- 
related TMSI 


TAU Request 


GUTI mapped from 
P-TMSI/RAI 


GUTI 


GUTI 


RAU Request 


P-TMSI/RAI 


P-TMSI/RAI mapped 
from GUTI 


P-TMSI/RAI 


Attach Request via E- 
UTRAN 


GUTI mapped from 
P-TMSI/RAI 


GUTI 


GUTI 


Attach Request via 
GERAN/UTRAN 


P-TMSI/RAI 


P-TMSI/RAI mapped 
from GUTI 


P-TMSI/RAI 



Table 4.3.5.2-1 shows which temporary identity the UE shall indicate in a Tracking or Routing Area Update Request of 
in an Attach Request message, when the UE stores these as valid parameters. 

Situations may occur that cause unsynchronized state information in the UE, MME and SGSN. Such special situations 
trigger a deactivation of ISR locally in the UE. 



[TS24.008 clause 4.7.5.1.1] 



If the MS supports SI mode, the MS shall handle the P-TMSI IE as follows: 

- If the TIN indicates "GUTI" and the MS holds a valid GUTI, the MS shall map the GUTI into a P-TMSI, 
P-TMSI signature and RAI as specified in 3GPP TS 23.003 [4]. The MS shall include the mapped RAI in the 
Old routing area identification IE and the mapped P-TMSI signature in the P-TMSI signature IE. When the 
routing area updating procedure is initiated in lu mode, the MS shall also include the mapped P-TMSI in the 
P-TMSI IE. Additionally, in lu mode and A/Gb mode, if the MS holds a valid P-TMSI and RAI, the MS shall 
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indicate the P-TMSI in the Additional mobile identity IE and the RAI in the Additional old routing area 
identification IE. 

- If the TIN indicates "P-TMSI" or "RAT-related TMSI" and the MS holds a valid P-TMSI and RAI, the MS shall 
indicate the RAI in the Old routing area identification IE. When the routing area updating procedure is initiated 
in lu mode, the MS shall also include the P-TMSI in the P-TMSI IE. 



[TS24.008 clause 4.7.5.1.3] 



In order to indicate to the MS that the GUTI and TAI list assigned to the MS remain registered with the network and are 
valid in the MS, the network shall indicate in the Update result IE in the ROUTING AREA UPDATE ACCEPT 

message that ISR is activated. 

If the ROUTING AREA UPDATE ACCEPT message contains 

i) no indication that ISR is activated, an MS supporting SI mode shall set the TIN to "P-TMSI"; or 

ii) an indication that ISR is activated, the MS shall regard the available GUTI and TAI list as valid and registered 
with the network. If the TIN currently indicates "GUTI", the MS shall set the TIN to "RAT-related TMSI". 

[TS24.301 clause5.5. 3.2.2] 

The UE in state EMM-REGISTERED shall initiate the tracking area updating procedure by sending a TRACKING 
AREA UPDATE REQUEST message to the MME, 



If the UE supports neither A/Gb mode nor lu mode, the UE shall include a valid GUTI in the Old GUTI IE in the 
TRACKING AREA UPDATE REQUEST message. 

If the UE supports A/Gb mode or lu mode, the UE shall handle the Old GUTI IE as follows: 

- If the TIN indicates "P-TMSI" and the UE holds a valid P-TMSI and RAI, the UE shall map the P-TMSI and 
RAI into the Old GUTI IE. Additionally, if the UE holds a valid GUTI, the UE shall indicate the GUTI in the 
Additional GUTI IE. 

NOTE: The mapping of the P-TMSI and RAI to the GUTI is specified in 3GPP TS 23.003 [2]. 

- If the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI IE. 



[TS24.301 clause5.5. 3.2.4] 

The network may also indicate in the EPS update result IE in the TRACKING AREA UPDATE ACCEPT message that 
ISR is active. If the TRACKING AREA UPDATE ACCEPT message contains: 

i) no indication that ISR is activated, the UE shall set the TIN to "GUTI"; 

ii) an indication that ISR is activated, the UE shall regard a previously assigned P-TMSI and RAI as valid and 
registered with the network. If the TIN currently indicates "P-TMSI", the UE shall set the TIN to "RAT-related 
TMSI". 

9.2.3.1.6.3 Test description 

9.2.3.1.6.3.1 Pre-test conditions 

System Simulator: 

Cell A and Cell B are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI-l(home PLMN) and is set to "Non- Suitable cell" 
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- Cell B belongs to TAI-2(home PLMN, another TAC) and is set to "Non- Suitable cell" 

- If pc_UTRAN, Cell 5 and Cell 7 are configured. 

- If NOT pc_UTRAN and pc_GERAN, Cell 24 and Cell 25 are configured. 

- Cell 5 and Cell 24 belong to RAM (home PLMN) as specified TS34.123-1 clause 12 and is set to "Serving 
cell" 

- Cell 7 and Cell 25 belong to RAI-2 (home PLMN) as specified TS34. 123-1 clause 12 and is set to "Non- 
Suitable cell" 

System information indicate that NMO 1 is used 

UE: 

- The test USIM contains no valid P-TMSI and no valid GUTI. 
Preamble: 

- The UE is in state Switched OFF (state 1) according to TS 36.508, [18]. 
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9.2.3.1.6.3.2 



Test procedure sequence 

Table 9.2.3.1.6.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


- 


The following messages are sent on Cell 5 or 
24 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message on Cell 5 or 24 


~> 


ATTACH REQUEST 


- 


- 


3 


The SS transmits an AUTHENTICATION AND 
CIPHERING REQUEST message. 


<- 


AUTHENTICATION AND 
CIPHERING REQUEST 


- 


- 


4 


The UE transmits an AUTHENTICATION AND 
CIPHERING RESPONSE message. 


-> 


AUTHENTICATION AND 
CIPHERING RESPONSE 


- 


- 


5 


SS responds with ATTACH ACCEPT message 
including P-TMSI-1 (TIN set to P-TMSI) and 
RAI-1. 


<— 


ATTACH ACCEPT 






6 


The UE transmits an ATTACH COMPLETE 
message. 


-> 


ATTACH COMPLETE 


- 


- 


7 


The UE transmits an ACTIVATE PDP 
CONTEXT REQUEST message 


-> 


ACTIVATE PDP CONTEXT 
REQUEST 


- 


- 


8 


The SS responds with an ACTIVATE PDP 
CONTEXT ACCEPT message 


<— 


ACTIVATE PDP CONTEXT 
ACCEPT 


- 


- 


9 


Set the cell type of cell 5 or 24 to the "Non- 
Suitable cell". 
Set the cell type of cell A to the "Serving cell". 










10 


The UE sends TRACKING AREA UPDATE 
REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


11 


The SS sends TRACKING AREA UPDATE 
ACCEPT including GUTI-1 (TIN set to RAT- 
relatedTMSI)andTAI-1. 


<- 


TRACKING AREA UPDATE 
ACCEPT 






12 


The UE sends TRACKING AREA UPDATE 
COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


13 


Set the cell type of cell A to the "Non-Suitable 

cell". 

Set the cell type of cell 5 or 24 to the "Serving 

cell". 










14 


Check: Does the UE transmit a ROUTING 
AREA UPDATE REQUEST message in the 
next 30 seconds on cell 5 or 24? 


~> 


ROUTING AREA UPDATE 
REQUEST 


1 


F 


15 


Check: Does the UE respond to paging on cell 
5 or 24 with P-TMSI-1 for PS domain? 

Note: There is no appreciate generic 
procedures in TS36.508/TS51 .01 0-1 .(FFS) 






1,5 




16 


Set the cell type of cell 5 or 24 to the "Non- 
Suitable cell". 
Set the cell type of cell A to the "Serving cell". 










17 


Check: Does the UE send TRACKING AREA 
UPDATE REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


3 


F 


18 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.4 
indicate that the UE is in EMM-REGISTERED 
state on cell A with PagingUE-ldentity = S- 
TMSI1 and with CN domain indicator set to 
"PS"? 






3,6 




18 
A 


Set the cell type of cell A to the "Non-Suitable 

cell". 

Set the cell type of cell 5 or 24 to the "Serving 

cell". 










18 
B 


Check: Does the UE transmit a ROUTING 
AREA UPDATE REQUEST message in the 
next 30 seconds on cell 5 or 24? 


-> 


ROUTING AREA UPDATE 
REQUEST 


1 


F 


19 


Set the cell type of cell 5 or 24 to the "Non- 


- 


- 


- 


- 
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Suitable cell". 

Set the cell type of cell B to the "Serving cell". 










20 


Check: Does the UE send TRACKING AREA 
UPDATE REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


4 


P 


21 


The SS sends TRACKING AREA UPDATE 
ACCEPT including GUTI-2 and TAI-2. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


22 


The UE sends TRACKING AREA UPDATE 
COIVIPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


23 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.4 
indicate that the UE is in EMM-REGISTERED 
state on cell B with PagingUE-ldentity = S- 
TMSI2 and with CN domain indicator set to 
"PS"? 






6 




24 


Set the cell type of cell B to the "Non-Suitable 

cell". 

Set the cell type of cell 7 or 25 to the "Serving 

cell". 










25 


Check: Does the UE transmit a ROUTING 
AREA UPDATE REQUEST message with P- 
TMSI and RAI on cell 7 or 25? 


-> 


ROUTING AREA UPDATE 
REQUEST 


2 


P 


26 


The SS sends ROUTING AREA UPDATE 
ACCEPT message with P-TMSI-2 and RAI-2. 


<— 


ROUTING AREA UPDATE 
ACCEPT 


- 


- 


27 


The UE sends ROUTING AREA UPDATE 
COMPLETE message. 


-> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 


28 


Set the cell type of cell 7 or 25 to the "Non- 
Suitable cell". 
Set the cell type of cell B to the "Serving cell". 










29 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.4 
indicate that the UE is in EMM-REGISTERED 
state on cell B with PagingUE-ldentity = S- 
TMSI2 and with CN domain indicator set to 
"PS"? 






6 





9.2.3.1 .6.3.3 Specific message contents 

Table 9.2.3.1.6.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 10, Table 9.2.3.1.6.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remarl< 


Comment 


Condition 


Old GUTI 


Mapped from the P-TMSI 
and RAI allocated in step 
5 
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Table 9.2.3.1.6.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 11, Table 9.2.3.1.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update result 


'100'B 


"TA updated and 
ISR activated" 


TA only 




'101'B 


"combined TA/LA 
updated and ISR 
activated" 


combined 
TA_LA 


GUTI 


GUTI-1 






TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'OOOOO'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




MCC 
MNC 
TAG1 


TAI-1 







Table 9.2.3.1.6.3.3-3: Message TRACKING AREA UPDATE REQUEST (step 20, Table 9.2.3.1.6.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 


GUTI-1 







Table 9.2.3.1.6.3.3-4: Message TRACKING AREA UPDATE ACCEPT (step 21, Table 9.2.3.1.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update result 


'001 'B 


"TA updated and 
ISR activated" 




GUTI 


GUTI-2 






TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'OOOOO'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




MCC 
MNC 
TAG1 


TAI-2 







9.2.3.1.8 

9.2.3.1.8.1 

(1) 



UE receives an indication that the RRC connection was released with cause 
"load balancing TAU required" 

Test Purpose (TP) 



with { UE in state EMM-REGISTERED and EMM-CONNECTED mode} 
ensure that { 

when { UE receives RRC CONNECTION RELEASE message with cause "load balancing TAU required" and 
enters EMM-REGISTERED and EMM- IDLE mode} 

then { UE sends TRACKING AREA UPDATE REQUEST message with EPS update type = "TA updating"} 
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9.2.3.1.8.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 5.5.3.1, 
5.5.3.2.2 and 5.5.3.2.4. 

[TS24.301 clause5.5.3.1] 

The tracking area updating procedure is always initiated by the UE and is used for the following purposes: 



MME load balancing; 



[TS24.301 clause5.5. 3.2.2] 

The UE in state EMM-REGISTERED shall initiate the tracking area updating procedure by sending a TRACKING 
AREA UPDATE REQUEST message to the MME, 



e) when the UE receives an indication from the lower layers that the RRC connection was released with cause "load 
balancing TAU required"; 



[TS24.301 clause5.5.3.2.4] 

If the tracking area update request has been accepted by the network, the MME shall send a TRACKING AREA 
UPDATE ACCEPT message to the UE. If the MME assigns a new GUTI for the UE, a GUTI shall be included in the 
TRACKING AREA UPDATE ACCEPT message. In this case, the MME shall start timer T3450 and enter state EMM- 
COMMON-PROCEDURE-INITIATED as described in subclause 5.4.1. The MME may include a new TAI Hst for the 
UE in the TRACKING AREA UPDATE ACCEPT message. 



Upon receiving a TRACKING AREA UPDATE ACCEPT message, the UE shall stop timer T3430, reset the tracking 
area updating attempt counter, enter state EMM-REGISTERED and set the EPS update status to EUl UPDATED. If the 
message contains a GUTI, the UE shall use this GUTI as new temporary identity for EPS services and shall store the 
new GUTI. If no GUTI was included by the MME in the TRACKING AREA UPDATE ACCEPT message, the old 
GUTI shall be used. If the UE receives a new TAI list in the TRACKING AREA UPDATE ACCEPT message, the UE 
shall consider the new TAI list as valid and the old TAI list as invalid; otherwise, the UE shall consider the old TAI list 
as valid. 



If the TRACKING AREA UPDATE ACCEPT message contained a GUTI, the UE shall return a TRACKING AREA 
UPDATE COMPLETE message to the MME to acknowledge the received GUTI. 

9.2.3.1.8.3 Test description 

9.2.3.1.8.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI- 1 (home PLMN) 



UE: 



The UE has a vaUd GUTI (GUTI-1). 
The UE is registered on TAJ- 1 . 
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Preamble: 

UE is in state Generic RB established (state 3) on Cell A according to [18]. 
9.2.3.1 .8.3.2 Test procedure sequence 

Table 9.2.3.1.8.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits RRCConnectionReleaese 
with cause "load balancing TAU required". 


- 


- 


- 


- 


2 


Check: Does the UE send TRACKING AREA 
UPDATE REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


3 


The SS sends TRACKING AREA UPDATE 
ACCEPT. (Note) 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


4 


Check: Does the UE send TRACKING AREA 
UPDATE COMPLETE message? 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


Note: The SS assigns a different IVIIVIE Identifier (IVIIVIEI) value in a GUTI. 



9.2.3.1 .8.3.3 Specific message contents 

Table 9.2.3.1.8.3.3-1 : Message TRACKING AREA UPDATE ACCEPT (step 3, Table 9.2.3.1.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 


GUTI-2 







9.2.3.1.9a 
9.2.3. 1.9a.1 
(1) 



Normal tracking area update / NAS signalling connection recovery 
Test Purpose (TP) 



with { UE in state EMM-REGISTERED and EMM-CONNECTED } 
ensure that { 

when { UE receives an indication of "RRC Connection failure" from the lower layers 
then { UE initiates the tracking area updating procedure } 



9.2.3. 1.9a.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.1 and 
5.5.3.2.2 and TS 36.331, clause 5.3.7.8 and 5.3.12. 

[TS 24.301, clause 5.5.3.1] 

The tracking area updating procedure is always initiated by the UE and is used for the following purposes: 

recovery from certain error cases (for details see subclauses 5.5.3.2.2 and subclause 5.5.3.3.2); 

[TS 24.301, clause 5.5.3.2.2] 

The UE in state EMM-REGISTERED shall initiate the tracking area updating procedure by sending a TRACKING 
AREA UPDATE REQUEST message to the MME, 



i) when the UE receives an indication of "RRC Connection failure" from the lower layers and has no user uplink 
data pending; 
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For all cases except case b, the UE shall set the EPS update type IE to "TA updating". For case b, the UE shall set the 
EPS update type IE to "periodic updating". 



[TS 36.331, clause 5.3.7.8] 

Upon receiving the RRCConnectionReestablishmentReject message, the UE shall: 

1> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'RRC 
connection failure'; 

[TS 36.331, clause 5.3.12] 

Upon leaving RRC_CONNECTED, the UE shall: 

1> indicate the release of the RRC connection to upper layers together with the release cause; 

9.2.3. 1.9a.3 Test description 

9.2.3.1 .9a.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell M (same TA). 

- Cell A is "Serving cell" and Cell M is "non-Suitable cell". 
UE: 

- The test USIM contains IMSI-1, GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 
Preamble: 

The UE is in state Generic RB Established (state 3) with EPSOnlyAttachForced on Cell A according to [18]. 
9.2.3.1 .9a. 3. 2 Test procedure sequence 

Table 9.2.3. 1.9a.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell M to the "Serving 
cell". 










- 


The following messages are to be observed on 
Cell M unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE transmits an 
RRCConnectionReestablishmentRequest. 


- 


- 


- 


- 


3 


The SS transmits an 
RRCConnectionReestablishmentReject. 


- 


- 


- 


- 


4 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST with the EPS 
update type set to 'TA updating' in the next 10 
seconds? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


5 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1211 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



9.2.3.1.9a.3.3 Specific message contents 

Table 9.2.3.1.9a.3.3-1: Message TRACKING AREA UPDATE REQUEST (step 4, Table 9.2.3.1 .9a.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


Old GUT! 


GUTI-1 






Last visited registered TAI 


TAI-1 







Table 9.2.3.1. 9a.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 5, Table 9.2.3.1. 9a.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


GUT! 


Not present 







9.2.3.1.10 
9.2.3.1.10.1 
(1) 



Normal tracking area update / Rejected / IMSI invalid 
Test Purpose (TP) 



with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the reject cause set to ' 'Illegal 
UE' ' } 

then { UE considers the USIM as invalid for EPS services and non-EPS services and enters state 
EMM-DEREGISTERED | 



(2) 

with { The UE is in the state EMM-DEREGISTERED } 
ensure that { 

when { UE is powered up } 

then { UE send ATTACH REQUEST message with Old GUTI or IMSI IE 



'IMSI' 



9.2.3.1.10.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.3.2.5. 

[TS24.301 clause5.5. 3.2.5] 

If the tracking area updating cannot be accepted by the network, the MME sends a TRACKING AREA UPDATE 
REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, and take the following actions depending on the EMM cause value received. 

#3 (Illegal UE); or 



The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI, TAI list and KSI. The UE shall 
consider the USIM as invalid for EPS services until switching off or the UICC containing the USIM is removed. 
The UE shall delete the list of equivalent PLMNs and shall enter the state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number and the MM 
parameters update status, TMSI, LAI and ciphering key sequence number as specified in 3GPP TS 24.008 [13] 
for the case when the normal routing area updating procedure is rejected with the GMM cause with the same 
value. The USIM shall be considered as invalid also for non-EPS services until switching off or the UICC 
containing the USIM is removed. 
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9.2.3.1.10.3 Test description 

9.2.3.1.10.3.1 Pre-test conditions 

System Simulator: 

Cell A, Cell B and Cell G are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI-l(home PLMN) and is set to "Serving cell" 

- Cell B belongs to TAI-2(home PLMN, another TAC) and is set to "Non- Suitable cell" 

- Cell G belongs to TAI-7(visited PLMN) and is set to "Non- Suitable cell" 

- Cell 5 (UTRAN) or Cell 24 (GERAN). 

- Cell 5 and Cell 24 belong to RAI-1 as specified TS34. 123-1 clause 12 and is set to "Non- Suitable cell" 
UE: 

The UE is configured to initiate EPS attach. 

- The UE has a vaUd GUTI (GUTI-1). 
The UE is registered on TAI- 1 . 

- IF pc_GERAN or pc_UTRAN THEN the UE has a valid P-TMSI. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
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9.2.3.1.10.3.2 Test procedure sequence 

Table 9.2.3.1.10.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell A to the "Non- 
Suitable cell". 

Set the cell type of cell B to the "Serving 
cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell B. 


~> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM 
cause = "Illegal UE" as specified. 


<- 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Set the cell type of cell A to the "Serving 
cell". 

Set the cell type of cell B to the "Non- 
Suitable cell". 










6 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell A? 

Note: Cell A belongs to the same PLMN 
where the UE was rejected but a different 
TAC 


-> 


ATTACH REQUEST 


1 


F 


7 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


8 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell A? 


-> 


ATTACH REQUEST 


1 


F 


9 


Set the cell type of cell A to the " Non- 
Suitable cell". 

Set the cell type of cell G to the "Serving 
cell". 










10 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell G? 

Note: Cell G belongs to a PLMN which is not 
the same like the one on which the UE was 
rejected. 


-> 


ATTACH REQUEST 


1 


F 


11 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


12 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell G? 


-> 


ATTACH REQUEST 


1 


F 


13 


Set the cell type of cell G to the "Non- 
Suitable cell". 

Set the cell type of cell 5 or 24 to the 
"Serving cell". 












EXCEPTIQN: Steps 14a1 to 14a2 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










14a1 


IF pc_GERAN or pc_UTRAN THEN the user 
initiates an attach by MMI or by AT 
command. 










14a2 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell 5 or 24? 


-> 


ATTACH REQUEST 


1 


F 


15 


The UE is switched off. 


- 


- 


- 


- 


16 


Set the cell type of cell A to the "Serving 
cell". 

Set the cell type of cell G to the "Non- 
Suitable cell". 
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Set the cell type of cell 5 or 24 to the "Non- 
Suitable cell". 










17 


The UE is powered up or switched on. 


- 


- 


- 


- 


18 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell A? 


-> 


ATTACH REQUEST 


2 


P 


19 


The SS transmit an ATTACH REJECT 
message with EMM cause = "Illegal UE". 
Note: The EMM cause chosen is just for 
convenience, to ensure that UE will abort the 
procedure without side effects. 


<~ 


ATTACH REJECT 







9.2.3.1 .10.3.3 Specific message contents 

Table 9.2.3.1.10.3.3-1: Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.1.10.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 

Old P-TMSI signature 


GUTI-1 

P-TMSI Signature-1 







Table 9.2.3.1.10.3.3-2: Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.1.10.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


0000001 1 


#3 "Illegal UE" 





Table 9.2.3.1.10.3.3-3: Message ATTACH REQUEST (step 18, Table 9.2.3.1.10.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 


IMSI 







9.2.3.1 .1 1 Normal tracking area update / Rejected / Illegal ME 

9.2.3.1.11.1 Test Purpose (TP) 

(1) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the reject cause set to "Illegal ME" 

} 

then { UE considers the USIM as invalid for EPS services and non-EPS services and enters state 

EMM-DEREGISTERED } 



(2) 



with { The UE is in the state EMM-DEREGISTERED } 
ensure that { 

when { UE is powered up } 

then { UE send ATTACH REQUEST message with Old GUTI or IMSI IE 



' IMSI ' 



9.2.3.1.11.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.3.2.5. 

[TS24.301 clause5.5. 3.2.5] 

If the tracking area updating cannot be accepted by the network, the MME sends a TRACKING AREA UPDATE 
REJECT message to the UE including an appropriate EMM cause value. 
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Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, and take the following actions depending on the EMM cause value received. 



#6 (Illegal ME); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.L3.3) and shall delete any GUTI, last visited registered TAI, TAI list and KSI. The UE shall 
consider the USIM as invalid for EPS services until switching off or the UICC containing the USIM is removed. 
The UE shall delete the Ust of equivalent PLMNs and shall enter the state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number and the MM 
parameters update status, TMSI, LAI and ciphering key sequence number as specified in 3GPP TS 24.008 [13] 
for the case when the normal routing area updating procedure is rejected with the GMM cause with the same 
value. The USIM shall be considered as invalid also for non-EPS services until switching off or the UICC 
containing the USIM is removed. 

9.2.3.1.11.3 Test description 

The test description is identical to the one of subclause 9.2.3.L10 except that the reject cause #3 "Illegal UE" is replaced 
with the reject cause #6 "Illegal ME". 

9.2.3.1 .12 Normal tracking area update / Rejected / EPS service not allowed 

9.2.3.1.12.1 Test Purpose (TP) 
(1) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the reject cause set to ' 'EPS 
service not allowd' ' } 

then { UE considers the USIM as invalid for EPS services and enters state EMM-DEREGISTERED } 

(2) 

with { The UE is in the state EMM-DEREGISTERED } 
ensure that { 

when { UE is powered up or switched on } 

then { UE sends ATTACH REQUEST message with 'Old GUTI or IMSI IE = ' IMSI ' ' } 

9.2.3.1.12.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.3.2.5. 

[TS24.301 clause5.5. 3.2.5] 

If the tracking area updating cannot be accepted by the network, the MME sends a TRACKING AREA UPDATE 
REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, and take the following actions depending on the EMM cause value received. 



#7 (EPS services not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI, TAI list and KSI. The UE shall 
consider the USIM as invalid for EPS services until switching off or the UICC containing the USIM is removed. 
The UE shall delete the Ust of equivalent PLMNs and shall enter the state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as specified in 
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3GPP TS 24.008 [13] for the case when the normal routing area updating procedure is rejected with the GMM 
cause with the same value. 

9.2.3.1.12.3 Test description 

9.2.3.1 .12.3.1 Pre-test conditions 

System Simulator: 

Cell A, Cell B and Cell G are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAl-l(home PLMN) and is set to "Serving cell" 

- Cell B belongs to TAl-2(home PLMN, another TAC) and is set to "Non- Suitable cell" 

- Cell G belongs to TAl-7(visited PLMN) and is set to "Non- Suitable cell" 

- Cell 5 (UTRAN) or Cell 24 (GERAN). 

- Cell 5 and Cell 24 belong to RAl-1 as specified TS34. 123-1 clause 12 and is set to "Non- Suitable cell" 
UE: 

The UE is configured to initiate EPS attach. 

- TheUEhasGUTI-1. 

The UE is registered on TAl- 1 . 

- IF pc_GERAN or pc_UTRAN THEN the UE has P-TMSl- 1 and P-TMSl signature- 1 . 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
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9.2.3.1.12.3.2 Test procedure sequence 

Table 9.2.3.1.12.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell A to the "Non- 
Suitable cell". 

Set the cell type of cell B to the "Serving 
cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell B. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM 
cause = "EPS services not allowed" as 
specified. 


<- 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Set the cell type of cell A to the "Serving 
cell". 

Set the cell type of cell B to the "Non- 
Suitable cell". 










6 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell A? 

Note: Cell A belongs to the same PLMN 
where the UE was rejected but a different 
TAC 


-> 


ATTACH REQUEST 


1 


F 


7 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


8 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell A? 


-> 


ATTACH REQUEST 


1 


F 


9 


Set the cell type of cell A to the " Non- 
Suitable cell". 

Set the cell type of cell G to the "Serving 
cell". 










10 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell G? 

Note: Cell G belongs to a PLMN which is not 
the same like the one on which the UE was 
rejected. 


-> 


ATTACH REQUEST 


1 


F 


11 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


12 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell G? 


-> 


ATTACH REQUEST 


1 


F 


13 


Set the cell type of cell G to the "Non- 
Suitable cell". 

Set the cell type of cell 5 or 24 to the 
"Serving cell". 












EXCEPTIQN: Steps 14a1 to 14b2 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










14a1 


IF pc_CS THEN the UE registers on CS 
domain - See TS 34.1 08 or TS 51 .01 


- 


- 


- 


- 


14b1 


IF pc_GERAN or pc_UTRAN THEN the user 
initiates an attach by MMI or by AT 
command. 










14b2 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell 5 or 24? 


-> 


ATTACH REQUEST 


1 


F 


15 


The UE is switched off. 


- 


- 


- 


- 


16 


Set the cell type of cell A to the "Serving 


- 


- 


- 


- 
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cell". 

Set the cell type of cell G to the "Non- 
Suitable cell". 

Set the cell type of cell 5 or 24 to the "Non- 
Suitable cell". 










17 


The UE is powered up or switched on. 


- 


- 


- 


- 


18 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell A? 


-> 


ATTACH REQUEST 


2 


P 


19 


The SS transmit an ATTACH REJECT 
message with EIVIM cause = "Illegal UE". 
Note: The EIVIM cause chosen is just for 
convenience, to ensure that UE will abort the 
procedure without side effects. 


<- 


ATTACH REJECT 







9.2.3.1.12.3.3 Specific message contents 

Table 9.2.3.1.12.3.3-1: Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.1.12.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 


GUTI-1 






Old P-TMSI signature 


P-TIVISI Signature-1 







Table 9.2.3.1.12.3.3-2: Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.1.12.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


'0000011 1'B 


#7 "EPS service 
not allowed" 





Table 9.2.3.1.12.3.3-3: Message ATTACH REQUEST (step 18, Table 9.2.3.1.12.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 


IMSI 







9.2.3.1 .13 Normal tracking area update / Rejected / UE identity cannot be derived by the 

network 

9.2.3.1.13.1 Test Purpose (TP) 

(1) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the reject cause set to ' 'UE 
identity cannot be derived by the network' ' } 

then { UE deletes any GUTI, last visited registered TAI , TAI list and KSI and enters the state 
EMM-DEREGISTERED and subsequently, UE automatically initiates the attach procedure} 



9.2.3.1.13.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.3.2.5. 

[TS24.301 clause5.5.3.2.5] 

If the tracking area updating cannot be accepted by the network, the MME sends a TRACKING AREA UPDATE 
REJECT message to the UE including an appropriate EMM cause value. 
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Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, and take the following actions depending on the EMM cause value received. 



#9 (UE identity cannot be derived by the network); 

The UE shall set the EPS update status to EU2 NOT UPDATED (and shall store it according to 

subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI, TAI list and KSI. The UE shall delete 

the list of equivalent PLMNs and shall enter the state EMM-DEREGISTERED. 

Subsequently, the UE shall automatically initiate the attach procedure. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as specified in 
3GPP TS 24.008 [13] for the case when the normal routing area updating procedure is rejected with the GMM 
cause with the same value. 



Test description 
Pre-test conditions 



9.2.3.1.13.3 
9.2.3.1.13.3.1 
System Simulator: 

Cell A and Cell B are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI- 1 (home PLMN) and is set to "Serving cell" 

- Cell B belongs to TAI-2(home PLMN, another TAC) and is set to "Non- Suitable cell" 
UE: 

The UE is configured to initiate EPS attach. 

- The UE has GUTI- 1. 

The UE is registered on TAI- 1 . 

- IF pc_GERAN or pc_UTRAN THEN the UE has P-TMSI- 1 and P-TMSI signature- 1 . 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
9.2.3.1.13.3.2 Test procedure sequence 

Table 9.2.3.1.13.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell A to the "Non-Suitable 

cell". 

Set the cell type of cell B to the "Serving cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell B. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM cause 
= " UE identity cannot be derived by the 
network " as specified. 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
cell B? 


-> 


ATTACH REQUEST 


1 


P 


6 


The SS transmits ATTACH REJECT message. 


<— 


ATTACH REJECT 


- 


- 
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9.2.3.1.13.3.3 Specific message contents 

Table 9.2.3.1.13.3.3-1: Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.1.13.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUT! 


GUTI-1 






Old P-TMSI signature 


P-TMSI signature-1 




pc GERA 

Nor 

pc UTRAN 



Table 9.2.3.1.13.3.3-2: Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.1.13.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


'00001 001'B 


#9 "UE identity 
cannot be derived 
by the network" 





Table 9.2.3.1.13.3.3-3: Message ATTACH REQUEST (step 5, Table 9.2.3.1.13.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 


IMSI 






Old P-TMSI signature 


Not present 




pc GERA 

Nor 

pc UTRAN 


Last visited registered TAI 


Not present 







Table 9.2.3.1.13.3.3-4: Message ATTACH REJECT (step 6, Table 9.2.3.1.13.3.2-1) 



Derivation Path: 36.508 table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 1111'B 


#15 "No suitable 
cells in tracking 
area" 





9.2.3.1.14 
9.2.3.1.14.1 
(1) 



Normal tracking area update / Rejected / UE implicitly detached 
Test Purpose (TP) 



with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the reject cause set to ' 'UE 
implicitly detached' ' } 

then { UE enters the state EMM-DEREGISTERED .NORMAL-SERVICE and sends ATTACH REQUEST message} 



9.2.3.1.14.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.3.2.5. 

[TS24.301 clause5.5.3.2.5] 

If the tracking area updating cannot be accepted by the network, the MME sends a TRACKING AREA UPDATE 
REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, and take the following actions depending on the EMM cause value received. 
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# 1 (Implicitly detached) ; 

The UE shall delete the Ust of equivalent PLMNs and shall enter the state EMM-DEREGISTERED.NORMAL- 
SERVICE. The UE shall then perform a new attach procedure. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM state as specified in 

3GPP TS 24.008 [13] for the case when the normal routing area updating procedure is rejected with the GMM 

cause with the same value. 



Test description 
Pre-test conditions 



9.2.3.1.14.3 
9.2.3.1.14.3.1 
System Simulator: 

Cell A and Cell B are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI-l(home PLMN) and is set to "Serving cell" 

- Cell B belongs to TAI-2(home PLMN, another TAC) and is set to "Non- Suitable cell" 
UE: 

The UE is configured to initiate EPS attach. 

- TheUEhasGUTI-1. 

The UE is registered on TAI- 1 . 

- IF pc_GERAN or pc_UTRAN THEN the UE has P-TMSI- 1 and P-TMSI signature- 1 . 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
9.2.3.1.14.3.2 Test procedure sequence 

Table 9.2.3.1.14.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell A to the "Non-Suitable 

cell". 

Set the cell type of cell B to the "Serving cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell B. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM cause 
= "UE implicitly detached" as specified. 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
cell B? 


-> 


ATTACH REQUEST 


1 


P 


5 


The SS transmits ATTACH REJECT message. 


<— 


ATTACH REJECT 


- 


- 



9.2.3.1 .14.3.3 Specific message contents 

Table 9.2.3.1.14.3.3-1: Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.1.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 


GUTI-1 






Old P-TMSI signature 


P-TMSI signature-1 




pc GERA 

Nor 

pc UTRAN 
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Table 9.2.3.1.14.3.3-2: Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.1.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


ElVIIVI cause 


'00001 01 0'B 


#10 "UE implicitly 
detached" 





Table 9.2.3.1.14.3.3-3: Message ATTACH REQUEST (step 4, Table 9.2.3.1.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUT! or IMS! 


GUTI-1 






Old P-TMSI signature 


P-TMSI signature-1 




pc GERA 

Nor 

pc UTRAN 


Last visited registered TAI 


TAI-1 







Table 9.2.3.1.14.3.3-4: Message ATTACH REJECT (step 5, Table 9.2.3.1.14.3.2-1) 



Derivation Path: 36.508 table 4.7.2-3 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 1111'B 


#15 "No suitable 
cells in tracking 
area" 





9.2.3.1.15 
9.2.3.1.15.1 
(1) 



Normal tracking area update / Rejected / PLMN not allowed 
Test Purpose (TP) 



with { UE has sent a TRACKING AREA UPDATE REQUEST message } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the reject cause set to "PLMN not 
allowed" } 

then { UE deletes the GUTI , the last visited registered TAI and KSI and UE deletes the list of 
equivalent PLMNs and UE enters state EMM-DEREGISTERED . PLMN-SEARCH and UE stores the PLMN in the 
"forbidden PLMN list" } 



(2) 

with { UE is switched off having a PLMN stored in the "forbidden PLMN list" 
ensure that { 

when { UE is powered up on this PLMN } 

then { UE doesn't perform an attach procedure } 



(3) 

with { UE in EMM-DEREGISTERED . PLMN-SEARCH state having a PLMN stored in the "forbidden PLMN list" } 
ensure that { 

when { UE enters a cell which is not in the "forbidden PLMN list" } 
then { UE initiates an attach procedure } 
} 

(4) 

with { UE in E-UTRA EMM-DEREGISTERED . PLMN-SEARCH state having a PLMN stored in the "forbidden PLMN 
list" } 
ensure that { 

when { UE is in a forbidden PLMN cells and when the PLMN is selected manually } 
then { UE initiates an attach procedure } 
} 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1223 ETSI TS 136 523-1 V9.1.1 (2010-07) 

9.2.3.1.15.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.3.2.5. 

[TS24.301 clause5.5. 3.2.5] 

If the tracking area updating cannot be accepted by the network, the MME sends a TRACKING AREA UPDATE 
REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, and take the following actions depending on the EMM cause value received. 



#1 1 (PLMN not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI, TAI list and KSI. The UE shall reset 
the tracking area updating attempt counter, delete the list of equivalent PLMNs and enter the state EMM- 
DEREGISTERED.PLMN-SEARCH. 

The UE shall store the PLMN identity in the "forbidden PLMN list". 

The UE shall perform a PLMN selection according to 3GPP TS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSI, P-TMSI signature, RAI, GPRS ciphering key sequence number and routing area updating 
attempt counter and the MM parameters update status, TMSI, LAI, ciphering key sequence number and the 
location update attempt counter as specified in 3GPP TS 24.008 [13] for the case when the normal routing area 
updating procedure is rejected with the GMM cause with the same value and no RR connection exists. 

9.2.3.1.15.3 Test description 

9.2.3.1.15.3.1 Pre-test conditions 

System Simulator: 

Cell G, Cell H and Cell I are configured according to Table 6.3.2.2-1 in [18]. 

- Cell G belongs to TAI-7(visited PLMN) and is set to "Serving cell" 

- Cell H belongs to TAI-8(visited PLMN, another TAC) and is set to "Non- Suitable cell" 

- Cell I belongs to TAI-9(visited PLMN, another PLMN) and is set to "Non-Suitable cell" 
PLMN in Cell G, Cell H and Cell I are not HPLMN of the UE. 

- Cell 5 (UTRAN) or Cell 24 (GERAN). 

- Cell 5 and Cell 24 belong to RAI-1 as specified TS34. 123-1 clause 12 and are set to "Non- Suitable cell" 
UE: 

The UE is configured to initiate EPS attach. 

- The UE has GUTI-7. 

The UE is registered on TAI-7. 

- IF pc_GERAN or pc_UTRAN THEN the UE has P-TMSI- 1 and P-TMSI signature- 1 . 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell G according to [18]. 
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9.2.3.1.15.3.2 Test procedure sequence 

Table 9.2.3.1.15.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell G to the "Non-Suitable 

cell". 

Set the cell type of cell H to the "Serving cell". 

Note: cell G and cell H are in the same PLMN. 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell H. 


~> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EIVIM cause 
= "PLIVIN not allowed". 


<- 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
cell H? 


~> 


ATTACH REQUEST 


1 


F 


6 


The UE is switched off. 


- 


- 


- 


- 


7 


Set the cell type of cell G to the "Serving cell". 

Set the cell type of cell H to the "Non-Suitable 

cell". 

Note: cell G and cell H are in the same PLMN. 










8 


The UE is powered up or switched on. 


- 


- 


- 


- 


9 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
cell G? 


-> 


ATTACH REQUEST 


2 


F 


10 


The user initiates an attach by IVIMI or by AT 
command. 


- 


- 


- 


- 


11 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
cell G? 


-> 


ATTACH REQUEST 


2 


F 


12 


Set the cell type of cell G to the "Non-Suitable 

cell". 

Set the cell type of cell 5 or 24 to the "Serving 

cell". 

Note: Cell G and Cell 5 or 24 are in the same 
PLMN. 












EXCEPTION: Steps 13a1 to 13a2 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










13a 

1 


IF pc_GERAN or pc_UTRAN THEN the user 
initiates an attach by MMI or by AT command. 


- 


- 


- 


- 


13a 
2 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
cell 5 or 24? 


-> 


ATTACH REQUEST 


1 


F 


14 


The following messages are sent and shall be 
received on cell 1. 


- 


- 


- 


- 


15 


Set the cell type of cell 5 or 24 to the " Non- 
Suitable cell". 
Set the cell type of cell 1 to the "Serving cell". 

Note: cell 5 or 24 and cell 1 are in different 
PLMNs. 










16 


Check: Does the UE transmits ATTACH 
REQUEST message with a PDN 
CQNNECTIVITY REQUEST message to 
request PDN connectivity to the default PDN? 


-> 


ATTACH REQUEST 


3 


P 


17 


The SS starts an authentication procedure 


<- 


AUTHENTICATION REQUEST 


- 


- 


18 


The UE responds properly to the 
authentication procedure 


-> 


AUTHENTICATION RESPONSE 


- 


- 


19 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<— 


SECURITY MODE COMMAND 


- 


- 
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20 


The UE responds properly to the NAS security 
mode command procedure 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTION: Steps 20Aa1 to 20Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










20 
Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REOUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






20 

Aa 

2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






21 


The SS sends ATTACH ACCEPT message 
with the ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message. 


<- 


ATTACH ACCEPT 






22 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 






23 


The SS releases the RRC connection. 


- 


- 


- 


- 


24 


The UE is switched off. 


- 


- 


- 


- 


25 


The UE transmit a DETACH REQUEST. 


-> 


DETACH REQUEST 


- 


- 


26 


The following messages are sent and shall be 
received on cell G. 


- 


- 


- 


- 


27 


Set the cell type of cell G to the " Serving cell". 
Set the cell type of cell 1 to the " Non-Suitable 
cell". 

Note: Cell G belongs to the forbidden PLMN. 










28 


The UE is powered up or switched on. 


- 


- 


- 


- 


29 


The UE is switched to manual PLMN selection 
mode and is made to select the forbidden 
PLMN. 










30 


Check: Does the UE transmits ATTACH 
REOUEST message with a PDN 
CONNECTIVITY REOUEST message to 
request PDN connectivity to the default PDN? 


~> 


ATTACH REOUEST 


4 


P 


31 


The SS starts an authentication procedure 


<- 


AUTHENTICATION REOUEST 


- 


- 


32 


The UE responds properly to the 
authentication procedure 


-> 


AUTHENTICATION RESPONSE 


- 


- 


33 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<— 


SECURITY MODE COMMAND 


- 


- 


34 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 34Aa1 to 34Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










34 
Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REOUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






34 
Aa 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






35 


The SS sends ATTACH ACCEPT message 
with the ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message. 


<~ 


ATTACH ACCEPT 






- 


EXCEPTION: In parallel to the event described 
in step 36 below the generic procedure for IP 


- 


- 


- 


- 
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address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U- 
plane if requested by the UE. 










36 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 







9.2.3.1.15.3.3 Specific message contents 

Table 9.2.3.1.15.3.3-1: Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.1.15.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 


GUTI-7 






Old P-TMSI signature 


P-TMSI signature-1 




pc GERA 

Nor 

pc UTRAN 



Table 9.2.3.1.15.3.3-2: Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.1.15.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


'00001 01 1'B 


#11 "PLMNnot 
allowed " 





Table 9.2.3.1.15.3.3-3: Message ATTACH REQUEST (step 16, Table 9.2.3.1.15.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMS! 


IMS! 






Old P-TMSI signature 


Not present 




pc GERA 

Nor 

pc UTRAN 


Last visited registered TAI 


Not present 







Table 9.2.3.1.15.3.3-4: Message ATTACH ACCEPT (step 21, Table 9.2.3.1.15.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


TAI list 








Number of elements 


'00001 'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAC 
values" 




MCC 


'002'B 


"TAI-9" 




MNC 


'101'B 


"TAI-9" 




TAC1 


'1'B 


"TAI-9" 




GUTI 


GUTI-9 







Table 9.2.3.1.15.3.3-5: Message ATTACH REQUEST (step 30, Table 9.2.3.1.15.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 


GUTI-9 






Last visited registered TAI 


TAI-9 
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9.2.3.1 .16 Normal tracking area update / Rejected / Tracking area not allowed 

9.2.3.1 .16.1 Test Purpose (TP) 
(1) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the reject cause set to ' 'Tracking 
area not allowed ' ' } 

then { shall delete any GUTI , last visited registered TAI , TAI list and KSI . The UE shall reset 
the tracking area updating attempt counter and shall enter the state EMM-DEREGISTERED .LIMITED- 
SERVICE and store the current TAI in the list of "forbidden tracking areas for regional provision of 
service" } 

(2) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and has a TAI in the list of "forbidden 
tracking areas for regional provision of service"} 
ensure that { 

when { UE is in the serving cell which the UE is rejected } 

then { UE does not attempt an attach procedure on any other cell} 
} 

(3) 

with { UE is in EMM-DEREGISTERED. LIMITED-SERVICE state and the current TAI in the list of "forbidden 
tracking areas for regional provision of service"} 
ensure that { 

when { UE entess a new cell in the same TAI it was rejected } 
then { UE does not initiate an attach procedure} 
} 

(4) 

with { UE is in EMM-DEREGISTERED .LIMITED-SERVICE state and the current TAI in the list of "forbidden 
tracking areas for regional provision of service"} 
ensure that { 

when { UE enters a new cell with defferent TAI without in the list of "forbidden tracking areas 
for regional provision of service"} 

then { UE initiates attach procedure with IMSI } 
} 

(5) 

with { UE is switched off } 
ensure that { 

when { UE is powered on and enters the cell with "forbidden tracking areas for regional provision 
of service" before the UE was swithed off } 

then { UE initiates attach procedure on the cell } 

9.2.3.1.16.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.3.2.5. 

[TS24.301 clause5.5. 3.2.5] 

If the tracking area updating cannot be accepted by the network, the MME sends a TRACKING AREA UPDATE 
REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, and take the following actions depending on the EMM cause value received. 



#12 (Tracking area not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI, TAI list and KSI. The UE shall reset 
the tracking area updating attempt counter and shall enter the state EMM-DEREGISTERED .LIMITED- 
SERVICE. 
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The UE shall store the current TAI in the list of "forbidden tracking areas for regional provision of service". 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSI, P-TMSI signature, RAl, GPRS ciphering key sequence number and routing area updating 
attempt counter as specified in 3GPP TS 24.008 [13] for the case when the normal routing area updating 
procedure is rejected with the GMM cause with the same value. 

9.2.3.1.16.3 Test description 

9.2.3.1.16.3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell B, Cell G, Cell H and Cell M are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A and Cell M belong to TAI- 1 (home PLMN, same TAC) and are set to "Non Suitable cell" 

- Cell B belongs to TAI-2(home PLMN, another TAC) and is set to "Serving cell" 

- Cell G belongs to TAI-7(visited PLMN) and is set to "Non-Suitable cell" 

- Cell H belongs to TAI-8(visited PLMN) and is set to "Non-Suitable cell" 
UE: 

The UE is configured to initiate EPS attach. 

- The UE has GUTI-2. 

The UE is registered on TAI-2. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell B according to [18]. 
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9.2.3.1.16.3.2 Test procedure sequence 

Table 9.2.3.1.16.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell A to the "Serving cell". 

Set the cell type of cell B to the "Non-Suitable 

cell". 

Set the cell type of cell G to the "Suitable 

neighbour cell". 

Set the cell type of cell H to the "Suitable 

neighbour cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell A. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EIVIM cause 
= "Tracking area not allowed" as specified. 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
cell G and H? 


-> 


ATTACH REQUEST 


2 


F 


6 


The user initiates an attach by IVIMI or by AT 
command. 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
cell A? 


-> 


ATTACH REQUEST 


1 


F 


8 


Set the cell type of cell A to the " Non-Suitable 

cell ". 

Set the cell type of cell M to the "Serving cell". 










9 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
cell M? 


-> 


ATTACH REQUEST 


3 


F 


10 


Set the cell type of cell G to the "Serving cell". 
Set the cell type of cell IVI to the "Non-Suitable 
cell ". 










11 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
cell G including a PDN CQNNECTIVITY 
REQUEST message including a PDN 
CQNNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


4 


P 


12 


The SS starts an authentication procedure 


<- 


AUTHENTICATIQN REQUEST 


- 


- 


13 


The UE responds properly to the 
authentication procedure 


-> 


AUTHENTICATIQN RESPONSE 


- 


- 


14 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<- 


SECURITY MODE COMMAND 


- 


- 


15 


The UE responds properly to the NAS security 
mode command procedure 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTIQN: Steps 15Aa1 to 15Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESIVI 
information which needs to be transferred. 










15 
Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CQNNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATIQN REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






15 

Aa 

2 


The UE transmits an ESM INFQRMATION 
RESPQNSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






16 


The SS sends ATTACH ACCEPT message 
with the ACTIVATE DEFAULT EPS BEARER 
CQNTEXT REQUEST message. 


<- 


ATTACH ACCEPT 






17 


The UE transmits an ATTACH CQMPLETE 


— > 


ATTACH COMPLETE 


- 


- 
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message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 










18 


The SS releases the RRC connection. 


- 


- 


- 


- 


19 


The UE is switched off. 


- 


- 


- 


- 


20 


The UE transmit a DETACH REQUEST. 


~> 


DETACH REQUEST 


- 


- 


21 


The following messages are sent and shall be 
received on cell A. 


- 


- 


- 


- 


22 


Set the cell type of cell A to the " Serving cell". 
Set the cell type of cell G to the " Non-Suitable 
cell". 










23 


The UE is powered up or switched on. 


- 


- 


- 


- 


24 


The UE transmits ATTACH REQUEST 
message with a PDN CONNECTIVITY 
REQUEST message to request PDN 
connectivity to the default PDN. 


-> 


ATTACH REQUEST 


5 


P 


25 


The SS sends ATTACH REJECT message. 


<~ 


ATTACH REJECT 


- 


- 


26 


The SS releases the RRC connection. 


- 


- 


- 


- 



9.2.3.1 .1 6.3.3 Specific message contents 

Table 9.2.3.1.16.3.3-1: Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.1.16.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 


GUTI-7 






Old P-TMSI signature 


P-TMSI signature-1 




pc GERA 

Nor 

pc UTRAN 



Table 9.2.3.1.16.3.3-2: Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.1.16.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EIVIM cause 


'00001 100'B 


#12 "Tracking 
area not allowed" 





Table 9.2.3.1.16.3.3-3: Message ATTACH REQUEST (step 11, Table 9.2.3.1.16.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 


IMSI 






Old P-TMSI signature 


Not present 




pc GERA 

Nor 

pc UTRAN 


Last visited registered TAI 


Not present 
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Table 9.2.3.1.16.3.3-4: Message ATTACH ACCEPT (step 16, Table 9.2.3.1.16.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


TAI list 








Number of elements 


'00001 'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




MCC 
MNC 
TAC1 


PLMN= MCC/02 
TAC1=1 


"MCC is set to the 
same MCC stored 

in EFiMsi" 
"TAI-7" 




GUTI 


GUTI-7 







Table 9.2.3.1.16.3.3-5: Message ATTACH REQUEST (step 24, Table 9.2.3.1.16.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remarl< 


Comment 


Condition 


Old GUTI or IMS! 


GUTI-7 






Last visited registered TAI 


TAI-7 







Table 9.2.3.1.16.3.3-6: Message ATTACH REJECT (step 25, Table 9.2.3.1.16.3.2-1) 



Derivation path: 36.508 table 4.7.2.3 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


'000011 OO'B 


#12 "Tracking 
area not allowed" 





9.2.3.1 .17 Normal tracking area update / Rejected / Roaming not allowed in this tracking 

area 



9.2.3.1.17.1 



(1) 



Test Purpose (TP) 



with { the UE has sent TRACKING AREA UPDATE REQUEST message } 
ensure that { 

when { the UE receives TRACKING AREA UPDATE REJECT message with the reject cause set to "roaming 
not allowed in this tracking area" } 

then { the UE sets the EPS update status to EU3 ROAMING NOT ALLOWED and the UE deletes the last 
visited registered TAI and the UE enters the state EMM-REGISTERED . PLMN-SEARCH and the UE stores the 
current TAI in the list of "forbidden tracking areas for roaming" } 
} 

(2) 

with { the UE is in EMM-REGISTERED. PLMN-SEARCH state and the current TAI in the list of "forbidden 
tracking areas for roaming" } 
ensure that { 

when { the serving cell belongs to TAI where UE was rejected } 

then { the UE does not attempt to send TRACKING AREA UPDATE REQUEST message } 
} 

(3) 

with { the UE is in EMM-REGISTERED . PLMN-SEARCH state and the TAI of the current cell belongs to the 
list of "forbidden tracking areas for roaming"} 
ensure that { 

when { the UE enters a cell belonging to same PLMN and TAI not in the list of "forbidden tracking 
areas for roaming" } 

then { the UE sends TRACKING AREA UPDATE REQUEST message } 
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(4) 

with { the UE is in EMM-REGISTERED . PLMN-SEARCH state and the TAI of the current cell belongs to the 
list of "forbidden tracking areas for roaming"} 
ensure that { 

when { the UE enters a cell belonging to another PLMN } 

then { the UE sends TRACKING AREA UPDATE REQUEST message } 
} 

(5) 

with { the UE, which A/Gb mode or lu mode is supported by the UE, in EMM-DEREGISTERED . PLMN-SEARCH 
state and the list of "forbidden tracking areas for roaming" contains more than one TAI } 
ensure that { 

when { the UE move to UTRAN or GERAN cell } 

then { the UE sends ROUTING AREA UPDATE REQUEST message } 

9.2.3.1.17.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.2.5. 

[TS 24.301, clause 5.5.3.2.5] 

If the tracking area updating cannot be accepted by the network, the MME sends a TRACKING AREA UPDATE 
REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, and take the following actions depending on the EMM cause value received. 



#13 (Roaming not allowed in this tracking area); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete the list of equivalent PLMNs. The UE shall reset the tracking area updating 
attempt counter and shall change to state EMM-REGISTERED.PLMN-SEARCH. 

The UE shall store the current TAI in the list of "forbidden tracking areas for roaming" and shall remove the 
current TAI from the stored TAI list if present. 

The UE shall perform a PLMN selection according to 3GPP TS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status and routing area updating attempt counter as specified in 3GPP TS 24.008 [13] for the case when 
the normal routing area updating procedure is rejected with the GMM cause with the same value. 



9.2.3.1.17.3 Test description 

9.2.3.1 .1 7.3.1 Pre-test conditions 

System Simulator: 

Cell G, Cell H and Cell I are configured according to Table 6.3.2.2-1 in [18]. 

- Cell G belongs to TAl-7(visited PLMN) and is set to "Serving cell" 

- Cell H belongs to TAl-8(visited PLMN, another TAC) and is set to "Non- Suitable cell" 

- Cell 1 belongs to TAl-9(visited PLMN, another PLMN) and is set to "Non-Suitable cell" 

- PLMN in Cell G, Cell H and Cell I are not HPLMN of the UE. 

- Ifpc_UTRAN, Cell5; 

- If NOT pc_UTRAN and pc_GERAN, Cell 24. 
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- Cell 5 and Cell 24 belong to RAI-8 (visited PLMN) as specified TS34. 123-1 clause 12 and is set to "Non- 
Suitable cell" 

System information indicate that NMO 1 is used 

UE: 

The UE is configured to initiate EPS attach. 

Preamble: 

- UE is in state Registered, Idle Mode (state 2) on Cell G according to [18]. 
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9.2.3.1.17.3.2 Test procedure sequence 

Table 9.2.3.1.17.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell G to the "Non-Suitable 

cell". 

Set the cell type of cell H to the "Serving cell". 










2 


The UE transmits TRACKING AREA UPDATE 
REQUEST on Cell H. 


~> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM cause 
= "Roaming not allowed in this tracking area" 
as specified. 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 










5 


Check: Does the UE transmit TRACKING 
AREA UPDATE REQUEST message in the 
next 30 seconds on cell H? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1,2 


F 


6 


Set the cell type of cell G to the "Serving cell". 

Set the cell type of cell H to the "Non-Suitable 

cell". 

Note: cell G and cell H are in the same PLMN. 










7 


Check: Does the UE transmit TRACKING 
AREA UPDATE REQUEST message in the 
next 30 seconds on cell G? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1,3 


P 


8 


The SS transmits TRACKING AREA UPDATE 
REJECT message with EMM cause = 
"Roaming not allowed in this tracking area" as 
specified. 


<- 


TRACKING AREA UPDATE 
REJECT 






9 


The SS releases the RRC connection. 










10 


Set the cell type of cell G to the "Non-Suitable 

cell". 

Set the cell type of cell 5 or 24 to the "Serving 

cell". 

Note: Cell G and Cell 5 or 24 are in the same 
PLMN. 












EXCEPTIQN: Steps Hal to 11a3 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










11a 

1 


Check: Does the UE transmit ROUTING AREA 
UPDATE REQUEST message in the next 30 
seconds on cell 5 or 24? 


-> 


ROUTING AREA UPDATE 
REQUEST 


5 


P 


11a 
2 


The SS transmits a ROUTING AREA UPDATE 
REJECT message with cause = " Roaming not 
allowed in this tracking area " as specified. 


<— 


ROUTING AREA UPDATE 
REJECT 






11a 
3 


The SS releases the RRC connection. 










12 


Set the cell type of cell 5 or 24 to the " Non- 
Suitable cell". 
Set the cell type of cell 1 to the "Serving cell". 

Note: cell 5 or 24 and cell 1 are in different 
PLMNs. 










13 


Check: Does the UE transmit TRACKING 
AREA REQUEST message in the next 30 
seconds on cell 1? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1,4 


P 


14 


The SS sends TRACKING AREA ACCEPT 
message. 


<~ 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


15 


The UE transmits TRACKING AREA 
COMPLETE message. 


~> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 
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9.2.3.1.17.3.3 



Specific message contents 



Table 9.2.3.1.17.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 2, 7 and 13, Table 

9.2.3.1.17.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUT! 


GUTI-7 






Old P-TMSI signature 


P-TMSI signature-1 




pc GERA 

Nor 

pc UTRAN 



Table 9.2.3.1.17.3.3-2: TRACKING AREA UPDATE REJECT (step 3 and 8, Table 9.2.3.1.17.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-26 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 1101'B 


Roaming not 
allowed in this 
tracking area 





9.2.3.1.18 
9.2.3.1.18.1 
(1) 



Normal tracking area update / Rejected / EPS services not allowed in this PLMN 
Test Purpose (TP) 



with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the reject cause set to 'EPS 
services not allowed in this PLMN' } 

then { UE deletes the GUTI , the last visited registered TAI and KSI and UE deletes the list of 
equivalent PLMNs and UE enters state EMM-DEREGISTERED . PLMN-SEARCH and UE stores the PLMN in the 
"forbidden PLMNs for GPRS service" } 

(2) 

with { UE in E-UTRA EMM-DEREGISTERED . PLMN-SEARCH state and a PLMN is stored in the "forbidden PLMNs 
for GPRS service" } 
ensure that { 

when { UE enters a cell which is in the "forbidden PLMNs for GPRS service" } 
then { UE doesn't perform an attach procedure } 
} 

(3) 

with { UE in EMM-DEREGISTERED . PLMN-SEARCH state and a PLMN is stored in the "forbidden PLMNs for 
GPRS service" } 
ensure that { 

when { UE enters a cell which is not in the "forbidden PLMNs for GPRS service" } 
then { UE initiates an attach procedure } 
} 

(4) 

with { UE is switched off and a PLMN is stored in the 'forbidden PLMNs for GPRS service' } 
ensure that { 

when { UE is power ON in a cell with forbidden PLMNs for GPRS service } 
then { UE initiates an attach procedure } 

9.2.3.1.18.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.2.5. 

[TS 24.301, clause 5.5.3.2.5] 

If the tracking area updating cannot be accepted by the network, the MME sends a TRACKING AREA UPDATE 
REJECT message to the UE including an appropriate EMM cause value. 
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Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, and take the following actions depending on the EMM cause value received. 



#14 (EPS services not allowed in this PLMN); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3). Furthermore the UE shall delete any GUTI, last visited registered TAI, TAI list and KSI. The 
UE shall reset the tracking area updating attempt counter and shall enter the state EMM- 
DEREGISTERED.PLMN-SEARCH. 

The UE shall store the PLMN identity in the "forbidden PLMNs for GPRS service" list. 

The UE shall perform a PLMN selection according to 3GPP TS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSI, P-TMSI signature, RAI, GPRS ciphering key sequence number and routing area updating 
attempt counter as specified in 3GPP TS 24.008 [13] for the case when the normal routing area updating 
procedure is rejected with the GMM cause with the same value. 



9.2.3.1.18.3 Test description 

9.2.3.1 .1 8.3.1 Pre-test conditions 

System Simulator: 

Cell G, Cell H and Cell I are configured according to Table 6.3.2.2-1 in [18]. 

- Cell G belongs to TAI-7(visited PLMN) and is set to "Serving cell" 

- Cell H belongs to TAI-8(visited PLMN, another TAC) and is set to "Non- Suitable cell" 

- Cell I belongs to TAI-9(visited PLMN, another PLMN) and is set to "Non-Suitable cell" 

- PLMN in Cell G, Cell H and Cell I are not HPLMN of the UE. 

- Ifpc_UTRAN, Cell5; 

- If NOT pc_UTRAN and pc_GERAN, Cell 24. 

- Cell 5 and Cell 24 belong to RAI-8 (visited PLMN) as specified TS34. 123-1 clause 12 and is set to "Non- 
Suitable cell" 

System information indicate that NMO 1 is used 

UE: 

The UE is configured to initiate EPS attach. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell G according to [18]. 
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9.2.3.1.18.3.2 Test procedure sequence 

Table 9.2.3.1.18.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell G to the "Non-Suitable 

cell". 

Set the cell type of cell H to the "Serving cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell H. 


~> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM cause 
= "EPS services not allowed in this PLMN" as 
specified. 


<- 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 










5 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell H? 


~> 


ATTACH REQUEST 


1 


F 


6 


Set the cell type of cell G to the "Serving cell". 

Set the cell type of cell H to the "Non-Suitable 

cell". 

Note: cell G and cell H are in the same PLMN. 










7 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


8 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell G? 


— > 


ATTACH REQUEST 


2 


F 


9 


Set the cell type of cell G to the "Non-Suitable 

cell". 

Set the cell type of cell 5 or 24 to the "Serving 

cell". 

Note: Cell G and Cell 5 or 24 are in the same 
PLMN. 












EXCEPTIQN: Steps lOal to 10a2 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










10a 

1 


IF pc_GERAN or pc_UTRAN THEN the user 
initiates an attach by MMI or by AT command. 


- 


- 


- 


- 


10a 
2 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell 5 or 24? 


-> 


ATTACH REQUEST 


1 


F 




The following messages are sent and shall be 
received on cell 1. 


- 


- 


- 


- 


11 


Set the cell type of cell 5 or 24 to the " Non- 
Suitable cell". 
Set the cell type of cell 1 to the "Serving cell". 

Note: cell 5 or 24 and cell 1 are in different 
PLMNs. 










12 


Check: Does the UE send ATTACH 
REQUEST message with a PDN 
CQNNECTIVITY REQUEST message to 
request PDN connectivity to the default PDN? 


~> 


ATTACH REQUEST 


3 


P 


13 


The SS starts an authentication procedure 


<- 


AUTHENTICATIQN REQUEST 


- 


- 


14 


The UE responds properly to the 
authentication procedure 


— > 


AUTHENTICATIQN RESPQNSE 


- 


- 


15 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<- 


SECURITY MODE COMMAND 


- 


- 


16 


The UE responds properly to the NAS security 
mode command procedure 


~> 


SECURITY MQDE COMPLETE 


- 


- 




EXCEPTIQN: Steps 17a1 to 17a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
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sequence that take place if the UE has ESM 
information which needs to be transferred. 










17a 

1 


IF the UE sets the ESIVI information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






17a 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


~> 


ESM INFORMATION RESPONSE 


" 


" 


18 


The SS sends ATTACH ACCEPT message 
with the ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 19 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U- 
plane if requested by the UE. 










19 


The UE transmits an ATTACH COMPLETE 
message. 


~> 


ATTACH COMPLETE 


- 


- 


20 


The SS releases the RRC connection. 


- 


- 


- 


- 


21 


The UE is switched off. 


- 


- 


- 


- 


22 


The UE transmit a DETACH REQUEST. 


— > 


DETACH REQUEST 


- 


- 




The following messages are sent and shall be 
received on cell G. 










23 


Set the cell type of cell G to the " Serving cell". 
Set the cell type of cell 1 to the " Non-Suitable 
cell". 

Note: Cell G belongs to the forbidden PLMNs 
for GPRS service. 










24 


The UE is powered up or switched on. 


- 


- 


- 


- 


25 


Check: Does the UE send ATTACH 
REQUEST message with a PDN 
CONNECTIVITY REQUEST message to 
request PDN connectivity to the default PDN? 


— > 


ATTACH REQUEST 


4 


P 


26 


The SS starts an authentication procedure 


<~ 


AUTHENTICATION REQUEST 


- 


- 


27 


The UE responds properly to the 
authentication procedure 


— > 


AUTHENTICATION RESPONSE 


- 


- 


28 


The SS starts a NAS security mode command 
procedure to perform NAS integrity protection. 


<- 


SECURITY MODE COMMAND 


- 


- 


29 


The UE responds properly to the NAS security 
mode command procedure 


— > 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTION: Steps 30a1 to 30a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










30a 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






30a 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 


" 


" 


31 


The SS sends ATTACH ACCEPT message 
with the ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 32 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U- 
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plane if requested by the UE. 










32 


The UE transmits an ATTACH COMPLETE 
message. 


~> 


ATTACH COMPLETE 


- 


- 


33 


The SS releases the RRC connection. 


- 


- 


- 


- 



9.2.3.1 .18.3.3 Specific message contents 

Table 9.2.3.1.18.3.3-1: Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.1.18.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUT! 


GUTI-7 






Old P-TMSI signature 


P-TMSI signature-1 




pc GERA 

Nor 

pc UTRAN 



Table 9.2.3.1.18.3.3-2: Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.1.18.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


'0001 OOOO'B 


#16 "EPS 
services not 
allowed in this 
PLMN " 





Table 9.2.3.1.18.3.3-3: Message ATTACH REQUEST (step 12, Table 9.2.3.1.18.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMS! 


IMS! 






Last visited registered TAI 


Not present 







Table 9.2.3.1.18.3.3-4: Message ATTACH ACCEPT (step 18, Table 9.2.3.1.18.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


TAI list 








Number of elements 


'00001'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




MCC 
MNC 
TAC1 


PLMN= 002/101 
TAC1=1 


"TAI-9" 




GUTI 


GUTI-9 







Table 9.2.3.1.18.3.3-5: Message ATTACH REQUEST (step 25, Table 9.2.3.1.18.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMSI 


GUTI-9 






Last visited registered TAI 


TAI-9 
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9.2.3.1 .19 Normal tracking area update / Rejected / No suitable cells in tracking Area 

9.2.3.1 .19.1 Test Purpose (TP) 
(1) 

with { UE is sending a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to 'No Suitable 
Cells In tracking area' } 

then { UE selects a suitable cell in another tracking area in the same PLMN and performs the 
tracking area updating procedure and UE does not select a suitable cell in another PLMN} 
} 

9.2.3.1.19.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.2.5. 

[TS 24.301, clause 5.5.3.2.5] 

If the tracking area updating cannot be accepted by the network, the MME sends a TRACKING AREA UPDATE 
REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, and take the following actions depending on the EMM cause value received. 



#15 (No suitable cells in tracking area); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3). The UE shall reset the tracking area updating attempt counter and shall enter the state EMM- 
REGISTERED.LIMITED-SERVICE. 

The UE shall store the current TAI in the list of "forbidden tracking areas for roaming" and shall remove the 
current TAI from the stored TAI list if present. 

The UE shall search for a suitable cell in another tracking area or in another location area in the same PLMN 
according to 3GPP TS 36.304 [21]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status and routing area updating attempt counter as specified in 3GPP TS 24.008 [13] for the case when 
the normal routing area updating procedure is rejected with the GMM cause with the same value. 



9.2.3.1.19.3 Test description 

9.2.3.1 .1 9.3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell B, Cell C and Cell G are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI- 1 (home PLMN) and is set to "Serving cell" 

- Cell B belongs to TAI-2(home PLMN) and is set to "Non- Suitable cell" 

- Cell C belongs to TAI-3(home PLMN) and is set to "Non- Suitable cell". 

- Cell G belongs to TAI-7(visited PLMN) and is set to "Non- Suitable cell". 



UE: 



The UE is configured to initiate EPS attach. 
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Preamble: 

The UE is in state Registered, Idle mode (state 2) Cell A according to [18]. 
9.2.3.1 .1 9.3.2 Test procedure sequence 

Table 9.2.3.1.19.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell A to the "non-Suitable 

cell". 

Set the cell type of Cell B to the "Serving cell". 

Set the cell type of Cell C to the "Suitable 

neighbour cell". 

Set the cell type of Cell G to the " Serving cell". 










- 


The following messages are sent and shall be 
received on Cell B. 


- 


- 


- 


- 


2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with the EIVIM 
cause set to 'No Suitable Cells In tracking 
area'. 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


- 


The following messages are sent and shall be 
received on Cell C. 


- 


- 


- 


- 


5 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


6 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


7 


The UE transmits a TRACKING AREA 
UPDATE CQMPLETE message. 


-> 


TRACKING AREA UPDATE 
CQMPLETE 


- 


- 



9.2.3.1.19.3.3 Specific message contents 

Table 9.2.3.1.19.3.3-1 : TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.1 .19.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-26 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 1111'B 


No Suitable Cells 
In tracking area 





Table 9.2.3.1.19.3.3-2: Message TRACKING AREA UPDATE REQUEST (step 5, Table 9.2.3.1.19.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 


GUTI-1 







9.2.3.1.23 



9.2.3.1.23.1 



Normal tracking area update / Abnormal case / Success after several attempts 
due to no network response / TA belongs to TAI list and status is UPDATED / TA 
does not belong to TAI list or status is not UPDATED 

Test Purpose (TP) 



(1) 



with { UE has sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to ' Periodic 
updating' and has the tracking area updating attempt counter set to the value less than four, the 
TAI of the current serving cell is included in the TAI list and the update status is equal to EUl 
UPDATED } 
ensure that { 

when { UE detects release of the NAS signalling connection } 

then { UE keeps the update status to EUl UPDATED, enters state EMM-REGISTERED .NORMAL-SERVICE and 
starts timer T3411 } 
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(2) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Periodic 
updating', has the tracking area updating attempt counter set to the value less than four, has 
detected T3430 expiry, the TAI of the current serving cell is included in the TAI list and the 
update status is equal to EUl UPDATED } 
ensure that { 

when { UE detects T3411 expiry } 

then { UE initiates the tracking area updating procedure } 



(3) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to ' TA updating' 
and has the tracking area updating attempt counter set to the value less than four and the TAI of 
the current serving cell is not included in the TAI list or the update status is different to EUl 
UPDATED } 
ensure that { 

when { UE detects release of the NAS signalling connection } 

then { UE starts timer T3411, sets the update status to EU2 NOT UPDATED and changes to state 
EMM-REGISTERED. ATTEMPTING-TO-UPDATE ) 



(4) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to ' TA updating', 
has the tracking area updating attempt counter set to the value less than four, has detected T3430 
expiry and the TAI of the current serving cell is not included in the TAI list or the update status 
is different to EUl UPDATED } 
ensure that { 

when { UE detects T3411 expiry } 

then { UE initiates the tracking area updating procedure } 
} 

9.2.3.1.23.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.1 and 
5.5.3.2.6. 

[TS 24.301, clause 5.5.3.1] 



A tracking area updating attempt counter is used to limit the number of subsequently rejected tracking area update 
attempts. The tracking area updating attempt counter shall be incremented as specified in subclause 5.5.3.2.6. 
Depending on the value of the tracking area updating attempt counter, specific actions shall be performed. The tracking 
area updating attempt counter shall be reset when: 

an attach or combined attach procedure is successfully completed; 

a normal or periodic tracking area updating or a combined tracking area updating procedure is successfully 
completed; or 

a normal or periodic tracking area updating or a combined tracking area updating procedure is rejected with 

EMM cause #11, #12, #13, #14, #15 or #25. 

Additionally the tracking area updating attempt counter shall be reset when the UE is in substate EMM- 
REGISTERED.ATTEMPTING-TO-UPDATE or EMM-REGISTERED.ATTEMPTING-TO-UPDATE-MM, and: 

a new tracking area is entered; or 

timer T3402 expires. 

[TS 24.301, clause 5.5.3.2.6] 
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The following abnormal cases can be identified: 



b) Lower layer failure or release of the NAS signalling connection before the TRACKING AREA UPDATE 
ACCEPT or TRACKING AREA UPDATE REJECT message is received 

The tracking area updating procedure shall be aborted, and the UE shall proceed as described below. 

c) T3430 timeout 

The UE shall abort the procedure and proceed as described below. The NAS signalling connection shall be 
released locally. 



For the cases b, c, d, e, and f, the UE shall stop any ongoing transmission of user data. 

For the cases b, c and d the UE shall proceed as follows: 

Timer T3430 shall be stopped if still running. The tracking area updating attempt counter shall be incremented, 
unless it was already set to 5. 

If the tracking area updating attempt counter is less than 5, and the TAI of the current serving cell is included in 
the TAI list and the EPS update status is equal to EUl UPDATED: 

- the UE shall keep the EPS update status to EUl UPDATED and enter state EMM- 
REGISTERED.NORMAL-SERVICE. The UE shall start timer T3411 . When timer T3411 expires the 
tracking area updating procedure is triggered again. 

If the tracking area updating attempt counter is less than 5, and the TAI of the current serving cell is not included 
in the TAI list or the EPS update status is different to EUl UPDATED: 

- the UE shall start timer T3411, shall set the EPS update status to EU2 NOT UPDATED and change to state 
EMM-REGISTERED.ATTEMPTING-TO-UPDATE. When timer T341 1 expires the tracking area updating 
procedure is triggered again. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GPRS update status as 
specified in 3GPP TS 24.008 [13] for the abnormal case when a normal or periodic routing area updating 
procedure fails and the routing area updating attempt counter is less than 5 and the GPRS update status is 
different from GUI UPDATED. 



9.2.3.1.23.3 Test description 

9.2.3.1 .23.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell B. 
UE: 
None. 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.3.1 .23.3.2 Test procedure sequence 

Table 9.2.3.1.23.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell A to the "Serving cell". 
Set the cell type of Cell B to the "Suitable 
neighbour infra-frequency cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is powered on or switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message. The PDN CONNECTIVITY 
REQUEST message is piggybacked in 
ATTACH REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<~ 


AUTHENTICATION REQUEST 






5 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






6 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


7 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 8a1 to 8a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred after 
NAS SECURITY MODE COMPLETE 
message. 










8a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






8a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






8A 


The SS activates UE radio bearer test mode. 


- 


- 


- 


- 


9 


The SS responds with an ATTACH ACCEPT 
message with the T3412 value indicating 6 
min. The ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 10 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










10 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 
NOTE: The tracking area updating attempt 
counter is reset. 


-> 


ATTACH COMPLETE 






11 


The SS releases the RRC connection. 


- 


- 


- 


- 


12 


Wait for 6 min to ensure that T3412 expires. 


- 


- 


- 


- 


13 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'Periodic updating'. 


-> 


TRACKING AREA UPDATE 
REQUEST 






14 


The SS releases the RRC connection. 
NOTE: The tracking area updating attempt 
counter is 1 . 
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15 


The SS pages the UE using S-TIVISI with CN 
domain indicator set to "PS". 


- 


- 


- 


- 


16 


Checl<: Does the UE transmit a SERVICE 
REQUEST message? 


-> 


SERVICE REQUEST 


1 


P 


17 


The UE transmit a SERVICE REJECT 
message with ElVIIVI cause set to "Congestion". 


<- 


SERVICE REJECT 


- 


- 


18 


The SS releases the RRC connection. 


- 


- 


- 


- 


19 


Wait for 1 0s after step 1 4 to ensure that T341 1 
expires. 


- 


- 


- 


- 


20 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with the 
EPS update type value set to 'Periodic 
updating'? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


21 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 
NQTE: The tracking area updating attempt 
counter is reset. 


<— 


TRACKING AREA UPDATE 
ACCEPT 






22 


The SS releases the RRC connection. 


- 


- 


- 


- 


22A 


Generic test procedure in TS 36.508 
subclause 4.5.3A.3 is performed. 
NQTE: The UE performs the establishment of 
the new data radio bearer associated with the 
default EPS bearer context. 










22B 


Generic test procedure in TS 36.508 

subclause 4.5.4.3 is performed. 

NQTE: The UE enters the UE test loop mode. 










22C 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context. 










22D 


Wait for 1 s after the IP packet has been 
transmitted in step 22C. (Note 1 ) 


- 


- 


- 


- 


22E 


The SS releases the RRC connection. 


- 


- 


- 


- 


23 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell B to the "Serving 
cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


24 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'TA updating'. 


-> 


TRACKING AREA UPDATE 
REQUEST 






24A 


Wait for 15s after step 24 to ensure that IP 
PDU delay timer expires. 


- 


- 


- 


- 


25 


The SS releases the RRC connection. 
NQTE: The tracking area updating attempt 
counter is 1 . 










26 


Void 


- 


- 


- 


- 


27 


Check: Does the UE transmit a SERVICE 
REQUEST message within 5s? 


-> 


SERVICE REQUEST 


3 


F 


28 


Wait for 1 0s after step 25 to ensure that T341 1 
expires. 


- 


- 


- 


- 


29 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with the 
EPS update type value set to 'TA updating'? 


-> 


TRACKING AREA UPDATE 
REQUEST 


4 


P 


30 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<~ 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


31 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 
NQTE: The tracking area updating attempt 
counter is reset. 


-> 


TRACKING AREA UPDATE 
COMPLETE 






Note 1 : The 1 second delay is used to secure that the UE have received and forwarded the IP Pacl<et transmitted by 
the SS in step 22C to the UE test loop function before the RRCConnectionRelease message is sent by the 
SS in step 22E. 
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9.2.3.1.23.3.3 Specific message contents 

Table 9.2.3.1.23.3.3-0: ACTIVATE TEST MODE (step 8A, Table 9.2.3.1.23.3.2-1) 

Derivation Path: 36.508, Table 4.7A-1 , condition UE TEST LOOP IVIODE B 

Table 9.2.3.1.23.3.3-1 : Message ATTACH ACCEPT (step 9, Table 9.2.3.1.23.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-1 , condition EPSOnlyAttachForced 


Information Element 


Value/remark 


Comment 


Condition 


T3412 value 




6 minutes 




Timer value 


'0 0001'B 






Unit 


'010'B 


value is 
incremented in 
multiples of 
decihours 




GUT! 


GUTI-1 







Table 9.2.3.1.23.3.3-2: Message TRACKING AREA UPDATE REQUEST (step 13 and step 20, Table 

9.2.3.1.23.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


EPS update type 








EPS update type Value 


'011'B 


Periodic updating 




Old GUT! 


GUTI-1 






Last visited registered TAI 


TAI-1 







Table 9.2.3.1.23.3.3-3: Message TRACKING AREA UPDATE ACCEPT (step 21, Table 9.2.3.1.23.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


GUT! 


Not present 







Table 9.2.3.1. 23.3.3-3A: CLOSE UE TEST LOOP (step 22B, Table 9.2.3.1.23.3.2-1) 



Derivation Path: 36.508, Table 4.7A-3, condition UE TEST LOOP IVIODE B 


Information Element 


Value/remark 


Comment 


Condition 


UE test loop mode B LB setup 








IP PDU delay 


'0000 1111'B 


1 5 seconds 





Table 9.2.3.1.23.3.3-4: Message TRACKING AREA UPDATE REQUEST (step 24, Table 9.2.3.1.23.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


Old GUT! 


GUTI-1 






Last visited registered TAI 


TAi-1 







Table 9.2.3.1.23.3.3-5: Message TRACKING AREA UPDATE REQUEST (step 29, Table 9.2.3.1.23.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


EPS update type 








"Active" flag 


Any allowed value 


The UE may set 
this flag due to 
failing SERVICE 
REOUEST 
procedure. 




Old GUTI 


GUTI-1 






Last visited registered TAI 


TAI-1 
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Table 9.2.3.1.23.3.3-6: Message TRACKING AREA UPDATE ACCEPT (step 30, Table 9.2.3.1.23.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


GUT! 


GUTI-2 







9.2.3.1.24 



9.2.3.1.25 



9.2.3.1.25.1 



(1) 



Void 



tracking area update / Abnormal case / Failure after 5 attempts due to no 
; response 



Normal 

network response 

Test Purpose (TP) 



with { UE has sent a TRACKING AREA UPDATE REQUEST message and has the tracking area updating attempt 
counter set to four } 
ensure that { 

when { UE detects release of the NAS signalling connection } 

then { UE starts timer T3402, sets the update status to EU2 NOT UPDATED, changes to state EMM- 
REGISTERED .ATTEMPTING-TO-UPDATE or optionally to EMM-REGISTERED . PLMN-SEARCH in order to perform a 
PLMN selection | 



9.2.3.1.25.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.1 and 
5.5.3.2.6. 

[TS 24.301, clause 5.5.3.1] 



A tracking area updating attempt counter is used to limit the number of subsequently rejected tracking area update 
attempts. The tracking area updating attempt counter shall be incremented as specified in subclause 5.5.3.2.6. 
Depending on the value of the tracking area updating attempt counter, specific actions shall be performed. The tracking 
area updating attempt counter shall be reset when: 

an attach or combined attach procedure is successfully completed; 

a normal or periodic tracking area updating or a combined tracking area updating procedure is successfully 
completed; or 

a normal or periodic tracking area updating or a combined tracking area updating procedure is rejected with 
EMM cause #11, #12, #13, #14, #15 or #25. 

Additionally the tracking area updating attempt counter shall be reset when the UE is in substate EMM- 
REGISTERED.ATTEMPTING-TO-UPDATE or EMM-REGISTERED.ATTEMPTING-TO-UPDATE-MM, and: 

a new tracking area is entered; or 

timer T3402 expires. 
[TS 24.301, clause 5.5.3.2.6] 
The following abnormal cases can be identified: 



b) Lower layer failure or release of the NAS signalling connection before the TRACKING AREA UPDATE 
ACCEPT or TRACKING AREA UPDATE REJECT message is received 

The tracking area updating procedure shall be aborted, and the UE shall proceed as described below. 
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For the cases b, c, d, e, and f, the UE shall stop any ongoing transmission of user data. 

For the cases b, c and d the UE shall proceed as follows: 

Timer T3430 shall be stopped if still running. The tracking area updating attempt counter shall be incremented, 
unless it was already set to 5. 

If the tracking area updating attempt counter is equal to 5: 

- the UE shall start timer T3402, shall set the EPS update status to EU2 NOT UPDATED, shall delete the list 
of equivalent PLMNs and shall change to state EMM-REGISTERED. ATTEMPTING-TO-UPD ATE or 
optionally to EMM-REGISTERED.PLMN-SEARCH in order to perform a PLMN selection according to 
3GPPTS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GPRS update status as 
specified in 3GPP TS 24.008 [13] for the abnormal case when a normal or periodic routing area updating 
procedure fails and the routing area updating attempt counter is equal to 5. 

9.2.3.1.25.3 Test description 

9.2.3.1 .25.3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell B and Cell G. 

UE: 

None. 

Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1249 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



9.2.3.1 .25.3.2 Test procedure sequence 

Table 9.2.3.1.25.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell A to the "Serving cell". 

Set the cell type of Cell B to the "non-Suitable 

cell". 

Set the cell type of Cell G to the "non-Suitable 

cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE is powered on or switched on. 


- 


- 


- 


- 


3 


The UE transmits an ATTACH REQUEST 
message. The PDN CONNECTIVITY 
REQUEST message is piggybacked in 
ATTACH REQUEST message. 


-> 


ATTACH REQUEST 






4 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






5 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






6 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


7 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 8a1 to 8a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred after 
NAS SECURITY MODE COMPLETE 
message. 










8a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






8a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






9 


SS responds with ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 10 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










10 


The UE transmit an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 
NOTE 1 : The tracking area updating attempt 
counter is reset. 


-> 


ATTACH COMPLETE 






11 


The SS releases the RRC connection. 


- 


- 


- 


- 


12 


Wait for 6 min to ensure that T3412 expires. 


- 


- 


- 


- 


13 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'Periodic updating'. 


-> 


TRACKING AREA UPDATE 
REQUEST 






14 


Wait for 30s to ensure that T3430 and T341 1 

expire. 

NOTE 2: The tracking area updating attempt 
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counter is 1 . 










15 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'Periodic updating'. 


-> 


TRACKING AREA UPDATE 
REQUEST 






16 


Wait for 30s to ensure that T3430 and T341 1 

expire. 

NOTE 3: The tracking area updating attempt 

counter is 2. 










17 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'Periodic updating'. 


-> 


TRACKING AREA UPDATE 
REQUEST 






18 


Wait for 30s to ensure that T3430 and T341 1 

expire. 

NOTE 4: The tracking area updating attempt 

counter is 3. 










19 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'Periodic updating'. 


-> 


TRACKING AREA UPDATE 
REQUEST 






20 


Wait for 30s to ensure that T3430 and T341 1 

expire. 

NOTE 5: The tracking area updating attempt 

counter is 4. 










21 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'Periodic updating'. 


-> 


TRACKING AREA UPDATE 
REQUEST 






22 


The SS releases the RRC connection. 
NOTE 6: The tracking area updating attempt 
counter is 5. 










23 


Wait for 12 min to ensure that T3402 expires. 


- 


- 


- 


- 


24 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with the 
EPS update type value set to 'TA updating'? 
NOTE 7: The tracking area updating attempt 
counter is reset. 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


25 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


26 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell B to the "Serving 
cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


27 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'TA updating'. 
NOTE 8: The tracking area updating attempt 
counter is reset. 


-> 


TRACKING AREA UPDATE 
REQUEST 






28 


Wait for 30s to ensure that T3430 and T341 1 

expire. 

NOTE 9: The tracking area updating attempt 

counter is 1 . 










29 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'TA updating'. 


-> 


TRACKING AREA UPDATE 
REQUEST 






30 


Wait for 30s to ensure that T3430 and T341 1 

expire. 

NOTE 10: The tracking area updating attempt 

counter is 2. 










31 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'TA updating'. 


~> 


TRACKING AREA UPDATE 
REQUEST 






32 


Wait for 30s to ensure that T3430 and T341 1 

expire. 

NOTE 1 1 : The tracking area updating attempt 

counter is 3. 










33 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'TA updating'. 


-> 


TRACKING AREA UPDATE 
REQUEST 
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34 


Wait for 30s to ensure that T3430 and T341 1 

expire. 

NOTE 12: The tracking area updating attempt 

counter is 4. 










35 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with the EPS 
update type value set to 'TA updating'. 


-> 


TRACKING AREA UPDATE 
REQUEST 






36 


The SS releases the RRC connection. 
NOTE 13: The tracking area updating attempt 
counter is 5 and reset. 










37 


Set the cell type of Cell B to the "non-Suitable 
cell". Set the cell type of Cell G to the "Serving 
cell". 










- 


The following messages are to be observed on 
Cell G unless explicitly stated otherwise. 


- 


- 


- 


- 


38 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with the 
EPS update type value set to 'TA updating'? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


39 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


40 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 



9.2.3.1 .25.3.3 Specific message contents 

Table 9.2.3.1.25.3.3-1 : Message ATTACH ACCEPT (step 9, Table 9.2.3.1.25.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-1 


Information Element 


Value/remark 


Comment 


Condition 


T3412value 




6 minutes 




Timer value 


'0 0001'B 






Unit 


'010'B 


value is 
incremented in 
multiples of 
decihours 




GUTI 


GUTI-1 







Table 9.2.3.1.25.3.3-2: Message TRACKING AREA UPDATE REQUEST (step 13, step 15, step 17, step 

19 and step 21, Table 9.2.3.1.25.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


EPS update type 








EPS update type Value 


'011'B 


Periodic updating 




Old GUTI 


GUTI-1 






Last visited registered TAI 


TAI-1 







Table 9.2.3.1.25.3.3-3: Message TRACKING AREA UPDATE REQUEST (step 24, step 27, step 29, step 

31, step 33, step 35 and step 38, Table 9.2.3.1.25.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


Old GUTI 


GUTI-1 






Last visited registered TAI 


TAI-1 







Table 9.2.3.1.25.3.3-4: Message TRACKING AREA UPDATE ACCEPT (step 25, Table 9.2.3.1.25.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


GUTI 


Not present 
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Table 9.2.3.1.25.3.3-5: Message TRACKING AREA UPDATE ACCEPT (step 39, Table 9.2.3.1.25.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


GUT! 


GUTI-7 







Normal tracking area update / Abnormal case / TRACKING AREA UPDATE 
REJECT 

Test Purpose (TP) 



9.2.3.1.26 

9.2.3.1.26.1 
(1) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with reject cause #95 " semantically 
incorrect message" } 

then { the UE set the tracking area updating attempt counter to 5, start timer T34 02, and 
perform tracking area updating on the expiry of timers T34 02} 



(2) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with reject cause #96" invalid mandatory 
information" } 

then { the UE set the tracking area updating attempt counter to 5, start timer T34 02, and 
perform tracking area updating on the expiry of timers T34 02} 

(3) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with reject cause #97 "message type non- 
existent or not implemented" } 

then { the UE set the tracking area updating attempt counter to 5, start timer T34 02, and 
perform tracking area updating on the expiry of timers T34 02} 

(4) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with reject cause #99" information element 
non-existent or not implemented" } 

then { the UE set the tracking area updating attempt counter to 5, start timer T34 02, and 
perform tracking area updating on the expiry of timers T34 02} 

(5) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with reject cause #lll"protocol error, 
unspecified" } 

then { the UE set the tracking area updating attempt counter to 5, start timer T34 02, and 
perform tracking area updating on the expiry of timers T34 02} 



9.2.3.1.26.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.3.2.6. 

[TS24.301 clause5.5. 3.2.6] 



d) TRACKING AREA UPDATE REJECT, other causes than those treated in subclause 5.5.3.2.5 
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Upon reception of the EMM causes #95, #96, #97, #99 and #111 the UE should set the tracking area updating 
attempt counter to 5. The UE shall proceed as described below. 

If the tracking area updating attempt counter is equal to 5: 

- the UE shall start timer T3402, shall set the EPS update status to EU2 NOT UPDATED, shall delete the list of 
equivalent PLMNs and shall change to state EMM-REGISTERED.ATTEMPTING-TO-UPDATE or optionally 
to EMM-REGISTERED.PLMN-SEARCH in order to perform a PLMN selection according to 

3GPPTS 23.122 [6]. 

9.2.3.1.26.3 Test description 

9.2.3.1 .26.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell B are configured according to Table 6.3.2.2-1 in [18]. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 

set timer T3402 value to 1 minute to shorten the whole TC execute time in ATTACH ACCEPT message when 
brought UE to state Registered, Idle Mode (state 2). 
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9.2.3.1 .26.3.2 Test procedure sequence 

Table 9.2.3.1.26.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


lUlessage 


1 


Set the cell type of cell A to the "Non- 
Suitable cell". 

Set the cell type of cell B to the "Serving 
cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell B. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM 
cause #95"semantically incorrect message" 
as specified. (Note) 


<- 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Check: When the timer T3402 expires does 
the UE re-transmit TRACKING AREA 
UPDATE REQUEST message on cell B?. 


~> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


6 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


7 


the UE transmit a TRACKING AREA 
UPDATE CQMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


8 


Set the cell type of cell B to the "Non- 
Suitable cell". 

Set the cell type of cell A to the "Serving 
cell". 










9 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell A. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


10 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM 
cause #96" invalid mandatory information" 
as specified. (Note) 


<— 


TRACKING AREA UPDATE 
REJECT 






11 


The SS releases the RRC connection. 


- 


- 


- 


- 


12 


Check: When the timer T3402 expires does 
the UE re-transmit TRACKING AREA 
UPDATE REQUEST message on cell A? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


13 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<~ 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


14 


the UE transmit a TRACKING AREA 
UPDATE CQMPLETE message. 


~> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


15 


Set the cell type of cell A to the "Non- 
Suitable cell". 

Set the cell type of cell B to the "Serving 
cell". 










16 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell B. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


17 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM 
cause #97"message type non-existent or not 
implemented". (Note) 


<— 


TRACKING AREA UPDATE 
REJECT 






18 


The SS releases the RRC connection. 


- 


- 


- 


- 


19 


Check: When the timer T3402 expires does 
the UE re-transmit TRACKING AREA 
UPDATE REQUEST message on cell B? 


-> 


TRACKING AREA UPDATE 
REQUEST 


3 


P 


20 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


21 


the UE transmit a TRACKING AREA 
UPDATE CQMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


22 


Set the cell type of cell B to the "Non- 
Suitable cell". 

Set the cell type of cell A to the "Serving 
cell". 










23 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell A. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 
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24 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM 
cause #99"information element non-existent 
or not implemented" as specified. (Note) 


<- 


TRACKING AREA UPDATE 
REJECT 






25 


The SS releases the RRC connection. 


- 


- 


- 


- 


26 


Check: When the timer T3402 expires does 
the UE re-transmit TRACKING AREA 
UPDATE REQUEST message on cell A? 


-> 


TRACKING AREA UPDATE 
REQUEST 


4 


P 


27 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


28 


the UE transmit a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


29 


Set the cell type of cell A to the "Non- 
Suitable cell". 

Set the cell type of cell B to the "Serving 
cell". 










30 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell B. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


31 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EMM 
cause #1 1 1 "protocol error, unspecified" as 
specified. (Note) 


<- 


TRACKING AREA UPDATE 
REJECT 






32 


The SS releases the RRC connection. 


- 


- 


- 


- 


33 


Check: When the timer T3402 expires does 
the UE re-transmit TRACKING AREA 
UPDATE REQUEST message on cell B? 


-> 


TRACKING AREA UPDATE 
REQUEST 


5 


P 


34 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<~ 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


35 


the UE transmit a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


Note: Upon reception of TRACKING AREA UPDATE REJECT message with ElVIIVI causes #95, #96, #97, #99 and 
#111, timer T3402 shall be started 



9.2.3.1.26.3.3 Specific message contents 

Table 9.2.3.1.26.3.3-1 : Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.1.26.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


01011111 


#95 "semantically 
incorrect message " 





Table 9.2.3.1.26.3.3-2: Message TRACKING AREA UPDATE REJECT (step 10, Table 9.2.3.1.26.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


01100000 


#96 " invalid 
mandatory 
information " 





Table 9.2.3.1.26.3.3-3: Message TRACKING AREA UPDATE REJECT (step 17, Table 9.2.3.1.26.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


01100001 


#97 " message 
type non-existent 
or not 
implemented " 
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Table 9.2.3.1.26.3.3-4: Message TRACKING AREA UPDATE REJECT (step 24, Table 9.2.3.1.26.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


ElVIIVI cause 


01100011 


#99 " information 
element non- 
existent or not 
implemented " 





Table 9.2.3.1.26.3.3-5: Message TRACKING AREA UPDATE REJECT (step 31, Table 9.2.3.1.26.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EIVIM cause 


01101111 


#111 " protocol 
error, unspecified 





Table 9.2.3.1.26.3.3-6: Message TRACKING AREA UPDATE ACCEPT (step 6, 13, 20, 27, 34 of table 

9.2.3.1.26.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


T3402 value 


1 minute 


The default value 
is 12 minutes, use 
1 minute to 
shorten the whole 
TC execute time 





9.2.3.1 .27 Normal tracking area update / Abnormal case / Change of cell into a new tracking 

area 

9.2.3.1 .27.1 Test Purpose (TP) 

(1) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { cell change into a new tracking area occurs before the tracking area updating procedure is 
completed } 

then { UE abort the tracking area updating procedure and re-initiate it in the new tracking area 
immediately } 



9.2.3.1.27.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.3.2.6. 

[TS24.301 clause5.5. 3.2.6] 

The following abnormal cases can be identified: 



e) Change of cell into a new tracking area 

If a cell change into a new tracking area occurs before the tracking area updating procedure is completed, the 
tracking area updating procedure shall be aborted and re-initiated immediately. The UE shall set the EPS update 
status to EU2 NOT UPDATED. 
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9.2.3.1.27.3 Test description 

9.2.3.1 .27.3.1 Pre-test conditions 
System Simulator: 

- Cell A, Cell B, Cell C are configured according to Table 6.3.2.2-1 in [18]. 
UE: 

- The test USIM contains GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 

9.2.3.1 .27.3.2 Test procedure sequence 

Table 9.2.3.1.27.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell A to the "Non-Suitable 

cell". 

Set the cell type of cell B to the "Serving cell". 

Set the cell type of cell C to the "Non-Suitable 

cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell B. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


SS does not send TRACKING AREA UPDATE 
ACCEPT to the UE. 


- 


- 


- 


- 


4 


Set the cell type of cell A to the "Non-Suitable 

cell". 

Set the cell type of cell B to the "Non-Suitable 

cell". 

Set the cell type of cell C to the "Serving cell". 

Note: change of cell power level should 

happen before timer T3430 expired. 










5 


UE initiates RRC connection establishment 
procedure on cell C. 


- 


- 


- 


- 


6 


Check: Does the UE transmit TRACKING 
AREA UPDATE REQUEST message on cell C 
in the next 5 seconds? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


7 


SS responds with TRACKING AREA UPDATE 
ACCEPT message 


<~ 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


8 


UE sends TRACKING AREA UPDATE 
COMPLETE 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 



9.2.3.1.27.3.3 



Specific message contents 



Table 9.2.3.1.27.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 2, step 6, Table 

9.2.3.1.27.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 


GUTI-1 






Last visited registered TAI 


TAI-1 
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Table 9.2.3.1.27.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 7, 9.2.3.1.27.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


GUT! 


GUTI-3 






TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'OOOOO'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




MCC 
MNC 
TAC1 


TAG =3 


"PLMN is set to 
the same 
MCC/MNC stored 
in EFiMsi" 
"TAI-3" 





9.2.3.1.28 



9.2.3.1.28.1 



Normal tracking area update / Abnormal case / Tracking area updating and 
detach procedure collision 

Test Purpose (TP) 



(1) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message} 
ensure that { 

when { UE receives a DETACH REQUEST message before the tracking area updating procedure has been 
completed } 

then { the tracking area updating procedure shall be aborted and the detach procedure shall be 
progressed } 



9.2.3.1.28.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 
5.5.3.2.6. 

[TS24.301 clause5.5. 3.2.6] 

The following abnormal cases can be identified: 



f) Tracking area updating and detach procedure collision 

If the UE receives a DETACH REQUEST message before the tracking area updating procedure has been 
completed, the tracking area updating procedure shall be aborted and the detach procedure shall be progressed. 

9.2.3.1.28.3 Test description 

9.2.3.1 .28.3.1 Pre-test conditions 

System Simulator: 

Cell A, Cell B are configured according to Table 6.3.2.2-1 in [18]. 
UE: 

- The test USIM contains GUTl-1 and TAl-1, and EPS update status is "EUl: UPDATED". 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
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9.2.3.1 .28.3.2 Test procedure sequence 

Table 9.2.3.1.28.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell A to the "Non-Suitable 

cell". 

Set the cell type of cell B to the "Serving cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell B. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


SS does not send TRACKING AREA UPDATE 
ACCEPT to the UE. 


- 


- 


- 


- 


4 


The SS transmits a DETACH REQUEST 
message with Detach type = 're-attach not 
required' on Cell B. 

Note: this message should be sent before 
timer T3430 expired. 


<~ 


DETACH REQUEST 






5 


Check: Does The UE transmit a DETACH 

ACCEPT message on Cell B in the next 6 

seconds? 

Note: the default value for timer T3422 is 6 

seconds 


-> 


DETACH ACCEPT 


1 


P 


6 


The SS releases the RRC connection. 


- 


- 


- 


- 


7 


Check: Does the test result of CALL generic 
procedure "Test procedure for no response to 
paging (for NAS testing)" defined in clause 
6.4.2.5 of TS36.508 indicates that the UE 
does not respond to paging when paged with 
S-TMSI1 and with CN domain indicator set to 
"PS" on Cell B? 






1 





9.2.3.1 .28.3.3 Specific message contents 

Table 9.2.3.1 .28.3.3-1 : Message DETACH REQUEST (step 4, Table 9.2.3.1 .28.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 2 


Information Element 


Value/Remark 


Comment 


Condition 


Detach type 


'010'B 


"re-attach not 
required" 




EMM cause 


'00001 100'B 


"Tracking area not 
allowed" 





9.2.3.2 Combined tracking area updating 

9.2.3.2.1 Combined tracking area update / Successful 

9.2.3.2.1 .1 Test Purpose (TP) 

(1) 

with { a combined EPS/IMSI attached UE in state EMM-REGISTERED and EMM-IDLE mode} 
ensure that { 

when { UE enters a tracking area included in the TAI list } 
then { UE does not transmit a TRACKING AREA UPDATE REQUEST message } 
} 

(2) 

with { a combined EPS/IMSI attached UE in state EMM-REGISTERED and EMM- IDLE mode} 
ensure that { 

when { UE enters a tracking area not included in the TAI list } 
then { UE transmits a TRACKING AREA UPDATE REQUEST message with "EPS update type = combined TA/LA 
updating" } 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1260 ETSI TS 136 523-1 V9.1.1 (2010-07) 

(3) 

with { UE has sent a combined TRACKING AREA UPDATE REQUEST message } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE ACCEPT message containing a GUTI and/or a mobile 
identity } 

then { UE transmits a TRACKING AREA UPDATE COMPLETE message and enters EMM-REGISTERED state } 
} 

9.2.3.2.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.5.3.1, 
5.5.3.2.2, 5.5.3.2.4, 5.5.3.3.1, 5.5.3.3.2, 5.5.3.3.4.1 and 5.5.3.3.4.2. 

[TS24.301 clause 5.5.3.1] 

The tracking area updating procedure is always initiated by the UE and is used for the following purposes: 

..." combined tracking area updating to update the registration of the actual tracking area for a UE in CS/PS mode 1 
or CS/PS mode 2 of operation; 



[TS24.301 clause 5.5.3.2.2] 

The UE in state EMM-REGISTERED shall initiate the tracking area updating procedure by sending a TRACKING 
AREA UPDATE REQUEST message to the MME, 

a) when the UE detects entering a tracking area that is not in the list of tracking areas that the UE previously 
registered in the MME; 



After sending the TRACKING AREA UPDATE REQUEST message to the MME, the UE shall start timer T3430 and 
enter state EMM-TRACKING- AREA-UPDATING-INITIATED (see example in figure 5.5.3.2.2). If timer T3402 is 
currently running, the UE shall stop timer T3402. If timer T341 1 is currently running, the UE shall stop timer T341 1 . If 
timer T3442 is currently running, the UE shall stop timer T3442. 



If the UE supports A/Gb mode or lu mode, the UE shall handle the Old GUTI IE as follows: 



If the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI IE. 



If a UE has uplink user data pending when it initiates the tracking area updating procedure, or uplink signalling not 
related to the tracking area updating procedure, it may also set an "active" flag in the TRACKING AREA UPDATE 
REQUEST message to indicate the request to establish the user plane to the network and to keep the NAS signalling 
connection after the completion of the tracking area updating procedure. 

If the UE has a current EPS security context, the UE shall include the eKSI (either KSIasme or KSIsgsn) in the NAS 
Key Set Identifier IE in the TRACKING AREA UPDATE REQUEST message. Otherwise, the UE shall set the NAS 
Key Set Identifier IE to the value "no key is available". If the UE has a current EPS security context, the UE shall 
integrity protect the TRACKING AREA UPDATE REQUEST message with the current EPS security context. 
Otherwise the UE shall not integrity protect the TRACKING AREA UPDATE REQUEST message. 



When the tracking area updating procedure is initiated in EMM-IDLE mode, the UE may also include an EPS bearer 
context status IE in the TRACKING AREA UPDATE REQUEST message, indicating which EPS bearer contexts are 
active in the UE. 
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[TS24.301 clause 5.5.3.2.4] 



Upon receiving a TRACKING AREA UPDATE ACCEPT message, the UE shall stop timer T3430, reset the routing 
area updating attempt counter, enter state EMM-REGISTERED and set the EPS update status to EUl UPDATED. If the 
message contains a GUTI, the UE shall use this GUTI as new temporary identity for EPS services and shall store the 
new GUTI. If no GUTI was included by the MME in the TRACKING AREA UPDATE ACCEPT message, the old 
GUTI shall be used. If the UE receives a new TAI list in the TRACKING AREA UPDATE ACCEPT message, the UE 
shall consider the new TAI list as valid and the old TAI list as invalid; otherwise, the UE shall consider the old TAI list 
as valid. 



If the TRACKING AREA UPDATE ACCEPT message contained a GUTI, the UE shall return a TRACKING AREA 
UPDATE COMPLETE message to the MME to acknowledge the received GUTI. 



[TS24.301 clause 5.5.3.3.1] 

Within a combined tracking area updating procedure the messages TRACKING AREA UPDATE ACCEPT and 
TRACKING AREA UPDATE COMPLETE carry information for the tracking area updating and the location area 
updating. 

The combined attach procedure basically follows the normal tracking area updating procedure described in subclause 
5.5.3.2. 

[TS24.301 clause 5.5.3.3.2] 



To initiate a combined tracking area updating procedure the UE sends the message TRACKING AREA UPDATE 
REQUEST to the network, starts timer T3430 and changes to state EMM-TRACKING- AREA-UPDATING- 
INITIATED. The value of the EPS update type IE in the message shall indicate "combined TA/LA updating" unless 
explicitly specified otherwise. 

The UE shall include the TMSI status IE if no valid TMSI is available. Furthermore, if the UE has stored a valid 
location area identification, the UE shall include it in the Old location area identification IE in the TRACKING AREA 
UPDATE REQUEST message. 

[TS24.301 clause 5.5.3.3.4.1] 

Depending on the value of the EPS update result IE received in the TRACKING AREA UPDATE ACCEPT message, 
two different cases can be distinguished: 

1) The EPS update result IE value indicates "combined TA/LA updated": Tracking and location area updating is 
successful; 



A TRACKING AREA UPDATE COMPLETE message shall be returned to the network if the TRACKING AREA 
UPDATE ACCEPT message contains a GUTI and/or a mobile identity. 

[TS24.301 clause 5.5.3.3.4.2] 

The description for normal tracking area update as specified in subclause 5.5.3.2.4 shall be followed. In addition, the 
following description for location area updating applies. 

The TMSI reallocation may be part of the combined tracking area updating procedure. The TMSI allocated is then 
included in the TRACKING AREA UPDATE ACCEPT message together with the location area identification (LAI). In 
this case the MME shall change to state EMM -COMMON-PROCEDURE-INITIATED and shall start the timer T3450 
as described in subclause 5.4.1. The LAI may be included in the TRACKING AREA UPDATE ACCEPT message 
without TMSI. 
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The UE, receiving a TRACKING AREA UPDATE ACCEPT message, stores the received location area identification, 
resets the location update attempt counter, sets the update status to Ul UPDATED and enters MM state MM IDLE. 



How to handle the old TMSI stored in the UE depends on the mobile identity included in the TRACKING AREA 
UPDATE ACCEPT message. 

- If the TRACKING AREA UPDATE ACCEPT message contains an IMSI, the UE is not allocated any TMSI, 
and shall delete any old TMSI accordingly. 

- If the TRACKING AREA UPDATE ACCEPT message contains a TMSI, the UE shall use this TMSI as new 
temporary identity. The UE shall delete its old TMSI and shall store the new TMSI. In this case, a TRACKING 
AREA UPDATE COMPLETE message is returned to the network to confirm the received TMSI. 

- If neither a TMSI nor an IMSI has been included by the network in the TRACKING AREA UPDATE ACCEPT 
message, the old TMSI, if any is available, shall be kept. 



9.2.3.2.1.3 Test description 

9.2.3.2.1.3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell C and Cell D (HPLMN, different TAs) 

At most 2 cells are active simultaneously. 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 
Preamble: 

The UE is in state Registered, Idle Mode (state 2) on cell A according to [18]. 
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9.2.3.2.1.3.2 



Test procedure sequence 

Table 9.2.3.2.1.3.2-1: Main Behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 




The following messages are sent and shall be 
received on cell C. 


- 


- 


- 


- 


1- 

13 


Void 


- 


- 


- 


- 


14 


Set the cell type of cell A to the " non-Suitable 
neighbour cell ". Set the cell type of cell C to 
the " Serving cell" 










15 


Check: Does the UE transmit a combined 
TRACKING AREA UPDATE REQUEST 
message as specified? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


16 


The SS sends TRACKING AREA UPDATE 
ACCEPT message including GUTI, TIVISI and 
LAI. The TAI list includes TAI for cell C and cell 
D. 


<~ 


TRACKING AREA UPDATE 
ACCEPT 






17 


Check: Does the UE transmit a TRACKING 
AREA UPDATE COMPLETE message? 


~> 


TRACKING AREA UPDATE 
COMPLETE 


2,3 


P 


18 


The SS releases the RRC connection. 


- 


- 


- 


- 


19 


Check: Does the test results of generic 
procedure in TS 36.508 [18] subclause 6.4.2.4 
indicate that the UE is in E-UTRA EMM- 
REGISTERED state on cell C with PagingUE- 
Identity = S-TMSI2? 






2 






The following messages are sent and shall be 
received on cell 1 . 


- 


- 


- 


- 


20 


Set the cell type of cell A to the " non-Suitable 
off cell ". Set the cell type of cell C to the 
"Suitable neighbour cell". Set the cell type of 
cell D1 to the " Serving cell" 










20 
A 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message in the 
next 30 seconds? 


~> 


TRACKING AREA UPDATE 
REQUEST 


1 


F 


20 
B 


Check: Does the test results of generic 
procedure in TS 36.508 [18] subclause 6.4.2.4 
indicate that the UE is in E-UTRA EMM- 
REGISTERED state on cell D with PagingUE- 
Identity = S-TMSI2? 






1 




20 
C 


Set the cell type of cell A to the "Serving cell". 
Set the cell type of cell C to the "Non-suitable 
off cell". Set the cell type of cell D to the 
"Suitable neighbour cell". 










21 


Check: Does the UE transmit a combined 
TRACKING AREA UPDATE REQUEST 
message? 


~> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


22 


The SS sends TRACKING AREA UPDATE 
ACCEPT message. Note: GUTI not present 
and MS identity present 


<- 


TRACKING AREA UPDATE 
ACCEPT 






23 


Check: Does the UE send TRACKING AREA 
UPDATE COMPLETE message? 


-> 


TRACKING AREA UPDATE 
COMPLETE 


2,3 


P 




At the end of this test procedure sequence, the 
UE is in end state E-UTRA connected {E2) 
according to TS 36.508. 











NOTE 1 : It is assumed in the test procedure sequence that the UE initially has a valid GUTI. 
NOTE 2: NAS security procedures are not checked in this TC. 
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9.2.3.2.1 .3.3 Specific message contents 

Table 9.2.3.2.1.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 15, Table 9.2.3.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


NAS key set identifier 


KSI sent during the test 
case preamble in step 7. 






TSC 


'O'B 


native security 
context (for 
KSIasme) 




Old GUT! 


GUTI-1 


GUTI-1 was 
allocated in cell A 
during the 
preamble 




Last visited registered TAI 


TAI-1 


TAI of cell A 




Old location area identification 


LAI-1 


LAI received in 
the ATTACH 
ACCEPT 
message in the 
preamble 




TMSI status 





no valid TMSI 
available 





Table 9.2.3.2.1.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 16, Table 9.2.3.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


GUT! 


GUTI-2 






TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 


8 octets 




Type of lis't 


'BO"list of TACs 
belonging to one PLIVIN, 
with non-consecutive 
TAC values"0 






Number of elements 


'000001 ' 


2 elements 




Partial tracking area identity list 


PLMN = MCC/MNC 
stored in EFimsi 
TAC 1 = 3 
TAC 2 = 4 


TAI-3 and TAI-4 





Table 9.2.3.2.1.3.3-3: Message TRACKING AREA UPDATE REQUEST (step 21, Table 9.2.3.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUT! 


GUTI-2 






Last visited registered TAI 


TAI-4 






Old location area identification 


LAI-2 






TMSI status 


Not present 


Valid TMSI 
available 
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Table 9.2.3.2.1.3.3-4: Message TRACKING AREA UPDATE ACCEPT (step 22, Table 9.2.3.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 


Not present 


The SS doesn't 
assign a new 
GUTI 




TAI list 








Length of tracking area identity list contents 


00001000 


8 octets 




Number of elements 


000001 


1 element 




Type of list 


000 


One PLIVIN with 
non-consecutive 
TACs 




Partial tracking area identity list 


PLMN = MCC/MNC 
stored in EFimsi 
TAG 1 = TAG-1 


TAI-1 




LAI 


Not present 






IVIS identity 


TMSI-3 


SS provides a 
new TMSI 





Combined tracking area update / Successful / Check of last visited TAI and 
handling of TAI list, LAI and TMSI 

Test Purpose (TP) 



9.2.3.2.1a 

9.2.3.2. 1a.1 
(1) 

with { a combined EPS/IMSI attached UE has sent a combined TRACKING AREA UPDATE REQUEST message with 
EPS update type set to 'Combined TA/LA updating', including a last visited registered TAI } 
ensure that { 

when { the UE receives a TRACKING AREA UPDATE ACCEPT message containing a new TAI list, a location 
area information (LAI) and a TMSI as the mobile identity } 

then { the UE shall delete its old TMSI and shall store the new TMSI and transmits a TRACKING 
AREA UPDATE COMPLETE message and enters EMM-REGISTERED state } 



(2) 

with { UE in state EMM-REGISTERED, EMM-IDLE mode and ISR not activated } 
ensure that { 

when { UE performs a cell reselection from E-UTRAN to UTRAN and enters a location area stored on 
the USIM } 

then { the UE does not perform location updating } 

} 

(3) 

with { UE in state GMM-REGISTERED mode } 
ensure that { 

when { the UE receives a Paging message including an ue-Identity set to an unmatched TMSI i.e. 
other than the one allocated to the UE at the UE registration procedure } 
then { the UE doesn't establishe an RRC connection to answer the paging } 

} 

(4) 

with { UE in state GMM-REGISTERED mode } 
ensure that { 

when { the UE receives a Paging message including an ue-Identity set to the TMSI which was 
allocated to the UE } 

then { the UE establishes an RRC connection to answer the paging and the TMSI and the location 
area information (LAI) as Initial UE Identity are included in RRCConnectionRequest message } 
} 

(5) 

with { a combined EPS/IMSI attached UE has sent a combined TRACKING AREA UPDATE REQUEST message with 
EPS update type set to 'Combined TA/LA updating', including a last visited registered TAI } 
ensure that { 

when { the UE receives a TRACKING AREA UPDATE ACCEPT message containing a new TAI list, a location 
area information (LAI) {Neither a TMSI nor an IMSI as the mobile identity is included) } 

then { the UE shall keep the old TMSI if any available and enters EMM-REGISTERED state } 
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(6) 

with { UE in state EMM-REGISTERED, EMM- IDLE mode and ISR not activated } 
ensure that { 

when { UE performs a cell reselection from E-UTRAN to UTRAN and enters a location area stored on 
the USIM } 

then { the UE does not perform location updating } 
} 

(7) 

with { UE in state GMM-REGISTERED mode } 
ensure that { 

when { the UE receives a Paging message including an ue-Identity set to the TMSI which was 
allocated to the UE } 

then { the UE establishes an RRC connection to answer the paging and the TMSI and the location 
area information (LAI) as Initial UE Identity are included in RRCConnectionRequest message } 
} 

(8) 

with { a combined EPS/IMSI attached UE has sent a combined TRACKING AREA UPDATE REQUEST message with 
EPS update type set to 'Combined TA/LA updating', including a last visited registered TAI } 
ensure that { 

when { the UE receives a TRACKING AREA UPDATE ACCEPT message containing a new TAI list, a location 
area information (LAI) and an IMSI as the mobile identity } 

then { the UE shall delete any old TMSI and enters EMM-REGISTERED state } 
} 

(9) 

with { UE in state EMM-REGISTERED, EMM- IDLE mode and ISR not activated } 
ensure that { 

when { UE performs a cell reselection from E-UTRAN to UTRAN and enters a location area stored on 
the USIM } 

then { the UE does not perform location updating } 
} 

(10) 

with { UE in state GMM-REGISTERED mode } 
ensure that { 

when { the UE receives a Paging message including an ue-Identity set to a TMSI } 
then { the UE doesn't establishe an RRC connection to answer the paging } 
} 

9.2.3.2.1 a. 2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.5.3.3.1, 

5.5.3.3.2 , 5.5.3.3.4.1 and 5.5.3.3.4.2. 

[TS24.301 clause 5.5.3.3.1] 

Within a combined tracking area updating procedure the messages TRACKING AREA UPDATE ACCEPT and 
TRACKING AREA UPDATE COMPLETE carry information for the tracking area updating and the location area 
updating. 

The combined tracking area updating procedure follows the normal tracking area updating procedure described in 

subclause 5.5.3.2. 

[TS24.301 clause 5.5.3.3.2] 

The UE operating in CS/PS mode 1 or CS/PS mode 2, in state EMM-REGISTERED, shall initiate the combined 
tracking area updating procedure: 

a) when the UE that is attached for both EPS and non-EPS services detects entering a tracking area that is not in the 
list of tracking areas that the UE previously registered in the MME; 

b) when the UE that is attached for EPS services wants to perform an attach for non-EPS services. In this case the 
EPS update type IE shall be set to "Combined TA/LA updating with IMSI attach"; 

c) when the UE performs an intersystem change from A/Gb mode to S 1 mode and the EPS services were 
previously suspended in A/Gb mode; 
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d) when the UE performs an intersystem change from A/Gb or lu mode to S 1 mode and the UE previously 
performed a location area update procedure in A/Gb or lu mode, in order to re-establish the SGs association; 

e) when the UE enters EMM-REGISTERED.NORMAL-SERVICE and the UE's TIN indicates "P-TMSI"; 

f) when the UE receives an indication from the lower layers that the RRC connection was released with cause "load 
balancing TAU required"; 

g) when the UE deactivated EPS bearer context(s) locally while in EMM-REGISTERED.NO-CELL- 
AVAILABLE, and then returns to EMM-REGISTERED.NORMAL-SERVICE; 

h) when the UE changes the UE core network capability information or the UE specific DRX parameter or both; 

i) when the UE receives an indication of "RRC Connection failure" from the lower layers and has no user uplink 
data pending; or 

j) when the UE has selected a CSG cell whose CSG identity is not included in the UE's Allowed CSG list. 

To initiate a combined tracking area updating procedure the UE sends the message TRACKING AREA UPDATE 
REQUEST to the network, starts timer T3430 and changes to state EMM-TRACKING- AREA-UPDATING- 
INITIATED. The value of the EPS update type IE in the message shall indicate "combined TA/LA updating" unless 
explicitly specified otherwise. 

The UE shall include the TMSI status IE if no valid TMSI is available. Furthermore, if the UE has stored a valid 
location area identification, the UE shall include it in the Old location area identification IE in the TRACKING AREA 
UPDATE REQUEST message. 

[TS24.301 clause 5.5.3.3.4.1] 

Depending on the value of the EPS update result IE received in the TRACKING AREA UPDATE ACCEPT message, 
two different cases can be distinguished: 

1) The EPS update result IE value indicates "combined TA/LA updated": Tracking and location area updating is 
successful; 

2) The EPS update result IE value indicates "TA updated": Tracking area updating is successful, but location area 
updating is not successful. 

A TRACKING AREA UPDATE COMPLETE message shall be returned to the network if the TRACKING AREA 
UPDATE ACCEPT message contains a GUTI or a mobile identity or both. 

[TS24.301 clause 5.5.3.3.4.2] 

The description for normal tracking area update as specified in subclause 5.5.3.2.4 shall be followed. In addition, the 
following description for location area updating applies. 

The TMSI reallocation may be part of the combined tracking area updating procedure. The TMSI allocated is then 
included in the TRACKING AREA UPDATE ACCEPT message together with the location area identification (LAI). In 
this case the MME shall change to state EMM -COMMON-PROCEDURE-INITIATED and shall start the timer T3450 
as described in subclause 5.4. L The LAI may be included in the TRACKING AREA UPDATE ACCEPT message 
without TMSI. 

The UE, receiving a TRACKING AREA UPDATE ACCEPT message, stores the received location area identification, 
resets the location update attempt counter, sets the update status to Ul UPDATED and enters MM state MM IDLE. 

How to handle the old TMSI stored in the UE depends on the mobile identity included in the TRACKING AREA 
UPDATE ACCEPT message. 

- If the TRACKING AREA UPDATE ACCEPT message contains an IMSI, the UE is not allocated any TMSI, 
and shall delete any old TMSI accordingly. 

- If the TRACKING AREA UPDATE ACCEPT message contains a TMSI, the UE shall use this TMSI as new 
temporary identity. The UE shall delete its old TMSI and shall store the new TMSI. In this case, a TRACKING 
AREA UPDATE COMPLETE message is returned to the network to confirm the received TMSI. 
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- If neither a TMSI nor an IMSI has been included by the network in the TRACKING AREA UPDATE ACCEPT 

message, the old TMSI, if any is available, shall be kept. 

The network receiving a TRACKING AREA UPDATE COMPLETE message stops timer T3450, changes to state 
EMM-REGISTERED and considers the new TMSI as valid. 

9.2.3.2.1 a.3 Test description 

9.2.3.2.1 a.3.1 Pre-test conditions 

System Simulator: 

Cell A and Cell B are configured according to Table 6.3.2.2-1 in [18]. 

Cell A belongs to TAJ-1 and is set to "Serving cell" 

- Cell B belongs to TAI-2 and is set to "Non-Suitable cell" 

Cell 5 and Cell X are configured according to Table 4.4.4-2 in [18]. 

- If pc_UTRAN supported by UE, 

- Cell 5 (UTRA FDD or UTRA TDD) belongs to LAI-1 and is set to "Non-Suitable cell". 

- Cell X (UTRA FDD or UTRA TDD) belongs to LAI-2 and is set to "Non-Suitable cell". 

- UTRAN is NOT using Gs interface. (NMO in System Information Block 1 indicates "NMOII")- 
Editor's note: Cell X belongs to LAI other than LAI-1 need to be defined in Table 4.4.4-2 in [18]. 

UE: 

The UE is configured to initiate combined EPS/IMSI attach. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) with condition CombinedAttach on Cell A according to [18]. 

(ATTACH ACCEPT message includes GUTI-1 as GUTI, TMSI-1 as MS identity and LAI-1 as Location area 
indication(L AJ) . ) 
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9.2.3.2. 1a.3. 2 Test procedure sequence 

Table 9.2.3.2. 1a.3.2-1 : Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


- 


The following messages are sent and shall be 
received on Cell B. 


- 


- 


- 


- 


1 


Set cell type of Cell A to the "non-Suitable cell" 
Set cell type of Cell B to the "Serving cell". 










2 


Check: Does the UE transmit a combined 
TRACKING AREA UPDATE REQUEST 
message with Last visited registered TAI set to 
TAI-1? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


3 


The SS sends TRACKING AREA UPDATE 
ACCEPT message including with LAI set to 
LAI-2, including a newTMSI(TMSI-2) as MS 
identity. 


<- 


TRACKING AREA UPDATE 
ACCEPT 






4 


Check: Does the UE send TRACKING AREA 
UPDATE COMPLETE message. 


~> 


TRACKING AREA UPDATE 
COMPLETE 


1 


P 


5 


The SS releases the RRC connection. 


- 


- 


- 


- 


- 


The following messages are sent and shall be 
received on Cell X. 


- 


- 


- 


- 


6 


Set cell type of Cell B to the "non-Suitable cell" 
Set cell type of Cell X to the "Serving cell". 


- 


- 


- 


- 


7 


The UE performs Cell Reselection from Cell 
B(E-UTRAN cell) to Cell X(UTRAN cell). 


- 


- 


- 


- 


8 


Check: Does UE perform Location updating 
procedure? 


-> 


LOCATION UPDATING 
REQUEST 


2 


F 


9 


Check: Does UE perform Routing area 
updating procedure? 


-> 


ROUTING AREA UPDATE 
REQUEST 


- 


P 


10 


The SS send Paging message including an 
unmatched identity. 


<- 


Paging 


- 


- 


11 


Check: Does the UE transmit 
RRCConnectionRequest to answer the Paging 
? 


-> 


RRCConnectionRequest 


3 


F 


12 


The SS send Paging message including a 
matched identity{t;£ /denWy = TMSI-2). 


<- 


Paging 


- 


- 


13 


Check: Does the test results of Mobile 
terminated establishment of Radio Resource 
Connection [5] indicate that the UE transmit 
RRCConnectionRequest m\h Initial UE identity 
set to TMSI-2 and LAI-2 to answers on Paging 
message ? 






4 


P 


14 


The SS releases the RRC connection. 


- 


- 


- 


- 


- 


The following messages are sent and shall be 
received on Cell A. 


- 


- 


- 


- 


15 


Set cell type of Cell X to the "non-Suitable cell" 
Set cell type of Cell A to the "Serving cell". 


- 


- 


- 


- 


16 


The UE performs Cell Reselection from Cell 
X(UTRAN cell) to Cell A(E-UTRAN cell) . 










17 


Check: Does the UE transmit a combined 
TRACKING AREA UPDATE REQUEST 
message with Last visited registered TAI set to 
TAI-2? 


-> 


TRACKING AREA UPDATE 
REQUEST 


5 


P 


18 


The SS sends TRACKING AREA UPDATE 
ACCEPT message with LAI set to LAI-1 , not 
including MS identity. 


<- 


TRACKING AREA UPDATE 
ACCEPT 






19 


The SS releases the RRC connection. 


- 


- 


- 


- 


- 


The following messages are sent and shall be 
received on Cell 5. 


- 


- 


- 


- 


20 


Set cell type of Cell A to the "non-Suitable cell" 
Set cell type of Cell 5 to the "Serving cell". 


- 


- 


- 


- 


21 


The UE performs Cell Reselection from Cell 
A(E-UTRAN cell) to Cell 5(UTRAN cell). 


- 


- 


- 


- 


22 


Check: Does UE perform Location updating? 


-> 


LOCATION UPDATING 
REQUEST 


6 


F 
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23 


Check: Does UE perform Routing area 
updating procedure? 


-> 


ROUTING AREA UPDATE 
REQUEST 


- 


P 


24 


The SS send Paging message including a 
matched identity{L'£ /denWy = TI\/ISI-2). 


<- 


Paging 


- 


- 


25 


Check: Does the test results of IVIobile 
terminated establishment of Radio Resource 
Connection [5] indicate that the UE transmit 
RRCConnectionRequestmVn Initial UE identity 
set to TMSI-2 and LAI-1 to answers on Paging 
message ? 






7 


P 


26 


The SS releases the RRC connection. 


- 


- 


- 


- 


- 


The following messages are sent and shall be 
received on Cell B. 


- 


- 


- 


- 


27 


Set cell type of Cell 5 to the "non-Suitable cell" 
Set cell type of Cell B to the "Serving cell". 


- 


- 


- 


- 


28 


The UE performs Cell Reselection from Cell 
5(UTRAN cell) to Cell B(E-UTRAN cell) . 


- 


- 


- 


- 


29 


Check: Does the UE transmit a combined 
TRACKING AREA UPDATE REQUEST 
message with Last visited registered TAI set to 
TAI-1? 


-> 


TRACKING AREA UPDATE 
REQUEST 


8 


P 


30 


The SS sends TRACKING AREA UPDATE 
ACCEPT message with LAI set to LAI-2, 
including the IMSI as IVIS identity. 


<- 


TRACKING AREA UPDATE 
ACCEPT 






31 


The SS releases the RRC connection. 


- 


- 


- 


- 


- 


The following messages are sent and shall be 
received on Cell X. 


- 


- 


- 


- 


32 


Set cell type of Cell B to the "non-Suitable cell" 
Set cell type of Cell X to the "Serving cell". 


- 


- 


- 


- 


33 


The UE performs Cell Reselection from Cell 
B(E-UTRAN cell) to Cell X(UTRAN cell). 


- 


- 


- 


- 


34 


Check: Does UE perform Location updating? 


-> 


LOCATION UPDATING 
REQUEST 


9 


F 


35 


Check: Does UE perform Routing area 
updating procedure? 


-> 


ROUTING AREA UPDATE 
REQUEST 


- 


P 


36 


The SS send Paging message including a 
TMSI. 


<- 


Paging 


- 


- 


37 


Check: Deoe UE transmit 
RRCConnectionRequest to answer the Paging 
? 


-> 


RRCConnectionRequest 


10 


F 



9.2.3.2.1 a. 3. 3 Specific message contents 

Table 9.2.3.2.1 a.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.2.1 a.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI 


GUTI-1 


Old GUTI is 
included by UE if 
if valid, IMSI 
otherwise. 




Last visited registered TAI 


TAI-1 


If available, the 
last TAI is 
included by UE 
and will be used 
to establish a 
good list of TAIs 
in subsequent 
ATTACH 
ACCEPT 
message. 




Old LAI 


Not present 






TMSI status 


Not present 
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Table 9.2.3.2.1 a.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 3, Table 9.2.3.2.1a.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remarl< 


Comment 


Condition 


T3412value 


Not present 






GUTI 


Not present 


This IE maybe 
included to assign 
a new GUTI 




TAI list 








Length of tracking area identity list contents 


00001000 


8 octets 




Number of elements 


000001 


1 element 




Type of list 


000 


One PLMN with 

non-consecutive 

TACs 




MCC 
MNC 
TAC1 


TAI-2 






LAC 


2 (LAI-2) 






MS identity 


TMSI-2 






T3402 value 


Not present 






Equivalent PLMNs 


Not present 






EMM cause 


Not present 







Table 9.2.3.2.1a.3.3-3: Message PAGING TYPE 1 (step 10, Table 9.2.3.2.1a.3.2-1) 



Derivation path: 34. 1 08 sec 7.1.2.4.1 


Information Element 


Value/Remark 


Comment 


Condition 


Paging record list 








Paging record 








CN originator 








Paging cause 

CN domain identity 

UE identity 


Terminating Speech Call 

CS domain 

TMSI other than TMSI-2 







Table 9.2.3.2.1 a.3.3-4: Message PAGING TYPE 1 (step 12, Table 9.2.3.2.1 a.3.2-1) 



Derivation path: 34. 1 08 sec 7.1.2.4.1 


Information Element 


Value/Remark 


Comment 


Condition 


Paging record list 








Paging record 








CN originator 








Paging cause 

CN domain identity 

UE identity 


Terminating Speech Call 

CS domain 

TMSI-2 







Table 9.2.3.2.1a.3.3-5: Message RRCConnectionRequest (step 13, Table 9.2.3.2.1a.3.2-1) 



Derivation path: 34.108 sec 9.1.1 


Information Element 


Value/Remark 


Comment 


Condition 


Initial UE identity 








TMSI{GSM-MAP) 
LAI (GSM-MAP) 


TMSI-2 
LAI-2 






Establishment cause 


Terminating 
Conversational Call 
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Table 9.2.3.2.1a.3.3-6 Message TRACKING AREA UPDATE REQUEST (step 17, Table 9.2.3.2.1a.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remarl< 


Comment 


Condition 


Old GUT! 


GUTI-1 


Old GUT! is 
included by UE if 
if valid, IMS! 
otherwise. 




Last visited registered TAI 


TAI-2 


If available, the 
last TAI is 
included by UE 
and will be used 
to establish a 
good list of TAIs 
in subsequent 
ATTACH 
ACCEPT 
message. 




Old LAI 


LAI-2 






TMSI status 


Not present 







Table 9.2.3.2.1 a.3.3-7: Message TRACKING AREA UPDATE ACCEPT (step 18, Table 9.2.3.2.1 a.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


T3412 value 


Not present 






GUTI 


Not present 


This IE may be 
included to assign 
a new GUTI 




TAI list 








Length of tracking area identity list contents 


00001000 


8 octets 




Number of elements 


000001 


1 element 




Type of list 


000 


One PLMN with 

non-consecutive 

TACs 




MCC 
MNC 
TAC1 


TAI-1 






LAC 


1 (LAI-1) 






MS identity 


Not present 






T3402 value 


Not present 






Equivalent PLMNs 


Not present 






EMM cause 


Not present 







Table 9.2.3.2.1 a.3.3-8: Message PAGING TYPE 1 (step 24, Table 9.2.3.2.1 a.3.2-1) 



Derivation path: 34.108 sec 7.1.2.4.1 


Information Element 


Value/Remark 


Comment 


Condition 


Paging record list 








Paging record 








CN originator 








Paging cause 

CN domain identity 

UE identity 


Terminating Speech Call 

CS domain 

TMSI-2 
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Table 9.2.3.2.1a.3.3-9: Message RRCConnectionRequest (step 25, Table 9.2.3.2.1a.3.2-1) 



Derivation path: 34.108 sec 9.1 .1 


Information Element 


Value/Remark 


Comment 


Condition 


Initial UE identity 








TMSI{GSM-MAP) 
LAI (GSM-MAP) 


TMSi-2 
LAI-1 






Establishment cause 


Terminating 
Conversational Call 







Table 9.2.3.2.1a.3.3-10: Message TRACKING AREA UPDATE REQUEST (step 29, Table 9.2.3.2.1a.3.2- 

1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remarl< 


Comment 


Condition 


Old GUTI 


GUTI-1 


Old GUTI is 
included by UE if 
If valid, IMSI 
otherwise. 




Last visited registered TAI 


TAI-1 


If available, the 
last TAI is 
included by UE 
and will be used 
to establish a 
good list of TAIs 
in subsequent 
ATTACH 
ACCEPT 
message. 




Old LAI 


LAI-1 






TMSI status 


Not present 







Table 9.2.3.2.1 a.3.3-1 1 : Message TRACKING AREA UPDATE ACCEPT (step 30, Table 9.2.3.2.1 a.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update result 


001 


"combined TA/LA" 




T3412value 


Not present 






GUTI 


Not present 


This IE maybe 
included to assign 
a new GUTI 




TAI list 








Length of tracking area identity list contents 


00001000 


8 octets 




Number of elements 


000001 


1 element 




Type of list 


000 


One PLMN with 
non-consecutive 
TACs 




MCC 
MNC 
TAC1 


TAI-2 






LAC 


2(LAI-2) 






MS identity 


IMSI 






T3402 value 


Not present 






Equivalent PLMNs 


Not present 






EMM cause 


Not present 
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Table 9.2.3.2.1a.3.3-12: Message PAGING TYPE 1 (step 36, Table 9.2.3.2.1a.3.2-1) 



Derivation path : 34. 1 08 sec 7.1.2.4.1 


Information Element 


Value/Remarl< 


Comment 


Condition 


Paging record list 








Paging record 








CN originator 








Paging cause 

CN domain identity 

UE identity 


Terminating Speech Call 
CS domain 
TIVISI (any value) 







Combined tracking area update / Successful for EPS services only / IMS! 
unknown in HSS 

Test Purpose (TP) 



9.2.3.2.2 

9.2.3.2.2.1 

(1) 

with { UE has sent a combined TRACKING AREA UPDATE REQUEST message with EPS update type set to 
'Combined TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE ACCEPT message with EPS update result set to "TA 
updated" and EMM cause set to "IMSI unknown in HSS" } 

then { UE considers the USIM as invalid for non-EPS services and enters EMM-REGISTERED .NORMAL- 
SERVICE state and MM idle state } 



9.2.3.2.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.5.3.3.4.3. 

[TS24.301 clause 5.5.3.3.4.3] 

Apart from the actions on the tracking area updating attempt counter, the description for tracking area for EPS services 
as specified in subclause 5.5.3.2.4 shall be followed. In addition, the following description for location updating for 
non-EPS services applies. 

The UE receiving the TRACKING AREA UPDATE ACCEPT message takes one of the following actions depending 

on the EMM cause value: 

#2 (IMSl unknown in HSS) 

The UE shall stop T3430 if still running and shall reset the tracking area updating attempt counter. The UE 
shall set the update status to U3 ROAMING NOT ALLOWED and shall delete any TMSl, LAI and ciphering 
key sequence number. The UE shall enter state EMM-REGISTERED.NORMAL-SERVICE. The new MM 
state is MM IDLE. The USIM shall be considered as invalid for non-EPS services until switching off or the 
UICC containing the USIM is removed. 



9.2.3.2.2.3 Test description 

9.2.3.2.2.3.1 Pre-test conditions 

System Simulator: 

cells A and B are configured according to Table 6.3.2.2-1 in [18]. 
cell A belongs to TAl-1 and is set to "Serving cell" 
cell B belongs to TAI-2 and is set to "Non-Suitable cell". 

UE: 

None. 
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Preamble: 

the UE is in state Registered, Idle mode (state 2) on cell A according to [18]. 
9.2.3.2.2.3.2 Test procedure sequence 

Table 9.2.3.2.2.3.2-1 : Main Behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


Set the cell type of cell A to the "non-Suitable 
cell". Set the cell type of cell B to the "Serving 
cell". 










- 


The following messages are sent and shall be 
received on cell B. 










2 


The UE transmit a combined TRACKING 
AREA UPDATE REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message with EPS update 
result set to "TA updated" and EMM cause set 
to "IMSI unknown in HSS" 


<- 


TRACKING AREA UPDATE 
ACCEPT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


The SS pages the UE using S-TMSI with CN 
domain indicator set to "PS". 


<- 


- 


- 


- 


6 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


7 


The SS transmits a DETACH REQUEST 
message with Detach Type set to "re-attach 
required" 


<- 


DETACH REQUEST 






8 


The UE sends a DETACH ACCEPT message. 


— > 


DETACH ACCEPT 


- 


- 


9 


The SS releases the RRC connection. 


- 


- 


- 


- 


10 


Check: Does the UE send ATTACH 
REQUEST message with EPS attach type set 
to "EPS attach", including a PDN 
CQNNECTIVITY REQUEST message ? 


-> 


ATTACH REQUEST 


1 


P 


11 


Steps 5 to 16 of generic procedure in 36.508 
clause 4.5.2.3-1 are executed so as to 
complete the attach procedure (the ATTACH 
ACCEPT message include "EPS attach result" 
IE = '0001'B, "EPSonly"). 










- 


The UE is in end state E-UTRA connected 
(E2). 


- 


- 


- 


- 
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9.2.3.2.2.3.3 Specific message contents 

Table 9.2.3.2.2.3.3-1 : Message TRACKING AREA UPDATE REQ (step 2, Table 9.2.3.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 


001 


"combined TA/LA 
updating" 




Old GUT! 


GUTI-1 


Old GUTI is 
included by UE if 
valid, IMSI 
otherwise. 




Last visited registered TAI 


TAI-1 


If available, the 
last TAI is 
included by UE 
and will be used 
to establish a 
good list of TAIs 
in subsequent 
ATTACH 
ACCEPT 
message. 




Old P-TMSI signature 


Not present 






Old LAI 


LAI-1 






TMSI status 


Not present 







Table 9.2.3.2.2.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 3, Table 9.2.3.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update result 


000 


" TA updated " 




T3412value 


Not present 






GUTI 


GUTI-2 






TAI list 








Length of tracking area identity list contents 


00001000 


8 octets 




Number of elements 


000001 


1 element 




Type of list 


000 


One PLMN with 

non-consecutive 

TACs 




MCC 
MNC 
TAC1 


TAI-2 






LAC 


Not present 






MS identity 


Not present 






T3402 value 


Not present 






Equivalent PLMNs 


Not present 






EMM cause 


00000010 


"IMSI unknown in 
HSS" 





Table 9.2.3.2.2.3.3-3: Message DETACH REQUEST (step 7, Table 9.2.3.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-1 2 


Information Element 


Value/Remark 


Comment 


Condition 


Detach type 


001 


"re-attach 
required" 





Table 9.2.3.2.2.3.3-4: Message ATTACH REQUEST (step 10, Table 9.2.3.2.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


EPS attach type 


001 


"EPS attach" 
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9.2.3.2.3 Combined tracking area update / Successful for EPS services only / MSC 

temporarily not reachable 

9.2.3.2.3.1 Test Purpose (TP) 
(1) 

with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' or 'Combined TA/LA updating with IMSI attach' and having the tracking area updating 
attempt counter set to the value less than four } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE ACCEPT message with the EPS update result set to ' TA 
updated' and the EMM cause set to 'MSC temporarily not reachable', 'Network failure' or 'Congestion' 

} 

then { UE sends TRACKING AREA UPDATE REQUEST message after T3411 expiry } 

} 

(2) 

with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating with IMSI attach', having the tracking area updating attempt counter set to four and 
operating in CS/PS mode 2 of operation } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE ACCEPT message with the EPS update result set to ' TA 
updated' and the EMM cause set to 'MSC temporarily not reachable', 'Network failure' or 'Congestion' 

} 

then { UE sends TRACKING AREA UPDATE REQUEST message after T34 02 expiry } 

} 

(3) 

with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating with IMSI attach', having the tracking area updating attempt counter set to four and 
operating in CS/PS mode 1 of operation } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE ACCEPT message with the EPS update result set to ' TA 
updated' and the EMM cause set to 'MSC temporarily not reachable', 'Network failure' or 'Congestion' 

} 

then { UE attempts to select GERAN or UTRAN radio access technology } 

} 

9.2.3.2.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.3.4.3. 

[TS 24.301, clause 5.5.3.3.4.3] 

Apart from the actions on the tracking area updating attempt counter, the description for tracking area for EPS services 
as specified in subclause 5.5.3.2.4 shall be followed. In addition, the following description for location updating for 
non-EPS services applies. 

#16 (MSC temporarily not reachable); 

#17 (Network failure); or 

#22 (Congestion) 

The UE shall stop timer T3430 if still running. The tracking area updating attempt counter shall be 
incremented, unless it was already set to 5. 

If the tracking area updating attempt counter is less than 5: 

- the UE shall start timer T341 1, shall set the EPS update status to EUl UPDATED and shall enter state 
EMM-REGISTERED.ATTEMPTING-TO-UPDATE-MM. When timer T341 1 expires the combined 
tracking area updating procedure indicating "combined TA/LA updating with IMSI attach" is triggered 
again. 

If the tracking area updating attempt counter is equal to 5: 
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a UE operating in CS/PS mode 2 of operation shall start timer T3402, shall set the EPS update status to 
EUl UPDATED and shall enter state EMM-REGISTERED.ATTEMPTING-TO-UPDATE-MM. When 
timer T3402 expires the combined tracking area updating procedure indicating "combined TA/LA 
updating with IMSI attach" is triggered again; 

a UE operating in CS/PS mode 1 of operation with "IMS voice not available" shall attempt to select 
GERAN or UTRAN radio access technology and proceed with appropriate MM or GMM specific 
procedures. The UE shall disable the E-UTRA capability (see subclause 4.5). If the UE is in the EMM- 
CONNECTED mode, the UE shall locally release the established NAS signalling connection and enter 
the EMM -IDLE mode before selecting GERAN or UTRAN radio access technology. 



9.2.3.2.3.3 Test description 

9.2.3.2.3.3.1 Pre-test conditions 
System Simulator: 

- Cell A and Cell B. 

- If pc_UTR AN supported by UE, Cell 5 . 

- Cell 5 belongs to LAI-1 and RAI-l(home PLMN) 

- If pc_GERAN and NOT pc_UTRAN supported by UE, Cell 24. 

- Cell 24 belongs to LAI- 1 and RAI- 1 (home PLMN) 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 
Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 

9.2.3.2.3.3.2 Test procedure sequence 

The sequence is executed for execution counter k = 1, 2, 3. 
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Table 9.2.3.2.3.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 





Set the cell type of Cell A to the "Serving cell". 

Set the cell type of Cell B to the "non-Suitable 

cell". 

Set the cell type of Cell 5 or Cell 24 to the 

"non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


OA 


The UE is powered on or switched on. 


- 


- 


- 


- 


OB 


Generic test procedure in TS 36.508 
subclause 4.5.2.3 is performed. 
NOTE: The UE performs an ATTACH 
procedure and the RRC connection is 
released. 










1 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell B to the "Serving 
cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REOUEST 


1 


P 


3 


Void 


- 


- 


- 


- 


4 


Void 


- 


- 


- 


- 


5 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


6 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


7 


The SS releases the RRC connection. 


- 


- 


- 


- 


- 


EXCEPTION: The step 8 to 13 shall be 
repeated 4 times. 


- 


- 


- 


- 


8 


Wait for 10s{T3411). 


- 


- 


- 


- 


9 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REOUEST message at the 
time which T341 1 expired? 


-> 


TRACKING AREA UPDATE 
REOUEST 


1 


P 


10 


Void 


- 


- 


- 


- 


11 


Void 


- 


- 


- 


- 


12 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


13 


The SS releases the RRC connection. 


- 


- 


- 


- 


14 


Void 


- 


- 


- 


- 


15 


Void 


- 


- 


- 


- 


16 


Void 


- 


- 


- 


- 


17 


Void 


- 


- 


- 


- 


18 


Void 


- 


- 


- 


- 


19 


Void 


- 


- 


- 


- 




EXCEPTION: Steps 20a1 to 20b6 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that takes place according to UE 
mode of operation. 










20a1 


IF the UE is configured to operate in CS/PS 
mode 2 THEN the SS waits for 12 min 
(T3402). 










20a2 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REOUEST message? 


-> 


TRACKING AREA UPDATE 
REOUEST 


2 


P 


20a3 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


20a4 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


20a5 


The SS releases the RRC connection. 


- 


- 


- 


- 


20b1 


ELSE the SS configures: 

- Cell B as a "Non-Suitable cell", 

- Cell 5 or Cell 24 as the "Serving cell". 










- 


The following messages are to be observed on 


- 


- 


- 


- 
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Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










20b2 


Void 


- 


- 


- 


- 


20b3 


Check: Does the UE transmit a ROUTING 
AREA UPDATE REQUEST message? 


~> 


ROUTING AREA UPDATE 
REOUEST 


3 


P 


20b4 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message. 


<— 


ROUTING AREA UPDATE 
ACCEPT 


- 


- 


20b5 


The UE transmits a ROUTING AREA UPDATE 
COIVIPLETE message. 


-> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 


20b6 


The SS releases the RRC connection. 


- 


- 


- 


- 


21 


The UE is powered off or switched off. 


- 


- 


- 


- 



9.2.3.2.3.3.3 Specific message contents 

Table 9.2.3.2.3.3.3-1 : TRACKING AREA UPDATE ACCEPT (step 5, Table 9.2.3.2.3.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


GUTI 


GUTI-2 






EMM cause 


'0001 OOOO'B for k=1 or 
'0001 0001'Bfork=2or 
'0001 0110'Bfork=3 


MSC temporarily 

not reachable for 

k=1 

Network failure for 

k=2 

Congestion for 

k=3 





Table 9.2.3.2.3.3.3-2: TRACKING AREA UPDATE REQUEST (step 9 and 20a2, Table 9.2.3.2.3.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


EPS update type 








EPS update type value 


'010'B 


Combined TA/LA 
updating with IMSI 
attach 





Table 9.2.3.2.3.3.3-3: TRACKING AREA UPDATE ACCEPT (step 12, Table 9.2.3.2.3.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


GUTI 


Not present 






EMM cause 


'0001 OOOO'B for k=1 or 
'0001 0001'Bfork=2or 
'0001 0110'Bfork=3 


MSC temporarily 

not reachable for 

k=1 

Network failure for 

k=2 

Congestion for 

k=3 





Table 9.2.3.2.3.3.3-4: TRACKING AREA UPDATE ACCEPT (step 20a3, Table 9.2.3.2.3.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


GUTI 


Not present 






Location area identification 


LAI-1 






MS identity 


TMSI-1 
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9.2.3.2.4 Combined tracking area update / Successful for EPS services only / CS domain 

not available 

9.2.3.2.4.1 Test Purpose (TP) 

(1) 

with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE ACCEPT message with the EPS update result set to ' TA 
updated' and the EMM cause set to ' CS domain not available' } 

then { UE transmits TRACKING AREA UPDATE COMPLETE message and set the update status to U2 NOT 
UPDATED and enters EMM-REGISTERED state } 



(2) 

with { UE receives a TRACKING AREA UPDATE ACCEPT message with the EPS update result set to ' TA 
updated' and the EMM cause set to ' CS domain not available' } 
ensure that { 

when { UE enters a new tracking area } 

then { UE initiates the tracking area updating procedure with EPS update type as "TA updating" } 



9.2.3.2.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.3.4.3. 
[TS 24.301, clause 5.5.3.3.4.3] 

#18 (CS domain not available) 

The UE shall stop timer T3430 if still running, shall reset the tracking area updating attempt counter, shall set 
the EPS update status to EUl UPDATED and shall enter state EMM-REGISTERED.NORMAL-SERVICE. 

The UE shall set the update status to U2 NOT UPDATED. 

A UE in CS/PS mode 1 of operation with "IMS voice not available" shall attempt to select GERAN or 
UTRAN radio access technology rather than E-UTRAN for the selected PLMN or equivalent PLMN. The 
UE shall disable the E-UTRA capability (see subclause 4.5). If the UE is in the EMM -CONNECTED mode, 
the UE shall locally release the established NAS signalling connection and enter the EMM -IDLE mode 
before selecting GERAN or UTRAN radio access technology. 

A UE in CS/PS mode 2 of operation may provide a notification to the user or the upper layers that the CS 
domain is not available. 

The UE shall not attempt combined attach or combined tracking area updating procedure with current PLMN 
until switching off the UE or the UlCC containing the USIM is removed. 

9.2.3.2.4.3 Test description 
9.2.3.2.4.3.1 Pre-test conditions 
System Simulator: 

Cell A and Cell B are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAl-l(home PLMN) and is set to ' Serving cell" 

- Cell B belongs to TAl-2(home PLMN, another TAC) and is set to "Non-Suitable cell" 



UE: 



The test USIM contains GUTI-1 and TAl-1, and EPS update status is "EUl: UPDATED". 

The test USIM contains TMSI-1 and LAI-1 for CS service and Location update status is "Ul: UPDATED". 
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Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 
9.2.3.2.4.3.2 Test procedure sequence 

Table 9.2.3.2.4.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell B to the "Serving cell". 
Set the cell type of Cell A to the "non-Suitable 
cell". 










- 


The following messages are sent and shall be 
received on Cell B. 


- 


- 


- 


- 


2 


The UE transmit a TRACKING AREA UPDATE 
REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


4 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


Check: Does the test result of generic 
procedure in TS 36.508 subclause 6.4.2.5 
indicate that the UE does not respond to 
paging when paged with GUTI-2 and with CN 
domain indicator set to "CS"? 






1 


P 


7 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.2 
indicate that the UE is in state Registered, Idle 
IVIode on Cell B? 






1 


P 


8 


Set the cell type of Cell A to the "Serving cell". 
Set the cell type of Cell B to the "non-Suitable 
cell". 










9 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with EPS 
update type as "TA updating"? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


10 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


11 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 



9.2.3.2.4.3.3 Specific message contents 

Table 9.2.3.2.4.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.2.4.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 








EPS update type Value 


'001 'B 


" combined TA/LA 
updating 





Table 9.2.3.2.4.3.3-2: TRACKING AREA UPDATE ACCEPT (step 3, Table 9.2.3.2.4.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


GUTI 


GUTI-2 






EMM cause 


'0001 001 0'B 


"CS domain not 
available" 
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Table 9.2.3.2.4.3.3-3: Message TRACKING AREA UPDATE REQUEST (step 9, Table 9.2.3.2.4.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remarl< 


Comment 


Condition 


EPS update type 








EPS update type Value 


'OOO'B 


" TA updating " 





9.2.3.2.6 
9.2.3.2.6.1 
(1) 



Combined tracking area update / Rejected / Illegal ME 
Test Purpose (IP) 



with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to 'Illegal ME' } 
then { UE considers the USIM as invalid for EPS services and non-EPS services and enters state 
EMM-DEREGISTERED } 



9.2.3.2.6.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.3.5. 

[TS 24.301, clause 5.5.3.3.5] 

If the combined tracking area updating cannot be accepted by the network, the MME shall send a TRACKING AREA 
UPDATE REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, enter state MM IDLE, and take the following actions depending on the EMM cause value 
received. 



#6 (Illegal ME); or 



The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAl, TAI Listand KSI. 

The UE shall consider the USIM as invalid for EPS and non-EPS services until switching off or the UICC 
containing the USIM is removed. Additionally, the UE shall delete the list of equivalent PLMNs and shall enter 
the state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the MM parameters update status, TMSI, 
LAI and ciphering key sequence number, and the GMM parameters GMM state, GPRS update status, P-TMSI, 
P-TMSI signature, RAI and GPRS ciphering key sequence number as specified in 3GPP TS 24.008 [13] for the 
case when the combined routing area updating procedure is rejected with this cause value. 



9.2.3.2.6.3 Test description 

9.2.3.2.6.3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell B and Cell C. 

- If pc_UTR AN supported by UE, Cell 5 . 

- Cell 5 belongs to R AI-1 (home PLMN) 

- If pc_GERAN and NOT pc_UTRAN supported by UE, Cell 24. 
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UE: 



- Cell 24 belongs to RAM (home PLMN) 

Cell A is "Serving cell" and Cell B, Cell C, Cell 5 and Cell 24 are "non-Suitable cell". 

The UE is configured to initiate combined EPS/IMSI attach. 



Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 
9.2.3.2.6.3.2 Test procedure sequence 

Table 9.2.3.2.6.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell B to the "Serving 
cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with the EIVIM 
cause set to 'Illegal ME'. 


<- 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Set the cell type of Cell B to the "non-Suitable 
cell". Set the cell type of Cell C to the "Serving 
cell". 










- 


The following messages are to be observed on 
Cell C unless explicitly stated otherwise. 


- 


- 


- 


- 


6 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 




EXCEPTION: Steps 7a1 to 7a3 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










7a1 


IF pc_UTRAN or pc_GERAN THEN the SS 
sets the cell type of the cell other than Cell 5 
and Cell 24 to the "non-Suitable cell" and sets 
the cell type of Cell 5 or Cell 24 to the "Serving 
cell". 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










7a2 


Void 


- 


- 


- 


- 


7a3 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


8 


Set the cell type of the cell other than Cell A to 
the "non-Suitable cell". Set the cell type of Cell 
A to the "Serving cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


9 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 
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9.2.3.2.6.3.3 Specific message contents 

Table 9.2.3.2.6.3.3-1 : TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.2.6.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-26 


Information Element 


Value/remark 


Comment 


Condition 


ElVIIVI cause 


'0000 Oil O'B 


Illegal ME 





Combined tracking area update / Rejected / EPS services and non-EPS services 
not allowed 

Test Purpose (TP) 



9.2.3.2.7 

9.2.3.2.7.1 
(1) 

with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to 'EPS services 
and non-EPS services not allowed' } 

then { UE considers the USIM as invalid for EPS services and non-EPS services and enters state 
EMM-DEREGISTERED } 



9.2.3.2.7.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.3.3.5. 
[TS 24.301, clause 5.5.3.3.5] 

#3 (Illegal UE); 

#6 (Illegal ME); or 

#8 (EPS services and non-EPS services not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI, TAI Listand KSI. 

The UE shall consider the USIM as invalid for EPS and non-EPS services until switching off or the UICC 
containing the USIM is removed. Additionally, the UE shall delete the list of equivalent PLMNs and shall enter the 
state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the MM parameters update status, TMSl, LAI 
and ciphering key sequence number, and the GMM parameters GMM state, GPRS update status, P-TMSl, P-TMSI 
signature, RAI and GPRS ciphering key sequence number as specified in 3GPP TS 24.008 [13] for the case when the 
combined routing area updating procedure is rejected with the GMM cause with the same value. 

9.2.3.2.7.3 Test description 

9.2.3.2.7.3.1 Pre-test conditions 

The pre-test conditions are indentical to the one of subclause 9.2.3.2.6. 

9.2.3.2.7.3.2 Test procedure sequence 

The test procedure sequence is indentical to the one of subclause 9.2.3.2.6. 
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9.2.3.2.7.3.3 Specific message contents 

Table 9.2.3.2.7.3.3-1 : TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.2.7.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-26 


Information Element 


Value/remark 


Comment 


Condition 


ElVIIVI cause 


'0000 1000'B 


EPS services and 
non-EPS services 
not allowed 





9.2.3.2.8 
9.2.3.2.8.1 

(1) 



Combined tracking area update / Rejected / EPS services not allowed 
Test Purpose (TP) 



with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to 'EPS services 
not allowed' } 

then { UE considers the USIM as invalid for EPS services and enters state EMM-DEREGISTERED } 
} 

(2) 

with { UE in CS/PS mode 1 or CS/PS mode 2 of operation and have been IMSI attached for non-EPS 
services } 
ensure that { 

when { UE sends a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined TA/LA 
updating' and receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to 'EPS services 
not allowed' } 

then { The UE shall still IMSI attached for non-EPS services } 
} 

9.2.3.2.8.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.3.5. 

[TS 24.301, clause 5.5.3.3.5] 

If the combined tracking area updating cannot be accepted by the network, the MME shall send a TRACKING AREA 
UPDATE REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, enter state MM IDLE, and take the following actions depending on the EMM cause value 
received. 



#7 (EPS services not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAl, TAl List and KSl. The UE shall 
consider then USIM as invalid for EPS services until switching off or the UICC containing the USIM is 
removed. The UE shall delete the list of equivalent PLMNs and shall enter the state EMM-DEREGISTERED. 

A UE in CS/PS mode 1 or CS/PS mode 2 of operation is still IMSI attached for non-EPS services. The UE shall 
set the update status to U2 NOT UPDATED, shall select GERAN or UTRAN radio access technology and 
proceed with appropriate MM specific procedure according to the MM service state. The UE shall not reselect E- 
UTRAN radio access technology until switching off or the UICC containing the USIM is removed. 

NOTE: Some interaction is required with the access stratum to disable E-UTRAN cell reselection. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM 
state, GPRS update status, P-TMSI, P-TMSI signature, RAJ and GPRS ciphering key sequence number as 
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specified in 3GPP TS 24.008 [13] for the case when the combined routing area updating procedure is rejected 
with the GMM cause with the same value. 

9.2.3.2.8.3 Test description 

9.2.3.2.8.3.1 Pre-test conditions 

System Simulator: 

Cell A, Cell B and Cell G are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAl-l(home PLMN) and is set to "Serving cell" 

- Cell B belongs to TAl-2(home PLMN, another TAC) and is set to "Non-Suitable off cell" 

- Cell G belongs to TAl-7(visited PLMN) and is set to "Non-Suitable off cell" 

- If pc_UTRAN Cell 5 and if (NOT pc_UTRAN AND pc_GERAN) Cell 24 are configured according to Table 
4.4.4-2 in [18]. 

if pc_UTRAN, Cell 5 (only active when stated) 

- if pc_GERAN and NOT pc_UTRAN, Cell 24 (only active when stated) 

- Cell 5 and Cell 24 are set to "Non- Suitable off cell" 
The different cells may not be simultaneously activated. 

UE: 

- TheUEhasGUTI-1. 

The UE is registered on TAJ- 1 . 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
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9.2.3.2.8.3.2 



Test procedure sequence 

Table 9.2.3.2.8.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

Cell A as the "non-Suitable cell". 

Cell B as the "Serving cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell B. 


~> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with the EIVIM 
cause set to as "EPS services not allowed" 
as specified. 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


The SS configures: 

Cell A as the "Serving cell". 

Cell B as the "non-Suitable cell". 










6 


Check: Does the UE transmit an ATTACH 

REQUEST message in the next 30 seconds 

on cell A? 

Note: Cell A belongs to the same PLMN 

where the UE was rejected but a different 

TAI 


-> 


ATTACH REQUEST 


1 


F 


7 


The user initiates an attach by IVIMI or by AT 
command. 


- 


- 


- 


- 


8 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell A? 


-> 


ATTACH REQUEST 


1 


F 


9 


The SS configures: 

Cell A as the "non-Suitable off cell". 

Cell G as the "Serving cell". 










10 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell G? 

Note: Cell G belongs to a PLMN which is not 
the same like the one on which the UE was 
rejected. 


-> 


ATTACH REQUEST 


1 


F 


11 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


12 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell G? 


-> 


ATTACH REQUEST 


1 


F 


13 


The SS configures: 

Cell G as the "Serving cell". 

Cell 5 or 24 as the "Suitable cell". 












EXCEPTIQN: Steps 14a1 to 14a5 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










14a1 


IF pc_GERAN or pc_UTRAN THEN the 
following messages are sent and shall be 
received on Cell 5 or 24. 










14a2 


Check: Does the UE transmit a LOCATION 
UPDATING REQUEST message on Cell 5 or 
24? 


-> 


LOCATION UPDATING 
REQUEST 


2 


P 


14a3 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






14a4 


The UE transmits an AUTHENTICATION 
RESPONSE message. 


-> 


AUTHENTICATION RESPONSE 


- 


- 


14a5 


The SS transmits a LOCATION UPDATING 
ACCEPT message with Location updating 
type = "IIVISI attach" as specified in 3GPP TS 
24.008. 


<- 


LOCATION UPDATING ACCEPT 







ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1289 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



15 


The SS configures: 

Cell G as the "Serving cell". 

Cell 5 or 24 as the "non-Suitable cell". 










16 


The user initiates attach by IVIMI or by AT 
command. 


- 


- 


- 


- 


17 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell G? 


~> 


ATTACH REQUEST 


1 


F 



9.2.3.2.8.3.3 Specific message contents 

Table 9.2.3.2.8.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.2.8.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 








EPS update type Value 


'001 'B 


" combined TA/LA 
updating " 




Old GUT! 


GUTI-1 







Table 9.2.3.2.8.3.3-2: Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.2.8.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


'0000011 1'B 


"EPS services not 
allowed" 





9.2.3.2.9 



9.2.3.2.9.1 



Combined tracking area update / Rejected / UE identity cannot be derived by the 
network 

Test Purpose (TP) 



(1) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to ' UE identity 
cannot be derived by the network' } 

then { UE deletes GUTI , last visited registered TAI , TAI list and KSI, enters the state EMM- 
DEREGISTERED, subsequently, automatically initiates the attach procedure and is still IMSI attached 
for non-EPS services } 



(2) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to ' UE identity 
cannot be derived by the network' } 

then { UE deletes P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number } 



9.2.3.2.9.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.3.5 and 
TS 24.008, clause 4.7.5.2.4. 

[TS 24.301, clause 5.5.3.3.5] 

If the combined tracking area updating cannot be accepted by the network, the MME shall send a TRACKING AREA 
UPDATE REJECT message to the UE including an appropriate EMM cause value. 
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Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, enter state MM IDLE, and take the following actions depending on the EMM cause value 
received. 



#9 (UE identity cannot be derived by the network); 

The UE shall set the EPS update status to EU2 NOT UPDATED (and shall store it according to 

subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI, TAI List and KSI. The UE shall delete 

the list of equivalent PLMNs and enter the state EMM-DEREGISTERED. 

Subsequently, the UE shall automatically initiate the attach procedure. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GMM parameters GMM 
state, GPRS update status, P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence number as 
specified in 3GPP TS 24.008 [13] for the case when the combined routing area updating procedure is rejected 
with the GMM cause with the same value. 

A UE in CS/PS mode 1 or CS/PS mode 2 of operation is still IMSI attached for non-EPS services. 



[TS 24.008, clause 4.7.5.2.4] 



The MS shall then take different actions depending on the received reject cause: 



# 9 (MS identity cannot be derived by the network); 

The MS shall set the GPRS update status to GU2 NOT UPDATED (and shall store it according to 
subclause 4.L3.2), enter the state GMM-DEREGISTERED, and shall delete any P-TMSI, P-TMSI signature, 
RAI and GPRS ciphering key sequence number. Subsequently, the MS may automatically initiate the GPRS 
attach procedure. 



9.2.3.2.9.3 Test description 

9.2.3.2.9.3.1 Pre-test conditions 

System Simulator: 

Cell A and Cell B are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs to TAI- 1 (home PLMN) and is set to "Serving cell" 

- Cell B belongs to TAI-2(home PLMN, another TAC) and is set to "Non-Suitable cell" 
If pc_UTRAN supported by UE, Cell 5 is configured. 

- Cell 5 belongs to RAI-l(home PLMN) and is set to "Non-Suitable cell" 

- If pc_GERAN and NOT pc_UTRAN supported by UE, Cell 24 is configured. 

- Cell 24 belongs to RAI-l(home PLMN) and is set to "Non-Suitable cell" 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 

- The UE has GUTI- 1. 

The UE is registered on TAI- 1 . 
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- IF pc_GERAN or pc_UTRAN THEN the UE has TMSI- 1 , P-TMSI- 1 and P-TMSI signature- 1 , and the UE is 
registered on LAI- 1 and RAI- 1 . 

Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 

9.2.3.2.9.3.2 Test procedure sequence 

Table 9.2.3.2.9.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell A to the "Non-Suitable 

cell". 

Set the cell type of Cell B to the "Serving cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with EIVIM cause 
set to "UE identity cannot be derived by the 
network". 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


P 




EXCEPTION: Steps 5a1 to 5a7 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










5a1 


IF pc_UTRAN or pc_GERAN THEN the SS 
sets the cell type of Cell B to the "non-Suitable 
cell" and sets the cell type of Cell 5 or Cell 24 
to the "Serving cell". 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










5a2 


Void 


- 


- 


- 


- 


5a3 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


2 


P 


5a4 


The SS transmits an AUTHENTICATION AND 
CIPHERING REQUEST message to initiate 
the authentication and AKA procedure. 


<— 


AUTHENTICATION AND 
CIPHERING REQUEST 






5a5 


The UE transmits an AUTHENTICATION AND 
CIPHERING RESPONSE message. 


-> 


AUTHENTICATION AND 
CIPHERING RESPONSE 


- 


- 


5a6 


The SS transmits an ATTACH ACCEPT 
message. 


<~ 


ATTACH ACCEPT 


- 


- 


5a7 


The UE transmits an ATTACH COMPLETE 
message. 


-> 


ATTACH COMPLETE 


- 


- 



9.2.3.2.9.3.3 Specific message contents 

Table 9.2.3.2.9.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.2.9.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


Old GUTI 


GUTI-1 






Old P-TMSI signature 


P-TMSI signature-1 






Old location area identification 


LAI-1 






TMSI status 


Not present 
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Table 9.2.3.2.9.3.3-2: Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.2.9.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-26 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 1001'B 


UE identity cannot 
be derived by the 
network 





Table 9.2.3.2.9.3.3-3: Message ATTACH REQUEST (step 4, Table 9.2.3.2.9.3.2-1) 



Derivation Path: TS 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUTI or IMS! 


IMSI 






Old P-TMSI signature 


Not present 






Last visited registered TAI 


Not present 






Old location area identification 


LAI-1 






TMSI status 


Not present 







Table 9.2.3.2.9.3.3-4: Message ATTACH REQUEST (step 5a3, Table 9.2.3.2.9.3.2-1) 



Derivation Path : TS 24.008 , Table 9.4.1 


Information Element 


Value/remark 


Comment 


Condition 


MS network capability 


Any allowed value 






Attach type 


'011'B 


Combined 
GPRS/IMSI attach 




GPRS ciphering key sequence number 


'111'B 


No key is 
available (MS to 
network) 




DRX parameter 


Any allowed value 






P-TMSI or IMSI 


IMSI-1 






Old routing area identification 


All bits of octets 5 and 6 

are set to 1 , except bit 1 

of octet 6 which is set to 

0. 

Other bits are not 

checked. 






MS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Not present 






Requested READY timer 
value 


Not present or any 
allowed value 






TMSI status 


Not present 






PS LCS Capability 


Not present or any 
allowed value 






Mobile station classmark 2 


Not present or any 
allowed value 






Mobile station classmark 3 


Not present or any 
allowed value 






Supported Codecs 


Not present or any 
allowed value 






UE network capability 


Not present or any 
allowed value 






Additional mobile identity 


Not present 






Additional old routing area identification 


Not present 
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9.2.3.2.10 Combined tracking area update / Rejected / UE implicitly detached 

9.2.3.2.1 0.1 Test Purpose (TP) 
(1) 

with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to ' Implicitly- 
detached' } 

then { UE sends an ATTACH REQUEST message } 
} 

9.2.3.2.10.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.3.5. 

[TS 24.301, clause 5.5.3.3.5] 

If the combined tracking area updating cannot be accepted by the network, the MME shall send a TRACKING AREA 
UPDATE REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, enter state MM IDLE, and take the following actions depending on the EMM cause value 
received. 



#10 (Implicitly detached); 

The UE shall delete the Ust of equivalent PLMNs and shall enter the state EMM-DEREGISTERED.NORMAL- 
SERVICE. The UE shall then perform a new attach procedure. 



9.2.3.2.10.3 Test description 

9.2.3.2.1 0.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell B 

- Cell A is set to the "Serving cell" and Cell B is set to the "non-Suitable cell". 
UE: 

- The UE is configured to initiate combined EPS/IMSI attach. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 
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9.2.3.2.10.3.2 Test procedure sequence 

Table 9.2.3.2.10.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell B to the "Serving 
cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with the EIVIM 
cause set to 'Implicitly detached'. 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CQNNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


1 


P 


5 


The SS transmits an IDENTITY REQUEST 
message requesting IMSI in the IE Identity 
type 


<- 


IDENTITY REQUEST 






6 


The UE transmits an IDENTITY RESPQNSE 
message. 


-> 


IDENTITY RESPONSE 


- 


- 


7 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






8 


The UE transmits an AUTHENTICATION 
RESPQNSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






9 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


10 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 10Aa1 to 10Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










10Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






10Aa 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






11 


The SS transmits ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 12 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










12 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 
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9.2.3.2.10.3.3 Specific message contents 

Table 9.2.3.2.10.3.3-1 : TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.2.10.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-26 


Information Element 


Value/remark 


Comment 


Condition 


EMIVI cause 


'0000 1 01 0'B 


Implicitly detached 





9.2.3.2.12 
9.2.3.2.12.1 

(1) 



Combined tracking area update / Rejected / Tracking area not allowed 
Test Purpose (TP) 



with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to 'Tracking Area 
not allowed' } 

then { UE sets the EPS update status to EU3 ROAMING NOT ALLOWED, deletes any GUTI , last visited 
registered TAI , TAI List and KSI, enters the state EMM-DEREGISTERED. LIMITED-SERVICE and stores the 
current TAI in the list of "forbidden tracking areas for regional provision of service" } 



(2) 

with { UE in EMM-DEREGISTERED .LIMITED-SERVICE state having the list of "forbidden tracking areas for 
regional provision of service" } 
ensure that { 

when { serving cell belongs to TAI where UE was rejected } 
then { UE does not attempt to attach } 



(3) 

with { UE in EMM-DEREGISTERED .LIMITED-SERVICE state having the list of "forbidden tracking areas for 
regional provision of service" } 
ensure that { 

when { UE reselects a new cell which belongs to the TAI in the list of "forbidden tracking areas 
for regional provision of service" } 

then { UE does not attempt to attach } 
} 

(4) 

with { UE is powered off or switched off } 
ensure that { 

when { UE is powered on or switched on in the cell belonging to the TAI which was in the list of 
"forbidden tracking areas for regional provision of service" before the UE was powered off or 
switched off } 

then { UE attempts to attach } 

} 

9.2.3.2.12.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.3.5. 

[TS 24.301, clause 5.5.3.3.5] 

If the combined tracking area updating cannot be accepted by the network, the MME shall send a TRACKING AREA 
UPDATE REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, enter state MM IDLE, and take the following actions depending on the EMM cause value 
received. 



#12 (Tracking area not allowed); 
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The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI, TAI List and KSI. The UE shall reset 
the tracking area updating attempt counter and shall enter the state EMM-DEREGISTERED. LIMITED- 
SERVICE. 

The UE shall store the current TAI in the list of "forbidden tracking areas for regional provision of service". 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the MM parameters update status, TMSI, 
LAI, ciphering key sequence number and the location update attempt counter, and the GMM parameters GMM 
state, GPRS update status, P-TMSI, P-TMSI signature, RAI, GPRS ciphering key sequence number and routing 
area updating attempt counter as specified in 3GPP TS 24.008 [13] for the case when the combined routing area 
updating procedure is rejected with the GMM cause with the same value. 



9.2.3.2.12.3 Test description 

9.2.3.2.12.3.1 Pre-test conditions 

System Simulator: 

- Cell A, Cell B and Cell M. 

- Cell A is set to the "Serving cell", and Cell B and Cell M is set to the "non-Suitable cell". 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 
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9.2.3.2.12.3.2 Test procedure sequence 

Table 9.2.3.2.12.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell A to the "Suitable 
neighbour cell". Set the cell type of Cell B to 
the "Serving cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with the EIVIM 
cause set to 'Tracking Area not allowed'. 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds on 
Cell A or Cell B? 


-> 


ATTACH REQUEST 


1,2 


F 


6 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell B to the "non- 
Suitable cell". Set the cell type of Cell M to the 
"Serving cell". 










- 


The following messages are to be observed on 
Cell IVI unless explicitly stated otherwise. 


- 


- 


- 


- 


7 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


3 


F 


8 


Set the cell type of Cell A to the "Serving cell". 
Set the cell type of Cell IVI to the "non-Suitable 
cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


9 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


3 


F 


10 


The UE is powered off or switched off. 


- 


- 


- 


- 


11 


The UE is powered on or switched on. 


- 


- 


- 


- 


12 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CQNNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


1,4 


P 


13 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






14 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






15 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


16 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 16Aa1 to 16Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










16Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






16Aa 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






17 


The SS transmits ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 


<— 


ATTACH ACCEPT 


- 


- 
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BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 












EXCEPTION: In parallel to the event described 
in step 18 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










18 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 







9.2.3.2.12.3.3 Specific message contents 

Table 9.2.3.2.12.3.3-1 : TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.2.12.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-26 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 1100'B 


Tracking Area not 
allowed 





Table 9.2.3.2.12.3.3-2: ATTACH REQUEST (step 12, Table 9.2.3.2.12.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




OldGUTIorlMSI 


IMSIoftheUE 






Last visited registered TAI 


Not present 







9.2.3.2.14 

9.2.3.2.14.1 

(1) 



Combined tracking area update / Rejected / EPS services not allowed in the 
PLMN 

Test Purpose (TP) 



with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to 'EPS services 
not allowed in this PLMN' } 

then { UE deletes any GUTI , last visited registered TAI, TAI List and eKSI, and UE stores the 
PLMN identity in the "forbidden PLMNs for GPRS service" list } 
} 

(2) 

with { UE is in EMM-DEREGISTERED . PLMN-SEARCH state } 
ensure that { 

when { UE detects a E-UTRAN cell which belongs to the same PLMN which is stored in the "forbidden 
PLMNs for GPRS service" list } 

then { UE does not attempt to access on this cell } 
} 

(3) 

with { UE is IMSI attached for non-EPS services and is in EMM-DEREGISTERED . PLMN-SEARCH state and one 
PLMN stored in the "forbidden PLMNs for GPRS service" list } 
ensure that { 

when { UE update status is U2 NOT UPDATED and detects a new GERAN or UTRAN cell which belongs to 
the PLMN I 
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then { UE initiates location update procedure in this GERAN or UTRAN cell } 
} 

(4) 

with { UE is in EMM-DEREGISTERED. PLMN-SEARCH state } 
ensure that { 

when { UE detects a E-UTRAN cell which belongs to another PLMN which is not stored in the 
"forbidden PLMNs for GPRS service" list } 

then { UE attempts to access on this cell } 
} 

9.2.3.2.14.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.3.5. 

[TS 24.301, clause 5.5.3.3.5] 

If the combined tracking area updating cannot be accepted by the network, the MME shall send a TRACKING AREA 
UPDATE REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, enter state MM IDLE, and take the following actions depending on the EMM cause value 
received. 

#14 (EPS services not allowed in this PLMN); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3). Furthermore the UE shall delete any GUTl, last visited registered TAI, TAI List and eKSI. 
The UE shall reset the tracking area updating attempt counter and shall enter the state EMM- 
DEREGISTERED.PLMN-SEARCH. 

The UE shall store the PLMN identity in the "forbidden PLMNs for GPRS service" list. 

The UE operating in CS/PS mode 1 or CS/PS mode 2 of operation is still IMSI attached for non-EPS services 
and shall set the update status to U2 NOT UPDATED. 

A UE operating in CS/PS mode 1 of operation may select GERAN or UTRAN radio access technology and 
proceed with the appropriate MM specific procedure according to the MM service state. In this case the UE shall 
not reselect E-UTRAN radio access technology for the duration the UE is on the PLMN or equivalent PLMN. 

A UE in CS/PS mode 1 of operation may perform a PLMN selection according to 3GPP TS 23. 122 [6]. 

A UE operating in CS/PS mode 2 of operation shall perform a PLMN selection according to 
3GPPTS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSI, P-TMSI signature, RAI, GPRS ciphering key sequence number and routing area updating 
attempt counter as specified in 3GPP TS 24.008 [13] for the case when the combined routing area updating 
procedure is rejected with the GMM cause with the same value. 

9.2.3.2.14.3 Test description 
9.2.3.2.14.3.1 Pre-test conditions 
System Simulator: 

Cell E, Cell I and Cell J are configured according to Table 6.3.2.2-1 in [18]. 

Cell E belongs to TAI-12(visited PLMN, frequency 2) and is set to "Serving cell" 

Cell I belongs to TAI-9(visited PLMN, another TAC, frequency 3) and is set to "Non- Suitable off cell" 

- Cell J belongs to TAI-10(visited PLMN, another PLMN, frequency 4) and is set to "Non-Suitable off cell" 
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PLMN in Cell E, Cell I and Cell J are not HPLMN of the UE. 

- If pc_UTRAN Cell 5 and if (NOT pc_UTRAN AND pc_GERAN) Cell 24 are configured according to Table 

4.4.4-2 in [18]. 

- if pc_UTRAN, Cell 5 (only active when stated, NMO 2) 

- if pc_GERAN and NOT pc_UTRAN, Cell 24 (only active when stated, NMO 2) 

- Cell 5 and Cell 24 are set to "Non- Suitable off cell" 

- The different cells may not be simultaneously activated. 
UE: 

- The UE has GUTI-12. 

The UE is registered on TAI- 12. 

- IF pc_GERAN or pc_UTRAN THEN the UE has P-TMSI and P-TMSI signature. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell E according to [18]. 
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9.2.3.2.14.3.2 Test procedure sequence 

Table 9.2.3.2.14.3.2-1 : Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

Cell E as the "non-Suitable cell". 

Cell 1 as the "Serving cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST on Cell 1. 


~> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with the EIVIM 
cause set to as "EPS services not allowed in 
this PLIVIN" as specified. 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


The SS configures: 

Cell 1 as the "non-Suitable cell". 

Cell E as the "Serving cell". 










6 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds 
on cell E? 


-> 


ATTACH REQUEST 


1,2 


F 


7 


The SS configures: 

Cell E as a "non-Suitable cell". 

Cell 5 or 24 as the "Serving cell". 












EXCEPTION: Steps 8a1 to 8a4 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported. 










8a1 


IF pc_GERAN or pc_UTRAN, THEN the 
following messages are sent and shall be 
received on Cell 5 or 24. 
Check: Does the UE transmit a LQCATIQN 
UPDATING REQUEST message on Cell 5 or 
cell 24 in the next 30 seconds? 


-> 


LOCATION UPDATING 
REQUEST 


3 


P 


8a2 


The SS transmits an AUTHENTICATIQN 
REQUEST message to initiate the 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






8a3 


The UE transmits an AUTHENTICATION 
RESPONSE message. 


-> 


AUTHENTICATION RESPONSE 


- 


- 


8a4 


The SS transmits a LOCATION UPDATING 
ACCEPT message with Location updating 
type = "IIVISI attach" as specified in 3GPP TS 
24.008. 


<— 


LOCATION UPDATING ACCEPT 






9 


The SS configures: 

Cell J as the " Serving cell". 

Cell 5 or 24 as the "non-Suitable off cell". 










10 


Check: Does the UE transmit ATTACH 
REQUEST message with a PDN 
CONNECTIVITY REQUEST message to 
request PDN connectivity to the default PDN 
on cell J? 


-> 


ATTACH REQUEST 


1,4 


P 


11 


Steps 5 to 17 of generic test procedure in TS 
36.508 subclause 4.5.2.3 are performed. 
NOTE: The UE performs an ATTACH 
procedure and the RRC connection is 
released. 
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9.2.3.2.14.3.3 Specific message contents 

Table 9.2.3.2.14.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.2.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 








EPS update type Value 


'001 'B 


"combined TA/LA 
updating " 




Old GUT! 


GUTI-7 







Table 9.2.3.2.14.3.3-2: Message TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.2.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EMM cause 


'000011 10'B 


" EPS services 
not allowed in this 
PLMN " 





Table 9.2.3.2.14.3.3-3: Message ATTACH REQUEST (step 10, Table 9.2.3.2.14.3.2-1) 



Derivation path: 36.508 table 4.7.2-4 


Information Element 


Value/Remark 


Comment 


Condition 


Old GUTI or IMS! 


IMS! 






Last visited registered TAI 


Not present 







9.2.3.2.15 
9.2.3.2.15.1 
(1) 



Combined tracking area update / Rejected / No suitable cells in tracking area 
Test Purpose (TP) 



with { UE having sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the EMM cause set to 'No Suitable 
Cells In tracking area' } 

then { UE selects a suitable cell in another tracking area in the same PLMN and performs the 
tracking area updating procedure with EPS update type set to 'combined TA/LA updating with IMSI 
attach' I 



9.2.3.2.15.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.3.5. 

[TS 24.301, clause 5.5.3.3.5] 

If the combined tracking area updating cannot be accepted by the network, the MME shall send a TRACKING AREA 
UPDATE REJECT message to the UE including an appropriate EMM cause value. 

Upon receiving the TRACKING AREA UPDATE REJECT message, the UE shall stop timer T3430, stop any 
transmission of user data, enter state MM IDLE, and take the following actions depending on the EMM cause value 
received. 



#15 (No suitable cells in tracking area); 

The UE shall set the EPS update status to EU3 RO/VMING NOT /U.LOWED (and shall store it according to 
subclause 5.1.3.3). The UE shall reset the tracking area updating attempt counter and shall enter the state EMM- 
REGISTERED.LIMITED-SERVICE. 

The UE shall store the current TAI in the list of "forbidden tracking areas for roaming" and shall remove the 
current TAI from the stored TAI list if present. 
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The UE shall search for a suitable cell in another tracking area or in another location area in the same PLMN 
according to 3GPP TS 36.304 [21]. 

The UE shall indicate the Update type IE "combined TA/LA updating with IMSI attach" when performing the 
tracking area updating procedure. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the MM parameters update status and the 
location update attempt counter, and the GMM parameters GMM state, GPRS update status and routing area 
updating attempt counter as specified in 3GPP TS 24.008 [13] for the case when the combined routing area 
updating procedure is rejected with this cause value. 



9.2.3.2.15.3 Test description 

9.2.3.2.1 5.3.1 Pre-test conditions 
System Simulator: 

- Cell A, Cell B and Cell C. 

- Cell A is set to the "Serving cell" and Cell B and Cell C is set to the "non-Suitable cell". 
UE: 

The UE is configured to initiate combined EPS/IMSI attach. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 

9.2.3.2.15.3.2 Test procedure sequence 

Table 9.2.3.2.15.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell B to the "Serving 
cell". Set the cell type of Cell C to the "Suitable 
neighbour cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a TRACKING AREA 
UPDATE REJECT message with the EIVIM 
cause set to 'No Suitable Cells In tracking 
area'. 


<- 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


- 


The following messages are to be observed on 
Cell C unless explicitly stated otherwise. 


- 


- 


- 


- 


5 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message with EPS 
update type set to 'combined TA/LA updating 
with IMSI attach'? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


6 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


7 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 






8 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


9 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 
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9.2.3.2.15.3.3 Specific message contents 

Table 9.2.3.2.15.3.3-1 : TRACKING AREA UPDATE REJECT (step 3, Table 9.2.3.2.15.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-26 


Information Element 


Value/remark 


Comment 


Condition 


EMIVI cause 


'0000 11 11 'B 


No Suitable Cells 
In tracking area 





Table 9.2.3.2.15.3.3-2: TRACKING AREA UPDATE REQUEST (step 5, Table 9.2.3.2.15.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


EPS update type 








EPS update type value 


'010'B 


Combined TA/LA 
updating with IMS! 
attach 





9.2.3.2.16 
9.2.3.2.16.1 
(1) 



Combined tracking area update / Rejected / Not authorized for this CSG 
Test Purpose (TP) 



with { UE has sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the reject cause set to "Not 
authorized for this CSG" and with integrity protection } 

then { UE removes the CSG ID from the Allowed CSG list } 



(2) 

with { UE has sent a TRACKING AREA UPDATE REQUEST message with EPS update type set to 'Combined 
TA/LA updating' } 
ensure that { 

when { UE receives a TRACKING AREA UPDATE REJECT message with the reject cause set to "Not 
authorized for this CSG" and with integrity protection } 

then { UE searches for a suitable cell in the same PLMN and sent a TRACKING AREA UPDATE REQUEST 
message with EPS update type set to ' combined TA/LA updating with IMSI attach ' } 
} 

9.2.3.2.16.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.3.3.5. 

[TS 24.301, clause 5.5.3.3.5] 

#25 (Not authorized for this CSG); 

Cause #25 is only applicable when received from a CSG cell. Cause #25 received from a non-CSG cell is 
considered as an abnormal case and the behaviour of the UE is specified in subclause 5.5.3.3.6. 

If the TRACKING AREA UPDATE REJECT message with cause #25 was received without integrity protection, 
then the UE shall discard the message. 

The UE shall set the EPS update status to EU3 RO/VMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3). The UE shall reset the tracking area updating attempt counter and shall enter the state EMM- 
REGISTERED.LIMITED-SERVICE. 

If the CSG ID of the cell where the UE has sent the TRACKING AREA UPDATE REQUEST message is 
contained in the Allowed CSG list, the UE shall remove the CSG ID from the Allowed CSG list. 
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If the CSG ID of the cell where the UE has sent the TRACKING AREA UPDATE REQUEST message is 
contained in the Operator CSG list, the UE shall apply the procedures defined in 3GPP TS 23.122 [6] 
subclause 3.1 A. 

The UE shall search for a suitable cell in the same PLMN according to 3GPP TS 36.304 [21]. 

The UE shall indicate the Update type IE "combined TA/LA updating with IMSI attach" when performing the 
tracking area updating procedure. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the MM parameters update status and the 
location update attempt counter, and the GMM parameters GMM state, GPRS update status and routing area 
updating attempt counter as specified in 3GPP TS 24.008 [13] for the case when the combined routing area 
updating procedure is rejected with the GMM cause with the same value. 

9.2.3.2.16.3 Test description 

9.2.3.2.16.3.1 Pre-test conditions 

System Simulator: 

- Cell A , Cell B, Cell C, 

- Cell A(TAI-1, frequency 1, HPLMN, not a CSG cell) and is set to "Serving cell" 

- Cell B(TAI-2, frequency 1, HPLMN, is a CSG cell) and is set to "Non- Suitable off cell" 

- Cell C(TAI-3, frequency 1, HPLMN, not a CSG cell) and is set to "Non-Suitable off cell" 
UE: 

- The test USIM contains an Allowed CSG list which includes CSG ID of Cell B. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) with condition CombinedAttach on Cell A according to [18] 
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9.2.3.2.16.3.2 Test procedure sequence 

Table 9.2.3.2.16.3.2-1 : Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS configures: 

- Cell A as a "Not Suitable cell". 

- Cell B as a "Serving cell". 










2 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message. 


--> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits an TRACKING AREA 
UPDATE REJECT message with EIVIM cause 
= "Not authorized for this CSG" with integrity 
protection. 


<— 


TRACKING AREA UPDATE 
REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Check: Does the UE transmit an TRACKING 
AREA UPDATE REQUEST message on Cell B 
in the next 30 seconds? 


— > 


TRACKING AREA UPDATE 
REQUEST 


1 


F 


6 


The SS configures: 

- Cell A as a "Not Suitable off cell". 

- Cell B as a "Not Suitable cell". 

- Cell C as a "Suitable cell". 










7 


Check: Does the UE transmit an TRACKING 
AREA UPDATE REQUEST message in the 
next 30 seconds on Cell C? 


— > 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


8 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


9 


The UE transmits a TRACKING AREA 
UPDATE COMPLb 1 b message. 


— > 


TRACKING AREA UPDATE 
CQMPLETE 


- 


- 


10 


The SS configures: 

- Cell A as a "Not Suitable off cell". 

- Cell B as a " Serving cell". 

- Cell C as a " Not Suitable cell". 










11 


Check: Does the UE transmit an TRACKING 
AREA UPDATE REQUEST message in the 
next 30 seconds on Cell B? 


— > 


TRACKING AREA UPDATE 
REQUEST 


1 


F 



9.2.3.2.16.3.3 Specific message contents 

Table 9.2.3.2.16.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.2.16.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 | 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 


'001 'B 


"combined TA/LA 
updating" 




Table 9.2.3.2.16.3.3-2: Message TRACKING AF 


?EA UPDATE REJECT (step 3, Table 9.2.3.2.16.3.2-1) 


Derivation Path: 36.508, Table 4.7.2-26 


Information Element 


Value/remark 


Comment 


Condition 


EIVIM cause 


'00011 001 'B 


#25 " Not authorized 
for this CSG" 




Table 9.2.3.2.16.3.3-3: Message TRACKING AF 


?EA UPDATE REQUEST (step 7, Table 9.2.3.2.16.3.2-1) 


Derivation path: 36.508 table 4.7.2-27 | 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 


'010'B 


" combined TA/LA 
updating with IIVISI 
attach " 
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Table 9.2.3.2.16.3.3-4: SystemlnformationBlockTypel for Cell A, B, C (Pre-test conditions and all 

steps in Table 9.2.3.2.16.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type1 ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








csg-lndication 


TRUE 




CellB 




FALSE 




Cell A 




FALSE 




CellC 


csg-ldentity 


Not present 




Cell A 




'000 0000 0000 0000 
0000 0000 001 0'B 




CellB 




Not present 




CellC 


} 








} 









Combined tracking area update / Abnormal case / handling of the EPS tracking 
area updating attempt counter 

Test Purpose (TP) 



9.2.3.2.17 

9.2.3.2.17.1 
(1) 

with { UE has initiated combined tracking area updating procedure and has the tracking area updating 
attempt counter less than 5 } 
ensure that { 

when { UE detects release of the NAS signalling connection and in a EPS update status different to 
EUl UPDATED and update status different from Ul UPDATED } 

then { UE starts timer T3411, deletes any LAI, TMSI, ciphering key sequence number and list of 
equivalent PLMNs and set the update status to U2 NOT UPDATED } 



(2) 

with { UE has initiated combined tracking area updating procedure and has the tracking area updating 
attempt counter equal to 5 } 
ensure that { 

when { UE detects release of the NAS signalling connection } 

then { UE starts timer T3402, deletes any LAI, TMSI, ciphering key sequence number and list of 
equivalent PLMNs and set the update status to U2 NOT UPDATED } 



9.2.3.2.17.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 24.301, clause 5.5.3.1, clause 
5.5.3.2.6 and clause 5.5.3.3.6. 

[TS 24.301, clause 5.5.3.1] 



A tracking area updating attempt counter is used to limit the number of subsequently rejected tracking area update 
attempts. The tracking area updating attempt counter shall be incremented as specified in subclause 5.5.3.2.6. 
Depending on the value of the tracking area updating attempt counter, specific actions shall be performed. The tracking 
area updating attempt counter shall be reset when: 

an attach or combined attach procedure is successfully completed; 

a normal or periodic tracking area updating or a combined tracking area updating procedure is successfully 
completed; or 

a normal or periodic tracking area updating or a combined tracking area updating procedure is rejected with 

EMM cause #11, #12, #13, #14, #15 or #25. 
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Additionally the tracking area updating attempt counter shall be reset when the UE is in substate EMM- 
REGISTERED.ATTEMPTING-TO-UPDATE or EMM-REGISTERED.ATTEMPTING-TO-UPDATE-MM, and: 

a new tracking area is entered; or 

timer T3402 expires. 
[TS 24.301, clause 5.5.3.2.6] 
The following abnormal cases can be identified: 

c) T3430 timeout 

The UE shall abort the procedure and proceed as described below. The NAS signalling connection shall be 
released locally. 

For the cases b, c and d the UE shall proceed as follows: 

Timer T3430 shall be stopped if still running. The tracking area updating attempt counter shall be incremented, 
unless it was already set to 5. 

If the tracking area updating attempt counter is less than 5, and the TAI of the current serving cell is included in 
the TAI list and the EPS update status is equal to EUl UPDATED: 

- the UE shall keep the EPS update status to EUl UPDATED and enter state EMM- 
REGISTERED.NORMAL-SERVICE. The UE shall start timer T341 1 . When timer T341 1 expires the 
tracking area updating procedure is triggered again. 

If the tracking area updating attempt counter is less than 5, and the TAI of the current serving cell is not included 
in the TAI list or the EPS update status is different to EUl UPDATED: 

- the UE shall start timer T341 1, shall set the EPS update status to EU2 NOT UPDATED and change to state 
EMM-REGISTERED.ATTEMPTING-TO-UPDATE. When timer T341 1 expires the tracking area updating 
procedure is triggered again. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GPRS update status as 
specified in 3GPP TS 24.008 [13] for the abnormal case when a normal or periodic routing area updating 
procedure fails and the routing area updating attempt counter is less than 5 and the GPRS update status is 
different from GUI UPDATED. 

If the tracking area updating attempt counter is equal to 5: 

- the UE shall start timer T3402, shall set the EPS update status to EU2 NOT UPDATED, shall delete the list 
of equivalent PLMNs and shall change to state EMM-REGISTERED. ATTEMPTING-TO-UPD ATE or 
optionally to EMM-REGISTERED.PLMN-SEARCH in order to perform a PLMN selection according to 
3GPPTS 23.122 [6]. 

If A/Gb mode or lu mode is supported by the UE, the UE shall in addition handle the GPRS update status as 
specified in 3GPP TS 24.008 [13] for the abnormal case when a normal or periodic routing area updating 
procedure fails and the routing area updating attempt counter is equal to 5. 

[TS 24.301, clause 5.5.3.3.6] 



If the tracking area updating attempt counter is incremented according to subclause 5.5.3.2.6 the next actions depend on 
the value of the tracking area updating attempt counter. 

if the update status is Ul UPDATED and the tracking area updating attempt counter is less than 5, then the UE 
shall keep the update status to Ul UPDATED, the new MM state is MM IDLE substate NORMAL SERVICE; 

if the tracking area updating attempt counter is less than 5 and, additionally, the update status is different from 
Ul UPDATED UE shall delete any LAI, TMSI, ciphering key sequence number and list of equivalent PLMNs 
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and set the update status to U2 NOT UPDATED. The MM state remains MM LOCATION UPDATING 
PENDING; or 

if the tracking area updating attempt counter is equal to 5, the UE shall delete any LAI, TMSI, ciphering key 
sequence number and list of equivalent PLMNs and set the update status to U2 NOT UPDATED. A UE 
operating in CS/PS mode 1 of operation shall select GERAN or UTRAN radio access technology and proceed 
with appropriate MM or GMM specific procedures. 

9.2.3.2.17.3 Test description 

9.2.3.2.1 7.3.1 Pre-test conditions 

System Simulator: 

- Cell A, and Cell B. 
UE: 

- TheUEhasGUTI-1. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
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9.2.3.2.17.3.2 Test procedure sequence 

Table 9.2.3.2.17.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell B to the "Serving 
cell". 










- 


The following messages are sent and shall be 
received on Cell B. 


- 


- 


- 


- 


2 


Check: Does the UE transmits a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


3 


Wait for 25s to ensure that T3430 and T341 1 

expire. 

NOTE 1 : The tracking area updating attempt 

counter is 1 . 










4 


Check: Does the UE transmits a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


5 


Wait for 25s to ensure that T3430 and T341 1 

expire. 

NOTE 2: The tracking area updating attempt 

counter is 2. 










6 


Check: Does the UE transmits a TRACKING 
AREA UPDATE REQUEST message? 


~> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


7 


Wait for 25s to ensure that T3430 and T341 1 

expire. 

NOTE 3: The tracking area updating attempt 

counter is 3. 










8 


Check: Does the UE transmits a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


9 


Wait for 25s to ensure that T3430 and T341 1 

expire. 

NOTE 4: The tracking area updating attempt 

counter is 4. 










10 


Check: Does the UE transmits a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


11 


The SS releases the RRC connection. 
NOTE 5: The tracking area updating attempt 
counter is 5 and reset. 










12 


Wait for 12 min to ensure that T3402 expires. 


- 


- 


- 


- 


13 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REQUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


14 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


15 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


~> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 



9.2.3.2.17.3.3 Specific message contents 

Table 9.2.3.2.17.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 2, Table 9.2.3.2.17.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


EPS update type 








EPS update type Value 


'001 'B 


"combined TA/LA 
updating" 




Old GUTI 


GUTI-1 






Last visited registered TAI 


TAI-1 
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Table 9.2.3.2.17.3.3-2: Message TRACKING AREA UPDATE REQUEST (step 4, step 6, step 8, step 10, 

and step 13, Table 9.2.3.2.17.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


EPS update type 








EPS update type Value 


'001 'B 


"combined TA/LA 
updating" 




Old GUT! 


GUTI-1 






Old location area identification 


Not present 






TMSI status 





no valid TMSI 
available 





Table 9.2.3.2.17.3.3-3: Message TRACKING AREA UPDATE ACCEPT (step 14, Table 9.2.3.2.17.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-24 


Information Element 


Value/remark 


Comment 


Condition 


GUT! 


GUTI-2 







9.2.3.3 

9.2.3.3.1 

9.2.3.3.1.1 

(1) 



lu mode to SI mode inter-system change in idle mode 
First lu mode to SI mode inter-system change after attach 
Test Purpose (TP) 



with { the UE is powered on in UTRAN with a USIM containing valid EPS identities and EPS security 
context and has attached in UTRAN and activated a PDP context } 
ensure that { 

when { the UE reselects a E-UTRAN cell } 

then { the UE transmits a TRACKING AREA UPDATE REQUEST message including eKSI stored in the 
USIM, old GUTI mapped from RAI and P-TMSI, GPRS ciphering sequence number, nonceUE and the UE radio 
capability information update needed IE, the message is integrity protected using the EPS security 
context stored in the USIM and encapsulated in an RRCConnectionSetupComplete message whith 
registeredMME set to the MME part of the mapped GUTI } 

(2) 

with { the UE has performed a TAU procedure in EUTRAN after initial registration at power on in 
UTRAN } 
ensure that { 

when { the UE reselects a UTRAN cell } 

then { the UE transmits a ROUTING AREA UPDATE REQUEST message including P-TMSI and P-TMSI 
signature mapped from GUTI, previously allocated P-TMSI as additional mobile identity, RAI where P- 
TMSI was allocated as additional old routing area identification, eKSI allocated in UTRAN as GPRS 
ciphering key sequence number, the message is encapsulated in an INITIAL DIRECT TRANSFER message 
including IDNSS mapped from P-TMSI, START value set to and PLMN identity } 



(3) 



with { the UE has performed a TAU procedure in EUTRAN after initial registration at power on in 
UTRAN and has transmitted a ROUTING AREA UPDATE REQUEST message } 
ensure that { 

when { the UE receives a SECURITY MODE COMMAND message } 

then { the UE transmits a SECURITY MODE COMPLETE and starts performing ciphering an integrity 
protection using CK' and IK' derived from Kssme and UL NAS COUNT } 

NOTE: ISR considered not in the scope of this test case, so it is never activated. 

9.2.3.3.1.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 23.003 clause 2.8.2.1, 
2.8.2.2, TS 23.401 clauses 5.3.1.1, 5.3.3.1, 5.3.3.3 and Annex D; TS 25.331 clauses 8.1.8.2 and 10.3.1.6 (on IDNNS); 
TS 24.008 [NAS msg contents]; TS 24.301 clause 5.5.3.2.2; and TS 36.331 clauses 5.3.3.3 and 5.3.3.4. 
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[TS 23.003, clause 2.8.2.1] 

The mapping of the GUTI shall be done to the combination of RAI of GERAN / UTRAN and the P-TMSI: 

E-UTRAN <MCC> maps to GERAN/UTRAN <MCC> 

E-UTRAN <MNC> maps to GERAN/UTRAN <MNC> 

E-UTRAN <MME Group ID> maps to GERAN/UTRAN <LAC> 

E-UTRAN <MME Code> maps to GERAN/UTRAN <RAC> and is also copied into the 8 most significant bits 
of the NRI field within the P-TMSI; 

E-UTRAN <M-TMSI> maps as follows: 

- 6 bits of the E-UTRAN <M-TMS1> starting at bit 29 and down to bit 24 are mapped into bit 29 and down to 
bit 24 of the GERAN/UTRAN <P-TMSI>; 

16 bits of the E-UTRAN <M-TMSI> starting at bit 15 and down to bit are mapped into bit 15 and down to 
bit of the GERAN/UTRAN <P-TMSI>; 

- and the remaining 8 bits of the E-UTRAN <M-TMSI> are mapped into the 8 MBS bits of the <P-TMSI 
signature> field. 

For UTRAN, the 10-bit long NRI bits are masked out from the P-TMSI and also supplied to the RAN node as IDNNS 
(Intra Domain NAS Node Selector). However, the RAN configured NRI length should not exceed 8 bits. 

[TS 23.003, clause 2.8.2.2] 

The mapping of P-TMSI (TLLI) and RAI in GERAN/UTRAN to GUTI in E-UTRAN shall be performed as follows: 

GERAN/UTRAN <MCC> maps to E-UTRAN <MCC> 

GERAN/UTRAN <MNC> maps to E-UTRAN <MNC> 

GERAN/UTRAN <LAC> maps to E-UTRAN <MME Group ID> 

GERAN/UTRAN <RAC> maps into bit 23 and down to bit 16 of the M-TMSI 
The 8 most significant bits of GERAN/UTRAN <NRI> map to the MME code. 

GERAN/UTRAN <P-TMSI> maps as follows: 

- 6 bits of the GERAN/UTRAN <P-TMSI> starting at bit 29 and down to bit 24 are mapped into bit 29 and 
down to bit 24 of the E-UTRAN <M-TMSI>; 

- 16 bits of the GERAN/UTRAN <P-TMSI> starting at bit 15 and down to bit are mapped into bit 15 and 
down to bit of the E-UTRAN <M-TMSI>. 

The values of <LAC> and <MME group id> shall be disjoint, so that they can be differentiated. The most significant bit 
of the <LAC> shall be set to zero; and the most significant bit of <MME group id> shall be set to one. Based on this 
definition, the most significant bit of the <MME group id> can be used to distinguish the node type, i.e. whether it is an 
MME or SGSN. 

[TS 24.301 clause 5.3.1.1] 

When the UE is in EMM-IDLE mode and needs to transmit an initial NAS message, the UE shall request the lower 
layer to establish a RRC connection. In this request to the lower layer the NAS shall provide to the lower layer the RRC 
establishment cause and the call type as specified in annex D of this specification. 



[TS 23.401, clause 5.3.3.1, step 2, "Tracking Area Update procedure with Serving GW change"] 



If the UE's TIN indicates "P-TMSI" and the UE holds a valid P-TMSI and related RAI then these two elements are 
indicated as the old GUTI. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1313 ETSI TS 136 523-1 V9.1.1 (2010-07) 



[TS 23.401, clause 5.3.3.3, step 2, "Routeing Area Update with MME interaction and without S-GW change"] 



If the UE's internal TIN indicates "GUTI" and the UE holds a valid GUTI then the UE indicates the GUTl as the old 
P-TMSI and old RAI 



[TS 24.301, clause 5.5.3.2.2 "Normal and periodic tracking area updating procedure initiation"] 



If the UE supports A/Gb mode or lu mode, the UE shall handle the GUTI as follows: 

- if the TIN indicates "P-TMSI" and the UE holds a valid P-TMSI and RAI, the UE shall map the P-TMSI and 
RAI into the old GUTI IE. If a P-TMSI signature is associated with the P-TMSI, the UE shall include it in the 
Old P-TMSI signature IE. Additionally, if the UE holds a vahd GUTI, the UE shall indicate the GUTI in the 
Additional GUTI IE. 

NOTE: Mapping the P-TMSI and RAI to the GUTI is specified in Annex H of 3GPP TS 23.401 [10]. 

- if the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI IE. 



If the UE has a current EPS security context, the UE shall include the eKSI (either KSIasme or KSIsgsn) in the NAS 
Key Set Identifier IE in the TRACKING AREA UPDATE REQUEST message. Otherwise, the UE shall set the NAS 
Key Set Identifier IE to the value "no key is available". If the UE has a current EPS security context, the UE shall 
integrity protect the TRACKING AREA UPDATE REQUEST message with the current EPS security context. 
Otherwise the UE shall not integrity protect the TRACKING AREA UPDATE REQUEST message. 



When the tracking area updating procedure is initiated in EMM-IDLE mode to perform an inter-system change from 
A/Gb mode or lu mode to SI mode and the TIN is set to "P-TMSI", the UE shall include the GPRS ciphering key 
sequence number applicable for A/Gb mode or lu mode and a nonccuE in the TRACKING AREA UPDATE REQUEST 

message. 



If the UE initiates the first tracking area updating procedure following an attach in A/Gb mode or lu mode, the UE shall 
include a UE radio capability information update needed IE in the TRACKING AREA UPDATE REQUEST message. 

...[TS 24.301, Annex D] 



Table D.1.1 : Mapping of NAS procedure to establishment cause and call type 



NAS procedure 


RRC establishment cause (according 3GPP TS 36.331 [22]) 


Call type 








Tracking Area Update 


IVIO signalling (See Note 1) 


"originating signalling" 








Note 1 : For these NAS procedures initiated by UEs of access class 12, 13 or 14 in their home country, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". For this purpose the home country is 
defined as the country of the MCC part of the IIVISI, see 3GPP TS 22.01 1 [1 A]. 

For these NAS procedures initiated by UE of access class 11 or 1 5 in their HPLMN or EHPLMN, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". 



[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 
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1> set the ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 
2> else 

3> draw a random value in the range .. 2'*"-l and set the ue-Identity to this value; 
NOTE 1 Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 
1> Set the establishmentCause in accordance with the information received from upper layers; 
[TS 36.331, clause 5.3.3.4] 

1> set the content of RRCConnectionSetupComplete message as follows: 

2> set the selectedPLMN-Identity to the PLMN selected by upper layers (see TS 23.122 [11], TS 24.301 [35]) 
from the PLMN(s) included in the plmn-IdentityList in SystemlnformationBlockTypel; 

2> if upper layers provide the 'Registered MME', set the registeredMME as follows: 

3> if the PLMN identity of the 'Registered MME' is different from the PLMN selected by the upper layers: 

4> include the plmnldentity in the registeredMME and set it to the value of the PLMN identity in the 
'Registered MME' received from upper layers; 

3> set the mmegi and the mmec to the value received from upper layers; 

2> set the dedicatedlnfoNAS to include the information received from upper layers; 

[TS 24.008, clause 4.7.5] 
This procedure is used for: 

SI mode to lu mode or SI mode to A/Gb mode intersystem change and ISR is not activated; 

[TS 24.008, clause 4.7.5.1.1] 

To initiate the normal routing area updating procedure, the MS sends the message ROUTING AREA UPDATE 
REQUEST to the network, starts timer T3330 and changes to state GMM-ROUTING-AREA-UPDATING- 
INITIATED. 

If the MS supports SI mode, the MS shall handle the P-TMSI IE as follows: 

- If the TIN indicates "GUTI" and the MS holds a valid GUTI, the MS shall map the GUTI into a P-TMSI, 
P-TMSI signature and RAI as specified in 3GPP TS 23.003 [4]. The MS shall include the mapped RAI in the 
Old routing area identification IE and the mapped P-TMSI signature in the P-TMSI signature IE. When the 
routing area updating procedure is initiated in lu mode, the MS shall also include the mapped P-TMSI in the 
P-TMSI IE. Additionally, in lu mode and A/Gb mode, if the MS holds a valid P-TMSI and RAI, the MS shall 
indicate the P-TMSI in the Additional mobile identity IE and the RAI in the Additional old routing area 
identification IE. 



If the routing area updating procedure is initiated by the MS due to an S I mode to lu mode or S 1 mode to A/Gb mode 
inter-system change in idle mode and the TIN indicates "GUTI", the message ROUTING AREA UPDATE REQUEST 
shall include a P-TMSI signature filled with a NAS token as specified in 3GPP TS 33.401 [119]. In the GPRS ciphering 
key sequence number IE the MS shall indicate the value of the eKSI associated with the current EPS security context. 
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NOTE: When the MS includes a P-TMSI signature filled with a NAS token, 8 bits of the NAS token will be filled 
with bits from the M-TMSI (see 3GPP TS 23.003 [4]). 

If the routing area updating procedure is initiated by the MS due to the S 1 mode to lu mode or S 1 mode to A/Gb mode 
inter-system change in connected mode, the MS shall derive CK' and IK' from K^sme and from the NAS downlink 
COUNT value indicated by lower layers as specified in 3GPP TS 33.401 [1 19]. If the routing area updating procedure is 
initiated by the MS due to the S 1 mode to lu mode or S 1 mode to A/Gb mode inter-system change in idle mode when 
the TIN indicates "GUTI", the MS shall derive CK' and IK' from the Kasme and the NAS uplink COUNT value 
corresponding to the NAS token derived as specified in 3GPP TS 33.401 [119]. The MS shall indicate the eKSI value in 
the CKSN field of the GPRS ciphering key sequence number IE in the ROUTING AREA UPDATE REQUEST 
message. Then, the MS shall reset the START value and store the mapped UMTS security context replacing the 
established UMTS security context. 

[TS 25.331, clause 8.1.8.2] 



The UE shall, in the INITIAL DIRECT TRANSFER message: 

1> set the IE "NAS message" as received from upper layers; and 

1> set the IE "CN domain identity" as indicated by the upper layers; and 

1> set the IE "Intra Domain NAS Node Selector" as follows: 

2> derive the IE "Intra Domain NAS Node Selector" from TMSI/PMTSI, IMSI, or IMEI; and 

2> provide the coding of the IE "Intra Domain NAS Node Selector" according to the following priorities: 

1. derive the routing parameter for IDNNS from TMSI (CS domain) or PTMSI (PS domain) whenever a 
valid TMSI/PTMSI is available; 

2. base the routing parameter for IDNNS on IMSI when no valid TMSI/PTMSI is available; 

3. base the routing parameter for IDNNS on IMEI only if no (U)SIM is inserted in the UE. 

1> if the UE, on the existing RRC connection, has received a dedicated RRC message containing the IE "Primary 
PLMN Identity" in the IE "CN Information Info": 

2> set the IE "PLMN identity" in the INITIAL DIRECT TRANSFER message to the latest PLMN information 
received via dedicated RRC signalling. If NAS has indicated the PLMN towards which a signalling 
connection is requested, and this PLMN is not in agreement with the latest PLMN information received via 
dedicated RRC signalling, then the initial direct transfer procedure shall be aborted, and NAS shall be 
informed. 

1> if the UE, on the existing RRC connection, has not received a dedicated RRC message containing the IE "CN 
Information Info" , and if the IE "Multiple PLMN List" was broadcast in the cell where the current RRC 
connection was established: 

2> set the IE "PLMN identity" in the INITIAL DIRECT TRANSFER message to the PLMN chosen by higher 
layers [5, 25] amongst the PLMNs in the IE "Multiple PLMN List" broadcast in the cell where the RRC 
connection was established. 

1> if the IE "Activated service list" within variable MB MS_ACTIVATED_SER VICES includes one or more 
MBMS services with the IE "Service type" set to "Multicast" and; 

1> if the IE "CN domain identity" as indicated by the upper layers is set to "CS domain" and; 

1> if the variable ESTABLISHED_SIGNALLING_CONNECTIONS does not include the CN domain identity 'PS 
domain': 

2> include the IE "MBMS joined information"; 

2> include the IE "P-TMSI" within the IE "MBMS joined information" if a valid PTMSI is available. 
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1> if the UE is in CELL_FACH state and the IE "CN domain identity" as indicated by the upper layers is set to "CS 
domain" : 

2> if the value of the variable ESTABLISHMENT_CAUSE is set to "Originating Conversational Call" or 
"Emergency Call": 

3> set the value of the IE "Call type" to "speech", "video" or "other" according to the call being initiated. 

1> if the variable ESTABLISHMENT_CAUSE is initialised: 

2> set the IE "Estabhshment cause" to the value of the variable ESTABLISHMENT_CAUSE; 

2> clear the variable ESTABLISHMENT_CAUSE. 
1> calculate the START according to subclause 8.5.9 for the CN domain as set in the IE "CN Domain Identity"; and 
1> include the calculated START value for that CN domain in the IE "START". 

9.2.3.3.1.3 Test description 

9.2.3.3.1.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell 5 (UTRA cells in LAI-l/RAI-1). 

Cell 5 is configured as Serving cell, Cell A as Non-Suitable Off cell. 

NOTE: For Cell 5, power levels are defined in TS 34. 108 subclause 6.1.5 (FDD) or 6. 1 .6 (TDD). 

UE: 

The test USIM contains a valid GUTI-1 and TAJ-2, valid EPS security parameters, and EPS update status is 
"EUl: UPDATED". 

Preamble: 

- The UE is in state Switched OFF (state 1) according to TS 36.508 [18]. 
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9.2.3.3.1.3.2 



Test procedure sequence 

Table 9.2.3.3.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message on Cell 5 


~> 


ATTACH REQUEST 


- 


- 


3 


The SS transmits an AUTHENTICATION AND 
CIPHERING REQUEST message. 


<~ 


AUTHENTICATION AND 
CIPHERING REQUEST 


- 


- 


4 


The UE transmits an AUTHENTICATION AND 
CIPHERING RESPONSE message. 


-> 


AUTHENTICATION AND 
CIPHERING RESPONSE 


- 


- 


8 


SS responds with ATTACH ACCEPT message 
including P-TMSI-1 and RAI-1. 


<— 


ATTACH ACCEPT 


- 


- 


9 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 






10 


The activation of a PDP context is triggered by 
MMI or AT command. 


- 


- 


- 


- 


12 


The SS establishes a radio bearer associated 
with the requested PDP context. 


- 


- 


- 


- 




EXCEPTION: In parallel with step 13, IP 
address allocation as specified in xx.xxx 
subclause yy may occur on the radio bearer 
setup in step 12.. 










13 


The SS releases the RRC connection. 


- 


- 


- 


- 


14 


Cell A is configured as the Serving Cell, Cell 5 
is configured as a Suitable Neighbour Cell. 


- 


- 


- 


- 


15 


Check: does the UE transmit an 
RRCConnectionRequest with the InitialUE- 
IdentityseX to "randomValue" and the 
establishmentcause set to MO-signalling? 






1 


P 


16 


The SS responds with RRCConnectionSetup. 


- 


- 






17 


Check: does the UE transmit an 
RRCConnectionSetupComplete message with 
the mmegi and mmec are set to the values 
derived from the mapped RAI and P-TIVISI, 
and containing a TRACKING AREA UPDATE 
REQUEST message as described in the 
specific message contents? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


18 


The SS responds with a TRACKING AREA 
UPDATE ACCEPT allocating a new GUTI and 
TAI list 


<- 


TRACKING AREA UPDATE 
ACCEPT 






18 
A 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


~> 


TRACKING AREA UPDATE 
COMPLETE 






19 


The SS releases the RRC connection 


- 








20 


Void 


- 








21 


Cell 5 is configured as the Serving Cell and 
Cell A is configured as a Suitable Neighbour 
Cell as defined in table 6.2.2.1-1 of TS 36.508 
[18]. 

Note: Cell A is still suitable but the UE shall 
select Cell 5. 










22 


Void 


- 








23 


Check: does the UE transmit a ROUTING 
AREA UPDATE REQUEST message as 
specified in the specific message contents 
included in an INITIAL DIRECTE TRANSFER 
message with intraDomainNasNodeSelector 
mapped from GUTI allocationed in step 18? 


-> 


ROUTING AREA UPDATE 
REQUEST 


2 


P 


23 
A 


The SS sends a SECURITY MODE 
COMMAND message to activate integrity 
protection and ciphering and the UE replies 
with a SECURITY MODE COMPLETE.. 










24 


The SS transmits a ROUTING AREA UPDATE 


<— 


ROUTING AREA UPDATE 


- 


- 
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ACCEPT message (no new P-TMSI nor RAI). 




ACCEPT 






25 


After the activation time indicated at step 22, 
the SS transmits a UE CAPABILITY 
ENQUIRY message requesting the UE E- 
UTRAN capabilty. This message is ciphered 
and integrity protected using CK' and IK' 
derived from Kasme and UL NAS COUNT. 










26 


Checl<: Does the UE transmit a UE 
CAPABILITY INFORMATION message? 

Note: the purpose of this message is to show 
that the UE uses CK' and IK' derived from 
Kasme and UL NAS COUNT, and not the CK 
and IK allocated at step 4. 






3 


P 


27 


The SS transmits a UE CAPABILITY 
INFORMATION CONFIRM message. 


- 


- 


- 


- 


28 


The SS releases the RRC connection 


- 









9.2.3.3.1 .3.3 Specific message contents 

Table 9.2.3.3.1.3.3-1: Message RRCConnectionRequest (step 15, Table 9.2.3.3.1.3.2-1) 



Derivation path: 36.508 table 4.6.1-16 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








ue-ldentity CHOICE { 








random-Value 


Any allowed value 






} 








establishmentCause 


Mo-Signalling 






1 








} 








} 








Table 9.2.3.3.1.3.3-2: Message RRCConnectionSetupComplete (step 17, Table 9.2.3.3.1.3.2-1) 


Derivation path: 36.508 table 4.6.1-18 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionSetupComplete ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionSetupComplete-r8 SEQUENCE { 








selectedPLMN-ldentity 


1 






registeredMME { 








pimn-ldentity 


Not present 






mmegi 


LAC sent to the UE in 
step 8 






mmec 


Bit23tobit 16 of P-TMSI 
sent to the UE in step 8 






1 








dedicatedlnfoNAS 


See table 9.2.3.3.1.3.3.-3 






nonCriticalExtension SEQUENCE {} 








} 








1 








1 








} 








Details to be added 
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Table 9.2.3.3.1.3.3-3: Message TRACKING AREA UPDATE REQUEST (step 17, Table 9.2.3.3.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 with condition UNCIPHERED (the message is integrity protected using the key 
stored in the USIM). 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 


000 or 001 


'TA updating' or 
'combined TA/LA 
updating' 




NAS key set identifier 








NAS key set identifier 


The valid NAS key set 
identifier stored in the 
USIM 






TSC 


'O'B 


native security 
context (for 
KSIasme) 




Old GUTI or IMSI 








Type of identity 


110 


GUTI 




MNC/MCC 


Mobile Country Code and 
Mobile Network Code 
stored in EFimsi on the 
test USIM 






IVIME Group ID 


LAI allocated at step 8 






MME Code 


Bit 23 to bit 16 of P-TMSI 
allocated at step 8 






M-TMSI 


Value is specified bit by 
bit below: 

- bit 31 and bit 30: FFS 

- bit 29 to bit 24: bit 29 to 
bit 24 of P-TMSI 
allocated at step 8 

-bit 23 to bit 16: RAC 
allocated at step 8 
-bit 15 to bit 0: bit 15 to 
bit of P-TMSI allocated 
at step 8 






GPRS ciphering key sequence number 


GPRS ciphering key 
sequence number 
allocated at step 3 






Old P-TMSI signature 


P-TMSI signature 
allocated at step 8 






Additional GUTI 


GUTI-1 






NonceuE 


Any allowed value (must 
be present) 






UE network capability 


Any allowed value (must 
be present) 






Last visited registered TAI 


TAI stored in the test 
USIM 






UE radio capability information update needed 


1 


UE radio 
capability 
information 
update needed 




MS network capability 


Any allowed value (must 
be present) 






Old location area identification 


Not present if "EPS 
update type" is 'TA 
updating', LAI-1 is "EPS 
update type" is 
'combined TA/LA 
updating' 






TIVISI status 


Not present 






EPS update type 


000 or 001 


'TA updating' or 
'combined TA/LA 
updating' 




NAS key set identifier 








NAS key set identifier 


The valid NAS key set 
identifier stored in the 
USIM 
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TSC 


'O'B 


native security 
context (for 
KSIasme) 




Old GUTI or IMSI 








Type of identity 


110 


GUTI 




MNC/MCC 


Mobile Country Code and 
Mobile Network Code 
stored in EFimsi on the 
test USIM 






MME Group ID 


LAI allocated at step 8 






MME Code 


Bit 23 to bit 16 of P-TMSI 
allocated at step 8 






M-TMSI 


Value is specified bit by 
bit below: 

- bit 31 and bit 30: FFS 

- bit 29 to bit 24: bit 29 to 
bit 24 of P-TMSI 
allocated at step 8 

-bit 23 to bit 16: RAC 
allocated at step 8 
-bit 15 to bit 0: bit 15 to 
bit of P-TMSI allocated 
at step 8 






GPRS ciphering key sequence number 


GPRS ciphering key 
sequence number 
allocated at step 3 






Old P-TMSI signature 


P-TMSI signature 
allocated at step 8 






Additional GUTI 


GUTI-1 






NonceuE 


Any allowed value (must 
be present) 






UE network capability 


Any allowed value (must 
be present) 






Last visited registered TAI 


TAI stored in the test 
USIM 






UE radio capability information update needed 


1 


UE radio 
capability 
Information 
update needed 




MS network capability 


Any allowed value (must 
be present) 






Old location area identification 


Not present if "EPS 
update type" is 'TA 
updating', LAI-1 is "EPS 
update type" is 
'combined TA/LA 
updating' 






TMSI status 


Not present 
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Table 9.2.3.3.1.3.3-4: INITIAL DIRECT TRANSFER (step 23, Table 9.2.3.3.1.3.2-1) 



Derivation path: 25.331 clause 1 1 


Information Element 


Value/Remark 


Comment 


Condition 


InitialDirectTransfer :;= SEQUENCE { 








cn-Domainldentity 


ps-domain 






intraDomainNasNodeSelector SEQUENCE { 








version CHQICE { 








release99 SEQUENCE { 








gsm-Map-lDNNS SEQUENCE { 








routingbasis CHQICE { 








localPTMSI { 








routingparameter 


bit23tobit14of P-TMSI 






} 
} 
} 


allocated at step 8 






1 

} 

} 
} 
nas-IVIessage 


See table 9.2.3.3.1.3.3-5 






measuredResultsQnRACH 


Not checked 






vSaONonCriticalExtensions SEQUENCE { 








initialDirectTransfer-v3a0ext SEQUENCE { 








start-Value 


00000000000000000000 







} 

laterNonCriticalExtensions SEQUENCE { 








initialDirectTransfer-r3-add-ext 


Not checked 






v590NonCrlticalExtension SEQUENCE { 








initialDirectTransfer-v590ext 


Not checked 






v690NonCriticalExtensions SEQUENCE { 








initialDirectTransfer-v690ext SEQUENCE { 








pimn-ldentity SEQUENCE { 








mcc 


Mobile Country Code 
stored in EFimsi on the 
test USIM 






mnc 
1 


Mobile Network Code 
stored in EFimsi on the 
test USIM 






I 
measuredResultsQnRACHinterFreq 


Not checked 






mbms-Joinedlnformation 

1 


Not checked 






1 

v770NonCritical Extensions 

} 
} 
} 
} 
} 


Not checked 
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Table 9.2.3.3.1.3.3-5: Message ROUTING AREA UPDATE REQUEST (step 23, Table 9.2.3.3.1.3.2-1) 



Derivation path : 24.008 table 9.4.14 


Information Element 


Value/Remark 


Comment 


Condition 


Update type 


000 


RA updating 




GPRS cipliering key sequence number 


eKSI stored on the test 
USIM 






Old routing area identification 


GUTI-1 right shifted by 
32bits 






IVIS Radio Access capability 


Not checked 






Old P-TMSI signature 


Value is specified bit by 
bit below: 

-bit 23 to bit 16: bit 23 to 
bit16of M-TMSI 
allocated in step 18 
-bit 15tobit0:FFS 






Requested READY timer value 


Not checked 






DRX parameter 


Not checked 






TMSI status 


Not present 






P-TMSI 


Value is specified bit by 
bit below: 

- bit 31 and bit 30: 1 

- bit 29 to bit 24: bit 29 to 
bit 24 of M-TMSI 
allocated in step 18 
-bit 23 to bit 16: MME 
code allocated in step 18 
-bit 15 to bit 0: bit 15 to 
bit of M-TMSI allocated 
in step 18 






MS network capability 


Not checked 






PDP context status 


Not checked 






PS LCS Capability 


Not checked 






MBMS context status 


Not checked 






UE network capability 


Any allowed value 






Additional mobile identity 


P-TMSI allocated in step 
8 






Additional old routing area identification 


RAI-1 






Mobile station classmark 2 


Not checked 






Mobile station classmark 3 


Not checked 






Supported Codecs 


Not checked 







9.2.3.3.2 

9.2.3.3.2.1 

(1) 



lu mode to S1 mode intersystem change / ISR is active / Expiry of T3312 in E- 
UTRAN orT3412 in UTRAN and further intersystem change 

Test Purpose (TP) 



with { the UE is camped on a E-UTRAN cell, ISR is active, T3312 has expired, T3323 hasn't expired ) 
ensure that { 

when { UE enters a UTRAN cell belonging to the RA where the UE was last updated } 
then { the UE performs a RAU procedure including the UE P-TMSI and RAI } 
} 

(2) 

with { the UE is camped on a E-UTRAN cell, ISR is active, T3312 and T3323 have expired } 
ensure that { 

when { UE enters a UTRAN cell belonging to the RA where the UE was last updated } 

then { the UE performs a RAU procedure including mapped identities from E-UTRAN and additional 
P-TMSI and old RAI } 
} 

(3) 

with { the UE is camped on a UTRAN cell, ISR is active, T3412 has expired, T3423 hasn't expired } 
ensure that { 

when { UE enters a E-UTRAN cell in a TA belonging to the current TA list } 
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then { the UE performs a TAU procedure including the UE GUTI and last visited TAl} 
} 

(4) 

with { the UE is camped on a UTRAN cell, ISR is active, T3412 and T3423 have expired } 
ensure that { 

when { the UE enters a E-UTRAN cell in a TA belonging to the current TA list } 

then { the UE performs a TAU procedure incliding mapped GUTI from UTRAN, P-TMSI signature and 
additional GUTI } 

9.2.3.3.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301 clauses 5.3.5 and 
5.5.3.2.2 and TS 24.008 clauses 4.7.2.2 and 4.7.5.1.1. 

[24.301, clause 5.3.5] 

If ISR is activated, the UE shall keep both the periodic tracking area update timer (timer T3412) and the periodic 
routeing area update timer (timer T3312). The two separate timers run in the UE for updating MME and SGSN 
independently. If the periodic tracking area update timer expires and the UE cannot initiate the tracking area updating 
procedure, as it is in state EMM-REGISTERED.NO-CELL-AVAILABLE, the UE shall start the E-UTRAN deactivate 
ISR timer T3423. The UE shall initiate the tracking area updating procedure and stop the timer T3423 when it enters 
state EMM-REGISTERED.NORMAL-SERVICE before timer T3423 expires. After expiry of timer T3423 the UE shall 
set its TIN to "P-TMSI" in order to initiate the tracking area updating procedure when it returns to state EMM- 
REGISTERED.NORMAL-SERVICE. 

If the UE is attached to both EPS and non-EPS services, and if timer T3412 expires or timer T3423 expires when the 
UE is in EMM-REGISTERED.NO-CELL-AVAILABLE state, then the UE shall initiate the combined tracking area 
updating procedure indicating "combined TA/LA updating with IMSI attach" when the UE returns to EMM- 
REGISTERED.NORMAL-SERVICE state. 

[24.301, clause 5.5.3.2.2] 



If the UE supports neither A/Gb mode nor lu mode, the UE shall include a valid GUTI in the Old GUTI IE in the 
TRACKING AREA UPDATE REQUEST message. 

If the UE supports A/Gb mode or lu mode, the UE shall handle the Old GUTI IE as follows: 

- If the TIN indicates "P-TMSI" and the UE holds a vahd P-TMSI and RAI, the UE shall map the P-TMSI and 
RAI into the Old GUTI IE. If a P-TMSI signature is associated with the P-TMSI, the UE shall include it in the 
Old P-TMSl signature IE. Additionally, if the UE holds a vahd GUTI, the UE shall indicate the GUTI in the 
Additional GUTI IE. 

NOTE: The mapping of the P-TMSI and RAI to the GUTI is specified in 3GPP TS 23 .003 [2] . 

- If the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI IE. 

[24.008, clause 4.7.2.2] 

If ISR is activated, the MS shall keep both the periodic tracking area update timer (timer T3412) and the periodic 
routeing area update timer (timer T3312). The two separate timers run in the MS for updating MME and SGSN 
independently. If the periodic routeing area update timer expires and the MS is in state GMM-REGISTERED. NO- 
CELL- AVAILABLE, the MS shall set its TIN to "RAT-related TMSI" and start the GERAN/UTRAN Deactivate ISR 
timer T3323. The MS shall initiate the routeing area updating procedure and stop the timer T3323 when the MS enters 
the state GMM-REGISTERED.NORMAL-SERVICE before timer T3323 expires. After expiry of timer T3323 the MS 
shall deactivate ISR by setting its TIN to "GUTI" and initiate the routing area updating procedure when the MS enters 
the state GMM-REGISTERED.NORMAL-SERVICE. 



If the MS is both IMSI attached for GPRS and non-GPRS services, and if the MS lost coverage of the registered PLMN 
and timer T3312 expires or timer T3323 expires, then: 
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a) if the MS returns to coverage in a cell that supports GPRS and that indicates that the network is in network 
operation mode I, then the MS shall either perform the combined routing area update procedure indicating 
"combined RA/LA updating with IMSI attach"; or 

b) if the MS returns to coverage in a cell in the same RA that supports GPRS and that indicates that the network is 
in network operation mode II or III, then the MS shall perform the periodic routing area updating procedure 
indicating "Periodic updating"; or 

c) if the MS was both IMSI attached for GPRS and non-GPRS services in network operation mode I and the MS 
returns to coverage in a cell in the same LA that does not support GPRS, then the MS shall perform the periodic 
location updating procedure. In addition, the MS shall perform a combined routing area update procedure 
indicating "combined RA/LA updating with IMSI attach" when the MS enters a cell that supports GPRS and that 
indicates that the network is in network operation mode I; or 

d) if the MS returns to coverage in a new RA the description given in subclause 4.7.5 applies. 

If the MS is both IMSI attached for GPRS and non-GPRS services in a network that operates in network operation 
mode I, and if the MS has camped on a cell that does not support GPRS, and timer T3312 expires or timer T3323 
expires, then the MS shall start an MM location updating procedure. In addition, the MS shall perform a combined 
routing area update procedure indicating "combined RA/LA updating with IMSI attach" when the MS enters a cell that 
supports GPRS and indicates that the network is in operation mode I. 

If timer T3312 expires or timer T3323 expires during an ongoing CS connection, then a MS operating in MS operation 
mode B shall treat the expiry of T3312 when the MM state MM-IDLE is entered, analogous to the descriptions for the 
cases when the timer expires out of coverage or in a cell that does not support GPRS. 

In A/Gb mode, timer T3312 and timer T3323 shall not be stopped when a GPRS MS enters state GMM- 
REGISTERED.SUSPENDED. 

[24.008, clause 4.7.5.1.1] 



If the MS supports SI mode, the MS shall handle the P-TMSI IE as follows: 

- If the TIN indicates "GUTI" and the MS holds a valid GUTI, the MS shall map the GUTI into a P-TMSI, 
P-TMSI signature and RAI as specified in 3GPP TS 23.003 [4]. The MS shall include the mapped RAI in the 
Old routing area identification IE and the mapped P-TMSI signature in the P-TMSI signature IE. When the 
routing area updating procedure is initiated in lu mode, the MS shall also include the mapped P-TMSI in the 
P-TMSI IE. Additionally, in lu mode and A/Gb mode, if the MS holds a valid P-TMSI and RAI, the MS shall 
indicate the P-TMSI in the Additional mobile identity IE and the RAI in the Additional old routing area 
identification IE. 

- If the TIN indicates "P-TMSI" or "RAT-related TMSI" and the MS holds a valid P-TMSI and RAI, the MS shall 
indicate the RAI in the Old routing area identification IE. When the routing area updating procedure is initiated 
in lu mode, the MS shall also include the P-TMSI in the P-TMSI IE. 

9.2.3.3.2.3 Test description 

9.2.3.3.2.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell 5 (HPLMN); 

- Cell 5 indicates NMO 2. 
UE: 

None. 
Preamble: 

- The UE is in state Registered, Idle Mode (state 2) on Cell A according to [18] and with M-TMSI = 9a26319c 
(arbitrary value chosen for this test case). 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1325 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



9.2.3.3.2.3.2 



Test procedure sequence 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS sets the cell type of Cell 5 to "Serving 
Cell" and the cell type of Cell A to "Non- 
suitable cell". 










2 


The UE transmits a ROUTING AREA UPDATE 
message on cell 5. 


-> 


ROUTING AREA UPDATE 
REQUEST 


- 


- 


3 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message on Cell 5 with Update 
result 'RA updated and ISR activated', T3312 
set to 1 minute and T3323 set to 2 minutes. 


<~ 


ROUTING AREA UPDATE 
ACCEPT 






4 


The UE transmits a ROUTING AREA UPDATE 
COMPLETE message on Cell 5. 


-> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 


5 


The SS sets the cell type of Cell A to "Serving 
cell" and the cell type of Cell 5 to "Non-suitable 
cell". 










6 


90s after step 3, the SS sets the cell type of 
Cell 5 to "Serving Cell" and the cell type of Cell 
A to "Non-suitable cell". 










7 


Check: does the UE transmit a ROUTING 
AREA UPDATE REQUEST message on Cell 
5? 


-> 


ROUTING AREA UPDATE 
REQUEST 


1 


P 


8 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message on Cell 5 with with Update 
result 'RA updated and ISR activated', T3312 
set to 1 minute and T3323 set to 1 minutes. 


<~ 


ROUTING AREA UPDATE 
ACCEPT 






9 


The SS sets the cell type of Cell A to "Serving 
cell" and the cell type of Cell 5 to "Non-suitable 
cell". 










10 


1 50s after step 8, the SS sets the cell type of 
Cell 5 to "Serving Cell" and the cell type of Cell 
A to "Non-suitable cell". 










11 


Check: does the UE transmit a ROUTING 
AREA UPDATE REQUEST message on Cell 
5? 


-> 


ROUTING AREA UPDATE 
REQUEST 


2 


P 


12 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message on Cell 5 with Update 
result value = '000' (RA updated). 


<- 


ROUTING AREA UPDATE 
ACCEPT 






13 


The SS sets the cell type of Cell A to "Serving 
cell" and the cell type of Cell 5 to "Non-suitable 
cell". 










14 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message 


-> 


TRACKING AREA UPDATE 
REQUEST 


- 


- 


15 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message with EPS update 
result indicating that ISR is active, T3412 set to 
1 minute and T3423 set to 2 minutes. 


<— 


TRACKING AREA UPDATE 
ACCEPT 






16 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


~> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


17 


The SS sets the cell type of Cell 5 to "Serving 
Cell" and the cell type of Cell A to "Non- 
suitable cell". 










18 


90s after step 1 6, the SS sets the cell type of 
Cell A to "Serving cell" and the cell type of Cell 
5 to "Non-suitable cell". 










19 


Check: does the UE transmit a TRACKING 
AREA UPDATE REQUEST message on Cell 
A? 


~> 


TRACKING AREA UPDATE 
REQUEST 


3 


P 


20 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message with EPS update 
result indicating that ISR is active, T3412 set to 
1 minute and T3423 set to 1 minute. 


<- 


TRACKING AREA UPDATE 
ACCEPT 






21 


The SS sets the cell type of Cell 5 to "Serving 
Cell" and the cell type of Cell A to "Non- 
suitable cell". 
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22 


1 50s after step 20, the SS sets the cell type of 
Cell A to "Serving cell" and the cell type of Cell 
5 to "Non-suitable cell". 










23 


Check: does the UE transmit a TRACKING 
AREA UPDATE REQUEST message on Cell 
A? 


-> 


TRACKING AREA UPDATE 
REQUEST 


4 


P 


24 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<~ 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


- 


The UE is in end state E-UTRA connected 
(E2). 


- 


- 


- 


- 



9.2.3.3.2.3.3 Specific message contents 

Table 9.2.3.3.2.3.3-1 : Message ROUTING AREA UPDATE ACCEPT (step 3, table 9.2.3.3.2.3.2-1) 



Derivation path : 24.008 table 9.4.15 


Information Element 


Value/Remark 


Comment 


Condition 


Update result 


100 


RA updated and 
ISR activated 


TA only 


101 


combined TA/LA 
updated and ISR 
activated 


combined 
TA_LA 


Periodic RA update timer 


00100001 


1 minute 




Routing area identification 


See 36.508 table 4.4.4-2 


RAI of Cell 5 




P-TMSI signature 


Not present 






Allocated P-TMSI 
RAI 
TMSI 


See 36.508 table 4.4.4-2 
efb1 ee97 


TIVISI is an 
arbitrary value 
chosen different 
from M-TIVISI in 
the preamble 




T3323 value 


00100010 


2 minutes 





Table 9.2.3.3.2.3.3-2: Message ROUTING AREA UPDATE REQUEST (step 7, table 9.2.3.3.2.3.2-1) 



Derivation path : 24.008 table 9.4.14 


Information Element 


Value/Remark 


Comment 


Condition 


Update type 


Any allowed value 






GPRS ciphering key sequence number 


Any allowed value 






Old routing area identification 


RAI of Cell 5 according to 
36.508 table 4.4.4-2 


The UE includes 
the RAI from 
UTRAN 




IVIS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Not present 






P-TMSI 


Same value like allocated 
at step 3, see table 
9.2.3.3.2.3.3-1 


The UE includes 
the P-TMSI 
assigned from 
UTRAN 




Additional mobile identity 


Not present 






Additional old routing area identification 


Not present 
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Table 9.2.3.3.2.3.3-3: Message ROUTING AREA UPDATE ACCEPT (step 8, table 9.2.3.3.2.3.2-1) 



Derivation path : 24.008 table 9.4.15 


Information Element 


Value/Remark 


Comment 


Condition 


Update result 


100 


RA updated and 
ISR activated 


TA only 


101 


combined TA/LA 
updated and ISR 
activated 


combined 
TA_LA 


Periodic RA update timer 


00100001 


1 minute 




Routing area identification 


See 36.508 table 4.4.4-2 


RAI of Cell 5 




P-TMSI signature 


Not present 






Allocated P-TMSI 


Not present 






T3323 value 


00100001 


1 minute 





Table 9.2.3.3.2.3.3-4: Message ROUTING AREA UPDATE REQUEST (step 11, table 9.2.3.3.2.3.2-1) 



Derivation path: 24.008 table 9.4.14 


Information Element 


Value/Remark 


Comment 


Condition 


Update type 


Any allowed value 






GPRS ciphering key sequence number 


Any allowed value 






Old routing area identification 


TAI of cell A 


The value is the 
same as the RAI 
of cell 5 




MS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Not present 






P-TMSI 


da01319c 


Mapped from M- 
TMSI and MME 
code assigned in 
the preamble 
(start with 1 1 and 
MME code in 2"^ 
most significant 
byte). 




Additionnal mobile identity 


Same value like allocated 
at step 3, see table 
9.2.3.3.2.3.3-1 






Additional routing area identification 


RAI of cell 5 


The value is the 
same as the TAI 
of cell A 





Table 9.2.3.3.2.3.3-5: Message ROUTING AREA UPDATE ACCEPT (step 12, table 9.2.3.3.2.3.2-1) 



Derivation path : 24.008 table 9.4.15 


Information Element 


Value/Remark 


Comment 


Condition 


Update result 


000 


RA updated 




Periodic RA update timer 


01010101 


54 minutes 




Routing area identification 


See 36.508 table 4.4.4-2 


RAI of Cell 5 




P-TMSI signature 


Not present 






Allocated P-TMSI 


Not present 







Table 9.2.3.3.2.3.3-6: Message TRACKING AREA UPDATE REQUEST (step 14, table 9.2.3.3.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 


Any allowed value 
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Table 9.2.3.3.2.3.3-7: Message TRACKING AREA UPDATE ACCEPT (step 15, table 9.2.3.3.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update result 


100 


TA updated and 
ISR activated 


TAonly 


101 


combined TA/LA 
updated and ISR 
activated 


combined 
TA_LA 


T3412 value 


00100001 


1 minute 




T3423 value 


00100010 


2 minutes 




GUT! 








M-TMSI 


9a2631 9c 


Same value like in 
preamble, 
different from P- 
TMSI 





Table 9.2.3.3.2.3.3-8: Message TRACKING AREA UPDATE REQUEST (step 19, table 9.2.3.3.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 


Any allowed value 






Old GUT! 


Same GUT! as in step 1 5 
see table 9.2.3.3.2.3.3-7 






Last visited registered TA! 


RAI of cell 5 


The value is the 
same as the TAI 
of cell A 





Table 9.2.3.3.2.3.3-9: Message TRACKING AREA UPDATE ACCEPT (step 20, table 9.2.3.3.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update result 


100 


TA updated and 
ISR activated 


TAonly 


101 


combined TA/LA 
updated and ISR 
activated 


combined 
TA_LA 


T3412 value 


00100001 


1 minute 




GUT! 


Not present 






T3423 value 


00100001 


1 minute 





Table 9.2.3.3.2.3.3-10: Message TRACKING AREA UPDATE REQUEST (step 19, table 9.2.3.3.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 


Any allowed value 






Old GUT! 








M-TMSI 


ef01ee97 


Mapped from P- 
TMSI assigned in 
the preamble and 
RAI of cell 5 (start 
with 1 1 and RAI in 
2"" most 
significant byte). 




Last visited registered TAI 


RAI of cell 5 






Additional GUTI 


Same GUTI as in step 1 5 
see table 9.2.3.3.2.3.3-7 
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Table 9.2.3.3.2.3.3-11 : Message TRACKING AREA UPDATE ACCEPT (step 24, table 9.2.3.3.2.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update result 


000 


TA updated 


TA only 


001 


combined TA/LA 
updated 


combined 
TA LA 


T3412 value 


01010101 


54 minutes 




GUT! 


Not present 







9.2.3.3.4 Attach in E-UTRAN / RAU to UTRAN / Go to UTRAN RRC idle / TAU in E- 

UTRAN 

9.2.3.3.4.1 Test Purpose (TP) 

(1) 

with { the UE powered on in E-UTRAN with a USIM containing valid E-UTRAN NAS and Security parameters 
including a valid GUTI , and has successfully performed a combined EPS/IMSI attach, established PDN 
connectivity, and performed TRACKING AREA UPDATE REQUEST } 
ensure that { 

when { the UE reselects UTRAN configured in MNO=II and TIN is set to the temporary ID belonging to 
the currently used RAT {i.e. ISR not active) } 

then { the UE transmits a LOCATION UPDATING REQUEST to the MSC/VLR and derives the IDNNS from 
the MSC/VLR TMSI, and transmits a ROUTING AREA UPDATE REQUEST message including P-TMSI, P-TMSI 
signature including the NAS token, and RAI mapped from GUTI, the old routing area identification 
mapped from the RAI, the GPRS ciphering key sequence number indicating the eKSI associated with the 
EPS security context. Old P-TMSI signature and Old routing area identifion are mapped from the GUTI. 
The message is encapsulated in an INITIAL DIRECT TRANSFER message including IDNSS mapped from GUTI, 
Establishment cause set to inter-RAT cell-selection, START value set to and PLMN identity } 

(2) 

with { the UE camped on E-UTRAN and has a valid GUTI and P-TMSI } 
ensure that { 

when { the UE reselects UTRAN and receives a new P-TMSI as part of the RAU procedure } 

then { the UE uses the new P-TMSI {and not GUTI or old P-TMSI) for subsequent IDNNS network 
access {e.g. via the Service Request procedure } 



(3) 

with { the UE has performed a RAU procedure in UTRAN after initial registration at power on in E- 
UTRAN } 
ensure that { 

when { the UE reselects a E-UTRAN cell with the same LA as previously selected} 

then { the UE transmits a TRACKING AREA UPDATE REQUEST message including eKSI stored in the 
USIM, old GUTI mapped from RAI and P-TMSI, GPRS ciphering sequence number, nonceUE . The UE encodes 
the RRC parameters in the RRC Connection Establishment messages correctly {i.e. in the 
RRCConnectionRequest message, the InitialUE-Identity is set to "Random value" and the 
establishmentcause is set to MO -signal ling; and, in the RRCConnectionSetupComplete message the 
selectedPLMN- identity, mmegi and mmec indicate the value of the registered MME {e.g. as retrieved 
from the USIM at power-on, or, as received in the last TRACKING AREA UPDATE ACCEPT message) } 
} 

NOTE: ISR considered not in the scope of this test case, so it is never activated. 

9.2.3.3.4.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 23.003 clause 2.8.2.1, 
2.8.2.2, TS 23.401 Annex J.2; TS 24.301 clause 5.5.3.2.2 and Annex D; TS 25.331 clauses 8.1.8.2 and 8.1.8.3 (on 
IDNNS); TS 24.008 clause 4.7.5.1.1 and 4.7.5.1.3; TS 23.236 clause 5.1; and TS 36.331 clauses 5.3.3.3 and 5.3.3.4. 

[TS 23.003, clause 2.8.2.1] 

The mapping of the GUTI shall be done to the combination of RAI of GERAN / UTRAN and the P-TMSI: 

E-UTRAN <MCC> maps to GERAN/UTRAN <MCC> 

E-UTRAN <MNC> maps to GERAN/UTRAN <MNC> 
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E-UTRAN <MME Group ID> maps to GERAN/UTRAN <LAC> 

E-UTRAN <MME Code> maps to GERAN/UTRAN <RAC> and is also copied into the 8 most significant bits 
of the NRI field within the P-TMSI; 

E-UTRAN <M-TMSI> maps as follows: 

- 6 bits of the E-UTRAN <M-TMSI> starting at bit 29 and down to bit 24 are mapped into bit 29 and down to 
bit 24 of the GERAN/UTRAN <P-TMSI>; 

- 16 bits of the E-UTRAN <M-TMSI> starting at bit 15 and down to bit are mapped into bit 15 and down to 
bit of the GERAN/UTRAN <P-TMSI>; 

- and the remaining 8 bits of the E-UTRAN <M-TMSI> are mapped into the 8 MBS bits of the <P-TMSI 
signature> field. 

For UTRAN, the 10-bit long NRI bits are masked out from the P-TMSI and also supplied to the RAN node as IDNNS 
(Intra Domain NAS Node Selector). However, the RAN configured NRI length should not exceed 8 bits. 

[TS 23.003, clause 2.8.2.2] 

The mapping of P-TMSI (TLLI) and RAI in GERAN/UTRAN to GUTI in E-UTRAN shall be performed as follows: 

GERAN/UTRAN <MCC> maps to E-UTRAN <MCC> 

GERAN/UTRAN <MNC> maps to E-UTRAN <MNC> 

GERAN/UTRAN <LAC> maps to E-UTRAN <MME Group ID> 

GERAN/UTRAN <RAC> maps into bit 23 and down to bit 16 of the M-TMSI 
The 8 most significant bits of GERAN/UTRAN <NRI> map to the MME code. 

GERAN/UTRAN <P-TMSI> maps as follows: 

- 6 bits of the GERAN/UTRAN <P-TMSI> starting at bit 29 and down to bit 24 are mapped into bit 29 and 
down to bit 24 of the E-UTRAN <M-TMSI>; 

- 16 bits of the GERAN/UTRAN <P-TMSI> starting at bit 15 and down to bit are mapped into bit 15 and 
down to bit of the E-UTRAN <M-TMSI>. 

The values of <LAC> and <MME group id> shall be disjoint, so that they can be differentiated. The most significant bit 
of the <LAC> shall be set to zero; and the most significant bit of <MME group id> shall be set to one. Based on this 
definition, the most significant bit of the <MME group id> can be used to distinguish the node type, i.e. whether it is an 
MME or SGSN. 

[TS 23.401, Annex J.2 "Usage of TIN"] 



When ISR is not active the TIN is always set to the temporary ID belonging to the currently used RAT. This guarantees 
that always the most recent context data are used, which means during inter-RAT changes there is always context 
transfer from the CN node serving the last used RAT. The UE identities, old GUTI IE and additional GUTI IE, 
indicated in the next TAU Request message, and old P-TMSI IE and additional P-TMSI/RAI IE, indicated in the next 
RAU Request message depend on the setting of TIN and are specified in table 4.3.5.6-2. 

[TS 24.301, clause 5.5.3.2.2 "Normal and periodic tracking area updating procedure initiation"] 



If the UE supports A/Gb mode or lu mode, the UE shall handle the GUTI as follows: 

- if the TIN indicates "P-TMSI" and the UE holds a valid P-TMSI and RAI, the UE shall map the P-TMSI and 
RAI into the old GUTI IE. If a P-TMSI signature is associated with the P-TMSI, the UE shall include it in the 
Old P-TMSI signature IE. Additionally, if the UE holds a vahd GUTI, the UE shall indicate the GUTI in the 
Additional GUTI IE. 
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- if the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI IE. 



If the UE has a current EPS security context, the UE shall include the eKSI (either KSIasme or KSIsgsn) in the NAS 
Key Set Identifier IE in the TRACKING AREA UPDATE REQUEST message. Otherwise, the UE shall set the NAS 
Key Set Identifier IE to the value "no key is available". If the UE has a current EPS security context, the UE shall 
integrity protect the TRACKING AREA UPDATE REQUEST message with the current EPS security context. 
Otherwise the UE shall not integrity protect the TRACKING AREA UPDATE REQUEST message. 



When the tracking area updating procedure is initiated in EMM-IDLE mode to perform an inter-system change from 
A/Gb mode or lu mode to SI mode and the TIN is set to "P-TMSI", the UE shall include the GPRS ciphering key 
sequence number applicable for A/Gb mode or lu mode and a nonccuE in the TRACKING AREA UPDATE REQUEST 

message. 



If the UE initiates the first tracking area updating procedure following an attach in A/Gb mode or lu mode, the UE shall 
include a UE radio capability information update needed IE in the TRACKING AREA UPDATE REQUEST message. 

...[TS 24.301, Annex D] 



Table D.1.1 : Mapping of NAS procedure to establishment cause and call type 



NAS procedure 


RRC establishment cause (according 3GPP TS 36.331 [22]) 


Call type 








Tracking Area Update 


IVIO signalling (See Note 1) 


"originating signalling" 








Note 1 : For these NAS procedures initiated by UEs of access class 12, 13 or 14 in their home country, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". For this purpose the home country is 
defined as the country of the MCC part of the IIVISI, see 3GPP TS 22.01 1 [1A]. 

For these NAS procedures initiated by UE of access class 11 or 1 5 in their HPLMN or EHPLMN, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". 



[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 
1> set the ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 
2> else 

3> draw a random value in the range .. 2'*"-l and set the ue-Identity to this value; 
NOTE 1 : Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 
1> Set the establishmentCause in accordance with the information received from upper layers; 
[TS 36.331, clause 5.3.3.4] 

1> set the content of RRCConnectionSetupComplete message as follows: 

2> set the selectedPLMN-Identity to the PLMN selected by upper layers (see TS 23.122 [11], TS 24.301 [35]) 
from the PLMN(s) included in the plmn-IdentityList in SystemlnformationBlockTypel; 
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2> if upper layers provide the 'Registered MME', set the registeredMME as follows: 

3> if the PLMN identity of the 'Registered MME' is different from the PLMN selected by the upper layers: 

4> include the plmnldentity in the registeredMME and set it to the value of the PLMN identity in the 
'Registered MME' received from upper layers; 

3> set the mmegi and the mmec to the value received from upper layers; 

2> set the dedicatedlnfoNAS to include the information received from upper layers; 

[TS 24.008, clause 4.7.5.1.1] 

To initiate the normal routing area updating procedure, the MS sends the message ROUTING AREA UPDATE 
REQUEST to the network, starts timer T3330 and changes to state GMM-ROUTING-AREA-UPDATING- 
INITIATED. 

If the MS supports SI mode, the MS shall handle the P-TMSI IE as follows: 

- If the TIN indicates "GUTI" and the MS holds a valid GUTI, the MS shall map the GUTI into a P-TMSI, 
P-TMSI signature and RAI as specified in 3GPP TS 23.003 [4]. The MS shall include the mapped RAI in the 
Old routing area identification IE and the mapped P-TMSI signature in the P-TMSI signature IE. When the 
routing area updating procedure is initiated in lu mode, the MS shall also include the mapped P-TMSI in the 
P-TMSI IE. Additionally, in lu mode and A/Gb mode, if the MS holds a valid P-TMSI and RAI, the MS shall 
indicate the P-TMSI in the Additional mobile identity IE and the RAJ in the Additional old routing area 
identification IE. 



If the routing area updating procedure is initiated by the MS due to an S 1 mode to lu mode or S I mode to A/Gb mode 
inter-system change in idle mode and the TIN indicates "GUTI", the message ROUTING AREA UPDATE REQUEST 
shall include a P-TMSI signature filled with a NAS token as specified in 3GPP TS 33.401 [119]. In the GPRS ciphering 
key sequence number IE the MS shall indicate the value of the eKSI associated with the current EPS security context. 

NOTE: When the MS includes a P-TMSI signature filled with a NAS token, 8 bits of the NAS token will be filled 
with bits from the M-TMSI (see 3GPP TS 23.003 [4]). 

If the routing area updating procedure is initiated by the MS due to the S 1 mode to lu mode or S 1 mode to A/Gb mode 
inter-system change in connected mode, the MS shall derive CK' and IK' from Kasme and from the NAS downlink 
COUNT value indicated by lower layers as specified in 3GPP TS 33.401 [1 19]. If the routing area updating procedure is 
initiated by the MS due to the S 1 mode to lu mode or S 1 mode to A/Gb mode inter-system change in idle mode when 
the TIN indicates "GUTI", the MS shall derive CK' and IK' from the Kasme and the NAS downlink COUNT value 
corresponding to the NAS token derived as specified in 3GPP TS 33.401 [119]. The MS shall indicate the eKSI value in 
the CKSN field of the GPRS ciphering key sequence number IE in the ROUTING AREA UPDATE REQUEST 
message. Then, the MS shall reset the START value and store the mapped UMTS security context replacing the 
established UMTS security context. 

[TS 24.008, clause 4.7.5.1.3] 



A ROUTING AREA UPDATE COMPLETE message shall be returned to the network if the ROUTING AREA 
UPDATE ACCEPT message contained any of: 

- a P-TMSI; 

- Receive N-PDU Numbers (see 3GPP TS 44.065 [78] and 3GPP TS 25.322 [19b]); or 

a request for the provision of Inter RAT handover information or E-UTRAN inter RAT handover information or 
both. 

If Receive N-PDU Numbers were included, the Receive N-PDU Numbers values valid in the MS, shall be included in 
the ROUTING AREA UPDATE COMPLETE message. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1333 ETSI TS 136 523-1 V9.1.1 (2010-07) 

If the network has requested the provision of Inter RAT handover information or E-UTRAN inter RAT handover 
information or both, the MS shall return a ROUTING AREA UPDATE COMPLETE message including the Inter RAT 
handover information IE or E-UTRAN inter RAT handover information IE or both to the network. 

NOTE 1 : In lu mode, after a routing area updating procedure, the mobile station can initiate Service Request 
procedure to request the resource reservation for the active PDP contexts if the resources have been 
released by the network or send upper layer message (e.g. ACTIVATE PDP CONTEXT REQUEST) to 
the network via the existing PS signaling connection. 

In lu mode, if the network wishes to prolong the PS signalling connection (for example, if the mobile station has 
indicated "follow-on request pending" in ROUTING AREA UPDATE REQUEST message) the network shall indicate 
the "follow-on proceed" in the ROUTING AREA UPDATE ACCEPT message. If the network wishes to release the PS 
signalling connection, the network shall indicate "no follow-on proceed" in the ROUTING AREA UPDATE ACCEPT 

message. 

After that in lu mode, the mobile station shall act according to the follow-on proceed flag included in the Update result 
information element in the ROUTING AREA UPDATE ACCEPT message (see subclause 4.7.13). 

[TS 23.236, clause 5.1 "MS Functions"] 



In lu mode the MS provides the IDNNS to the RNC in the access stratum part of the RRC_initial_DT message as 
described in TS 25.331 [5]. 

If the MS is E-UTRAN capable, then TS 23.401 [22], TS 23.060 [2] and TS 23.003 [18] define rules as to how the MS 
shall select and encode the identity to place in the P-TMSI/TLLI parameters used in the Routing Area Update 
procedure. For the PS domain, the E-UTRAN capable MS shall use this P-TMSI parameter to derive the UTRAN 
IDNNS parameter. For the CS domain, the E-UTRAN temporary identities shall not be used to derive the IDNNS: 
instead the MS shall use its (MSC supplied) TMSI, if that TMSI is valid, to derive the IDNNS. 



When the MS in lu mode replies to IMSI paging, it shall derive IDNNS from (P)TMSI if a valid one is available. If 
(P)TMSI is not available, the MS shall derive IDNNS from IMSI. 

[TS 25.331, clause 8.1.8.2] 



The UE shall, in the INITIAL DIRECT TRANSFER message: 

1> set the IE "NAS message" as received from upper layers; and 

1> set the IE "CN domain identity" as indicated by the upper layers; and 

1> set the IE "Intra Domain NAS Node Selector" as follows: 

2> derive the IE "Intra Domain NAS Node Selector" from TMSI/PMTSI, IMSI, or IMEI; and 

2> provide the coding of the IE "Intra Domain NAS Node Selector" according to the following priorities: 

1. derive the routing parameter for IDNNS from TMSI (CS domain) or PTMSI (PS domain) whenever a 
vaUd TMSI/PTMSI is available; 

2. base the routing parameter for IDNNS on IMSI when no valid TMSI/PTMSI is available; 

3. base the routing parameter for IDNNS on IMEI only if no (U)SIM is inserted in the UE. 

1> if the UE, on the existing RRC connection, has received a dedicated RRC message containing the IE "Primary 
PLMN Identity" in the IE "CN Information Info": 

2> set the IE "PLMN identity" in the INITIAL DIRECT TRANSFER message to the latest PLMN information 
received via dedicated RRC signalling. If NAS has indicated the PLMN towards which a signalling 
connection is requested, and this PLMN is not in agreement with the latest PLMN information received via 
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dedicated RRC signalling, then the initial direct transfer procedure shall be aborted, and NAS shall be 
informed. 

1> if the UE, on the existing RRC connection, has not received a dedicated RRC message containing the IE "CN 
Information Info" , and if the IE "Multiple PLMN List" was broadcast in the cell where the current RRC 
connection was established: 

2> set the IE "PLMN identity" in the INITIAL DIRECT TRANSFER message to the PLMN chosen by higher 
layers [5, 25] amongst the PLMNs in the IE "Multiple PLMN List" broadcast in the cell where the RRC 
connection was established. 

[TS 25.331, clause 8.1.8.3] 

On reception of the INITIAL DIRECT TRANSFER message the NAS message should be routed using the IE "CN 
Domain Identity". UTRAN may also use the IE "Intra Domain NAS Node Selector" and the IE "PLMN identity" for 
routing among the CN nodes for the addressed CN domain. 

If no signalling connection exists towards the chosen node, then a signalling connection is established. 

When the UTRAN receives an INITIAL DIRECT TRANSFER message, it shall not affect the state of any other 
ongoing RRC procedures, when not stated otherwise elsewhere. 

The UTRAN should: 

1> set the START value for the CN domain indicated in the IE "CN domain identity" to the value of the IE 
"START". 

9.2.3.3.4.3 Test description 

9.2.3.3.4.3.1 Pre-test conditions 

System Simulator: 

- Cell A, and Cell 5 

Cell A is configured as Serving cell. Cell 5 as Non-Suitable Off cells. 
Cell 5 is operating in network operation mode II (No Gs interface present). 
Cell A has the absolute priorities set to LTE. 
NOTE: For Cell 5, power levels are defined in TS 34. 108 subclause 6.1.5 (FDD) or 6. 1 .6 (TDD). 
UE: 

- The test USIM contains a valid IMSI-1, P-TMSI-1, RAI-1, vaHd GUTI-1 and TAI-1, and valid EPS security 
parameters 

Preamble: 

- The UE is in state Registered Idle Mode (state 2) according to TS 36.508, [18]. 
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9.2.3.3.4.3.2 



Test procedure sequence 

Table 9.2.3.3.4.3.2-1 : Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


Message 


1 


The signal strength of Cell 5 is raised to that of 
the Serving Cell and that of Cell A is lowered 
to that of a non-Suitable Neighbour Cell as 
defined in table 6.2.2.1-1 of TS 36.508 [18]. 










2 


Wait [10] seconds for mobile to camp on cell 5 


- 


- 


- 


- 


3 


Check: The UE transmits a LOCATION 
UPDATING REOUEST on cell 5 to the MSC 
as specified in the specific message contents 
included in an INITIAL DIRECT TRANSFER 
message with intraDomainNasNodeSelector 
mapped from MSC TMSI allocated in the 
ATTACH ACCEPT message (step 14 table 
4.5.2.3-1 of TS 36.508 [18])). 


~> 


LOCATION UPDATING 
REQUEST 


1 


P 


4 


The SS transmits a LOCATION UPDATING 
ACCEPT message. 


<- 


LOCATION UPDATING ACCEPT 


- 


- 


5 


Check: Does the UE transmits a ROUTING 
AREA UPDATE REQUEST message on Cell 5 
as specified in the specific message contents 
included in an INITIAL DIRECT TRANSFER 
message with intraDomainNasNodeSelector 
mapped from GUTI-1 and Establishment 
Cause set to inter-RAT cell-selection. 

Note: This step is run in parallel with step 3. 


-> 


ROUTING AREA UPDATE 
REQUEST 


1 


P 


6 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message with Update result = "RA 
updated" and new P-TMSI allocated with a 
different NRI (=IDNNS) to that in the GUTI and 
the P-TMSI that was stored on the USIM. 


<~ 


ROUTING AREA UPDATE 
ACCEPT 






7 


The UE transmits a ROUTING AREA UPDATE 
COMPLETE message. 


-> 


ROUTING AREA UPDATE 
COMPLETE 






8 


The SS releases the RRC connection 


- 


- 


- 


- 


9 


The SS transmits Paging with new P-TMSI 
allocated in step 6 on cell 5 


<— 


Page 


- 


- 


10 


Check: Does the UE send a Service Request 
to access the PS domain using IDNNS 
mapped from the P-TMSI allocated in step 16. 


-> 


SERVICE REQUEST 


2 


P 


11 


The SS transmits a Service Accept message 
totheUE 


<— 


- 


- 


- 


12 


The SS releases the RRC connection 


- 


- 


- 


- 


3 


Cell A is configured as the Serving cell and cell 
5 is configured as a Suitable Neighbour Cell. 


- 


- 


- 


- 


12 


Check: does the UE transmit an 
RRCConnectionRequest with the InitialUE- 
Identityset. to "random value" and the 
establislimentcause set to MO-signalling? 


-> 


RRCConnectionRequest 


3 


P 


13 


The SS responds with RRCConnectionSetup. 


<— 


RRCConnectionSetup 






14 


Check: does the UE transmit an 
RRCConnectionSetupComplete message with 
the mmegi and mmec set to the values derived 
from the mapped RAI and P-TMSI, and 
containing a TRACKING AREA UPDATE 
REQUEST message as described in the 
specific message contents? 

NOTE: The UE should not include "radio 
capability information" in the TAU request. 


-> 


TRACKING AREA UPDATE 
REQUEST 


3 


P 


15 


The SS responds with a TRACKING AREA 
UPDATE ACCEPT message 


<- 


TRACKING AREA UPDATE 
ACCEPT 






16 


The SS releases the RRC connection. 


- 


- 


- 


- 
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9.2.3.3.4.3.3 Specific message contents 

Table 9.2.3.3.4.3.3-1 : ATTACH REQUEST (step 4, Table 4.5.2.3-1 TS 36.508) 



Derivation path: 36.508 table 4.7.2.-4 


Information Element 


Value/Remark 


Comment 


Condition 


EPS attach type 


'0010'B 


"combined 
EPS/IMSI attach" 




Old GUT! or IMS! 


GUTI-1 






Last visited registered TAI 


TAI-1 






Old location area identification 


Not Present 






TMSI status 


Not Present 







Table 9.2.3.3.4.3.3-2: ATTACH ACCEPT (step 4, Table 4.5.2.3-1 TS 36.508) 



Derivation path: 36.508 table 4.7.2-1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS attach result 


'010'B 


"Combined 
EPS/IMSI attach" 




TAI list 








Number of elements 


'00001'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAC 
values" 




MCC 
MNC 
TAC1 


PLMN= MCC/MNC 
TAC1=1 


"PLMN is set to 
the same 
MCC/MNC stored 

in EFiMsi" 
"TAI-1" 




GUT! 


GUTI-1 






LAI 


LAI-1 






MS identity 


TMSI-1 


NRI value of TMSI 
is different to that 
of GUTI-1 and P- 
TMSI-1 





Table 9.2.3.3.4.3.3-3: LOCATION UPDATING REQUEST (step 3, Table 9.2.3.3.4.3.2-1) 



Derivation path: 24.008 table 9.2.17 


Information Element 


Value/Remark 


Comment 


Condition 


Update type 


1000 


LA updating 




Ciphering key sequence number 


eKSI stored on the test 
USIM 






Location area identification 


PLMN= MCC/MNC 
TAC 1=1 


"PLMN is set to 
the same 
MCC/MNC stored 
in EFiMsi" 
"TAI-1" 




Mobile identity 


TMSI-1 


Allocated in step 8 





ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1337 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 9.2.3.3.4.3.3-4: INITIAL DIRECT TRANSFER (step 5, Table 9.2.3.3.4.3.2-1) 



Derivation path: 25.331 clause 1 1 


Information Element 


Value/Remark 


Comment 


Condition 


InitialDirectTransfer ::= SEQUENCE { 








cn-Domainldentity 


ps-domain 






intraDomainNasNodeSelector SEQUENCE { 








version CHQICE { 








release99 SEQUENCE { 








gsm-Map-IDNNS SEQUENCE { 








routingbasis CHOICE { 








localPTMSI { 








Routingparameter 


bit23tobit14of P-TMSI 
allocated in step 8 






1 








1 








} 








} 








} 








1 








1 








nas-IVIessage 


See table 9.2.3.3.4.3.3-5 






Establishment cause 


Inter-RAT cell re- 
selection 






measuredResultsQnRACH 


Not checked 






vSaONonCriticalExtensions SEQUENCE { 








initialDirectTransfer-v3a0ext SEQUENCE { 








start-Value 


00000000000000000000 







1 








laterNonCriticalExtensions SEQUENCE { 








initialDirectTransfer-r3-add-ext 


Not checked 






v590NonCriticalExtension SEQUENCE { 








initialDirectTransfer-v590ext 


Not checked 






v690NonCriticalExtensions SEQUENCE { 








initialDirectTransfer-v690ext SEQUENCE { 








pimn-ldentity SEQUENCE { 








IVIcc 


Mobile Country Code 
stored in EFimsi on the 
test USIM 






Mnc 


Mobile Network Code 
stored in EFimsi on the 
test USIM 






} 








measuredResultsQnRACHinterFreq 


Not checked 






mbms-Joinedlnformation 


Not checked 






1 








v770NonCritical Extensions 


Not checked 






} 








} 








} 








1 








} 
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Table 9.2.3.3.4.3.3-5: Message ROUTING AREA UPDATE REQUEST (step 6, Table 9.2.3.3.4.3.2-1) 



Derivation path : 24.008 table 9.4.14 


Information Element 


Value/Remark 


Comment 


Condition 


Update type 


000 


RA updating 




GPRS cipliering key sequence number 


eKSI stored on the test 
USIM 






Old routing area identification 


GUTI-1 right shifted by 
32bits 






IVIS Radio Access capability 


Not checked 






Old P-TMSI signature 


Mapped from GUTI-1 






Requested READY timer value 


Not checked 






DRX parameter 


Not checked 






TMSI status 


Not present 






P-TMSI 


Value is specified bit by 
bit below: 

- bit 31 and bit 30: 1 

- bit 29 to bit 24: bit 29 to 
bit 24 of M-TMSI 
allocated in step 18 
-bit 23 to bit 16: MME 
code allocated in step 18 
-bit 15 to bit 0: bit 15 to 
bit of M-TMSI allocated 
in step 8 






MS network capability 


Not checked 






PDP context status 


Not checked 






PS LCS Capability 


Not checked 






MBMS context status 


Not checked 






UE network capability 


Any allowed value 






Additional mobile identity 


P-TMSI allocated in step 
8 






Additional old routing area identification 


RAI-1 






Mobile station classmark 2 


Not checked 






Mobile station classmark 3 


Not checked 






Supported Codecs 


Not checked 







Table 9.2.3.3.4.3.3-6: Message SERVICE REQUEST (step 10, Table 9.2.3.3.4.3.2-1) 



Derivation path: 24.008 table 9.4.20 


Information Element 


Value/Remark 


Comment 


Condition 


Ciphering key sequence number 


FFS 






Service Type 


010 (Paging Response) 






P-TMSI 


P-TMSI allocated in step 
16. 







Table 9.2.3.3.4.3.3-7: Message RRCConnectionRequest (step 12, Table 9.2.3.3.4.3.2-1) 



Derivation path: 36.508 table 4.6.1-16 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHOICE { 








rrcConnectionRequest-r8 SEQUENCE { 








ue-ldentity CHOICE { 








random-Value 


Any allowed value 






1 








establishmentCause 


Mo-Signalling 






} 








} 








} 
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Table 9.2.3.3.4.3.3-8: Message RRCConnectionSetupComplete (step 14, Table 9.2.3.3.4.3.2-1) 



Derivation path: 36.508 table 4.6.1-18 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionSetupComplete ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionSetupComplete-r8 SEQUENCE { 








selectedPLIVIN-ldentity 


1 






registeredlVIME { 








pimn-ldentity 


Not present 






IVImegi 


LAC sent to the UE in 
step 1 6 






Mmec 


Bit23tobit 16of P-TMSI 
sent to the UE in step 16 






1 








dedicatedlnfoNAS 


See table 9.2.3.3.4.3.3-9 






nonCriticalExtension SEQUENCE {} 








} 








1 








1 








} 








Details to be added 
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Table 9.2.3.3.4.3.3-9: Message TRACKING AREA UPDATE REQUEST (step 14, Table 9.2.3.3.4.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 with condition UNCIPHERED (the message is integrity protected using the key 
stored in the USIM). 


Information Element 


Value/Remark 


Comment 


Condition 


EPS update type 


000 or 001 


'TA updating' or 
'combined TA/LA 
updating' 




NAS key set identifier 








NAS key set identifier 


The valid NAS key set 
identifier stored in the 
USIM 






TSC 


'O'B 


native security 
context (for 
KSIasme) 




Old GUTI or IMSI 








Type of identity 


110 


GUTI 




MNC/MCC 


Mobile Country Code and 
Mobile Network Code 
stored in EFimsi on the 
test USIM 






IVIME Group ID 


LAI allocated at step 8 






MME Code 


Bit 23 to bit 16 of P-TMSI 
allocated at step 1 6 






M-TMSI 


Value is specified bit by 
bit below: 

- bit 31 and bit 30: FFS 

- bit 29 to bit 24: bit 29 to 
bit 24 of P-TMSI 
allocated at step 8 

-bit 23 to bit 16: RAC 
allocated at step 8 
-bit 15 to bit 0: bit 15 to 
bit of P-TMSI allocated 
at step 1 6 






GPRS ciphering key sequence number 


GPRS ciphering key 
sequence number 
allocated at step 3 






Old P-TMSI signature 


P-TMSI signature 
allocated at step 1 6 






Additional GUTI 


GUTI-1 






NonceuE 


Any allowed value (must 
be present) 






UE network capability 


Any allowed value (must 
be present) 






Last visited registered TAI 


TAI stored in the test 
USIM 






UE radio capability information update needed 


1 


UE radio 
capability 
information 
update needed 




MS network capability 


Any allowed value (must 
be present) 






Old location area identification 


Not present if "EPS 
update type" is 'TA 
updating', LAI-1 is "EPS 
update type" is 
'combined TA/LA 
updating' 






TIVISI status 


Not present 






EPS update type 


000 or 001 


'TA updating' or 
'combined TA/LA 
updating' 




NAS key set identifier 








NAS key set identifier 


The valid NAS key set 
identifier stored in the 
USIM 
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TSC 


'O'B 


native security 
context (for 
KSIasme) 




Old GUTI or IMSI 








Type of identity 


110 


GUTI 




IVINC/MCC 


Mobile Country Code and 
Mobile Network Code 
stored in EFimsi on the 
test USIM 






IVIIVIE Group ID 


LAI allocated at step 16 






MME Code 


Bit 23 to bit 16 of P-TMSI 
allocated at step 8 






M-TMSI 


Value is specified bit by 
bit below: 

- bit 31 and bit 30: FFS 

- bit 29 to bit 24: bit 29 to 
bit 24 of P-TMSI 
allocated at step 8 

-bit 23 to bit 16: RAC 
allocated at step 8 
-bit 15 to bit 0: bit 15 to 
bit of P-TMSI allocated 
at step 8 






GPRS cipliering key sequence number 


GPRS ciphering key 
sequence number 
allocated at step 3 






Old P-TMSI signature 


P-TMSI signature 
allocated at step 1 6 






Additional GUTI 


GUTI-1 






NonceuE 


Any allowed value (must 
be present) 






UE network capability 


Any allowed value (must 
be present) 






Last visited registered TAI 


TAI stored in the test 
USIM 






UE radio capability information update needed 





shall not be 
present 




MS network capability 


Any allowed value (must 
be present) 






Old location area identification 


Not present if "EPS 
update type" is 'TA 
updating', LAI-1 is "EPS 
update type" is 
'combined TA/LA 
updating' 






TMSI status 


Not present 







9.2.3.3.5 
9.2.3.3.5.1 

(1) 



Periodic routing area update 
Test Purpose (TP) 



with { UE is campecJ on an E-UTRAN cell or in ECM-CONNECTED state and ISR is activatecJ 
ensure that { 

when { UE performs E-UTRA RRC state transitions } 

then { UE keeps the periocJic routing area upcJate timer T3312 running } 
} 

(2) 

with { UE is campeca on an E-UTRAN cell or ECM-CONNECTED state and ISR is activatecJ } 
ensure that { 

when { the periocJic routing area update timer T3312 expires } 
then { UE does not change RAT } 
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(3) 

with { UE is in state GMM-REGISTERED .NO-CELL-AVAILABLE and ISR is activated and the periodic routing 
area update timer T3312 expires } 
ensure that { 

when { UE enters the state GMM-REGISTERED .NORMAL-SERVICE } 
then { UE initiates the routing area updating procedure } 
} 

9.2.3.3.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.008, clause 4.7.2.2 and 
TS 23.401, clause 4.3.5.2. 

[TS 24.008, clause 4.7.2.2] 

If ISR is activated, the MS shall keep both the periodic tracking area update timer (timer T3412) and the periodic 
routeing area update timer (timer T3312). The two separate timers run in the MS for updating MME and SGSN 
independently. If the periodic routeing area update timer expires and the MS is in state GMM-REGISTERED. NO- 
CELL- AVAILABLE, the MS shall set its TIN to "RAT-related TMSI" and start the GERAN/UTRAN Deactivate ISR 
timer T3323. The MS shall initiate the routeing area updating procedure and stop the timer T3323 when the MS enters 
the state GMM-REGISTERED.NORMAL-SERVICE before timer T3323 expires. After expiry of timer T3323 the MS 
shall deactivate ISR by setting its TIN to "GUTI" and initiate the routing area updating procedure when the UE enters 
the state GMM-REGISTERED.NORMAL-SERVICE. 

[TS 23.401, clause 4.3.5.2] 

If the UE is camped on an E-UTRAN cell or is in ECM-CONNECTED state when the UE's periodic RAU or periodic 
LAU timer expires and ISR is activated the UE shall start the GERAN/UTRAN Deactivate ISR timer. After the 
GERAN/UTRAN Deactivate ISR timer expires the UE shall deactivate ISR by setting its TIN to "GUTI". The 
GMM/PMM-REGISTERED UE shall remember it has to perform a Routeing Area Update to the SGSN or a Location 
Area Update to the MSC when it next returns to 2G/3G coverage. 

The E-UTRAN Deactivate ISR timer is stopped when the UE performs a successful TAU; and the GERAN/UTRAN 
Deactivate ISR timer is stopped when the UE performs a successful RAU/LAU. 

Expiry of the periodic TAU timer, or, the periodic RAU timer, or, the periodic LAU timer shall not cause the UE to 
change RAT. 



E-UTRAN RRC state transitions shall have no impact on the periodic RAU timer or periodic LAU timer except that 
handover from 2G/3G to E-UTRAN shall cause the periodic RAU timer to be started from its initial value. 

9.2.3.3.5.3 Test description 

9.2.3.3.5.3.1 Pre-test conditions 

System Simulator: 

- Cell A and if pc_UTRAN Cell 5 or if (NOT pc_UTRAN AND pc_GERAN) Cell 24: 

- Cell A belongs to TAI-1 (home PLMN) and is set to "Serving cell" 
if pc_UTRAN, Cell 5 (only active when stated) 

- home PLMN 

- RAM (RAC & LAC values chosen by SS) 
System information indicate that NMO 1 is used 
Set to "Non-suitable cell" 

- if (NOT pc_UTRAN AND pc_GERAN), Cell 24 (only active when stated) 

- home PLMN 
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- RAC-1 (RAC & LAC values chosen by SS) 

- System information indicate that NMO 1 is used 
Set to "Non-suitable cell" 

UE: 

- The test USIM contains IMSI-1, GUTI-1 and TAI-1 and EPS update status is "EUl: UPDATED". 

- if pc_UTRAN or pc_GERAN, the test USIM contains P-TMSI-1 (belonging to RAM) and the update status is 
"Ul: UPDATED". 

Preamble: 

The UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
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9.2.3.3.5.3.2 



Test procedure sequence 

Table 9.2.3.3.5.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 




EXCEPTION: Steps 1a1 to 1b5 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that takes place if a capability is 
supported. 










1a1 


IF pc_UTRAN THEN the SS sets the cell type 
of Cell 5 to "Serving cell" and the cell type of 
Cell A to "Non-suitable cell". 










1a2 


The UE transmits a ROUTING AREA UPDATE 
REOUEST message on Cell 5. 


-> 


ROUTING AREA UPDATE 
REQUEST 


- 


- 


1a3 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message on Cell 5 with Update 
result value = '100' (RA updated and ISR 
activated). 


<~ 


ROUTING AREA UPDATE 
ACCEPT 






1a4 


The UE transmits a ROUTING AREA UPDATE 
COMPLETE message on Cell 5. 


-> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 


1a5 


The SS sets the cell type of Cell A to "Serving 
cell" and the cell type of Cell 5 to "Non-suitable 
cell". 










1b1 


ELSE IF pc_GERAN THEN the SS sets the 
cell type of Cell 24 to "Serving cell" and the cell 
type of Cell A to "Non-suitable cell". 










1b2 


The UE transmits a ROUTING AREA UPDATE 
REQUEST message on Cell 24. 


-> 


ROUTING AREA UPDATE 
REQUEST 


- 


- 


1b3 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message on Cell 24 with Update 
result value = '100' (RA updated and ISR 
activated). 


<- 


ROUTING AREA UPDATE 
ACCEPT 






1b4 


The UE transmits a ROUTING AREA UPDATE 
COMPLETE message on Cell 24. 


-> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 


1b5 


The SS sets the cell type of Cell A to "Serving 
cell" and the cell type of Cell 24 to "Non- 
suitable cell". 










- 


EXCEPTION: Steps 2 to 8 shall take place 
within (T331 2 - 3 min) of Step 1 a3/1 b3. 


- 


- 


- 


- 


2 


The SS waits for [1] min. 


- 


- 


- 


- 


3 


The SS pages the UE on Cell A using S-TMSI 
with .CN domain indicator set to "PS". 


<— 


- 


- 


- 


4 


The UE transmits a SERVICE REQUEST 
message on Cell A. 


-> 


SERVICE REQUEST 


- 


- 


5 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST 
message on Cell A activating a new EPS 
bearer context. 

This message is included in an 
RRCConnectionReconfiguration message to 
setup the new radio bearer associated with the 
dedicated EPS bearer context activated by the 
NAS message. 


<- 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






6 


The UE transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT ACCEPT message 
on Cell A. 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 






7 


The SS transmits a DEACTIVATE EPS 
BEARER CONTEXT REQUEST message on 
Cell A deactivating the dedicated EPS bearer 
context activated at Step 5. 

This message is included in an 
RRCConnectionReconfiguration message. 


<— 


DEACTIVATE EPS BEARER 
CONTEXT REQUEST 






8 


The UE transmits a DEACTIVATE EPS 


-> 


DEACTIVATE EPS BEARER 


- 


- 
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BEARER CONTEXT ACCEPT message on 
Cell A. 




CONTEXT ACCEPT 








EXCEPTION: Steps 9a1 to 9b5 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that takes place if a capability is 
supported. 










9a1 


IF pc_UTRAN THEN the SS sets the cell type 
of Cell 5 to "Serving cell" and the cell type of 
Cell A to "Non-suitable cell". 










9a2 


Check: Does the UE transmit a ROUTING 
AREA UPDATE REOUEST on Cell 5, T3312 
after Step laS? 


-> 


ROUTING AREA UPDATE 
REOUEST 


1 


P 


9a3 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message on Cell 5 with Update 
result value = '100' (RA updated and ISR 
activated). 


<~ 


ROUTING AREA UPDATE 
ACCEPT 






9a4 


The UE transmits a ROUTING AREA UPDATE 
COMPLETE on Cell 5. 


-> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 


9a5 


The SS sets the cell type of Cell A to "Serving 
cell" and the cell type of Cell 5 to "Non-suitable 
cell". 










9b1 


ELSE IF pc_GERAN THEN the SS sets the 
cell type of Cell 24 to "Serving cell" and the cell 
type of Cell A to "Non-suitable cell". 










9b2 


Check: Does the UE transmit a ROUTING 
AREA UPDATE REOUEST on Cell 24, T3312 
after Step IbS? 


-> 


ROUTING AREA UPDATE 
REOUEST 


1 


P 


9b3 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message on Cell 24 with Update 
result value = '100' (RA updated and ISR 
activated). 


<— 


ROUTING AREA UPDATE 
ACCEPT 






9a4 


The UE transmits a ROUTING AREA UPDATE 
COMPLETE on Cell 24. 


~> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 


9b5 


The SS sets the cell type of Cell A to "Serving 
cell" and the cell type of Cell 24 to "Non- 
suitable cell". 










10 


The SS waits for [1] min. 


- 


- 


- 


- 


11 


The SS pages the UE on Cell A using S-TMSI 
with CN domain indicator set to "PS". 


<— 


- 


- 


- 


12 


The UE transmits a SERVICE REOUEST 
message on Cell A. 


-> 


SERVICE REOUEST 


- 


- 


13 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST 
message on Cell A activating a new EPS 
bearer context. 

This message is included in an 
RRCConnectionReconfiguration message to 
setup the new radio bearer associated with the 
dedicated EPS bearer context activated by the 
NAS message. 


<- 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REOUEST 






14 


The UE transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT ACCEPT message 
on Cell A. 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 






15 


The SS waits until T3312 timer started at Step 
9a3/9b3 has expired. 


- 


- 


- 


- 


16 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.6 
indicate that a dedicated EPS bearer context is 
active on cell A? 






2 




17 


The SS transmits a DEACTIVATE EPS 
BEARER CONTEXT REOUEST message on 
Cell A deactivating the dedicated EPS bearer 
context activated at Step 13. 

This message is included in an 


<- 


DEACTIVATE EPS BEARER 
CONTEXT REQUEST 
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RRCConnectionReconfiguration message. 










18 


Tlie UE transmits a DEACTIVATE EPS 
BEARER CONTEXT ACCEPT message on 
Cell A. 


-> 


DEACTIVATE EPS BEARER 
CONTEXT ACCEPT 






19 


The SS waits for 2 min. 


- 


- 


- 


- 


20 


Check: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.2 
indicate that the UE is in state Registered, Idle 
IVIode on Cell A? 






2 






EXCEPTION; Steps 21 a1 to 21 b4 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that takes place if a capability is 
supported. 










21a 
1 


IF pc_UTRAN THEN the SS sets the cell type 
of Cell 5 to "Serving cell" and the cell type of 
Cell A to "Non-suitable cell". 










21a 
2 


Check: Does the UE transmit a ROUTING 
AREA UPDATE REOUEST message on Cell 5 
within [30] sec? 


-> 


ROUTING AREA UPDATE 
REQUEST 


3 


P 


21a 
3 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message on Cell 5 with Update 
result value = '100' (RA updated and ISR 
activated). 


<- 


ROUTING AREA UPDATE 
ACCEPT 






21a 
4 


The UE transmits a ROUTING AREA UPDATE 
COIVIPLETE message on Cell 5. 


-> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 


21b 

1 


ELSE IF pc_GERAN THEN the SS sets the 
cell type of Cell 24 to "Serving cell" and the cell 
type of Cell A to "Non-suitable cell". 










21b 
2 


Check: Does the UE transmit a ROUTING 
AREA UPDATE REOUEST message on Cell 
24 within [30] sec? 


-> 


ROUTING AREA UPDATE 
REQUEST 


3 


P 


21b 
3 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message on Cell 24 with Update 
result value = '1 00' (RA updated and ISR 
activated). 


<- 


ROUTING AREA UPDATE 
ACCEPT 






21b 
4 


The UE transmits a ROUTING AREA UPDATE 
COIVIPLETE message on Cell 24. 


-> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 



9.2.3.3.5.3.3 



Specific message contents 



Table 9.2.3.3.5.3.3-1 : Message ROUTING AREA UPDATE REQUEST (steps 1a2/1b2, Table 9.2.3.3.5.3.2- 

1) 



Information Element 


Value/remark 


Comment 


Condition 


Update type 


000 


"RA updating" 




P-TMSI 


P-TMSI mapped from 
GUTI assigned to UE 
during preamble 




pc_UTRAN 


MS network capability 








ISR support 


1 







Table 9.2.3.3.5.3.3-2: Message ROUTING AREA UPDATE REQUEST (steps 9a2/9b2 and 21a2/21b2, 

Table 9.2.3.3.5.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Update type 


Oil 


"Periodic 
updating" 




P-TMSI 


P-TMSI mapped from 
GUTI assigned to UE 
during preamble 




pc_UTRAN 


MS network capability 








ISR support 


1 
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Table 9.2.3.3.5.3.3-3: Message ROUTING AREA UPDATE ACCEPT (steps 1a3/1b3, 9a3/9b3 and 

21a3/21b3, Table 9.2.3.3.5.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Update result 


100 


"RA updated and 
ISR activated" 




Periodic RA update timer 


00100111 


7 min 





9.2.3.3.5a 
9.2.3.3. 5a.1 
(1) 



Periodic Location Update 
Test Purpose (IP) 



with { UE in EMM-REGISTERED. NORMAL-SERVICE and camped on E-UTRAN with periodic location update timer 
T3212 running, and ISR deactivated } 
ensure that { 

when { UE camps on a GERAN/UTRAN cell within the same LA where UE last successfully registered } 
then { the UE does not initiate a periodic location update procedure until the expiry of T3212 } 
} 

(2) 

with { UE in MM IDLE substate NORMAL SERVICE with periodic location update timer T3212 running, and 
ISR deactivated} 
ensure that { 

when { UE camps on a E-UTRAN cell and successfully performs a Tracking Area Update and T3212 
expires} 

then { the UE does not perform a periodic location update whilst in E-UTRAN coverage and does 
not change RAT because T3212 has expired} 
} 

(3) 

with { UE in EMM-REGISTERED. NORMAL-SERVICE and camped on E-UTRAN and the periodic location update 
timer T3212 expired, and ISR deactivated } 
ensure that { 

when { UE camps on a GERAN/UTRAN cell within the same LA where UE last successfully registered } 
then { the UE performs a periodic location update procedure } 



9.2.3.3. 5a.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 23.401 clauses 4.3.5.2; and 
TS 24.008 clauses 4.7.1.4.1 and 4.7.5.1.1. 

[TS 23.401, clause 4.3.5.2 "ReachabiHty Management for UE in ECM-IDLE state"] 



If the UE is EPS attached only and either camps on an E UTRAN cell or is in ECM CONNECTED state when the UE's 
periodic LAU timer expires, the UE shall perform a Location Area Update procedure in NMO 11/111 or combined 
RA/LA update in NMO 1 when it next returns to GERAN/UTRAN coverage. 



Expiry of the periodic TAU timer, or, the periodic RAU timer, or, the periodic LAU timer shall not cause the UE to 
change RAT. 



E-UTRAN RRC state transitions shall have no impact on the periodic RAU timer or periodic LAU timer except that 
handover from GERAN/UTRAN to E-UTRAN shall cause the periodic RAU timer to be started from its initial value. 

[TS 24.008, 4.2.2.1 "Service State, NORMAL SERVICE"] 

When in state MM IDLE and service state NORMAL SERVICE, the mobile station shall: 
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perform normal location updating when a new location area is entered; 

perform location updating procedure at expiry of timer T321 1 or T3213; 

perform periodic updating at expiration of timer T3212; 

perform IMSI detach; 

support requests from the CM layer; 

respond to paging; and 

for an eCall only mobile station (as determined by information configured in USIM), perform the eCall inactivity 
procedure at expiry of timer T3242 or timer T3243. 

[TS 24.008, 4.4.1 "Location updating procedure"] 



Upon successful location updating the mobile station sets the update status to UPDATED in the SIM/USIM, and stores 
the Location Area Identification received in the LOCATION UPDATING ACCEPT message in the SIM/USIM. The 
attempt counter shall be reset. 

[TS 24.008, 4.4.2 "Periodic updating"] 



The procedure is controlled by the timer T3212 in the mobile station. If the timer is not already started, the timer is 
started each time the mobile station enters the MM IDLE substate NORMAL SERVICE or ATTEMPTing TO 
UPDATE. When the MS leaves the MM Idle State the timer T3212 shall continue running until explicitly stopped. 



When the timer T3212 expires, the location updating procedure is started and the timer shall be set to its initial value for 
the next start. If the mobile station is in other state than MM Idle when the timer expires the location updating 
procedure is delayed until the MM Idle State is entered. 



If the mobile station is in service state NO CELL AVAILABLE, LIMITED SERVICE, PLMN SEARCH or PLMN 
SEARCH -NORMAL SERVICE when the timer expires the location updating procedure is delayed until this service 
state is left. 

9.2.3.3.5a.3 Test description 

9.2.3.3.5a.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured as Non-Suitable Off cell 

Cell 24 is configured as Serving cell, operating in network operation mode II and does not support Dual 
Transfer Mode (DTM_SUPPORT is configured as default (see TS 51.010-1 clause 40.2.1.1 [23]. The the value 
of T3212 (Octet 4 of the Control Channel Description IE) is 01 10 (6 minutes) 

Cell 24 does not transmit any "absolute priorities" 

Cell A has the absolute priorities set to LTE. 

UE: 

- The test USIM contains a valid IMSI- 1 , P-TMSI- 1 , RAI- 1 , valid GUTI- 1 , and vahd EPS security parameters 
UE is configured such that "EPS only TAU accept" does not cause RAT reselection to GSM. 

Preamble: 

- The UE is in state Switched OFF (state 1) according to TS 36.508 [18]. 
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9.2.3.3.5a.3.2 Test procedure sequence 

Table 9.2.3.3.5a.3.2-1 : Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


Message 


1 


The UE is switched on and camps on GERAN 
cell 24. 

The Periodic LU timer T3212 is configured to 6 
minutes, (see NOTE 1) 

(* mobile is mandated to start the LU update 
before starting the GPRS attach *) 










2 


The UE transmits a LOCATION UPDATING 
REQUEST with location updating type set to 
"Attach". 


-> 


LOCATION UPDATING 
REQUEST 






3 


The SS transmits a LOCATION UPDATING 
ACCEPT, and the UE stores the received LAI 
and sets the update status to UPDATED on 
the USIM. 


<- 


LOCATION UPDATING ACCEPT 






4 


The SS releases the RR Connection 


- 








5 


The UE transmits an ATTACH REQUEST 
message on Cell 24 indicating "GPRS attach". 


-> 


ATTACH REQUEST 


- 


- 


6 


The SS transmits an ATTACH ACCEPT 
message indicating "combined GPRS attach". 
The UE sets the update status to UPDATED 
on the USIM. The SS allocates a P-TMSI. 


<— 


ATTACH ACCEPT 






7 


The UE transmits an ATTACH COMPLETE to 
acknowledge the P-TMSI allocation. 


-> 


ATTACH COMPLETE 






8 


The UE requests the activation of a default 
PDP context 


-> 


ACTIVATE PDP CONTEXT 
REQUEST 






9 


The SS accepts the request for default PDP 
contect request and return an ACTIVATE PDP 
CONTEXT ACCEPT 


<— 


ACTIVATE PDP CONTEXT 
ACCEPT 






10 


The signal strength of Cell A is raised to that of 
the Serving Cell and Cell 24 is lowered to that 
of a Suitable Neighbour Cell as defined in table 
6.2.2.1-1 of TS 36.508 [18]. 

Note: Cell 24 is still suitable but the UE shall 
select Cell A 










11 


The UE camps on E-UTRAN cell A and 
transmits a TRACKING AREA UPDATE 
REQUEST message. 


-> 


TRACKING AREA UPDATE 
REQUEST 






12 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






13 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






14 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


15 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 






16 


SS responds with TRACKING AREA UPDATE 
ACCEPT message including a valid TAI list 
containing the TAI of Cell A; with PLMN ID of 
Cell A included in the GUTI. The UE sets the 
TIN = GUTI. 

Note: This is an EPS-only Accept message 
(update type = TA updated) 


<- 


TRACKING AREA UPDATE 
ACCEPT 






17 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message 


~> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


18 


The SS releases the RRC Connection 


- 


- 


- 


- 
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19 


The signal strength of Cell 24 is raised to that 
of the Serving Cell and Cell A is lowered to 
that of a Non-Suitable Neighbour Cell as 
defined in table 6.2.2.1-1 of TS 36.508 [18]. 










20 


The UE camps on cell 24. 


- 




- 


- 


21 


Check: Does the UE transmit a LOCATION 
UPDATING REQUEST? Continue checking 
until 4 mins after step 4. 

Note: This step is run in parallel with steps 22 
and 23. 






1 


F 


22 


The UE transmits a ROUTING AREA UPDATE 
REQUEST with Update type set to "RA 
updating". 


-> 


ROUTING AREA UPDATE 
REQUEST 






23 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message with Update result = "RA 
updated". 


<- 


ROUTING AREA UPDATE 
ACCEPT 






24 


The signal strength of Cell A is raised to that of 
the Serving Cell and Cell 24 is lowered to that 
of a Suitable Neighbour Cell as defined in table 
6.2.2.1-1 of TS 36.508 [18]. 

Note: Cell 24 is still suitable but the UE shall 
select Cell A 










25 


The UE camps on cell A. 


- 




- 


- 


26 


The UE transmits a TRACKING AREA 
UPDATE REQUEST message with EPS 
update set to "TA updating". 


-> 


TRACKING AREA UPDATE 
REQUEST 






27 


The SS responds with a TRACKING AREA 
UPDATE ACCEPT. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


28 


UE camps on cell A 


- 


- 


- 


- 


29 


Check: Does UE transmit a LOCATION 
UPDATING REQUEST (on cell 24) and 
changes RAT. Chech this until 7 minutes after 
step 4 (RR release after LU) 






2 


F 


30 


The signal strength of Cell 24 is raised to that 
of the Serving Cell and Cell A is lowered to 
that of a non-Suitable Neighbour Cell as 
defined in table 6.2.2.1-1 of TS 36.508 [18]. 










32 


Check: Does the UE transmits a LOCATION 
UPDATING REQUEST with location updating 
type set to "Periodic updating". 


-> 


LOCATION UPDATING 
REQUEST 


3 


P 


33 


The SS transmits a LOCATION UPDATING 
ACCEPT. 


<- 


LOCATION UPDATING ACCEPT 


- 


- 


34 


The SS releases the RR Connection 




(* we may need to permit the RA 
update to happen before the LA 
update "exception"*) 






35 


The UE transmits a ROUTING AREA UPDATE 
REQUEST with Update type set to "RA 
updating". 


-> 


ROUTING AREA UPDATE 
REQUEST 






36 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT message with Update result = "RA 
updated". 


<- 


ROUTING AREA UPDATE 
ACCEPT 







NOTE 1: Default message settings for GSM procedures and system information messages see TS 51.010-1 clause 
26.7 [23]. The value of T3212 (Octet 4 of the Control Channel Description IE) is 01 10. 



9.2.3.3.5a.3.3 
None 



Specific message contents 
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9.2.3.3.6 E-UTRAN RRC connection failure / Reselection of UTRAN cell / NAS signaling to 

release old S1 interface connection 

9.2.3.3.6.1 Test Purpose (TP) 
(1) 

with { UE is E-UTRA RRC_CONNECTED state and ISR not activated } 
ensure that { 

when { Radio link failure is detected and UE attempts to select a suitable E-UTRA cell to re- 
establish the RRC connection } 

then { UE can not find a suitable cell for T311 and leaves RRC_CONNECTED state with release 
cause 'RRC connection failure' } 

(2) 

with { UE searches for a suitable cell after an indication of E-UTRAN 'RRC connection failure' } 
ensure that { 

when { UE detects an UTRA cell and returns to coverage } 
then { UE performs a routing area update } 
} 

9.2.3.3.6.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.008, clause 4.7.5, 
TS36.331 clauses 5. 3.7.2, 5. 3. 11. 1,5.3. 11.3 and 5. 3.12 and TS36.304 clauses 5.2.7. 

[TS24.008 clause 4.7.5] 

This procedure is used for: 



in lu mode and A/Gb mode after intersystem change from S 1 mode, and the GMM receives an indication of 
"RRC connection failure" from lower layers due to lower layer failure while in SI mode; 



[TS 36.331 clause 5.3.7.2] 

The UE shall only initiate the procedure when AS security has been activated. The UE initiates the procedure when one 
of the following conditions is met: 

1> upon detecting radio link failure, in accordance with 5.3.1 1; or 



Upon initiation of the procedure, the UE shall: 

1> stop timer T310, if running; 

1> start timer T311; 

1> suspend all RBs except SRBO; 

1> reset MAC; 

1> apply the default physical channel configuration as specified in 9.2.4; 

1> apply the default semi-persistent scheduling configuration as specified in 9.2.3; 

1> apply the default MAC main configuration as specified in 9.2.2; 

1> perform cell selection in accordance with the cell selection process as specified in TS 36.304 [4]; 
[TS 36.304 clause 5.3.11.1] 
The UE shall: 
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1> upon receiving N310 consecutive "out-of-sync" indications from lower layers while neither T300, T301, T304 
nor T311 is running: 

2> start timer T3 10; 

[TS 36.304 clause 5.3.11.3] 

The UE shall: 

1> upon T310 expiry; or 

1> upon random access problem indication from MAC while neither T300, T301, T304 nor T31 1 is running; or 

1> upon indication from RLC that the maximum number of retransmissions has been reached: 

2> consider radio link failure to be detected; 

2> if AS security has not been activated: 

3> perform the actions upon leaving RRC_CONNECTED as specified in 5.3.12, with release cause 'other'; 

2> else: 

3> initiate the connection re-establishment procedure as specified in 5.3.7; 

[TS36.331 clause 5.3.12] 

Upon leaving RRC_CONNECTED, the UE shall: 

1> reset MAC; 

1> stop all timers that are running except T320; 

1> release all radio resources, including release of the RLC entity, the MAC configuration and the associated PDCP 
entity for all established RBs; 

1> indicate the release of the RRC connection to upper layers together with the release cause; 

1> if leaving RRC_CONNECTED was not triggered by reception of the MobilityFromEUTRACommand message: 

2> enter RRC_IDLE by performing cell selection in accordance with the cell selection process, defined for the case of 
leaving RRC_CONNECTED, as specified in TS 36.304 [4]; 

[TS 36.304 clause 5.2.7] 

On transition from RRC_CONNECTED to RRC_IDLE, a UE shall attempt to camp on the last cell for which it was in 
RRC_CONNECTED or any cell on a frequency or frequency of RAT assigned by RRC in the state transition message. 
If no suitable cell is found, the UE shall perform a cell selection starting with Stored Information Cell Selection 
procedure in order to find a suitable cell to camp on. 

When returning to idle mode after UE moved to RRC_CONNECTED state from camped on any cell state, UE shall 
attempt to camp on the last cell for which it was in RRC_CONNECTED state or any cell on a frequency or frequency 
of RAT assigned by RRC in the state transition message. If no acceptable cell is found, the UE shall continue to search 
for an acceptable cell of any PLMN in state any cell selection. 

9.2.3.3.6.3 Test description 

9.2.3.3.6.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 

Cell A belongs to TAI-1 and is set to "Serving cell" 

Cell 5 is configured according to Table 4.4.4-2 in [18]. 

Cell 5 belongs to RAI-1 and is set to "Non-suitable cell" 
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System information indicates that NMO 1 is used 



UE: 



None. 



Preamble: 



UE is in state Generic RB established (state 3) on Cell A according to [18]. 
9.2.3.3.6.3.2 Test procedure sequence 

Table 9.2.3.3.6.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS drops Cell A level for UE to detect 
physical layer recovery and waits for 1s (i.e. 
T310 transmitted in SIB2.) 










2 


The SS raises Cell 5 level as "Serving cell", 
switches Cell A off and waits for 1 0s (i.e. T31 1 
transmitted in SIB2) 












EXCEPTION: In parallel with step 3 below, the 
test steps in the parallel behaviour in table 
9.2.3.3.6.3.2-2 is taking place 










3 


Check: does the UE transmit a 
RRCConnectionReestablishmentRequest 
messages within the next 60s? 


-> 


RRCConnectionReestablishment 
Request 


1 


F 




At the end of this test procedure sequence, the 
UE is in end state UTRA connected (U2) 
according to TS 36.508 but attached for EPS 
services only. 











Table 9.2.3.3.6.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does UE perform Routing area 
updating procedure on Cell 5? 

Note: No message contents other than 
message type needs checking. 


-> 


ROUTING AREA UPDATE 
REQUEST 


2 


P 


2 


The SS completes the routing area update 
procedure according to generic procedure tbd 
in TS 36.508. 











9.2.3.3.6.3.3 

None 

9.2.3.4.1 

9.2.3.4.1.1 
(1) 



Specific Message Contents 



TAU/RAU procedure for inter-system cell reselection between A/Gb and S1 
modes 



Test Purpose (TP) 



with { UE attached to GERAN with a PDP context active, and, E-UTRAN NAS and Security parameters 
inclding a valid GUTI stored on the USIM } 
ensure that { 

when { UE performs a cell reselection to E-UTRAN and performs a Tracking Area Update } 

then { the UE encodes the RRC parameters in the RRC Connection Establishment messages correctly 
(i.e. in the RRCConnectionRequest message, the InitialUE- Identity is set to "randomValue" and the 
establishmentcause is set to MO-signalling; and, in the RRCConnectionSetupComplete message the 
selectedPLMN- identity, mmegi and mmec indicate the value of the registered MME {e.g. as retrieved 
from the USIM at power-on, or, as received in the last TRACKING AREA UPDATE ACCEPT message) } 
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(2) 

with { UE attached to GERAN with a PDP context active, and, E-UTRAN NAS and EPS Security parameters 
including a valid GUTI stored on the USIM, and ISR not activated } 
ensure that { 

when { UE performs a cell reselection to E-UTRAN and performs a Tracking Area Update } 

then { the UE encodes the parameters in the TRACKING AREA UPDATE REQUEST correctly i.e.: 

- the NAS key set identif ierASME IE is set to the value stored in the USIM/allocated in 

the last TRACKING AREA UPDATE ACCEPT message ; 

- the Old GUTI IE is derived from the mapped P-TMSI and RAI ; 

- the Additional GUTI IE is set to the GUTI stored in the USIM/allocated in the last 

TRACKING AREA UPDATE ACCEPT message ; 

- the GPRS cipherign key sequence number IE is set to the value allocated in the 

AUTHENTICATION AND CIPHERING REQUEST message; and 

- the NONCEue IE is included; 

- the DRX parameter IE is not included. } 



(3) 

with { UE powered on in GERAN } 
ensure that { 

when { UE makes its first Tracking Area Update to E-UTRAN} 

then { UE sends the UE radio capability information update needed IE } 
} 

(4) 

with { UE registered in E-UTRAN, and, GERAN NAS and Security parameters including a valid P-TMSI 
available in the UE and ISR not activated } 
ensure that { 

when { UE performs a cell reselection to GERAN and performs a Routeing Area Update } 

then { the UE derives the TLLI parameter in the RLC/MAC header from the GUTI allocated in the 
TRACKING AREA UPDATE ACCEPT message } 
} 

(5) 

with { UE registered in E-UTRAN, and, GERAN NAS and GERAN Security parameters including a valid P- 
TMSI available in the UE, and ISR not activated } 
ensure that { 

when { UE performs a cell reselection to GERAN and performs a Routeing Area Update } 

then { the UE encodes the parameters in the ROUTING AREA UPDATE REQUEST correctly i.e.: 

- [the GPRS ciphering key sequence number IE is set to the value mapped from 

KSI-ASME;;] - the Old routing area identification IE, and the Old P- 

TMSI signature IE are 

mapped from the GUTI allocated in the TRACKING AREA UPDATE ACCEPT message; 

- the Additional mobile identity IE contains the P-TMSI allocated in the last received 

ATTACH ACCEPT/ROUTING AREA UPDATE ACCEPT message; 

- the Additional old routing area identification IE contains the RAI allocated in the 

last received ATTACH ACCEPT/ROUTING AREA UPDATE ACCEPT message; and 

- [the DRX parameter IE is not included] . } 
} 

(6) 

with { UE registered } 
ensure that { 

when { UE makes its second Tracking Area Update to E-UTRAN} 

then { UE does not send the UE radio capability information update needed IE } 
} 

9.2.3.4.1.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 23.003 clauses 2.8.2.1 and 
2.8.2.2; TS 23.401 clauses 4.3.5.6, 5.3.3.1 and 5.3.3.3; TS 24.008 clauses 4.7.1.4.1 and 4.7.5.1.1; and TS 24.301 clauses 
5.3.1.1 and 5.5.3.2.2. 

[TS 23.003, clause 2.8.2.1 "Mapping from GUTI to RAI, P-TMSI and P-TMSI signature"] 

The mapping of the GUTI shall be done to the combination of RAI of GERAN / UTRAN and the P-TMSI: 
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E-UTRAN <MCC> maps to GERAN/UTRAN <MCC> 

E-UTRAN <MNC> maps to GERAN/UTRAN <MNC> 

E-UTRAN <MME Group ID> maps to GERAN/UTRAN <LAC> 

E-UTRAN <MME Code> maps to GERAN/UTRAN <RAC> and is also copied into the 8 most significant bits of 
the NRI field within the P-TMSI; 

E-UTRAN <M-TMSI> maps as follows: 

- 6 bits of the E-UTRAN <M-TMSI> starting at bit 29 and down to bit 24 are mapped into bit 29 and down to 
bit 24 of the GERAN/UTRAN <P-TMSI>; 

- 16 bits of the E-UTRAN <M-TMSI> starting at bit 15 and down to bit are mapped into bit 15 and down to 
bit of the GERAN/UTRAN <P-TMS1>; 

- and the remaining 8 bits of the E-UTRAN <M-TMSI> are mapped into the 8 MBS bits of the <P-TMSI 
signature> field. 

For UTRAN, the 10-bit long NRI bits are masked out from the P-TMSI and also supplied to the RAN node as IDNNS 
(Intra Domain NAS Node Selector). However, the RAN configured NRI length should not exceed 8 bits. 

[TS 23.003, clause 2.8.2.2 "Mapping from RAI and P-TMSI to GUTI"] 

The mapping of P-TMSI (TLLI) and RAI in GERAN/UTRAN to GUTI in E-UTRAN shall be performed as follows: 

GERAN/UTRAN <MCC> maps to E-UTRAN <MCC> 

GERAN/UTRAN <MNC> maps to E-UTRAN <MNC> 

GERAN/UTRAN <LAC> maps to E-UTRAN <MME Group ID> 

GERAN/UTRAN <RAC> maps into bit 23 and down to bit 16 of the M-TMSI 
The 8 most significant bits of GERAN/UTRAN <NRI> map to the MME code. 

GERAN/UTRAN <P-TMSI> maps as follows: 

- 6 bits of the GERAN/UTRAN <P-TMSI> starting at bit 29 and down to bit 24 are mapped into bit 29 and 
down to bit 24 of the E-UTRAN <M-TMSI>; 

- 16 bits of the GERAN/UTRAN <P-TMSI> starting at bit 15 and down to bit are mapped into bit 15 and 
down to bit of the E-UTRAN <M-TMSI>. 



[TS 23.401, clause 4.3.5.6, "Idle mode signalling reduction function"] 

The TIN can take one of the three values, "P-TMSI", "GUTI" or "RAT-related TMSI". The UE shall set the TIN when 
receiving an Attach Accept, a TAU Accept or RAU Accept message according to the rules in table 4.3.5.6-1. 
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Table 4.3.5.6-1 : Setting of the TIN 



Message received by UE 


Current TIN value stored by 
UE 


TIN value to be set by the 

UE when receiving 

message 


Attach Accept via E-UTRAN 
(never indicates ISR activation) 


Any value 


GUTI 


Attach Accept via 

GERAN/UTRAN 

(never indicates ISR activation) 


Any value 


P-TMSI 


TAU Accept not indicating ISR 


Any value 


GUTI 


TAU Accept indicating ISR 


GUTI 
P-TMSI or RAT-related TMSI 


GUTI 
RAT-related TMSI 


RAU Accept not indicating ISR 


Any value 


P-TMSI 


RAU Accept indicating ISR 


P-TMSI 
GUTI or RAT-related TMSI 


P-TMSI 
RAT-related TMSI 



[TS 23.401, clause 5.3.3.1, step 2, "Tracking Area Update procedure with Serving GW change"] 



If the UE's TIN indicates "P-TMSI" and the UE holds a valid P-TMSI and related RAI then these two elements are 
indicated as the old GUTI. 



[TS 23.401, clause 5.3.3.3, step 2, "Routeing Area Update with MME interaction and without S-GW change"] 



If the UE's internal TIN indicates "GUTI" and the UE holds a valid GUTI then the UE indicates the GUTI as the old 
P-TMSl and old RAI 



[TS 24.008, clause 4.7.1.4.1, "Radio resource sublayer address handling (A/Gb mode only)"] 
For an MS supporting S 1 mode, the following five cases can be distinguished: 

a) the TIN indicates "P-TMSI" or "RAT-related TMSI" and the MS holds a valid P-TMSI and a RAI; 

b) the TIN indicates "GUTI" and the MS holds a valid GUTI; 

c) the TIN is deleted and the UE holds a valid P-TMSI and RAI; 

d) the TIN is deleted and the UE holds a valid GUTI, but no valid P-TMSI and RAI; or 

e) none of the previous cases is fulfilled. 

In case a) the MS shall derive a foreign TLLI from the P-TMSI and proceed as specified for case i) above. 

In case b), the MS shall derive a P-TMSI from the GUTI and then a foreign TLLI from this P-TMSI and proceed as 
specified for case i) above. 

[TS 24.008, clause 4.7.5.1.1, "Normal and periodic routing area updating procedure initiation"] 

To initiate the normal routing area updating procedure, the MS sends the message ROUTING AREA UPDATE 
REQUEST to the network, starts timer T3330 and changes to state GMM-ROUTING-AREA-UPDATING- 
INITIATED. 

If the MS supports SI mode, the MS shall handle the P-TMSI IE as follows: 

- If the TIN indicates "GUTI" and the MS holds a valid GUTI, the MS shall map the GUTI into a P-TMSI, 
P-TMSl signature and RAI as specified in 3GPP TS 23.003 [4]. The MS shall include the mapped RAI in the 
Old routing area identification IE and the mapped P-TMSI signature in the P-TMSI signature IE. When the 
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routing area updating procedure is initiated in lu mode, the MS shall also include the mapped P-TMSI in the 
P-TMSI IE. Additionally, in lu mode and A/Gb mode, if the MS holds a valid P-TMSI and RAI, the MS shall 
indicate the P-TMSI in the Additional mobile identity IE and the RAI in the Additional old routing area 
identification IE. 

- If the TIN indicates "P-TMSI" or "RAT-related TMSI" and the MS holds a valid P-TMSI and RAI, the MS shall 
indicate the RAI in the Old routing area identification IE. When the routing area updating procedure is initiated 
in lu mode, the MS shall also include the P-TMSI in the P-TMSI IE. 

If the routing area updating procedure is not initiated by the MS due to an S 1 mode to lu mode or S 1 mode to A/Gb 
mode intersystem change, the message ROUTING AREA UPDATE REQUEST shall contain the P-TMSI signature 
when received within a previous ATTACH ACCEPT or ROUTING AREA UPDATE ACCEPT message. 

If the routing area updating procedure is initiated by the MS due to an S 1 mode to lu mode or S 1 mode to A/Gb mode 
inter-system change in idle mode and the MS does not have a valid current UMTS security context, the message 
ROUTING AREA UPDATE REQUEST shall include a P-TMSI signature filled with a NAS token as specified in 
3GPP TS 33.401 [119]. If the MS has a valid current UMTS security context, the MS shall indicate it in the GPRS 
ciphering key sequence number IE. 

NOTE: If the TIN indicates "GUTI", 8 bits of the NAS token will be filled with bits from the M-TMSI (see 
3GPP TS 23.003 [4]). 

If the routing area updating procedure is initiated by the MS due to the S 1 mode to lu mode or S 1 mode to A/Gb mode 
inter-system change in connected mode or in idle mode if the MS does not have a valid current security context, the MS 
shall derive CK' and IK' from the Kasme and the NAS downlink COUNT value corresponding to the NAS token derived 
as specified in 3GPP TS 33.401 [119]. The MS shall indicate the eKSI value in the CKSN field of the GPRS ciphering 
key sequence number IE in the ROUTING AREA UPDATE REQUEST message. Then, the MS shall reset the START 
value and store the mapped UMTS security context replacing the current UMTS security context. 



In order to indicate the new DRX parameter while in GERAN or UTRAN coverage, the MS shall send the ROUTING 
AREA UPDATE REQUEST message containing the DRX parameter in the DRX parameter IE to the network, with the 
exception of the case if the MS had indicated its UE specific DRX parameter (3GPP TS 24.301 [120]) to the network 
while in E-UTRAN coverage. In this case, when the MS enters GERAN or UTRAN coverage and initiates a routing 
area updating procedure, the MS shall not include the DRX parameter in the DRX parameter IE in the ROUTING 
AREA UPDATE REQUEST message. 

[TS 24.301, clause 5.3.1.1 "Establishment of the NAS signalling connection"] 

For the routing of the initial NAS message to the appropriate MME, the UE NAS provides the lower layers with either 
the S-TMSI or the registered globally unique MME identifier (GUMMEI) that consists of the PLMN ID, the MME 
group ID, and the MME code (see 3GPP TS 23.003 [2]). 

When the UE is registered in the tracking area of the current cell during the NAS signalling connection 
establishment, the UE NAS shall provide the lower layers with the S-TMSI, but shall not provide the registered 
MME identifier to the lower layers. Exceptionally, when the UE in EMM-IDLE mode initiates a tracking area 
updating procedure for load balancing purposes, the UE NAS shall provide the lower layers with neither S-TMSI 
nor registered MME identifier. 

When the UE is not registered in the tracking area of the current cell during the NAS signalling connection 
establishment, the UE NAS does not provide the lower layers with the S-TMSI. If the UE has a valid registered 
MME identifier from a previous registration, the UE NAS shall provide the lower layers with the registered 
MME identifier. 

[TS 24.301, clause 5.5.3.2.2 "Normal and periodic tracking area updating procedure initiation"] 



In order to indicate its UE specific DRX parameter while in E-UTRAN coverage, the UE shall send the TRACKING 
AREA UPDATE REQUEST message containing the UE specific DRX parameter in the DRX parameter IE to the 
network, with the exception of the case if the UE had indicated its DRX parameter (3GPP TS 24.008 [13]) to the 
network while in GERAN or UTRAN coverage. In this case, when the UE enters E-UTRAN coverage and initiates a 
tracking area updating procedure, the UE shall not include the UE specific DRX parameter in the DRX parameter IE in 
the TRACKING AREA UPDATE REQUEST message. 
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When initiating a tracking area updating procedure as a result of an lu mode to S 1 mode or A/Gb mode to S 1 mode 
inter-system change, the UE shall handle the GUTI as follows: 

- if the TIN indicates "P-TMSI" and the UE holds a valid P-TMSI and RAI, the UE shall map the P-TMSI and 
RAI into the old GUTI IE. Additionally, if the UE holds a valid GUTI, the UE shall indicate the GUTI in the 
Additional GUTI IE. 

NOTE: Mapping the P-TMSI and RAI to the GUTI is specified in Annex H of 3GPP TS 23.401 [10]. 

- if the TIN indicates "GUTI" or "RAT-related TMSI" and the UE holds a valid GUTI, the UE shall indicate the 
GUTI in the Old GUTI IE. 



When the tracking area updating procedure is initiated to perform an inter-system change from A/Gb mode or lu mode 
to S 1 mode, the UE shall include the KSIasme in the TRACKING AREA UPDATE REQUEST message if the UE has a 
cached EPS security context. Otherwise, the UE shall set the KSIasme to the value "no key is available". 

When the tracking area updating procedure is initiated in EMM-IDLE mode to perform an inter-system change from 
A/Gb mode or lu mode to SI mode, the UE shall include the KSIsgsn in the TRACKING AREA UPDATE REQUEST 
message. If the UE does not have a cached EPS security context, the UE shall include the NonccuE IE in the 
TRACKING AREA UPDATE REQUEST message. The TRACKING AREA UPDATE REQUEST message shall be 
integrity protected with the cached EPS security context if the UE has one. If the UE does not have a cached EPS 
security context, the TRACKING AREA UPDATE REQUEST message shall not be integrity protected. 



When the tracking area updating procedure is initiated in EMM-IDLE mode to perform an inter-system change from 
A/Gb mode or lu mode to SI mode, the UE shall include the KSIsgsn in the TRACKING AREA UPDATE REQUEST 
message. If the UE does not have a cached EPS security context, the UE shall include the NonccuE IE in the 
TRACKING AREA UPDATE REQUEST message. The TRACKING AREA UPDATE REQUEST message shall be 
integrity protected with the cached EPS security context if the UE has one. If the UE does not have a cached EPS 
security context, the TRACKING AREA UPDATE REQUEST message shall not be integrity protected. 



If the UE initiates the first tracking area updating procedure following an attach in A/Gb mode or lu mode, the UE shall 
include a UE radio capability information update needed IE in the TRACKING AREA UPDATE REQUEST message. 



[TS 24.301, clause 4.4.2 "Handling of EPS security contexts"] 



The key set identifier eKSI is assigned by the MME either during the authentication procedure or, for the mapped 
security context, during the handover procedure. The eKSI consists of a value and a type of security context parameter 
indicating whether an EPS security context is a native EPS security context or a mapped EPS security context. When 
the EPS security context is a native EPS security context, the eKSI has the value of KSIasme, and when the current EPS 
security context is a mapped EPS security context, the eKSI has the value of KSIsgsn- 



9.2.3.4.1.3 Test description 

9.2.3.4.1.3.1 Pre-test conditions 

System Simulator: 

NOTE: while this test describes the uses of 3 cells, it is intended that this test only requires 2 cells to be active at 
any one instant. 

- Cell A (E-UTRAN), Cell 24 and Cell 26 (GERAN) 
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With the exception of the MCC and MNC, cell 24 and cell 26 take the default parameters of the GERAN cells as 
defined in clause 6.3.1 of TS 36.508 [18], Cells 24 and 26 are configured with the same MCC and MNC as cell 
A. Cells 24 and 26 are in the same Routeing Area. 

As defined in table 4.4.2-1 of TS 36.508 [18], cell 24 and cell 26 are GERAN cells. 

- As defined in clause 40.1 of TS 51.010 [23], the GERAN cells are configured to use NetworkMode of 
Operation I. 

- The power level of Cell 24 is the Serving Cell level defined in table 6.2.2.1-1 of TS 36.508 [18]. 

The power levels of Cells A and 26 are set to the Non-suitable "Off level defined in table 6.2.2.1-1 of TS 
36.508 [18]. 

UE: 

The test USIM contains a valid GUTI = GUTIx (stored in EFepsloci)^ valid EPS security parameters (stored in 
EFepsnsc), and EPS update status is "EUl: UPDATED". GUTIx has MNC=987, MCC= 65, MMEGI = 'fedc' 
hex, MMEC = 'ba' hex, and arbitrary M-TMSI. 

Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.2.3.4.1.3.2 



Test procedure sequence 

Table 9.2.3.4.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message on Cell 24 


-> 


ATTACH REQUEST 


- 


- 


3 


The SS transmits an AUTHENTICATION 
REQUEST message. 


<— 


AUTHENTICATION REQUEST 


- 


- 


4 


The UE transmits an AUTHENTICATION 
RESPONSE message. 


-> 


AUTHENTICATION RESPONSE 


- 


- 


5 


The SS transmits a NAS SECURITY MODE 
COMMAND message 


<— 


SECURITY MODE COMMAND 


- 


- 


6 


The UE transmits a NAS SECURITY MODE 
COMPLETE message ciphered with the new 
EPS security context identified by the KSIasme 
received in the SECURITY MODE COMMAND 
message in step 5 


-> 


SECURITY MODE COMPLETE 






8 


SS responds with ATTACH ACCEPT message 
including valid TMSI, P-TMSI (TIN set to P- 
TMSI) and RAI. 

Editor's Note: the default message contents in 
51.010 clause 40.2.4.3 allocate a Negotiated 
READY timer value of 32 seconds. 


<- 


ATTACH ACCEPT 






9 


The UE transmits an ATTACH COMPLETE 
message. 


- 


ATTACH COMPLETE 


- 


- 


10 


Void 


- 


- 


- 


- 


11 


Void 


- 


- 


- 


- 


12 


Void 


- 


- 


- 


- 


13 


The signal strength of Cell A is raised to that of 
the Serving Cell and that of Cell 24 is lowered 
to that of a Suitable Neighbour Cell as defined 
in table 6.2.2.1-1 of TS 36.508 [18]. 

Note: Cell 24 is still suitable but the UE is 
expected to select Cell A. 










14 


Void 


- 


- 


- 


- 


15 


Check: does the UE send an 
RRCConnectionRequest with the InitialUE- 
Identity set. to "randomValue" and the 
establishmentcause set to MO-signalling on 
Cell A? 

Editor's Note: Cell reselection to E-UTRAN 
might not occur until the GPRS READY timer 
has expired. Hence this step might occur up to 
40 seconds after step 13. 


-> 


RRCConnectionRequest 


1 




16 


The SS responds with RRCConnectionSetup 


<- 


RRCConnectionSetup 






17 


Check: does the UE send an 
RRCConnectionSetupComplete with the 
selectedPLMN-identity se\ to the value of the 
registered MME (i.e. to the value in the GUTI 
stored on the USIM in EFepsloci), and, the 
mmegi and mmec are set to the values derived 
from the GUTI stored on the USIM in 
EFepsloci; 

Check: are the contents of the TRACKING 
AREA UPDATE REQUEST with the correct 
parameters? 


-> 


RRCConnectionSetupComplete(R 
RC parameters, TRACKING 
AREA UPDATE REQUEST) 


1, 
2,3 


P 


18 


The SS sends TRACKING AREA UPDATE 
ACCEPT 

Note: the default message contents cause the 


<— 


TRACKING AREA UPDATE 
ACCEPT 
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allocation of a new GUTI and new TAI list 










19 


The UE sends TRACKING AREA UPDATE 
COMPLETE 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


20 


the SS releases the RRC connection 


- 


- 


- 


- 


21 


Cell 24 is switched off 


- 


- 


- 


- 


22 


The signal strength of Cell 26 is raised to that 
of the Serving Cell and that of Cell A is 
lowered to that of a Suitable Neighbour Cell as 
defined in table 6.2.2.1-1 of TS 36.508 [18]. 

Note: Cell A is still suitable but the UE is 
expected to select Cell 26. 










23 


Check: does the UE send on Cell 26 an 
RLC/MAC header with the TLLI derived from 
the P-TIVISI that is derived from the GUTI 
allocated in step 18? 






4 


P 


24 


Check: does the UE send on Cell 26 a 
ROUTING AREA UPDATE REQUEST with the 
correct parameters? 


-> 


ROUTING AREA UPDATE 
REQUEST 


5 


P 


25 


The SS sends ROUTING AREA UPDATE 
ACCEPT (without the allocated P-TMSI IE, but 
with the Requested MS Information IE 
indicating "E-UTRAN inter RAT information 
container IE requested"). 


<- 


ROUTING AREA UPDATE 
ACCEPT 






26 


UE sends ROUTING AREA UPDATE 
COMPLETE message 


-> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 


27 


The signal strength of Cell A is raised to that of 
the Serving Cell and that of Cell 26 is lowered 
to that of a Suitable Neighbour Cell as defined 
in table 6.2.2.1-1 of TS 36.508 [18]. 

Note: Cell 26 is still suitable but the UE is 
expected to select Cell A. 










28 


Check: does the UE send on Cell A an 
RRCConnectionSetupComplete with the 
selectedPLMN-identity indicating the 
registered MME (i.e. the PLMN in the GUTI 
allocated in step 18 ), and, the mmegiar\6 
mmec are set to the values in the GUTI 
allocated in step 18? 

Check: does the UE send a TRACKING AREA 
UPDATE REQUEST with the correct 
parameters? 


~> 


RRCConnectionSetupComplete(R 
RC parameters, TRACKING 
AREA UPDATE REQUEST) 


1, 
2,6 


P 


29 


The SS sends TRACKING AREA UPDATE 
ACCEPT 

Note: the default message contents cause the 
allocation of a new GUTI. 


<— 


TRACKING AREA UPDATE 
ACCEPT 






30 


The UE sends TRACKING AREA UPDATE 
COMPLETE 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 



9.2.3.4.1 .3.3 Specific message contents 

Table 9.2.3.4.1.3.3-1: Message RRCConnectionRequest (step 15, Table 9.2.3.4.1.3.2-1) 



Derivation path: 36.508 table 4.6.1-16 


Information Element 


Value/Remark 


Comment 


Condition 


InitialUE-ldentity CHOICE { 








random-Value 


Any allowed value 






1 








establishmentCause 


Mo-Signalling 
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Table 9.2.3.4.1.3.3-2: Message RRCConnectionSetupComplete (step 17, Table 9.2.3.4.1.3.2-1) 



Derivation path: 36.508 table 4.6.1-18 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionSetupComplete ::= SEQUENCE { 








rrc-Transaction Identifier 


RRC- 
Transactionldentifier-UL 






criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionSetupComplete-r8 SEQUENCE { 








selectedPLIVIN-ldentity 


Indicates the PLIVIN of 
cell 24. 






registeredMME SEQUENCE { 








pimn-ldentity 


987-65 


From GUTIx, 
stored on the 
USIM in 
EFepsloci. 




Mmegi 


'1111 11101101 1100'B 


'fedc' hex, from 
GUTIx stored on 
the USIM in 
EFepsloci. 




Mmec 


'1011 1010' B 


'ba' hex, from 
GUTIx stored on 
the USIM in 
EFepsloci 




} 








nas-Dedicatedlnformation 


Not checked at RRC 
layer 






nonCriticalExtension SEQUENCE {} 


Not checked 






1 








} 








} 








} 









Table 9.2.3.4.1.3.3-3: Message TRACKING AREA UPDATE REQUEST (step 17, Table 9.2.3.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remarl< 


Comment 


Condition 


Sent in SECURITY PROTECTED NAS MESSAGE 
with valid integrity check 








NAS key set IdentifierASME 








NAS key set identifier 


The valid NAS key set 
identifier KSIasme of the 
UE 


As stored on the 
USIM in EFepsnsc 




TSC 


'O'B 


native security 
context 




Old GUTI 


Mapped from the P-TMSI 
and RAI allocated in step 
8 






Additional GUTI 


GUTI1 


Set to the value 
stored in the 
USIM in EFepsloci 




DRX parameter 


Not present 






UE radio capability information update needed 


'1'B 


UE radio 
capability 
information 
update needed 




GPRS ciphering key sequence number 


Value mapped from the 
AUTHENTICATION AND 
CIPHERING REQUEST 
message 
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Table 9.2.3.4.1.3.3-4: Message ROUTING AREA UPDATE REQUEST (step 24, Table 9.2.3.4.1.3.2-1) 



Derivation path: 24.008 table 9.4.14 


Information Element 


Value/Remark 


Comment 


Condition 


Protocol discriminator 


GMM 






Skip indicator 


'0000' 






Routing area update request message identity 


'0000 1000' B 






Update type 


Any allowed value 






GPRS ciphering key sequence number 


set to the value to KSI- 
ASME 


With ISR inactive 
and TIN indicates 
GUTI, then eKSI 
value is set to 
KSI-ASME 




Old routing area identification 


Mapped from the GUTI 
received in step 18. 






IVIS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Mapped from the GUTI 
received in step 18. 






Requested READY timer value 


If present, any allowed 
value. 






DRX parameter 


Not present 


Shall be absent 




TMSI status 


If present, any allowed 
value. 






P-TMSI 


Not present 






IVIS network capability 


Any allowed value. 






PDP context status 


If present, any allowed 
value. 






PS LCS Capability 


If present, any allowed 
value. 






IVIBMS context status 


If present, any allowed 
value. 






UE network capability 


Any allowed value. 






Additional mobile identity 


Set to the P-TMSI 
allocated in step 8 






Additional old routing area identification 


Set to the RAI allocated 
in step 8 






Mobile station classmark 2 


If present, any allowed 
value. 






Mobile station classmark 3 


If present, any allowed 
value. 






Supported Codecs 


If present, any allowed 
value. 







Table 9.2.3.4.1.3.3-5: Message ROUTING AREA UPDATE ACCEPT (step 25, Table 9.2.3.4.1.3.2-1) 



Derivation path: 24.008 table 9.4.15 


Information Element 


Value/Remarl< 


Comment 


Condition 










allocated P-TMSI 


Absent 






Requested MS Information 


'0100' B 


E-UTRAN inter 
RAT information 
container IE 
requested 





Table 9.2.3.4.1.3.3-6: Message ROUTING AREA UPDATE COMPLETE (step 26, Table 9.2.3.4.1.3.2-1) 



Derivation path: 24.008 table 9.4.1 6 


Information Element 


Value/Remarl< 


Comment 


Condition 


E-UTRAN inter RAT handover information 


Any allowed value 







ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1364 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 9.2.3.4.1.3.3-7: Message RRCConnectionSetupComplete (step 28, Table 9.2.3.4.1.3.2-1) 



Derivation path: 36.508 table 4.6.1-18 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionSetupComplete ::= SEQUENCE { 








Rrc-Transactionldentifier 


RRC- 
Transactionldentifier-UL 






criticalExtensions CHOICE { 








CI CHOICE! 








rrcConnectionSetupComplete-r8 SEQUENCE { 








selectedPLIVIN-ldentity 


Indicates the PLMN of 
cell 24. 






registeredMME SEQUENCE { 








pimn-ldentity 


Not present 


Shall be absent 
because the 
registered MME is 
the same as the 
selected PLMN. 




Mmegi 


The MMEGI part of the 
GUTI in the TRACKING 
AREA UPDATE ACCEPT 
message sent in step 18 






Mmec 


The MMEC part of the 
GUTI in the TRACKING 
AREA UPDATE ACCEPT 
message sent in step 18 






} 








nas-Dedicatedlnformation 


Not checked at RRC 
layer 






nonCriticalExtension SEQUENCE {} 


Not checked 






} 








} 








} 








1 









Table 9.2.3.4.1.3.3-8: Message TRACKING AREA UPDATE REQUEST (step 28, Table 9.2.3.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


Sent in SECURITY PROTECTED NAS MESSAGE 
with valid integrity check 








NAS key set IdentifierASME 








NAS key set identifier 


The valid NAS key set 
identifier KSIasme of the 
UE 


As stored on the 
USIM in EFepsnsc 
in the pre-test 
conditions 




TSC 


'O'B 


native security 
context 




Old GUTI 


Mapped from the P-TMSI 
and RAI allocated in step 
8 






Additional GUTI 


GUTI1 


Set to the value 
allocated in step 
18 




DRX parameter 


Not present 






UE radio capability information update needed 


Not present 
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9.3 EMM connection management procedures (S1 mode only) 

9.3.1 Service request procedure 

9.3.1 .1 Service request initiated by UE for user data 

9.3.1.1.1 Test Purpose (TP) 
(1) 

with { UE in EMM-REGISTERED state and EMM- IDLE mode } 
ensure that { 

when { UE has user data pending } 

then { UE establishes the RRC connection with the RRC establishmentCause set to 'mo-Data' and 
sends a SERVICE REQUEST message } 
} 

9.3.1 .1 .2 Conformance requirements 

The conformance requirements covered in the current TC are specified in: TS 24.301 clauses 5.3.1.1, 5.1.3.2.2.4, 
5.3.1.1, 5.6.1.1, 5.6.1.2, 5.6.1.4 and Annex D and TS 36.331 clause 5.3.3.3. 

[TS 24.301 clause 5.3.1.1] 

When the UE is in EMM-IDLE mode and needs to transmit an initial NAS message, the UE shall request the lower 
layer to establish a NAS signalling connection. In this request to the lower layer the NAS shall provide to the lower 
layer the RRC establishment cause and the call type as specified in annex D of this specification. 

[TS 24.301 clause 5.1.3.2.2.4] 

In the state EMM-REGISTERED an EMM context has been established and a default EPS bearer context has been 
activated in the UE. 



The UE may initiate sending and receiving user data and signalling information and reply to paging. Additionally, 
tracking area updating procedure is performed (see subclause 5.5.3). 

[TS 24.301 clause 5.3.1.1] 

In SI mode, when the RRC connection has been established successfully, the UE shall enter EMM-CONNECTED 
mode and consider the NAS signalling connection established. 

[TS 24.301 clause 5.6.1.1] 

The purpose of the service request procedure is to transfer the EMM mode from EMM-IDLE to EMM-CONNECTED 
mode and establish the radio and S 1 bearers when uplink user data or signalling is to be sent. 



The UE shall invoke the service request procedure when: 

b) the UE, in EMM-IDLE mode, has pending user data to be sent; 

[TS 24.301 clause 5.6.1.2] 

If the UE has pending uplink data or uplink signalling in EMM-IDLE mode to be transmitted or it responds to paging 
with CN domain indicator set to "PS", the UE initiates the service request procedure by sending a SERVICE REQUEST 
message to the MME, starts the timer T3417, and enters the state EMM-SERVICE-REQUEST-INITIATED. 

[TS 24.301 clause 5.6.1.4] 

For cases a, b and c in subclause 5.6.1.1, the UE shall treat the indication from the lower layers that the user plane radio 
bearer is set up as successful completion of the procedure. 
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Upon successful completion of the procedure, the UE shall stop the timer T3417 and enter the state EMM- 
REGISTERED. 

[TS 24.301, Annex D] 



Table D.1.1 : Mapping of NAS procedure to establishment cause and call type 



NAS procedure 


RRC establishment cause (according 3GPP TS 36.331 [22]) 


Call type 








Service Request 


If a SERVICE REQUEST is to request user plane radio 
resources, the RRC establishment cause shall be set to MO 
data. (See Notel) 


"originating calls" 


If a SERVICE REQUEST is to request resources for UL 
signalling, the RRC establishment cause shall be set to MO 
data. (See Note 1 ) 


"originating calls" 


Note 1 : For these NAS procedures initiated by UEs of access class 12, 13 or 14 in their home country, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". For this purpose the home country is 
defined as the country of the MCC part of the IIVISI, see 3GPP TS 22.01 1 [1A]. 

For these NAS procedures initiated by UE of access class 11 or 1 5 in their HPLMN or EHPLMN, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". 



[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 

1> set the ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 

2> else 

3> draw a random value and set the ue-Identity to this value; 

NOTE 1 Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 

1> Set the establishmentCause in accordance with the information received from upper layers; 

9.3.1.1.3 Test description 

9.3.1.1.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

UE: 

-None. 

Preamble: 

The UE is in state Loopback Activated (State 4) according to [18] using the specific message content for 
ACTIVATE TEST MODE and CLOSE UE TEST LOOP messages in table 9.3.1.1.3.3-1 and table 9.3.1.1.3.3-2. 
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9.3.1.1.3.2 



Test procedure sequence 

Table 9.3.1.1.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits one IP Packet to the UE. 


<— 


IP packet 


- 


- 


2 


The SS waits 1 second after the IP packet has 
been transmitted in step 1 and then transmits 
an RRCConnectionRelease message. (Note 2) 










3 


Check: Does the UE transmit an 
RRCConnectionRequest message with 
establishmentCause set to 'mo-Data' followed 
by a SERVICE REQUEST message? (Note 1) 


-> 


SERVICE REQUEST 


1 


P 


4-7 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 










Note 1 : Triggered when timer T_delay_modeB (IP PDU delay time) expires and pending uplink data exist in 

buffered PDCP SDUs according to [25] clause 5.4.4.3. 
Note 2: The 1 second delay is used to secure that the UE have received and forwarded the IP Packet transmitted 

by the SS in step 1 to the UE test loop function before the RRCConnectionRelease message is sent by the 

SS in step 2. 



9.3.1.1.3.3 



Specific message contents 

Table 9.3.1 .1 .3.3-1 : ACTIVATE TEST MODE (preamble) 



Derivation Path: 36.508, Table 4.7A-1 , condition UE TEST LQQP MQDE B 



Table 9.3.1.1.3.3-2: CLOSE UE TEST LOOP (preamble) 



Derivation Path: 36.508, Table 4.7A-3, condition UE TEST LQQP IVIQDE B 


Information Element 


Value/remark 


Comment 


Condition 


UE test loop mode B LB setup 








IP PDU delay 


00000101 


5 seconds 



Table 9.3.1.1.3.3-3: Message RRCConnectionRequest (step 3, Table 9.3.1.1.3.2-1) 



Derivation path: 36.508 table 4.6.1-16 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 
criticalExtensions CHQICE { 
rrcConnectionRequest-r8 SEQUENCE { 
establishmentCause 
} 
} 
} 


mo-Data 







9.3.1.2 
9.3.1.3 



9.3.1.3.1 



Void 

Service request / Mobile originating CS fallback 
Test Purpose (TP) 



(1) 



with { UE in state EMM-REGISTERED and EMM-CONNECTED mode} 
ensure that { 

when { UE initiates mobile originating CS fallback } 
then { UE sends EXTENDED SERVICE REQUEST message } 



(2) 



with 



UE in state EMM-REGISTERED and EMM- IDLE mode} 
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ensure that { 

when { UE initiates mobile originating CS fallback } 
then { UE establishes the RRC connection with the RRC establishmentCause set to 'mo-Data' and 
sends EXTENDED SERVICE REQUEST message } 
} 

9.3.1.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 5.3.1.1, 
5.6.1.1, 5.6.1.2 and Annex D and TS 36.331 clause 5.3.3.3.[TS 24.301 clause 5.3.1.1] 

When the UE is in EMM-IDLE mode and needs to transmit an initial NAS message, the UE shall request the lower 
layer to establish a NAS signalling connection. In this request to the lower layer the NAS shall provide to the lower 
layer the RRC establishment cause and the call type as specified in annex D of this specification. 

[TS24.301clause5.6.1.1] 

The purpose of the service request procedure is to transfer the EMM mode from EMM-IDLE to EMM-CONNECTED 
mode and establish the radio and S 1 bearers when uplink user data or signalling is to be sent. Another purpose of this 
procedure is to invoke MO/MT CS fallback procedures. 

This procedure is used when: 



the UE in EMM-IDLE or EMM-CONNECTED mode has requested to perform mobile originating/terminating 
CS fallback; or 



The service request procedure is initiated by the UE, however, for the downlink transfer of signalling or user data in 
EMM-IDLE mode, the trigger is given by the network by means of the paging procedure (see subclause 5.6.2). 

The UE shall invoke the service request procedure when: 



d) the UE, in EMM-IDLE or EMM-CONNECTED mode, has a mobile originating CS fallback request;. 



[TS24.301clause5.6.1.2] 

If the UE has pending uplink data or uplink signalling in EMM-IDLE mode to be transmitted or it responds to paging 
with CN domain indicator set to "PS", the UE initiates the service request procedure by sending a SERVICE REQUEST 
message to the MME, starts the timer T3417, and enters the state EMM-SERVICE-REQUEST-INITIATED. 

The UE shall send an EXTENDED SERVICE REQUEST message, 

regardless of the EMM mode, if the UE has a mobile originating CS fallback request; and 



[TS 24.301, Annex D] 
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Table D.1.1 : Mapping of NAS procedure to establishment cause and call type 



NAS procedure 


RRC establishment cause (according 3GPP TS 36.331 [22]) 


Call type 








Service Request 


If a EXTENDED SERVICE REQUEST has service type set to 
"mobile originating CS fallback", the RRC establishment cause 
shall be set to MO data. (See Notel ). 


"originating calls" 








Note 1 : For these NAS procedures initiated by UEs of access class 12, 13 or 14 in their home country, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". For this purpose the home country is 
defined as the country of the MCC part of the IIVISI, see 3GPP TS 22.01 1 [1 A]. 

For these NAS procedures initiated by UE of access class 11 or 1 5 in their HPLMN or EHPLMN, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". 



[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 
1> set the ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 
2> else 

3> draw a random value and set the ue-Identity to this value; 
NOTE 1 : Upper layers provide the S-TMSl if the UE is registered in the TA of the current cell. 
1> Set the establishmentCause in accordance with the information received from upper layers; 
9.3.1.3.3 Test description 

9.3.1.3.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 
- Cell A belongs TAl-1. 

- Cell A is set to the "Serving cell". 
UE: 

- The UE has a vaHd GUTI (GUTI-1). 
The UE is registered on TAl-1. 

The UE is IMSI attached for non-EPS services. 
Preamble: 

- UE is in state Generic RB established (state 3) on Cell A according to [18]. 
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9.3.1.3.3.2 



Test procedure sequence 

Table 9.3.1 .3.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Force the UE to initiate CS Voice call. (Note 1) 


- 




- 


- 


2 


Check: Does the UE transmit EXTENDED 
SERVICE REQUEST message? 


--> 


EXTENDED SERVICE REQUEST 


1 


P 


3 


The SS sends SERVICE REJECT message in 
order that the UE enters EIVIM- 
REGISTERED.NORMAL-SERVICE. 


<— 


SERVICE REJECT 






4 


The SS releases the RRC connection 


- 




- 


- 


5 


Force the UE to initiate CS Voice call. (Note1) 


- 




- 


- 


6 


Check: Does the UE transmit an 
RRCConnectionRequest message with 
establishmentCause set to 'mo-Data' followed by 
EXTENDED SERVICE REQUEST message? 


— > 


EXTENDED SERVICE REQUEST 


2 


P 


Note 1 : This could be done by e.g. MMI or by AT command. 



9.3.1 .3.3.3 Specific message contents 

Table 9.3.1.3.3.3-1: Message EXTENDED SERVICE REQUEST (step 2/6, Table 9.3.1.3.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 4A 


Information Element 


Value/remark 


Comment 


Condition 


Service type 


'OOOO'B 


"mobile originating 
CS fallback- 




M-TMSI 


M-TMSI1 







Table 9.3.1.3.3.3-2: Message SERVICE REJECT (step 3, Table 9.3.1.3.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-22 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0010 0110' 


"CS fallback call 
establishment not 
allowed" 





Table 9.3.1.3.3.3-3: Message RRCConnectionRequest {step 6, Table 9.3.1.3.3.2-1) 



Derivation path: 36.508 table 4.6.1-16 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 
criticalExtensions CHOICE { 
rrcConnectionRequest-r8 SEQUENCE { 
establishmentCause 
} 
} 
} 


mo-Data 







9.3.1.4 

9.3.1.4.1 
(1) 



Service request / Rejected / IMSI invalid 
Test Purpose (TP) 



with { UE having sent a SERVICE REQUEST message } 
ensure that { 

when { UE receives a SERVICE REJECT message with the EMM cause set to 'Illegal UE ' } 

then { UE sets the EPS update status to EU3 ROAMING NOT ALLOWED, deletes any GUTI , last visited 
registered TAI , TAI list and KSI, considers the USIM as invalid for EPS services until switching off 
or the UICC containing the USIM is removed, enters the state EMM-DEREGISTERED } 
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(2) 

with { UE having sent a SERVICE REQUEST message } 
ensure that { 

when { UE receives a SERVICE REJECT message with the EMM cause set to 'Illegal UE ' } 

then { UE handles the GMM parameters GMM state, GPRS update status, P-TMSI, P-TMSI signature, 
RAI and GPRS ciphering key sequence number and the MM parameters update status, TMSI, LAI and 
ciphering key sequence number } 
} 

9.3.1.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.6.1.5 and 
TS 24.008, clause 4.7.13.4. 

[TS 24.301, clause 5.6.1.5] 

If the service request cannot be accepted, the network shall return a SERVICE REJECT message to the UE including an 
appropriate EMM cause value. When the EMM cause value is #39 "CS domain temporarily not available", the MME 
shall include a value for timer T3442 in the SERVICE REJECT message. 

On receipt of the SERVICE REJECT message, the UE shall stop timer T3417 and take the following actions depending 
on the received EMM cause value. 

#3 (Illegal UE); or 



The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTl, last visited registered TAl, TAl list and KSl. The UE shall 
consider the USIM as invalid for EPS services until switching off or the UICC containing the USIM is removed. 
The UE shall enter the state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSl, P-TMSl signature, RAI and GPRS ciphering key sequence number and the MM 
parameters update status, TMSI, LAI and ciphering key sequence number as specified in 3GPP TS 24.008 [13] 
for the case when the service request procedure is rejected with the GMM cause with the same value. The USIM 
shall be considered as invalid also for non-EPS services until switching off or the UICC containing the USIM is 
removed. 

NOTE 1 : The possibility to configure a UE so that the radio transceiver for a specific radio access technology is not 
active, although it is implemented in the UE, is out of scope of the present specification. 



[TS 24.008, clause 4.7.13.4] 

If the Service request cannot be accepted, the network returns a SERVICE REJECT message to the mobile station. An 
MS that receives a SERVICE REJECT message stops timer T3317. The MS shall then take different actions depending 
on the received reject cause value: 

# 3 (Illegal MS); or 



The MS shall set the GPRS update status to GU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 4.1.3.2) and enter the state GMM-DEREGISTERED. Furthermore, it shall delete any P-TMSI, P- 
TMSI signature, RAI and GPRS ciphering key sequence number and shall consider the SIM/USIM as invalid for 
GPRS services until switching off or the SIM/USIM is removed. 

A GPRS MS operating in MS operation mode A shall in addition set the update status to U3 ROAMING NOT 
ALLOWED, shall delete any TMSI, LAI and ciphering key sequence number. If the MS is operating in MS 
operation mode A and an RR connection exists, the MS shall abort the RR connection, unless an emergency call 
is ongoing. The SIM/USIM shall be considered as invalid also for non-GPRS services until switching off or the 
SIM/USIM is removed. 
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If SI mode is supported in the MS, the MS shall handle the EMM parameters EMM state, EPS update status, 
GUTI, last visited registered TAI, TAX list and KSI as specified in 3GPP TS 24.301 [120] for the case when the 
service request procedure is rejected with the EMM cause with the same value. 



9.3.1.4.3 Test description 

9.3.1.4.3.1 Pre-test conditions 

System Simulator: 

- Cell A and Cell B. 

- If pc_UTR AN supported by UE, Cell 5 . 

- Cell 5 belongs to LAI- 1 and RAI- 1 (home PLMN) 

- If pc_GERAN and NOT pc_UTRAN supported by UE, Cell 24. 

- Cell 24 belongs to LAI- 1 and RAI- 1 (home PLMN) 

- Cell A is "Serving cell" and Cell B, Cell 5 and Cell 24 are "non-Suitable cell". 
UE: 

- The test USIM contains IMSI-1, GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 

- The test USIM contains P-TMSI-1 (belonging to RAI-1) and the GPRS update status is "GUI: UPDATED" 

- The test USIM contains TMSI-1 (belonging to LAI-1) and the update status is "Ul: UPDATED" 
Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 
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9.3.1.4.3.2 



Test procedure sequence 

Table 9.3.1 .4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS pages the UE using S-TMSI with CN 
domain indicator set to "PS". 


- 


- 


- 


- 


- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS transmits a SERVICE REJECT 
message with the EIVIM cause set to 'Illegal 
UE'. 


<- 


SERVICE REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell B to the "Serving 
cell". 










- 


The following messages are to be observed on 
Cell B unless explicitly stated otherwise. 


- 


- 


- 


- 


6 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 




EXCEPTIQN: Steps 6Aa1 to 6Aa3 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










6Aa1 


IF pc_UTRAN or pc_GERAN THEN the SS 
sets the cell type of Cell B to the "non-Suitable 
cell" and sets the cell type of Cell 5 or Cell 24 
to the "Serving cell". 












The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










6Aa2 


Void 


- 


- 


- 


- 


6Aa3 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


2 


F 


7 


Set the cell type of the Cell B to the "non- 
Suitable cell". Set the cell type of Cell A to the 
"Serving cell". Set the cell type of Cell 5 or Cell 
24 to the "non-Suitable cell". 










- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


8 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


9 


The SS pages the UE using same S-TIVISI in 
the step 1 with CN domain indicator set to 
"PS". 










10 


Check: Does the UE transmit a SERVICE 
REQUEST message in the next 30 seconds? 


-> 


SERVICE REQUEST 


1 


F 


11 


The UE is powered off or switched off. 


- 


- 


- 


- 


12 


The UE is powered on or switched on. 


- 


- 


- 


- 


13 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CQNNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


1 


P 


14 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<~ 


AUTHENTICATION REQUEST 






15 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






16 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


17 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


~> 


SECURITY MODE COMPLETE 
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EXCEPTION: Steps 17Aa1 to 17Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










17Aa 

1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REOUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REOUEST 






17Aa 
2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






18 


The SS transmits an ATTACH ACCEPT 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT REOUEST 
message. 


<- 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
In step 19 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










19 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 






20 


The SS releases the RRC connection. 


- 


- 


- 


- 


21 


Void 


- 


- 


- 


- 


22 


Void 


- 


- 


- 


- 


23 


Void 


- 


- 


- 


- 


24 


Void 


- 


- 


- 


- 


25 


Void 


- 


- 


- 


- 


26 


Void 


- 


- 


- 


- 


27 


The SS pages the UE using same S-TMSI in 
the step 1 with CN domain indicator set to 
"PS". 










28 


The UE transmits a SERVICE REOUEST 
message. 


~> 


SERVICE REQUEST 


- 


- 


29 


The SS transmits a SERVICE REJECT 
message with the EMM cause set to 'Illegal 
UE'. 


<— 


SERVICE REJECT 






30 


The SS releases the RRC connection. 


- 


- 


- 


- 




EXCEPTION: Steps 31 a1 to 31 a9 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that takes place if a capability is 
supported. 










31a1 


IF pc_UTRAN or pc_GERAN THEN If possible 
(see ICS) switch off is performed or the USIM 
is removed, otherwise the power is removed. 










31 a2 


Set the cell type of Cell A to the "non-Suitable 
cell". Set the cell type of Cell 5 or Cell 24 to the 
"Serving cell". 










31 a3 


The UE is brought back to operation or the 
USIM is inserted. 


- 


- 


- 


- 




The following messages are to be observed on 
Cell 5 or Cell 24 unless explicitly stated 
otherwise. 










31 a4 


Void 


- 


- 


- 


- 


31 a5 


Check: Does the UE transmit an ATTACH 
REOUEST message? 


-> 


ATTACH REQUEST 


2 


P 


31 a6 


The SS transmits an AUTHENTICATION AND 
CIPHERING REOUEST message to initiate 
the authentication and AKA procedure. 


<— 


AUTHENTICATION AND 
CIPHERING REOUEST 






31 a7 


The UE transmits an AUTHENTICATION AND 
CIPHERING RESPONSE message. 


-> 


AUTHENTICATION AND 
CIPHERING RESPONSE 


- 


- 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1375 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



31 a8 


The SS transmits an ATTACH ACCEPT 
message. 


<- 


ATTACH ACCEPT 


- 


- 


31 a9 


The UE transmits an ATTACH COMPLETE 
message. 


-> 


ATTACH COMPLETE 


- 


- 



9.3.1 .4.3.3 Specific message contents 

Table 9.3.1 .4.3.3-1 : SERVICE REJECT (step 3 and step 29, Table 9.3.1 .4.3.2-1 ) 



Derivation Path: TS 36.508 Table 4.7.2-22 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0000 001 1'B 


Illegal UE 





Table 9.3.1.4.3.3-2: ATTACH REQUEST (step 13, Table 9.3.1.4.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


'111'B 


no key is available 




TSC 


Any allowed value 


TSC does not 
apply for NAS key 
set identifier value 
"111". 




Old GUT! or IMS! 


IMS! of the UE 






Last visited registered TAI 


Not present 






Old location area identification 


Not present 






TMSI status 


Not present 






'O'B 


no valid TMSI 
available 


pc_CS_fall 
back OR 
pc SMS S 
Gs MTOR 
pc SMS S 
Gs MO 
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Table 9.3.1.4.3.3-3: ATTACH REQUEST (step 31a5, Table 9.3.1.4.3.2-1) 



Derivation Path: TS 24.008 , Table 9.4.1 


Information Element 


Value/remark 


Comment 


Condition 


MS network capability 


Any allowed value 






Attach type 


Any allowed value 






GPRS ciphering key sequence number 


'111'B 


No key is 
available (MS to 
network) 




DRX parameter 


Any allowed value 






P-TMSI or IMSI 


IMSI of the UE 






Old routing area identification 


All bits of octets 5 and 6 

are set to 1 , except bit 1 

of octet 6 which is set to 

0. 

Other bits are not 

checked. 






IVIS Radio Access capability 


Any allowed value 






Old P-TMSI signature 


Not present 






Requested READY timer 
value 


Not present or any 
allowed value 






TMSI status 


Not present 






'O'B 


no valid TMSI 
available 


pc_CS_fall 
back OR 
pc SMS S 
Gs MTOR 
pc SMS S 
Gs MO 


PS LCS Capability 


Not present or any 
allowed value 






Mobile station classmark 2 


Not present or any 
allowed value 






Mobile station classmark 3 


Not present or any 
allowed value 






Supported Codecs 


Not present or any 
allowed value 






UE network capability 


Not present or any 
allowed value 






Additional mobile identity 


Not present 






Additional old routing area identification 


Not present 







9.3.1 .5 Service request / Rejected / Illegal ME 



9.3.1.5.1 



(1) 



Test Purpose (TP) 



with { UE having sent a SERVICE REQUEST message } 
ensure that { 

when { UE receives a SERVICE REJECT message with the EMM cause set to 'Illegal ME' } 

then { UE sets the EPS update status to EU3 ROAMING NOT ALLOWED, (deletes any GUTI , last visited 
registered TAI , TAI list and KSI, considers the USIM as invalid for EPS services until switching off 
or the UICC containing the USIM is removed, enters the state EMM-DEREGISTERED } 



(2) 



with { UE supporting A/Gb mode or lu mode and having sent a SERVICE REQUEST message } 
ensure that { 

when { UE receives a SERVICE REJECT message with the EMM cause set to 'Illegal ME' } 

then { UE sets the GPRS update status to GU3 ROAMING NOT ALLOWED, deletes any P-TMSI, P-TMSI 
signature, TMSI, LAI, RAI and GPRS ciphering key sequence number and considers the SIM/USIM as 
invalid for GPRS services until switching off or the SIM/USIM is removed } 
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9.3.1.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.6.1.5 and 
TS 24.008, clause 4.7.13.4. 

[TS 24.301, clause 5.6.1.5] 

On receipt of the SERVICE REJECT message, the UE shall stop timer T3417 and take the following actions depending 
on the received EMM cause value. 



#6 (Illegal ME); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTl, last visited registered TAl, TAl list and KSl. The UE shall 
consider the USIM as invalid for EPS services until switching off or the UlCC containing the USIM is removed. 
The UE shall enter the state EMM-DEREGISTERED. 

If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSl, P-TMSl signature, RAI and GPRS ciphering key sequence number and the MM 
parameters update status, TMSl, LAI and ciphering key sequence number as specified in 3GPP TS 24.008 [13] 
for the case when the service request procedure is rejected with the GMM cause with the same value. The USIM 
shall be considered as invalid also for non-EPS services until switching off or the UICC containing the USIM is 
removed. 

NOTE 1 : The possibility to configure a UE so that the radio transceiver for a specific radio access technology is not 
active, although it is implemented in the UE, is out of scope of the present specification. 

[TS 24.008, clause 4.7.13.4] 

If the Service request cannot be accepted, the network returns a SERVICE REJECT message to the mobile station. An 
MS that receives a SERVICE REJECT message stops timer T3317. The MS shall then take different actions depending 
on the received reject cause value: 



# 6 (Illegal ME); 

- The MS shall set the GPRS update status to GU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 4.1.3.2) and enter the state GMM-DEREGISTERED. Furthermore, it shall delete any P-TMSl, P- 
TMSl signature, RAI and GPRS ciphering key sequence number and shall consider the SIM/USIM as invalid for 
GPRS services until switching off or the SIM/USIM is removed. 

- A GPRS MS operating in MS operation mode A shall in addition set the update status to U3 ROAMING NOT 
ALLOWED, shall delete any TMSI, LAI and ciphering key sequence number. If the MS is operating in MS 
operation mode A and an RR connection exists, the MS shall abort the RR connection, unless an emergency call 
is ongoing. The SIM/USIM shall be considered as invalid also for non-GPRS services until switching off or the 
SIM/USIM is removed. 

9.3.1.5.3 Test description 

9.3.1.5.3.1 Pre-test conditions 

System Simulator: 

Same as in 9.3. 1.4.3.1 

UE: 

Same as in 9.3.1.4.3.1 

Preamble: 

Same as in 9.3. 1.4.3.1 
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9.3.1.5.3.2 



Test procedure sequence 



Same as in 9.3.1.4.3.2 with the exception that all occurances of EMM cause set to 'Illegal UE' shall be replaced with 
EMM cause set to Illegal ME'. 

9.3.1 .5.3.3 Specific message contents 

For the Specific message contets refer to with the following exceptions. 

Table 9.3.1 .5.3.3-1 : SERVICE REJECT (step 3 and step 29, Table 9.3.1 .4.3.2-1 ) 



Derivation Path: TS 36.508 Table 4.7.2-22 


Information Element 


Value/remark 


Comment 


Condition 


ElVIIVI cause 


'ooooono'B 


Illegal ME 





9.3.1.6 



9.3.1.6.1 



Service request / Rejected / EPS services not allowed 
Test Purpose (TP) 



(1) 



with { UE having sent a SERVICE REQUEST message } 
ensure that { 

when { UE receives a SERVICE REJECT message with the EMM cause set to 'EPS services not allowed' } 
then { UE sets the EPS update status to EU3 ROAMING NOT ALLOWED, deletes any GUTI , last visited 
registered TAI , TAI list and KSI, considers the USIM as invalid for EPS services until switching off 
or the UICC containing the USIM is removed and enters the state EMM-DEREGISTERED } 
} 

(2) 

with { UE supporting A/Gb mode or lu mode and having sent a SERVICE REQUEST message } 
ensure that { 

when { UE receives a SERVICE REJECT message with the EMM cause set to 'EPS services not allowed' } 
then { UE sets the GPRS update status to GU3 ROAMING NOT ALLOWED, deletes any P-TMSI, P-TMSI 
signature, RAI and GPRS ciphering key sequence number and considers the SIM/USIM as invalid for GPRS 
services until switching off or the SIM/USIM is removed } 



9.3.1.6.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.6.1.5 and 
TS 24.008, clause 4.7.13.4. 

[TS 24.301, clause 5.6.1.5] 

On receipt of the SERVICE REJECT message, the UE shall stop timer T3417 and take the following actions depending 
on the received EMM cause value. 



#7 (EPS services not allowed); 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3) and shall delete any GUTI, last visited registered TAI, TAI list and KSI. The UE shall 
consider the USIM as invalid for EPS services until switching off or the UICC containing the USIM is removed. 
The UE shall enter the state EMM-DEREGISTERED. 



If A/Gb mode or lu mode is supported by the UE, the UE shall handle the GMM parameters GMM state, GPRS 
update status, P-TMSl, P-TMSl signature, RAI and GPRS ciphering key sequence number as specified in 
3GPP TS 24.008 [13] for the case when the service request procedure is rejected with the GMM cause with the 
same value. 

[TS 24.008, clause 4.7.13.4] 
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If the Service request cannot be accepted, the network returns a SERVICE REJECT message to the mobile station. An 
MS that receives a SERVICE REJECT message stops timer T3317. The MS shall then take different actions depending 
on the received reject cause value: 



# 7 (GPRS services not allowed); 

- The MS shall set the GPRS update status to GU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 4.1.3.2) and shall delete any P-TMSI, P-TMSI signature, RAI and GPRS ciphering key sequence 
number. The SIM/USIM shall be considered as invalid for GPRS services until switching off or the SIM/USIM 
is removed. The new state is GMM-DEREGISTERED. 

9.3.1.6.3 Test description 

9.3.1.6.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

- If pc_UTR AN THEN Cell 5 . 

- Cell 5 belongs to LAI-1 and RAI- 1 (home PLMN) 

- If pc_GERAN THEN Cell 24. 

- Cell 24 belongs to LAI- 1 and RAI- 1 (home PLMN) 
UE: 

- The test USIM contains IMSIl, GUTIl and TAIl, and EPS update status is "EUl: UPDATED". 

- If pc_UTRAN THEN the test USIM contains TMSI- 1 (belonging to LAI-1 ), P-TMSI- 1 (belonging to RAI- 1 ) 
and the update status is "Ul: UPDATED". 

- If pc_GERAN THEN the test USIM contains TMSI-1 (belonging to LAI-1), P-TMSI-1 (belonging to RAM) 
and the GPRS update status is "GUI: UPDATED". 

Preamble: 

The SS configures 

Cell A as the 'Serving cell'. 

- IF pc_UTRAN THEN Cell 5 as a 'Non-suitable "Off cell'. 

- IF pc_GERAN THEN Cell 24 as a 'Non-suitable "Off" cell'. 

- The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 
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9.3.1.6.3.2 



Test procedure sequence 

Table 9.3.1 .6.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request connectivity to an 
additional PDN (see Note 1). 


- 


- 


- 


- 


- 


The following messages are to be observed on 
Cell A unless explicitly stated otherwise. 


- 


- 


- 


- 


2 


UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS transmits an SERVICE REJECT 
message with EIVIM cause = "EPS services not 
allowed". 


<- 


SERVICE REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


Check: Does the UE transmit a SERVICE 
REQUEST message in the next 30 seconds? 


-> 


SERVICE REQUEST 


1 


F 


6 


Check: Does the test result of generic 
procedure in TS 36.508 subclause 6.4.2.5 
Indicate that the UE does not respond to 
paging when paged with GUTI-1 and with CN 
domain indicator set to "PS"? 






1 






EXCEPTION: Steps 7a1 to 7b4 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










7a1 


IF pc_UTRAN THEN SS configures: 

- Cell A as 'Non-suitable cell' 

- Cell 5 as 'Serving cell' 

- IF pc GERAN THEN Cell 24 as 'Non-suitable 
"Qff" cell' 










- 


The following messages are to be observed on 
Cell 5 unless explicitly stated otherwise. 


- 


- 


- 


- 




EXCEPTION: The behaviour in table 

9.3.1 .6.3.2-2 occurs in parallel with steps 7a2 

to 7a4. 










7a2 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


2 


F 


7a3 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


7a4 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


7b1 


IF pc_GERAN THEN SS configures: 

- Cell A as 'Non-suitable cell' 

- IF pc UTRAN THEN Cell 5 as 'Non-suitable 
"Off" cell' 

- Cell 24 as 'Serving cell' 










- 


The following messages are to be observed on 
Cell 24 unless explicitly stated otherwise. 


- 


- 


- 


- 




EXCEPTION: The behaviour in table 

9.3.1 .6.3.2-2 occurs in parallel with steps 7b2 

to 7b4. 










7b2 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


2 


F 


7b3 


The user initiates an attach by MMI or by AT 
command. 


- 


- 


- 


- 


7b4 


Check: Does the UE transmit an ATTACH 
REQUEST message in the next 30 seconds? 


-> 


ATTACH REQUEST 


1 


F 


8 


IF pc_USIM_Removal THEN USIM is removed 
ELSE the UE is powered down or switched off. 


- 


- 


- 


- 


9 


The SS configures: 

- Cell A as the 'Serving cell'. 

- IF pc UTRAN THEN Cell 5 'Non-suitable 
"Off" cell'. 

- IF pc GERAN THEN Cell 24 'Non-suitable 
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"Off" cell'. 










10 


IF pc_USIM_Removal THEN USIM is incerted 
ELSE the UE is powered up or switched on. 


- 


- 


- 


- 


11 


The UE transmits an ATTACH REQUEST 
message on cell A including a PDN 
CONNECTIVITY REOUEST message 


-> 


ATTACH REQUEST 


1 


P 


12 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






13 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






14 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


15 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 16a1 to 16a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










16a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






16a2 


The UE transmits the ESM INFORMATION 
REQUEST message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






17 


SS responds with ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 18 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










18 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 








EXCEPTION: Step 19a1 to 19b6 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










19a1 


IF pc_UTRAN THEN SS configures: 

- Cell A as 'Non-suitable cell' 

- Cell 5 as 'Serving cell' 

- IF pc GERAN THEN Cell 24 'Non-suitable 
"Off" cell'. 










- 


The following messages are to be observed on 
Cell 5 unless explicitly stated otherwise. 


- 


- 


- 


- 


19a2 


IF Automatic PS attach procedure at switch on 
or power on=FALSE THEN The user initiates 
an attach by MMI or by AT command. 










19a3 


Check: Does the UE transmit an ATTACH 
REQUEST message? 


-> 


ATTACH REQUEST 


2 


P 


19a4 


The SS transmits an AUTHENTICATION AND 
CIPHERING REOUEST message to initiate 
the authentication and AKA procedure. 


<- 


AUTHENTICATION AND 
CIPHERING REQUEST 






19a5 


The UE transmits an AUTHENTICATION AND 
CIPHERING RESPONSE message. 


-> 


AUTHENTICATION AND 
CIPHERING RESPONSE 


- 


- 


19a6 


The SS transmits an ATTACH ACCEPT 


<— 


ATTACH ACCEPT 


- 


- 
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message. 










19a7 


The UE transmits an ATTACH COMPLETE 
message. 


-> 


ATTACH COMPLETE 


- 


- 


19b1 


IF pc_GERAN THEN SS configures: 

- Cell A as 'Non-suitable cell' 

- Cell 5 as 'Non-suitable "Off" cell' 

- Cell 24 as 'Serving cell' 










- 


The following messages are to be observed on 
Cell 24 unless explicitly stated otherwise. 


- 


- 


- 


- 


19b2 


IF Automatic PS attach procedure at switch on 
or power on=FALSE THEN The user initiates 
an attach by MMI or by AT command. 










19b3 


Check: Does the UE transmit an ATTACH 
REOUEST message? 


-> 


ATTACH REOUEST 


2 


P 


19b4 


The SS transmits an AUTHENTICATION AND 
CIPHERING REQUEST message to initiate 
the authentication and AKA procedure. 


<- 


AUTHENTICATION AND 
CIPHERING REOUEST 






19b5 


The UE transmits an AUTHENTICATION AND 
CIPHERING RESPONSE message. 


-> 


AUTHENTICATION AND 
CIPHERING RESPONSE 


- 


- 


19b6 


The SS transmits an ATTACH ACCEPT 
message. 


<- 


ATTACH ACCEPT 


- 


- 


19b7 


The UE transmits an ATTACH COMPLETE 
message. 


-> 


ATTACH COMPLETE 


- 


- 


Note 1 : The request of connectivity to an additional PDN and the sending of data may be performed by IVIIVII or AT 
command. 



Table 9.3.1 .6.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 




EXCEPTION: Steps 1a1 and 1a2 describe a 
behaviour which depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported. 










1a1 


IF pc CS THEN the UE transmits a 
LOCATION UPDATING REOUEST message. 


— > 


LOCATION UPDATING 
REOUEST 


- 


- 


1a2 


The SS transmits a LOCATION UPDATING 
ACCEPT message including IMSI-1 


<— 


LOCATION UPDATING ACCEPT 


- 


- 



9.3.1 .6.3.3 Specific message contents 

Table 9.3.1.6.3.3-1: SERVICE REJECT (step 3, Table 9.3.1.6.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-22 | 


Information Element 


Value/remarl< 


Comment 


Condition 


EMM cause 


'0000 0111'B 


EPS services not 
allowed 





Table 9.3.1.6.3.3-2: Message ATTACH REQUEST (step 11, Table 9.3.1.6.3.2-1) 



Derivation path: TS 36.508 table 4.7.2-4 | 


Information Element 


Value/Remarl< 


Comment 


Condition 


NAS key set identifier 


'111'B 


no key is available 




OldGUTIorlMSI 


IMSI1 






Last visited registered TAI 


Not present 






Old LAI 


Not present 






TMSI status 


Not present 
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Table 9.3.1.6.3.3-3: Message ATTACH REQUEST (step 19a3 and 19b3, Table 9.3.1.6.3.2-1) 



Derivation path: TS 24.008 table 9.4.1 


Information Element 


Value/Remark 


Comment 


Condition 


GPRS cipliering l<ey sequence number 


'111'B 


no key is available 




P-TMSI or IMS! 


IMSI1 






Old routing area identification 


all bits of the location 
area code shall be set to 
one with the exception of 
the least significant bit 
which shall be set to zero 


RAI is deleted 




Old P-TMSI signature 


Not present 






TMSI status 


Not present 







9.3.1.7 
9.3.1.7.1 
(1) 



Service request / Rejected / UE identity cannot be derived by the network 
Test Purpose (TP) 



with { UE having sent a SERVICE REQUEST message } 
ensure that { 

when { UE receives a SERVICE REJECT message with the EMM cause value = 9 {UE identity cannot be 
derived by the network) } 

then { UE sets the EPS update status to EU2 NOT UPDATED and deletes any GUTI , last visited 
registered TAI , TAI list and KSI and automatically initiate the attach procedure } 
} 

9.3.1.7.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.6.1.5. 

[TS 24.301, clause 5.6.1.5] 

On receipt of the SERVICE REJECT message, the UE shall stop timer T3417 and take the following actions depending 
on the received EMM cause value. 



#9 (UE identity cannot be derived by the network); 

The UE shall set the EPS update status to EU2 NOT UPDATED (and shall store it according to subclause 
5.1.3.3) and shall delete any GUTI, last visited registered TAI, TAI list and KSI. The UE shall enter the state 
EMM-DEREGISTERED. 

Subsequently, the UE shall automatically initiate the attach procedure. 

9.3.1.7.3 Test description 

9.3.1.7.3.1 Pre-test conditions 

System Simulator: 

- Cell A. 

UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 
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9.3.1.7.3.2 



Test procedure sequence 

Table 9.3.1 .7.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS pages the UE using S-TMSI with CN 
domain indicator set to "PS". 


- 


- 


- 


- 


2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS transmits a SERVICE REJECT 
message with the EMM cause set to #9 (UE 
identity cannot be derived by the network). 


<- 


SERVICE REJECT 






4 


Checl<: Does the UE transmit an ATTACH 
REQUEST message including IMSI and 
without integrity protection? 


-> 


ATTACH REQUEST 


1 


P 


5 


SS transmits an AUTHENTICATION 
REQUEST message, KSIasme value is different 
to the KSIasme value provided in the ATTACH 
REQUEST 


<~ 


AUTHENTICATION REQUEST 






6 


The UE transmits an AUTHENTICATION 
RESPONSE message 


~> 


AUTHENTICATION RESPONSE 


- 


- 


7 


The SS transmits a NAS SECURITY MODE 
COMMAND message including the KSIasme of 
the new EPS security context 


<- 


SECURITY MODE COMMAND 






8 


The UE transmits a NAS SECURITY MODE 
COMPLETE message 


-> 


SECURITY MODE COMPLETE 


- 


- 




EXCEPTION: Steps 9a1 to 9a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred after 
NAS SECURITY MODE COMPLETE 
message. 










9a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






9a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






10 


SS responds with ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 1 1 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










11 


Check: does the UE transmit an ATTACH 
COMPLETE message including an ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message? 


-> 


ATTACH COMPLETE 






12a1 


Void 


- 


- 


- 


- 
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9.3.1 .7.3.3 Specific message contents 

Table 9.3.1.7.3.3-1: SERVICE REJECT (step 3, Table 9.3.1.7.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-22 


Information Element 


Value/remark 


Comment 


Condition 


ElVIIVI cause 


'0000 1 001 'B 


UE identity cannot 
be derived by the 
network 





Table 9.3.1.7.3.3-2: ATTACH REQUEST (step 4, Table 9.3.1.7.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 


'111'B 


no key is available 




Old GUTI or IMS! 


IMS! 






Last visited registered TAI 


Not present 






Old location area identification 


Not present 







9.3.1 .7a Service request / Rejected / UE implicitly detached 



9.3.1 .7a.1 



(1) 



Test Purpose (TP) 



with { UE having sent a SERVICE REQUEST message } 
ensure that { 

when { UE receives a SERVICE REJECT message with the EMM cause set to 'Implicitly detached' } 
then { UE enters the state EMM-DEREGISTERED .NORMAL-SERVICE, delete the EPS mapped EPS security 
context if any and performs a new attach procedure } 



9.3.1 .7a. 2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.6.1.5. 

[TS 24.301, clause 5.6.1.5] 

If the service request cannot be accepted, the network shall return a SERVICE REJECT message to the UE including an 
appropriate EMM cause value. 



On receipt of the SERVICE REJECT message, the UE shall stop timer T3417 and take the following actions depending 
on the received EMM cause value. 



# 1 (Implicitly detached) ; 

The UE shall enter the state EMM-DEREGISTERED.NORMAL-SERVICE. The UE shall delete the EPS 
mapped EPS security context if any. The UE shall then perform a new attach procedure. 



9.3.1 .7a.3 
9.3.1. 7a.3.1 
System Simulator: 

- Cell A. 
UE: 
None. 



Test description 
Pre-test conditions 
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Preamble: 

The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 
9.3.1 .7a. 3. 2 Test procedure sequence 

Table 9.3.1.7a.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS pages the UE using S-TMSI with CN 
domain indicator set to "PS". 


- 


- 


- 


- 


2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS transmits a SERVICE REJECT 
message with the ElVIIVI cause set to 'Implicitly 
detached'. 


<~ 


SERVICE REJECT 






4 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CQNNECTIVITY REQUEST message and 
integrity protected using the native security 
context resulting from authentication during the 
test preamble? 


-> 


ATTACH REQUEST 


1 


P 


5 


The SS transmits an AUTHENTICATIQN 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<— 


AUTHENTICATION REQUEST 






6 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


~> 


AUTHENTICATION RESPONSE 






7 


The SS transmits a NAS SECURITY MQDE 
COMMAND message to activate NAS security. 


<- 


SECURITY MODE COMMAND 


- 


- 


8 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps 9a1 to 9a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that takes place if the UE has ESM 
information which needs to be transferred. 










9a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<— 


ESM INFORMATION REQUEST 






9a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION 
RESPONSE 






10 


The SS transmits an ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in the ATTACH ACCEPT 
message. 


<— 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 1 1 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










11 


The UE transmits an ATTACH COMPLETE 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT ACCEPT message is 
piggybacked in ATTACH COMPLETE. 


-> 


ATTACH COMPLETE 






12 


The SS releases the RRC connection. 


- 


- 


- 


- 
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9.3.1 .7a. 3. 3 Specific message contents 

Table 9.3.1.7a.3.3-1: SERVICE REJECT (step 3, Table 9.3.1. 7a.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-22 


Information Element 


Value/remark 


Comment 


Condition 


ElVIIVI cause 


'0000 1 01 0'B 


Implicitly detached 





Table 9.3.1. 7a.3.3-2: ATTACH REQUEST (step 4, Table 9.3.1 .7a.3.2-1) 



Derivation Path: 36.508, Table 4.7.2-4 


Information Element 


Value/remark 


Comment 


Condition 


NAS key set identifier 








NAS key set identifier 


NAS key set identifier 
allocated to UE during 
authentication in test 
preamble 






TSC 


'O'B 


Native security 
context 




Old GUT! or IMS! 


GUT! allocated to UE 
during previous attach on 
Cell A. 






Last visited registered TAI 


TAI-1 






Old location area identification 


Not present 






IMS! status 


Not present 








'O'B 


no valid TIVISI 
available 


pc_CS_fall 
back 



9.3.1.15 



9.3.1.15.1 



Service request / Abnormal case / Tracking area update procedure is 
triggered 

Test Purpose (TP) 



(1) 



with { UE having sent a SERVICE REQUEST message } 
ensure that { 

when { Tracking area updating procedure is triggered } 

then { The UE abort the service request procedure, stop timer T3417 if running and perform the 
tracking area updating procedure, in the TRACKING AREA UPDATE REQUEST message, the "active" flag 
shall be set to '1'} 



(2) 

with { UE having sent a EXTENDED SERVICE REQUEST message } 
ensure that { 

when { Tracking area updating procedure is triggered } 

then { The UE shall abort the service request procedure, stop timer T3417ext if running and 
perform the tracking area updating procedure, after the completion of tracking area update 
procedure, UE restart the CSFB procedure } 



9.3.1.15.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.6.1.6. 

[TS 24.301, clause 5.6.1.6] 

The following abnormal cases can be identified: 



f) Tracking area updating procedure is triggered 
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The UE shall abort the service request procedure, stop timer T3417 or T3417ext if running and perform the 
tracking area updating procedure. The "active" flag shall be set in the TRACKING AREA UPDATE REQUEST 
message. If the service request was initiated for CS fallback or IxCS fallback, the UE shall send the 
EXTENDED SERVICE REQUEST message to the MME by using the existing NAS signalling connection after 
the completion of the tracking area updating procedure. 

9.3.1.15.3 Test description 

9.3.1.15.3.1 Pre-test conditions 

System Simulator: 

Cell A, Cell B are configured according to Table 6.3.2.2-1 in [18]. 
UE: 

- The test USIM contains GUTI-1 and TAI-1, and EPS update status is "EUl: UPDATED". 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
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9.3.1.15.3.2 



Test procedure sequence 

Table 9.3.1.15.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS pages the UE using S-TMSI1 with CN 
domain indicator set to "PS". 


- 


- 


- 


- 


2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS does not perform a radio bearer 
establishment procedure. 
Note: e.g. SS does not send any AS or NAS 
messages to UE. 










4 


Set the cell type of cell A to the "Non-Suitable 

cell". 

Set the cell type of cell B to the "Serving cell". 

Note: cell type should be set before timer 

T341 7 expired. 










5 


UE initiates RRC connection establishment 
procedure on cell B. 










6 


Check: Does the UE transmit TRACKING 
AREA UPDATE REQUEST message on cell B 
in the next 5 seconds? 


~> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


7 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


8 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 




EXCEPTION: Steps 9 to 27 describe 
behaviour that depends on the UE capability. 
IF pc_CSfallback is true, from Step 9 to step 
27should be executed, or else test case is 
terminated in step 8 










9 


If possible (see ICS) switch off is performed. 
Otherwise the power is removed. 


- 


- 


- 


- 


10 


the UE transmit a DETACH REQUEST with 

the Detach Type IE indicating "switch off".( 

optional) 

Note: whether send this message depends on 

switch-off or power-off. 


-> 


DETACH REQUEST 






11 


The UE is switched on. 


- 


- 


- 


- 


12 


The UE transmits an ATTACH REQUEST 
including a PDN CONNECTIVITY REQUEST 
message on cell B. 


~> 


ATTACH REQUEST 








EXCEPTION: Steps 13a1 to 13a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










13a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






13a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






14 


SS responds with ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<— 


ATTACH ACCEPT 






15 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 


-> 


ATTACH COMPLETE 






16 


The SS releases the RRC connection. 


- 


- 


- 


- 


- 


EXCEPTION: Steps 17 to 27 describe 


- 


- 


- 


- 
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behaviour that depends on the UE capability. 
IF the UE is configured to operate in CS/PS 
mode 1 or CS/PS mode 2 from Step 17 to step 
27should be executed, or else test case is 
terminated in step 16 










17 


Force the UE to initiate CS Voice call. (Note 1) 


- 




- 


- 


18 


The UE transmits an EXTENDED SERVICE 
REQUEST message. 


-> 


EXTENDED SERVICE REQUEST 


- 


- 


19 


The SS does not respond to this request. 
Note: e.g. SS does not send any AS or NAS 
messages to UE. 










20 


Set the cell type of cell A to the " Serving cell ". 
Set the cell type of cell B to the " Non-Suitable 
cell ". 

Note: cell type should be set before timer 
T3417ext expired. 










21 


UE initiates RRC connection establishment 
procedure on cell A. 










22 


Check: Does the UE transmit TRACKING 
AREA UPDATE REQUEST message on cell C 
in the next 5 seconds? 


~> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


23 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<— 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


24 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 






25 


Check: Does the UE transmit EXTENDED 
SERVICE REQUEST message on cell A? 


-> 


EXTENDED SERVICE REQUEST 


2 


P 


26 


The SS sends SERVICE REJECT message in 
order that the UE enters EMM- 
REGISTERED. NORMAL-SERVICE. 


<- 


SERVICE REJECT 






27 


The SS releases the RRC connection. 


- 


- 


- 


- 


Note 1 : This could be done by e.g. MMI or by AT command. 



9.3.1 .1 5.3.3 Specific message contents 

Table 9.3.1.15.3.3-1 : Message TRACKING AREA UPDATE REQUEST (step 6, Table 9.3.1.15.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-27 


Information Element 


Value/remarl< 


Comment 


Condition 


"Active" flag 


'1'B 


Bearer 

establishment 

requested 




Old GUTI 


GUTI-1 


"Old GUTI is 
included by UE if 
valid, IMSI 
otherwise" 





Table 9.3.1.15.3.3-2: Message TRACKING AREA UPDATE ACCEPT (step 7, Table 9.3.1.15.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remarl< 


Comment 


Condition 


GUTI 


GUTI-2 






TAI list 








Length of tracking area identity list contents 


'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'OOOOO'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAC 
values" 




MCC 
MNC 
TAC1 


TAI-2 
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Table 9.3.1.15.3.3-3: Message EXTENDED SERVICE REQUEST (step 18, Table 9.3.1.15.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 4A 


Information Element 


Value/remark 


Comment 


Condition 


Service type 


'OOOO'B 


"mobile originating 
GS fallback- 




M-TMSI 


M-TMSI2 







Table 9.3.1.15.3.3-4: Message TRACKING AREA UPDATE REQUEST (step 22, Table 9.3.1.15.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-27 


Information Element 


Value/remark 


Comment 


Condition 


"Active" flag 


'O'B 


No bearer 

establishment 

requested 




Old GUTI 


GUTI-2 


"Old GUTI is 
included by UE if 
valid, IMSI 
otherwise" 





Table 9.3.1.15.3.3-5: Message TRACKING AREA UPDATE ACCEPT (step 23, Table 9.3.1.15.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


GUTI 
TAI list 
Length of tracking area identity list contents 


GUTI-1 
'00001 OOO'B 






Partial tracking area identity list 








Number of elements 


'OOOOO'B 






Type of list 


'OO'B 


"list of TACs 
belonging to one 
PLMN, with non- 
consecutive TAG 
values" 




MCC 
MNC 
TAC1 


TAI-1 







Table 9.3.1.15.3.3-6: Message EXTENDED SERVICE REQUEST (step 25, Table 9.3.1.15.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 4A 


Information Element 


Value/remark 


Comment 


Condition 


Service type 


'OOOO'B 


"mobile originating 
GS fallback- 




M-TMSI 


M-TMSI 







Table 9.3.1.15.3.3-7: Message SERVICE REJECT (step 26, Table 9.3.1.15.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-22 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'0001 001 O'B 


"GS domain not 
available" 





9.3.1 .16 Service request / Abnormal case / Switch off 

9.3.1.16.1 Test Purpose (TP) 

(1) 

with { UE having sent a SERVICE REQUEST message } 
ensure that { 

when I UE is switched off } 
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then { UE performs the detach procedure } 
} 

9.3.1.16.2 Conformance requirements 

References: The conformance requirements covered in tlie present TC are specified in: TS 24.301, clause 5.6.1.6. 

[TS 24.301, clause 5.6.1.6] 

The following abnormal cases can be identified: 

g) Switch off 

If the UE is in state EMM-SERVICE-REQUEST-INITIATED at switch off, the detach procedure shall be 
performed. 

9.3.1.16.3 Test description 

9.3.1.16.3.1 Pre-test conditions 
System Simulator: 

- Cell A. 
UE: 

- The test USIM contains lMSI-1, GUTl-1 and TAl-1, and EPS update status is "EUl: UPDATED". 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 

9.3.1 .1 6.3.2 Test procedure sequence 

Table 9.3.1.16.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS pages the UE using S-TMSI with ON 
domain indicator set to "PS". 


- 


- 


- 


- 


2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS does not respond to the SERVICE 
REQUEST message. 
NQTE: The SS does not transmit both 
SecurityModeCommand message and 
RRCConnectionReconfiguration message. 










4 


The UE is switched off. 


- 


- 


- 


- 


5 


Checl<: Does the UE transmit a DETACH 
REQUEST message? 


-> 


DETACH REQUEST 


1 


P 


6 


Checl<: Does the test result of generic test 
procedure in TS 36.508 subclause 6.4.2.5 
indicates that the UE does not respond to 
paging when paged with GUTI-1 and with CN 
domain indicator set to "PS"? 






1 





9.3.1.16.3.3 
None. 



Specific message contents 
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9.3.1 .17 Service request / Abnormal case / Procedure collision 

9.3.1.17.1 Test Purpose (TP) 
(1) 

with { UE having sent a SERVICE REQUEST message } 
ensure that { 

when { UE receives a DETACH REQUEST message with the Type of detach set to 're-attach required' } 
then { UE sends a DETACH ACCEPT message and performs the attach procedure } 
} 

(2) 

with { UE having sent a SERVICE REQUEST message or an EXTENDED SERVICE REQUEST message} 
ensure that { 

when { UE receives a DETACH REQUEST message with the Type of detach set to the value other than 
're-attach required' } 

then { UE sends a DETACH ACCEPT message } 
} 

9.3.1.17.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.6.1.6. 

[TS 24.301, clause 5.6.1.6] 

The following abnormal cases can be identified: 

h) Procedure collision 

If the UE receives a DETACH REQUEST message from the network in state EMM-SERVICE-REQUEST- 
INITIATED, the detach procedure shall be progressed and the service request procedure shall be aborted. 

Additionally, if the service request was initated for CS fallback or IxCS fallback, the EMM sublayer shall 
indicate to the MM sublayer or the cdma2000® upper layers that the CS fallback or IxCS fallback procedure has 
failed. 

If the Detach type IE in the DETACH REQUEST message indicated "re-attach required", the attach procedure 
shall be performed. 

9.3.1.17.3 Test description 
9.3.1.17.3.1 Pre-test conditions 
System Simulator: 

- Cell A 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 
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9.3.1.17.3.2 



Test procedure sequence 

Table 9.3.1.17.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS pages the UE using S-TMSI with CN 
domain indicator set to "PS". 


- 


- 


- 


- 


2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS transmits a DETACH REQUEST 
message with the Type of detach set to 're- 
attach required'. 


<- 


DETACH REQUEST 






4 


Checl<: Does the UE transmit a DETACH 
ACCEPT message? 


-> 


DETACH ACCEPT 


1 


P 


5 


The SS releases the RRC connection. 


- 


- 


- 


- 


6 


Check: Does the UE transmit an ATTACH 
REQUEST message including a PDN 
CQNNECTIVITY REQUEST message? 


-> 


ATTACH REQUEST 


1 


P 


7 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






8 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






9 


The SS transmits a NAS SECURITY MODE 
COMMAND message to activate NAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


10 


The UE transmits a NAS SECURITY MODE 
COMPLETE message and establishes the 
initial security configuration. 


-> 


SECURITY MODE COMPLETE 








EXCEPTION: Steps Hal to 1 1 a2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred after 
NAS SECURITY MODE COMPLETE 
message. 










Hal 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






11a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






12 


The SS responds with an ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message. 


<~ 


ATTACH ACCEPT 








EXCEPTION: In parallel to the event described 
in step 13 below the generic procedure for IP 
address allocation in the U-plane specified in 
TS 36.508 subclause 4.5A.1 takes place 
performing IP address allocation in the U-plane 
if requested by the UE. 










13 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ATTACH COMPLETE 






14 


The SS releases the RRC connection. 


- 


- 


- 


- 




EXCEPTION: Steps 15a1 to 15b2 describe 
behaviour that depends on the UE capability; 
the "lower case letter" identifies a step 
sequence that take place if a capability is 
supported 










15a1 


IF pc_CSfallback is true THEN the SS pages 
the UE using S-TMSI with CN domain indicator 
set to "CS". 











ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1395 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



15a2 


The UE transmits an EXTENDED SERVICE 
REQUEST message. 


-> 


EXTENDED SERVICE REQUEST 


- 


- 


15b1 


ELSE the SS pages the UE using S-TMSI with 
CN domain indicator set to "PS". 


- 


- 


- 


- 


15b2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


16 


The SS transmits a DETACH REQUEST 
message with the Type of detach set to the 
value other than 're-attach required'. 


<— 


DETACH REQUEST 






17 


Check: Does the UE transmit a DETACH 
ACCEPT message? 


~> 


DETACH ACCEPT 


2 


P 


18 


The SS releases the RRC connection. 


- 


- 


- 


- 



9.3.1 .1 7.3.3 Specific message contents 

Table 9.3.1.17.3.3-1: Message DETACH REQUEST (step 3, Table 9.3.1.17.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-12 


Information Element 


Value/remarl< 


Comment 


Condition 


Detach type 








Type of detach 


'001 'B 


re-attach required 




EMM cause 


Not present 


If the detach type 
IE indicates "IMSI 
detach" or "re- 
attach required", 
then the UE shall 
ignore the EMM 
cause IE if 
received. 





Table 9.3.1.17.3.3-2: Message DETACH REQUEST (step 16, Table 9.3.1.17.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-12 


Information Element 


Value/remarl< 


Comment 


Condition 


Detach type 








Type of detach 


'010'B 


re-attach not 
required 




EMM cause 


'0000 001 1'B 


Illegal UE 





9.3.1 .18 Service Request / Rejected / Not authorized for this CSG 



9.3.1.18.1 



(1) 



Test Purpose (TP) 



with { UE having sent a SERVICE REQUEST message } 
ensure that { 

when { UE receives a SERVICE REJECT message with the EMM cause value = 25 {Not authorizecJ for this 
CSG) and this SERVICE REJECT message is not without integrity protection } 

then { UE sets the EPS upcJate status to EU3 ROAMING NOT ALLOWED, removes the CSG ID of the cell 
that sent SERVICE REJECT message from the AllowecJ CSG list, searches for a suitable cell in the same 
PLMN } 



(2) 



UE in state EMM-REGISTERED and EMM- IDLE mode and the CSG ID is removed from the Allowed CSG 



with 

list } 
ensure that { 

when { UE detects entering new tracking areas not included in the TAI list } 

then { UE attempts to enter a normal cell and does not select a cell which is not included in 
the allowed CSG list } 
} 
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9.3.1.18.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.6.1.5. 

[TS 24.301, clause 5.6.1.5] 

On receipt of the SERVICE REJECT message, the UE shall stop timer T3417 and take the following actions depending 
on the received EMM cause value. 

#25 (Not authorized for this CSG); 

Cause #25 is only applicable when received from a CSG cell. Cause #25 received from a non-CSG cell is 
considered as an abnormal case and the behaviour of the UE is specified in subclause 5.6.1.6. 

If the SERVICE REJECT message with cause #25 was received without integrity protection, then the UE shall 
discard the message. 

The UE shall set the EPS update status to EU3 ROAMING NOT ALLOWED (and shall store it according to 
subclause 5.1.3.3). The UE shall enter the state EMM-REGISTERED.LIMITED-SERVICE. 

The UE shall remove the CSG ID of the cell where the UE has initiated the service request procedure from the 
Allowed CSG Hst. 

The UE shall search for a suitable cell in the same PLMN according to 3GPP TS 36.304 [21]. 

9.3.1.18.3 Test description 
9.3.1.18.3.1 Pre-test conditions 
System Simulator: 

- Cell A, Cell B. 

- Cell A(TAC1, frequency 1, is a CSG cell) 

- Cell B(TAC2, frequency 1, not a CSG cell) 

- Cell A is "Serving cell" and Cell B " Not Suitable cell ". 
UE: 

- The UE has a vaHd GUTI (GUTI-1). 

- The test USIM contains IMSIl, GUTIl and TAIl, and EPS update status is "EUl: UPDATED". 

- The test USIM contains a allowed CSG list which include CSG ID of Cell A. 
Preamble: 

- The UE is in state Registered, Idle mode (state 2) on Cell A according to [18]. 
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9.3.1.18.3.2 



Test procedure sequence 

Table 9.3.1.18.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS pages the UE using S-TMSI with CN 
domain indicator set to "PS". 


- 


- 


- 


- 


- 


The following messages are sent and shall be 
received on Cell A. 


- 


- 


- 


- 


2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS transmits a SERVICE REJECT 
message with the EMM cause = " Not 
authorized for this CSG " as specified. 


<- 


SERVICE REJECT 






4 


The SS releases the RRC connection. 


- 


- 


- 


- 


5 


The SS configures: 

- Cell A as a " Serving cell". 

- Cell B as a " Suitable Neighbour cell ". 










6 


Check: does the UE transmits a TRACKING 
AREA UPDATE REQUEST message on cell B 
in the next 30 seconds? 


-> 


TRACKING AREA UPDATE 
REQUEST 


1 


P 


7 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


8 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


9 


The SS configures: 

- Cell A as a " Serving cell". 

- Cell B as a " Not Suitable cell". 










10 


Check: does the UE transmits a TRACKING 
AREA UPDATE REQUEST message on cell A 
in the next 30 seconds? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2 


F 



9.3.1 .1 8.3.3 Specific message contents 

Table 9.3.1.18.3.3-1: SERVICE REJECT (step 3, Table 9.3.1.18.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.2-22 


Information Element 


Value/remark 


Comment 


Condition 


EMM cause 


'00011 001 'B 


#25 " Not 
authorized for this 
CSG" 





Table 9.3.1.18.3.3-2: SystemlnformationBlockTypel for Cell A, B(Pre-test conditions and all steps in 

Table 9.3.1.18.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.2 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








cellAccessRelatedlnfo SEQUENCE { 








csg-lndication 


TRUE 




Cell A 




FALSE 




Cell B 


csg-ldentity 


Not present 




CellB 




'000 0000 0000 0000 
0000 0000 001 0'B 




Cell A 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1398 ETSI TS 136 523-1 V9.1.1 (2010-07) 

9.3.2 Paging procedure 
9.3.2.1 Paging procedure 

9.3.2.1.1 Test Purpose (TP) 
(1) 

with { UE in ECM-IDLE } 
ensure that { 

when { the network initiates a paging procedure for EPS services using S-TMSI } 

then { the UE responds to the paging with a SERVICE REQUEST message providing correct S-TMSI in 
the RRCConnectionRequest } 
} 

9.3.2.1.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301, clauses 5.6.1.1, 
5.6.2.2.1, TS 33.401 clause 7.2.6.2, TS 36.331 clause 5.3.3.3. 

[TS 24.301, clause 5.6.2.2.1] 

To initiate the procedure the EMM entity in the network requests the lower layer to start paging (see 
3GPP TS 36.300 [20], 3GPP TS 36.413 [23]) and starts the timer T3413 for this paging procedure. Upon reception of a 
paging indication, the UE shall respond to the paging with a SERVICE REQUEST message (see 3GPP TS 23.401 [10] 
and 3GPP TS 36.413 [23]). If the paging for EPS services was received during an ongoing UE initiated EMM specific 
procedure or service request procedure, then the UE shall ignore the paging and the UE and the network shall proceed 
with the EMM specific procedure or the service request procedure. 

[TS 24.301, clause 5.6.1.1] 

The UE shall invoke the service request procedure when: 

a) the UE in EMM -IDLE mode receives a paging request with CN domain indicator set to "PS" from the network; 

[TS 33.401 clause 7.2.6.2] 

The procedure the UE uses to transit from ECM-IDLE to ECM-CONNECTED when in EMM-REGISTERED state is 
initiated by a NAS Service Request message from the UE to the MME. As the UE is in EMM-REGISTERED state, a 
EPS security context exists in the UE and the MME, and this EPS security context further contains uplink and downlink 
NAS COUNTS. The NAS Service Request message sent in EMM-REGISTERED shall be integrity protected and 
contain the uplink NAS sequence number. 

[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 

1> set the ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 

9.3.2.1.3 Test description 
9.3.2.1.3.1 Pre-test conditions 
System Simulator: 

- Cell A 
UE: 

None. 
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Preamble: 

The UE is in Registered, Idle Mode (state 2) according to [18]. 
9.3.2.1 .3.2 Test procedure sequence 

Table 9.3.2.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


SS pages the UE using S-TMSI with CN 
domain indicator set to "PS" 


- 


- 


- 


- 


2 


Checl<: Does the UE transmit 
RRCConnectionRequest message providing 
correct S-TIVISI? 






1 


P 


3 


Checl<: Does the UE respond with a SERVICE 
REQUEST message? 


-> 


SERVICE REQUEST 


1 


P 


4-7 


Steps 6 to 9 of the generic radio bearer 
establishment procedure (TS 36.508 4.5.3.3-1) 
are executed to successfully complete the 
service request procedure. 











9.3.2.1 .3.3 Specific message contents 

Table 9.3.2.1.3.3-1 : RRCConnectionRequest {step 2, Table 9.3.2.1.3.2-1) 



Derivation Path: Table 4.6.1-16 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 








criticalExtensions CHQICE { 








rrcConnectionRequest-r8 SEQUENCE { 








ue-ldentity[1] CHOICE! 








s-TMSI 


Set to the value of the S- 
TMSIoftheUE 






1 








1 








} 








} 









9.3.2.2 



9.3.2.2.1 



Paging for CS fallback / Idle mode 
Test Purpose (TP) 



(1) 



with { UE in state EMM-REGISTERED and EMM- IDLE mode} 
ensure that { 

when { UE received Paging for mobile termination CS fallback from NW } 
then { UE establishes the RRC connection with the RRC establishmentCause set to 'mt-Access' and 
sends EXTENDED SERVICE REQUEST message } 



} 



9.3.2.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301 clauses 5.3.1.1, 
5.6.1.1, 5.6.2.3 and Annex D and TS 36.331 clause 5.3.3.3. 

[TS 24.301 clause 5.3.1.1] 

When the UE is in EMM-IDLE mode and needs to transmit an initial NAS message, the UE shall request the lower 
layer to establish a NAS signalling connection. In this request to the lower layer the NAS shall provide to the lower 
layer the RRC establishment cause and the call type as specified in annex D of this specification. 

[TS24.301 clause5.6.1.1] 
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The purpose of the service request procedure is to transfer the EMM mode from EMM-IDLE to EMM-CONNECTED 
mode and establish the radio and S 1 bearers when uplink user data or signalling is to be sent. Another purpose of this 
procedure is to invoke MO/MT CS fallback procedures. 

This procedure is used when: 



the UE in EMM-IDLE or EMM-CONNECTED mode has requested to perform mobile originating/terminating 
CS fallback; or 



The service request procedure is initiated by the UE, however, for the downlink transfer of signalling or user data in 
EMM-IDLE mode, the trigger is given by the network by means of the paging procedure (see subclause 5.6.2). 

The UE shall invoke the service request procedure when: 



e) the UE, in EMM -IDLE or EMM-CONNECTED mode, has a CS fallback response to be sent to the network; or 



[TS24.301 clause5.6.2.3] 

The network may initiate the paging procedure for non-EPS services when the UE is IMSI attached for non-EPS 

services. 

To initiate the procedure when no NAS signalling connection exists, the EMM entity in the network requests the lower 
layer to start paging (see 3GPP TS 36.300 [2012], 3GPP TS 36.413 [2315]) and starts the timer T3413 for this paging 
procedure. The paging message includes a CN domain indicator set to "CS" in order to indicate that this is paging for 
CS fallback. Upon reception of a paging indication, the UE may respond to the paging immediately or may request 
upper layers input i.e. to accept or reject CS fallback. The response is indicated in the CSFB response information 
element in the EXTENDED SERVICE REQUEST message in both EMM-IDLE and EMM-CONNECTED modes. 

The network shall stop the timer T3413 for the paging procedure when a response is received from the UE. 

To notify the UE about an incoming mobile terminating CS service when a NAS signalling connection exists, the EMM 
entity in the network shall send a CS SERVICE NOTIFICATION message. 

[TS 24.301, Annex D] 



Table D.1.1 : Mapping of NAS procedure to establishment cause and call type 



NAS procedure 


RRC establishment cause (according 3GPP TS 36.331 [22]) 


Call type 








Service Request 


If a EXTENDED SERVICE REQUEST has service type set to 
"mobile terminating CS fallback", the RRC establishment cause 
shall be set to MT access. (See Notel ). 


"terminating calls" 








Note 1 : For these NAS procedures initiated by UEs of access class 12, 13 or 14 in their home country, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". For this purpose the home country is 
defined as the country of the MCC part of the IIVISI, see 3GPP TS 22.01 1 [1 A]. 

For these NAS procedures initiated by UE of access class 11 or 1 5 in their HPLMN or EHPLMN, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 1 5". 



[TS 36.331, clause 5.3.3.3] 



The UE shall set the contents of RRCConnectionRequest message as follows: 
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1> set the ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 
2> else 

3> draw a random value and set the ue-Identity to this value; 
NOTE 1 : Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 
1> Set the establishmentCause in accordance with the information received from upper layers; 
9.3.2.2.3 Test description 

9.3.2.2.3.1 Pre-test conditions 
System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs TAI-1. 

Cell A is set to the "Serving cell". 
UE: 

- The UE has a valid GUTI (GUTI- 1 ) 

The UE is registered on TAI- 1 . 

The UE is IMSI attached for non-EPS services. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 

9.3.2.2.3.2 Test procedure sequence 

Table 9.3.2.2.3.2-1 : Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS sends a paging message which CN 
domain indicates "CS" domain to the UE. 


- 




- 


- 


2 


The UE accepts CS fallback 


- 




- 


- 


3 


Check: Does the UE transmit an 
RRCConnectionRequest message with 
establishmentCause set to 'mt-Access' 
followed by EXTENDED SERVICE REQUEST 
message? 


— > 


EXTENDED SERVICE REQUEST 


1 


P 


4 


The SS sends SERVICE REJECT message in 
order that the UE enters EMM- 
REGISTERED.NORMAL-SERVICE. 


<— 


SERVICE REJECT 
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9.3.2.2.3.3 Specific message contents 

Table 9.3.2.2.3.3-0: Message RRCConnectionRequest {step 3, Table 9.3.2.2.3.2-1) 



Derivation path: 36.508 table 4.6.1-16 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 
criticalExtensions CHOICE { 
rrcConnectionRequest-r8 SEQUENCE { 
establishmentCause 
} 
} 
} 


mt-Access 







Table 9.3.2.2.3.3-1 : Message EXTENDED SERVICE REQUEST (step 3, Table 9.3.2.2.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 4A 


Information Element 


Value/remark 


Comment 


Condition 


Service type 


'0001 'B 


"mobile 

terminating CS 
fallback" 




M-TMSI 


M-TMSI1 






CSFB response 


'001 'B 


"CS fallback 
accepted by the 
UE" 





Table 9.3.2.2.3.3-2: Message SERVICE REJECT (step 4, Table 9.3.2.2.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-22 


Information Element 


Value/remark 


Comment 


Condition 


EIVIM cause 


'0010 0110'B 


"CS fallback call 
establishment not 
allowed" 





9.4 

9.4.1 

9.4.1.1 

(1) 



NAS Security 

Integrity protection / Correct functionality of EPS NAS integrity 
algorithm / SN0W3G 

Test Purpose (IP) 



with { succesful completion of EPS authentication and key agreement (AKA) procedure } 
ensure that { 

when { UE receives a an integrity protected SECURITY MODE COMMAND message instructing to start 
integrity protection using algorithm SN0W3G } 

then { UE transmits an integrity protected SECURITY MODE COMPLETE using SN0W3G and starts 
applying the NAS Integrity protection in both UL and DL } 

(2) 

with { Integrity protection succesfull started by executing Security Mode Procedure} 
ensure that { 

when { UE receives an IDENTITY REQUEST message without integrity protected } 
then { UE foes not transmit an IDENTITY RESPONSE message } 



9.4.1.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are specified in: TS 24.301 clause 4.4.4.1, 
4.4.4.2, 5.4.3.1, 5.4.3.2 and 5.4.3.3. 

[TS 24.301, clause 4.4.4.1] 
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For the UE, integrity protected signalling is mandatory for the NAS messages once a valid EPS security context exists 
and has been taken into use. For the network, integrity protected signalling is mandatory for the NAS messages once a 
secure exchange of NAS messages has been established for the NAS signalling connection. Integrity protection of all 
NAS signalling messages is the responsibility of the NAS. It is the network which activates integrity protection. 

[TS 24.301, clause 4.4.4.2] 

Once the secure exchange of NAS messages has been established, the receiving EMM or ESM entity in the UE shall not 
process any NAS signalling messages unless they have been successfully integrity checked by the NAS. If NAS 
signalling messages, having not successfully passed the integrity check, are received, then the NAS in the UE shall 
discard that message. If any NAS signalling message is received as not integrity protected even though the secure 
exchange of NAS messages has been established by the network, then the NAS shall discard this message. 

[TS 24.301, clause 5.4.3.1] 

The purpose of the NAS security mode control procedure is to take an EPS security context into use, and initialise and 
start NAS signalling security between the UE and the MME with the corresponding NAS keys and security algorithms. 

[TS 24.301, clause 5.4.3.2] 

The MME initiates the NAS security mode control procedure by sending a SECURITY MODE COMMAND message 
to the UE and starting timer T3460 (see example in figure 5.4.3.2.1). 

If the security mode control procedure is initiated further to a successful execution of the authentication procedure, the 
MME shall use the reset downlink NAS COUNT to integrity protect the SECURITY MODE COMMAND message. 

The MME shall send the SECURITY MODE COMMAND message unciphered, but shall integrity protect the message 
with the NAS integrity key based on Kasme or mapped K'asme indicated by the eKSI included in the message. The 
MME shall set the security header type of the message to "integrity protected with new EPS security context". 



The MME shall include the replayed security capabilities of the UE (including the security capabilities with regard to 
NAS, RRC and UP (user plane) ciphering as well as NAS, RRC integrity, and other possible target network security 
capabilities, i.e. UTRAN/GERAN if UE included them in the message to network), the replayed nonccuE if the UE 
included it in the message to the network, the selected NAS ciphering and integrity algorithms and the Key Set 
Identifier (eKSI). 

Additionally, the MME may request the UE to include its IMEISV in the SECURITY MODE COMPLETE message. 

NOTE: The AS and NAS security capabilities will be the same, i.e. if the UE supports one algorithm for NAS it is 
also be supported for AS. 

[TS 24.301, clause 5.4.3.3] 

Upon receipt of the SECURITY MODE COMMAND message, the UE shall check whether the security mode 
command can be accepted or not. This is done by performing the integrity check of the message and by checking that 
the received UE security capabilities and the received nonccuE have not been altered compared to what the UE provided 
in the initial layer 3 message that triggered this procedure. 

If the type of security context flag is set to "native security context" and if the KSI matches a valid native EPS security 
context held in the UE while the UE has a mapped EPS security context as the current security context, the UE shall 
take the native EPS security context into use. 

If the security mode command can be accepted, the UE shall reset the uplink NAS COUNT and the UE shall take the 
new EPS security context into use when: 

a) the SECURITY MODE COMMAND message is received further to a successful execution of the authentication 
procedure; or 

b) the type of security context flag is set to "mapped security context" in the NAS KSI IE included in the SECURITY 
MODE COMMAND message 

If the security mode command can be accepted, the UE shall send a SECURITY MODE COMPLETE message integrity 
protected with the selected NAS integrity algorithm and the NAS integrity key based on the Kasme or mapped K'asme if 
the type of security context flag is set to "mapped security context" indicated by the eKSI. If the SECURITY MODE 
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COMMAND message includes the type of security context flag set to "mapped security context" in the NAS KSI IE, 
nonceMME and nonceuE, the UE shall generate K'asme from both nonces as indicated in 3GPP TS 33.401 [19] and reset 
the downlink NAS COUNT to check whether the SECURITY MODE COMMAND can be accepted or not. The UE 
shall cipher the SECURITY MODE COMPLETE message with the selected NAS ciphering algorithm and the NAS 
ciphering key based on the Kasme or mapped K'asme indicated by the eKSI. The UE shall set the security header type of 
the message to "integrity protected and ciphered with new EPS security context". 

From this time onward the UE shall cipher and integrity protect all NAS signalling messages with the selected NAS 
ciphering and NAS integrity algorithms. 

If the MME indicated in the SECURITY MODE COMMAND message that the IMEISV is requested, the UE shall 
include its IMEISV in the SECURITY MODE COMPLETE message. 

9.4.1.3 Test description 

9.4.1.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

UE: 

None. 

Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.4.1.3.2 



Test procedure sequence 

Table 9.4.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message 


-> 


ATTACH REQUEST 






3 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






4 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






5 


The SS transmits a NAS SECURITY MODE 
COIVIMAND message to activate NAS security. 
. It is integrity protected. 


<— 


SECURITY MODE COMMAND 






6 


Check; does the UE transmit a NAS 
SECURITY MODE COMPLETE message and 
starts applying the NAS Integrity protection in 
both UL and DL? 


-> 


SECURITY MODE COMPLETE 


1 


P 




EXCEPTION: Steps 6Aa1 to 6Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










6A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<- 


ESM INFORMATION REQUEST 






6A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






7 


The SS transmits with an ATTACH ACCEPT 
message. The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<~ 


ATTACH ACCEPT 






8 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 


-> 


ATTACH COMPLETE 






9 


The SS Transmits an IDENTITY REQUEST 
message with Integrity protected and with 
default ciphering 


<- 


IDENTITY REQUEST 






10 


Check: does the UE transmit an IDENTIY 
RESPONSE message with Integrity Protected 
and with default ciphering? 


-> 


IDENTITY RESPONSE 


1 


P 


11 


The SS Transmits an IDENTITY REQUEST 
message (not Integrity protected) 


<- 


IDENTITY REQUEST 


- 


- 


12 


Check: does the UE transmits an IDENTIY 
RESPONSE message within the next 5 
seconds? 


-> 


IDENTITY RESPONSE 


2 


F 
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9.4.1.3.3 



Specific message contents 
Table 9.4.1.3.3-1: SECURITY MODE COMMAND (Step 5) 



Derivation path: 36.508 table 4.7.2-1 9 


Information Element 


Value/Remark 


Comment 


Condition 


Selected NAS security algorithms 








- Type of integrity protection algorithm 


001 


EPS integrity 
algorithm 128- 
EIA1[SN0W3G] 





9.4.2 



9.4.2.1 



Integrity protection / Correct functionality of EPS NAS integrity 
algorithm /AES 

Test Purpose (TP) 



(1) 



with { succesful completion of EPS authentication and key agreement (AKA) procedure } 
ensure that { 

when { UE receives an integrity protected SECURITY MODE COMMAND message, to start integrity 
protection using algorithm AES } 

then { UE sends SECURITY MODE COMPLETE, integrity protected with AES and starts applying the NAS 
Integrity protection in both UL and DL} 

(2) 

with { Integrity protection succesfull started by executing Security Mode Procedure} 
ensure that { 

when { UE receives a IDENTITY REQUEST message {requested identification parameter is not IMSI) , 
without integrity protected } 

then { UE Does not transmit IDENTITY Response} 
} 

9.4.2.2 Conformance requirements 
Same Conformance requirements as in clause 9.4.1.2 

9.4.2.3 Test description 

9.4.2.3.1 Pre-test conditions 
Same Pre-test conditions as in clause 9.4.1.3.1 

9.4.2.3.2 Test procedure sequence 

Same Test procedure sequence as in table 9.4.1.3.2.1, except the integrity protection algorithm is AES. 

9.4.2.3.3 Specific message contents 

Table 9.4.2.3.3-1 : SECURITY MODE COMMAND (Step 6 ) 



Derivation path: 36.508 table 4.7.2-1 9 


Information Element 


Value/Remark 


Comment 


Condition 


Selected NAS security algorithms 
- Type of integrity protection algorithm 


010 


EPS integrity 
algorithm 128- 
EIA2 (AES) 





9.4.3 

9.4.3.1 
(1) 



Ciphering and deciphering / Correct functionality of EPS NAS 
encryption algorithm / SN0W3G 

Test Purpose (TP) 



with { succesful completion of EPS authentication and key agreement (AKA) procedure 
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ensure that { 

when { UE receives a SECURITY MODE COMMAND instructing to start ciphering using algorithm SN0W3G } 
then { UE sends a SECURITY MODE COMPLETE message ciphered with SN0W3G and starts applying the 
NAS ciphering in both UL and DL} 
} 

9.4.3.2 Conformance requirements 

References: The conformance requirements covered in the current TC are specified in: TS 24.301 clause 5.4.3.1, 5.4.3.2 
and 5.4.3.3. 

[TS 24.301, clause 5.4.3.1] 

The purpose of the NAS security mode control procedure is to take an EPS security context into use, and initialise and 
start NAS signalling security between the UE and the MME with the corresponding NAS keys and security algorithms. 

[TS 24.301, clause 5.4.3.2] 

The MME initiates the NAS security mode control procedure by sending a SECURITY MODE COMMAND message 
to the UE and starting timer T3460 (see example in figure 5.4.3.2.1). 

If the security mode control procedure is initiated further to a successful execution of the authentication procedure, the 
MME shall use the reset downlink NAS COUNT to integrity protect the SECURITY MODE COMMAND message. 

The MME shall send the SECURITY MODE COMMAND message unciphered, but shall integrity protect the message 
with the NAS integrity key based on Kasme or mapped K'asme indicated by the eKSI included in the message. The 
MME shall set the security header type of the message to "integrity protected with new EPS security context". 



The MME shall include the replayed security capabilities of the UE (including the security capabilities with regard to 
NAS, RRC and UP (user plane) ciphering as well as NAS, RRC integrity, and other possible target network security 
capabilities, i.e. UTRAN/GERAN if UE included them in the message to network), the replayed nonceuE if the UE 
included it in the message to the network, the selected NAS ciphering and integrity algorithms and the Key Set 
Identifier (eKSI). 

Additionally, the MME may request the UE to include its IMEISV in the SECURITY MODE COMPLETE message. 

NOTE: The AS and NAS security capabilities will be the same, i.e. if the UE supports one algorithm for NAS it is 
also be supported for AS. 

[TS 24.301, clause 5.4.3.3] 

Upon receipt of the SECURITY MODE COMMAND message, the UE shall check whether the security mode 
command can be accepted or not. This is done by performing the integrity check of the message and by checking that 
the received UE security capabilities and the received nonccuE have not been altered compared to what the UE provided 
in the initial layer 3 message that triggered this procedure. 

If the type of security context flag is set to "native security context" and if the KSI matches a valid native EPS security 
context held in the UE while the UE has a mapped EPS security context as the current security context, the UE shall 
take the native EPS security context into use. 

If the security mode command can be accepted, the UE shall reset the uplink NAS COUNT and the UE shall take the 
new EPS security context into use when: 

a) the SECURITY MODE COMMAND message is received further to a successful execution of the authentication 
procedure; or 

b) the type of security context flag is set to "mapped security context" in the NAS KSI IE included in the 
SECURITY MODE COMMAND message 

If the security mode command can be accepted, the UE shall send a SECURITY MODE COMPLETE message integrity 
protected with the selected NAS integrity algorithm and the NAS integrity key based on the Kasme or mapped K'asme if 
the type of security context flag is set to "mapped security context" indicated by the eKSI. If the SECURITY MODE 
COMMAND message includes the type of security context flag set to "mapped security context" in the NAS KSI IE, 
nonccMME and nonccuE, the UE shall generate K'asme from both nonces as indicated in 3GPP TS 33.401 [19] and reset 
the downlink NAS COUNT to check whether the SECURITY MODE COMMAND can be accepted or not. The UE 
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shall cipher the SECURITY MODE COMPLETE message with the selected NAS ciphering algorithm and the NAS 
ciphering key based on the Kasme or mapped K'asme indicated by the eKSI. The UE shall set the security header type of 
the message to "integrity protected and ciphered with new EPS security context". 

From this time onward the UE shall cipher and integrity protect all NAS signalling messages with the selected NAS 
ciphering and NAS integrity algorithms. 

If the MME indicated in the SECURITY MODE COMMAND message that the IMEISV is requested, the UE shall 
include its IMEISV in the SECURITY MODE COMPLETE message. 

9.4.3.3 Test description 

9.4.3.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

UE: 

None. 

Preamble: 

The UE is in state Switched OFF (state 1) according to [18]. 
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9.4.3.3.2 



Test procedure sequence 

Table 9.4.3.3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The UE is switched on. 


- 


- 


- 


- 


2 


The UE transmits an ATTACH REQUEST 
message including a PDN CONNECTIVITY 
REQUEST message 


-> 


ATTACH REQUEST 






3 


The SS transmits an AUTHENTICATION 
REQUEST message to initiate the EPS 
authentication and AKA procedure. 


<- 


AUTHENTICATION REQUEST 






4 


The UE transmits an AUTHENTICATION 
RESPONSE message and establishes mutual 
authentication. 


-> 


AUTHENTICATION RESPONSE 






5 


The SS transmits a SECURITY MODE 
COMMAND message to activate MAS security. 


<— 


SECURITY MODE COMMAND 


- 


- 


6 


Check: does the UE transmit a SECURITY 
MODE COMPLETE message ciphered and 
starts applying the MAS ciphering in both UL 
and DL? 


-> 


SECURITY MODE COMPLETE 


1 


P 




EXCEPTION: Steps 6Aa1 to 6Aa2 describe 
behaviour that depends on UE configuration; 
the "lower case letter" identifies a step 
sequence that take place if the UE has ESM 
information which needs to be transferred. 










6A 
a1 


IF the UE sets the ESM information transfer 
flag in the last PDN CONNECTIVITY 
REQUEST message THEN the SS transmits 
an ESM INFORMATION REQUEST message 
to initiate exchange of protocol configuration 
options and/or APN. 


<~ 


ESM INFORMATION REQUEST 






6A 
a2 


The UE transmits an ESM INFORMATION 
RESPONSE message to transfer protocol 
configuration options and/or APN. 


-> 


ESM INFORMATION RESPONSE 






7 


The SS transmits with an ATTACH ACCEPT 
message The ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message is 
piggybacked in ATTACH ACCEPT message 


<— 


ATTACH ACCEPT 






8 


The UE transmits an ATTACH COMPLETE 
message including an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 


-> 


ATTACH COMPLETE 






9 


The SS Transmits an IDENTITY REQUEST 
message Ciphered 


<- 


IDENTITY REQUEST 


- 


- 


10 


Check: does the UE transmit an IDENTIY 
RESPONSE message Ciphered? 


-> 


IDENTITY RESPONSE 


1 


P 



9.4.3.3.3 



Specific message contents 
Table 9.4.3.3.3-1 : SECURITY MODE COMMAND (Step 5) 



Derivation path: 36.508 table 4.7.2-1 9 


Information Element 


Value/Remark 


Comment 


Condition 


Selected NAS security algorithms 








- Type of ciphering algorithm 


001 


EPS encryption 
algorithm 128- 
EEA1 [SN0W3G] 
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9.4.4 

9.4.4.1 
(1) 



Ciphering and decipinering / Correct functionality of EPS NAS 
encryption algoritlnm / AES 

Test Purpose (TP) 



with { succesful completion of EPS authentication and key agreement (AKA) procedure } 
ensure that { 

when { UE receives a SECURITY MODE COMMAND, to start encryption using algorithm AES} 
then { UE sends SECURITY MODE COMPLETE, encrypted with AES and starts applying the NAS 
encryption in both UL and DL } 
} 

9.4.4.2 Conformance requirements 
Same Conformance requirements as in clause 9.4.3.2 

9.4.4.3 Test description 

9.4.4.3.1 Pre-test conditions 
Same Pre-test conditions as in clause 9.4.3.3.1 

9.4.4.3.2 Test procedure sequence 

Same Test procedure sequence as in Table 9.4.3.3.2-1, except the integrity ciphering algorithm is AES. 

9.4.4.3.3 Specific message contents 

Table 9.4.1.3.3-1: SECURITY MODE COMMAND (Step 6) 



Derivation path: 36.508 table 4.7.2-1 9 


Information Element 


Value/Remark 


Comment 


Condition 


Selected NAS security algorithms 
- Type of ciphering algorithm 


002 


EPS encryption 
algorithm 128- 
EEA2 (AES) 
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10 EPS session management 

10.1 Void 

1 0.2 Dedicated EPS bearer context activation 

1 0.2.1 Dedicated EPS bearer context activation / Success 

10.2.1.1 Test Purpose (TP) 

(1) 

with { UE is in EMM-REGISTERED state and a PDN address for an active default EPS bearer was received 
in an ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST message } 
ensure that { 

when { UE receives an ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message linked to the existing 
default EPS bearer } 

then { UE transmits an ACTIVATE DEDICATED EPS BEARER CONTEXT ACCEPT message } 
} 

10.2.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.4.2.3. 

[TS 24.301, clause 6.4.2.3] 

Upon receipt of the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message, the UE shall first 
check the received TFT before taking it into use. Then the UE shall send an ACTIVATE DEDICATED EPS BEARER 
CONTEXT ACCEPT message and enter the state BEARER CONTEXT ACTIVE. The ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT message shall include the EPS bearer identity. 

The linked EPS bearer identity included in the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST 
message indicates to the UE to which default bearer, IP address and PDN the dedicated bearer is linked. 

If the PTl is included in the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message, the UE uses 
the PTI to identify the UE requested bearer resource allocation procedure or the UE requested bearer resource 
modification procedure to which the dedicated bearer context activation is related. 

If the PTI is included in the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message and the PTI is 

associated to a UE requested bearer resource allocation procedure or a UE requested bearer resource modification 
procedure, the UE shall release the traffic flow aggregate description associated to the PTI value provided. 

The UE shall use the received TFT to apply mapping of uplink traffic flows to the radio bearer if the TFT contains 
packet filters for the uplink direction. 

Upon receipt of the ACTIVATE DEDICATED EPS BEARER CONTEXT ACCEPT message, the MME shall stop the 
timerT3485 and enter the state BEARER CONTEXT ACTIVE. 

10.2.1.3 Test description 
10.2.1.3.1 Pre-test conditions 
System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 
UE: 
None. 

Preamble: 

- The UE is in Registered, He Mode state (state 2) according to [18]. 
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10.2.1.3.2 



Test procedure sequence 

Table 10.2.1.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS pages the UE in order to establish a 
dedicated EPS bearer context. 


- 


- 


- 


- 


2 


The UE transmits a SERVICE REQUEST for 
downlink signalling. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST with 
particular settings (use Reference dedicated 
EPS bearer context #1 - see table 6.6.2-1 in 
TS 36.508) (See Note 1). 

Note: The SS implicitly reuses the PDN 
address defined in ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message. 


<— 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






4 


Check: Does the UE transmit an ACTIVATE 
DEDICATED EPS BEARER CONTEXT 
ACCEPT message as specified? 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 


1 


P 


5 


Check: Does the test results of CALL generic 
procedure indicate that the UE accepts a 
modification of the newly activated EPS bearer 
context ? (clause 6.4.2.6 in 1181) 






1 




Note 1 : Ttie ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message is included in a 

RRCConnectionReconfiguration message including a DRB setup for the same EPS bearer ID 



10.2.1.3.3 



Specific message contents 



Table 10.2.1.3.3-1 : Message ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST (step 3, Table 

10.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-3 and table 4.6.1-8 with condition UM-DRB-ADD(2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 






Procedure transaction identity 





"No procedure 
transaction 
Identity assigned" 




Linked EPS bearer identity 


5 


SS re-uses the 
EPS bearer 
identity of the 
default EPS 
bearer context. 




EPS QoS 


According to reference 
dedicated EPS bearer 
context #1 - see [18] 






TFT 


According to reference 
dedicated EPS bearer 
context #1- see [18] 
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Table 10.2.1.3.3-2: Message ACTIVATE DEDICATED EPS BEARER CONTEXT ACCEPT (step 4, Table 

10.2.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


Same value as in 

ACTIVATE 

DEDICATED EPS 

BEARER 

CONTEXT 

REQUEST 




Procedure transaction identity 





"No procedure 
transaction 
Identity assigned" 





1 0.3 EPS bearer context modification 

1 0.3.1 EPS bearer context modification / Success 

10.3.1.1 Test Purpose (TP) 

(1) 

with { the UE is in BEARER CONTEXT ACTIVE STATE state and in EMM-CONNECTED mode } 
ensure that { 

when { the UE receives a MODIFY EPS BEARER CONTEXT REQUEST message with new TFT} 

then { the UE sets the new TFT and then ransmits a MODIFY EPS BEARER CONTEXT ACCEPT 



10.3.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 66.4.3.1, 
6.4.3.2 and .4.3.3,. 

[TS 24.301, clause 6.4.3.1] 

The purpose of the EPS bearer context modification procedure is to modify an EPS bearer context with a specific QoS 
and TFT. The EPS bearer context modification procedure is initiated by the network, but it may also be initiated as part 
of the UE requested bearer resource allocation procedure or the UE requested bearer resource modification procedure. 



[TS 24.301, clause 6.4.3.2] 

The MME shall initiate the EPS bearer context modification procedure by sending a MODIFY EPS BEARER 
CONTEXT REQUEST message to the UE, starting the timer T3486, and entering the state BEARER CONTEXT 
MODIFY PENDING (see example in figure 6.4.3.2.1). 

The MME shall include an EPS bearer identity that identifies the EPS bearer context to be modified in the MODIFY 
EPS BEARER CONTEXT REQUEST message. 

[TS 24.301, clause 6.4.3.3] 

Upon receipt of the MODIFY EPS BEARER CONTEXT REQUEST message, the UE shall first check the received 
TFT before taking it into use and then send a MODIFY EPS BEARER CONTEXT ACCEPT message to the MME. 

If the PTl is included in the MODIFY EPS BEARER CONTEXT REQUEST message, the UE uses the PTl to identify 
the UE requested bearer resource allocation procedure or the UE requested bearer resource modification procedure to 
which the EPS bearer context modification is related (see subclause 6.5.3 and subclause 6.5.4). 

If the PTl is included in the MODIFY EPS BEARER CONTEXT REQUEST message and the PTl is associated to a UE 
requested bearer resource allocation procedure or a UE requested bearer resource modification procedure, the UE shall 
release the traffic flow aggregate description associated to the PTl value provided. 
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The UE shall use the received TFT to apply mapping of uplink traffic flows to the radio bearer if the TFT contains 
packet filters for the uplink direction. 

Upon receipt of the MODIFY EPS BEARER CONTEXT ACCEPT message, the MME shall stop the timer T3486 and 
enter the state BEARER CONTEXT ACTIVE. 

10.3.1.3 Test description 

10.3.1.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 

UE: 

None. 

Preamble: 

The UE is in Loopback Activated(state 4) with Reference default EPS bearer context #1 and Reference dedicated 
EPS bearer context #1 according to [18] on Cell A. 



10.3.1.3.2 



Test procedure sequence 

Table 10.3.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message with new TFT. 
This message is included in a 
DLInformationTransfer message. 


<- 


MODIFY EPS BEARER 
CONTEXT REQUEST 






2 


Check: Does the UE transmit a IVIODIFY EPS 
BEARER CONTEXT ACCEPT message as 
specified? 


-> 


MODIFY EPS BEARER 
CONTEXT ACCEPT 


1 


P 


3 


Void 










4 


The SS transmits one IP Packet matching with 
new TFT (reference packet filter #3) but not 
existing uplink packet filters (reference packet 
filter #2). 










5 


Check: Does UE send the IP Packet on the 
data radio bearer associated with the 
dedicated EPS bearer context? 






1 


P 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1415 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



10.3.1.3.3 Specific message contents 

Table 10.3.1.3.3-1: Message MODIFY EPS BEARER CONTEXT REQUEST (step 1, Table 10.3.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-16 and table 4.6.1-3 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


SS assigns the 
current dedicated 
EPS bearer 
context. 




Procedure transaction identity 





"No procedure 
transaction 
identity assigned" 




TFT 


According to reference 
dedicated EPS bearer 
context #2 except for Ih 1 
operation code - see [18] 


SS modifies the 
current packet 
filters of the 
dedicated EPS 
bearer context. 




TFT operation code 


Replace packet filters in 
existing 1 1- 1 







Table 10.3.1.3.3-2: Message MODIFY EPS BEARER CONTEXT ACCEPT (step 2, Table 10.3.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-14 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


Same value as in 
MODIFY EPS 
BEARER 
CONTEXT 
REOUEST 




Procedure transaction identity 





"No procedure 
transaction 
identity assigned" 
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Table 10.3.1.3.3-2: IP packet (step 4, Table 10.3.1.3.2-1) 



Derivation path: IETF RFC 791 section 3.1 (IPv4) or RFC 2460 section 3 (IPv6) and RFC 769 introduction 


Information Element 


Value/Remark 


Comment 


Condition 


Protocol 


17 


UDP 

Same value as 
reference packet 
filter #2. 

Reference packet 
filter #3 can match 
all values of 
'Protocol' 




Source Address 


192.168.0.1 


Not significant for 
IP packet 
classification 




fe80::1:1 


Not significant for 
IP packet 
classification 


IPv6-only 


Destination Address 


remotelPv4 


Same value as in 
reference packet 
filters#2 and #3 




remotelPv6 


Same value as in 
reference packet 
filters #2 and #3 


IPv6-only 


Source Port 


60000 


Not significant for 
IP packet 
classification 




Destination Port 


60000 


Value does not 
match with 
reference packet 
filter #2. 

Reference packet 
filter #3 can match 
all values of 
"Destination port" 





Table 10.3.1.3.3-3: Condition for IP packet contents (step 4, Table 10.3.1.3.2-1) 



Condition 


Explanation 


IPv6-only 


This condition applies if the UE have transmitted a PDN 
CONNECTIVITY REQUEST message in the preamble with PDN type 
set to 'IPv6'. 



1 0.4 EPS bearer context deactivation 

1 0.4.1 EPS bearer context deactivation / Success 



10.4.1.1 



Test Purpose (TP) 



(1) 

with { UE is in BEARER CONTEXT ACTIVE STATE state and in EMM-CONNECTED mode } 
ensure that { 

when { UE receives a DEACTIVATE EPS BEARER CONTEXT REQUEST message } 

then { UE deletes the EPS bearer context identified by the EPS bearer identity and transmits a 
DEACTIVATE EPS BEARER CONTEXT ACCEPT } 



(2) 



with { UE is in BEARER CONTEXT ACTIVE STATE state and in EMM-CONNECTED mode } 
ensure that { 

when { UE receives a DEACTIVATE EPS BEARER CONTEXT REQUEST message indicating the EPS bearer 
identity of the default bearer to a PDN } 

then { UE deletes all EPS bearer contexts identified to the PDN and transmits a DEACTIVATE EPS 
BEARER CONTEXT ACCEPT } 
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(3) 

with { UE is in BEARER CONTEXT ACTIVE STATE state and in EMM-CONNECTED mode } 
ensure that { 

when { UE receives a DEACTIVATE EPS BEARER CONTEXT REQUEST message that does not point to an 
existing EPS bearer context } 

then { UE transmits a DEACTIVATE EPS BEARER CONTEXT ACCEPT with EPS bearer identity set to the 
received EPS bearer identity } 



(4) 

with { UE is in BEARER CONTEXT ACTIVE STATE state and in EMM- IDLE mode } 
ensure that { 

when { UE initiates an EMM-IDLE to EMM-CONNECTED transition {i.e. SERVICE REQUEST, TRACKING AREA 
UPDATE REQUEST) } 

then { UE only synchronises EPS bearer context state (s) which are explicitly activated by SS in 
signalling messages } 
} 

10.4.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in; TS 24.301, clauses 6.4.4.2, 
5.5.3.2.4, 5.6.1.4, 6.4.4.3 and 6.4.4.6. 

[TS 24.301, clause 6.4.4.2] 



When the MME wants to deactivate all EPS bearer contexts to a PDN and thus disconnect the UE from the PDN, the 
MME shall include the EPS bearer identity of the default bearer associated to the PDN in the DEACTIVATE EPS 
BEARER CONTEXT REQUEST message. 

If no N AS signalling connection exists when the MME initiates the EPS bearer context deactivation, the ESM entity in 
the MME shall locally deactivate the EPS bearer context towards the UE without any peer-to-peer ESM signalling 
between the MME and the UE. 

NOTE: The EPS bearer context state(s) can be synchronized between the UE and the MME at the next EMM- 
IDLE to EMM-CONNECTED transition, e.g. during a service request or tracking area updating 
procedure. 

[TS 24.301, clause 5.6.1.4] 



The UE shall locally deactivate the EPS bearer contexts that do not have a user plane radio bearer established after the 
successful completion of the service request procedure. 



[TS 24.301, clause 5.5.3.2.4] 



If an EPS bearer context status IE is included in the TRACKING AREA UPDATE REQUEST message, the MME shall 
deactivate all those EPS bearer contexts locally (without peer-to-peer signalling between the MME and the UE) which 
are active on the network side, but are indicated by the UE as being inactive. If a default EPS bearer context is marked 
as inactive in the EPS bearer context status IE included in the TRACKING AREA UPDATE REQUEST message, and 
this defaut bearer is not associated with the last PDN of the user in the MME, the MME shall locally deactivate all EPS 
bearer contexts associated to the PDN connection with the default EPS bearer context without peer-to-peer ESM 
signalling to the UE. 

If the EPS bearer context status IE is included in the TRACKING AREA UPDATE REQUEST, the MME shall include 
an EPS bearer context status IE in the TRACKING AREA UPDATE ACCEPT message, indicating which EPS bearer 
contexts are active in the MME. 
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If an EPS bearer context status IE is included in the TRACKING AREA UPDATE ACCEPT message, the UE shall 
deactivate all those EPS bearers contexts locally (without peer-to-peer signalling between the UE and the MME) which 
are active in the UE, but are indicated by the MME as being inactive. 



[TS 24.301, clause 6.4.4.3] 

Upon receipt of the DEACTIVATE EPS BEARER CONTEXT REQUEST message, the UE shall delete the EPS bearer 
context identified by the EPS bearer identity. After deactivating the identified EPS bearer context, the UE shall respond 
to the MME with the DEACTIVATE EPS BEARER CONTEXT ACCEPT. 

If the EPS bearer identity indicated in the DEACTIVATE EPS BEARER CONTEXT REQUEST is that of the default 
bearer to a PDN, the UE shall delete all EPS bearer contexts associated to the PDN. After deactivating all EPS bearer 
contexts, the UE shall respond to the MME with the DEACTIVATE EPS BEARER CONTEXT ACCEPT. 

Upon sending the DEACTIVATE EPS BEARER CONTEXT ACCEPT message, the UE shall enter the state BEARER 
CONTEXT INACTIVE 

If the PTI is included in the DEACTIVATE EPS BEARER CONTEXT REQUEST message, the UE uses the PTI to 
identify the UE requested bearer resource modification procedure or UE requested PDN disconnect procedure to which 
the EPS bearer context deactivation is related (see subclause 6.5.4). 

If the PTI is included in the DEACTIVATE EPS BEARER CONTEXT REQUEST message, the UE shall release the 
traffic flow aggregate description associated to the PTI value provided. 



[TS 24.301, clause 7.3.2] 



The following UE procedures shall apply for handling an unknown, erroneous, or unforeseen EPS bearer identity 
received in the header of an ESM message: 

i) If the UE receives a DEACTIVATE EPS BEARER CONTEXT REQUEST message which includes an 

unassigned or reserved EPS bearer identity value or an assigned EPS bearer identity value that does not match an 
existing EPS bearer context, the UE shall respond with a DEACTIVATE EPS BEARER CONTEXT ACCEPT 
message with the EPS bearer identity set to the received EPS bearer identity. 



[TS 24.301, clause 6.4.4.6] 

The UE and the MME deactivate EPS bearer contexts locally without peer-to-peer ESM signalling in the following 

cases: 

1) during the service request procedure, if the E-UTRAN fails to establish the user plane radio bearers for one or 
more EPS bearer contexts e.g. due to radio access control; 

. . .For those cases, based on the indication from the lower layers, the UE and the MME shall locally deactivate the EPS 
bearer contexts for which no user plane radio bearers are set up. 



When the user plane radio bearer for a default EPS bearer context is not established during the service request 
procedure or tracking area updating procedure with "active" flag, the UE shall locally deactivate all EPS bearer contexts 
associated to the PDN connection with the default EPS bearer context. The MME shall locally deactivate all EPS bearer 
contexts associated to the PDN connection with the default EPS bearer context without peer-to-peer ESM signalling to 
the UE. 
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10.4.1.3 Test description 

10.4.1.3.1 Pre-test conditions 

System Simulator: 

Cell A and Cell B are configured according to Table 6.3.2.2-1 in [18]. 

- Cell A, Cell B (home PLMN, different TAs). 
UE: 
None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18] on Cell 1. 
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10.4.1.3.2 



Test procedure sequence 

Table 10.4.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


- 


Cell A is the serving cell 
Cell B is a suitable cell 


- 


- 


- 


- 


1 


Cause the UE to request connectivity to an 
additional PDN (see Note 1) 


- 


- 


- 


- 


la 


The UE transmits a SERVICE REQUEST 


-> 


SERVICE REQUEST 


- 


- 


2 


The UE transmits a PDN CONNECTIVITY 
REQUEST message as specified to request an 
additional PDN. 


-> 


PDN CONNECTIVITY REQUEST 






3 


The SS transmits an ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message with IE EPS Bearer Identity set to 
new EPS bearer context. 

Note: the SS allocates a PDN address of a 
PDN type which is compliant with the PDN 
type requested by the UE. 


<- 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST 






4 


The UE transmits an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 
as specified. 


-> 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT ACCEPT 






5 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST relative 
to the additional PDN. 

Note: the same PDN address is applicable 
because the linked EPS bearer ID refers to the 
default EBC allocated in step 3. 


<~ 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






6 


The UE transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT ACCEPT message 
as specified. 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 






7 


The SS releases the RRC connection. 


- 


- 


- 


- 


8 


Cause the UE to transmit data to the additional 
PDN (see Note 1). 


- 


- 


- 


- 


9 


The UE transmits the SERVICE REQUEST 
message in order to transmit data to the 
additional PDN. 


-> 


SERVICE REQUEST 






10 


The SS transmits a DEACTIVATE EPS 
BEARER CONTEXT REQUEST including the 
EPS bearer identity of the dedicated EPS 
bearer to the additional PDN. 


<— 


DEACTIVATE EPS BEARER 
CONTEXT REQUEST 






11 


Check: Does the UE transmit a DEACTIVATE 
EPS BEARER CONTEXT ACCEPT? 


-> 


DEACTIVATE EPS BEARER 
CONTEXT ACCEPT 


1 


P 


12 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST relative 
to the additional PDN. 

Note: the same PDN address is applicable 
because the linked EPS bearer ID refers to the 
default EBC allocated in step 3. 


<- 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






13 


The UE transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT ACCEPT message 
as specified. 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 






14 


The SS transmits a DEACTIVATE EPS 
BEARER CONTEXT REQUEST including the 
EPS bearer identity of the default EPS bearer 
to the additional PDN. 


<- 


DEACTIVATE EPS BEARER 
CONTEXT REQUEST 






15 


Check: Does the UE transmit a DEACTIVATE 
EPS BEARER CONTEXT ACCEPT? 
(see Note 3) 


— > 


DEACTIVATE EPS BEARER 
CONTEXT ACCEPT 


2 


P 


16 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message including the 
EPS bearer identity of the dedicated EPS 
bearer. This message is included in a 


<- 


MODIFY EPS BEARER 
CONTEXT REQUEST 
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DLInformationTransfer message. 










17 


Check: Does UE transmits a MODIFY EPS 
BEARER CONTEXT REJECT message with 
ESIVI cause #43? (see Note 4) 


-> 


MODIFY EPS BEARER 
CONTEXT REJECT 


2 


P 


18 


The SS transmits a DEACTIVATE EPS 
BEARER CONTEXT REOUEST that does not 
point an existing EPS bearer context. 


<- 


DEACTIVATE EPS BEARER 
CONTEXT REQUEST 






19 


Checl<: Does the UE transmit a DEACTIVATE 
EPS BEARER CONTEXT ACCEPT? 


-> 


DEACTIVATE EPS BEARER 
CONTEXT ACCEPT 


3 


P 


20 


The SS releases the RRC connection. 


- 


- 


- 


- 


21 


Cause the UE to request connectivity to an 
additional PDN (see note 1) 


- 


- 


- 


- 


21a 


The UE transmits a SERVICE REQUEST 


~> 


SERVICE REQUEST 


- 


- 


22 


The UE transmits a PDN CONNECTIVITY 
REQUEST message as specified to request an 
additional PDN. 


~> 


PDN CONNECTIVITY REQUEST 






23 


The SS transmits an ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message with IE EPS Bearer Identity set to 
new EPS bearer context. 


<- 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST 






24 


The UE transmit an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 
as specified. 


-> 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT ACCEPT 






25 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST relative 
to additional PDN. 

Note: the same PDN address is applicable 
because the linked EPS bearer ID refers to the 
default EBC allocated in step 3. 


<- 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






26 


The UE transmit an ACTIVATE DEDICATED 
EPS BEARER CONTEXT ACCEPT message 
as specified. 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 






27 


The SS releases the RRC connection. 


- 


- 


- 


- 


28 


Cause the UE to transmit data to the additional 
PDN (see Note 1). 


- 


- 


- 


- 


29 


The UE transmits SERVICE REQUEST 
message in order to transmit data to the 
additional PDN 


-> 


SERVICE REQUEST 






30 


The SS performs a radio bearer establishment 
procedure. (Note 2) 

The RRCConnectionReconfiguration message 
doesn't include the EPS bearer ID of the 
additional PDN. 










31 


Check: Does UE transmit a 
RRCConnectionReconfigurationComplete 
message? (Note 2) 






4 


P 


32 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message including the 
EPS bearer identity of the default EPS bearer 
to the additional PDN. This message is 
included in a DLInformationTransfer message. 


<— 


MODIFY EPS BEARER 
CONTEXT REQUEST 






32 
A 


Check: Does UE transmits a MODIFY EPS 
BEARER CONTEXT REJECT message with 
ESM cause #43?(see Note 3) 


-> 


MODIFY EPS BEARER 
CONTEXT REJECT 


4 


P 


32 
B 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message including the 
EPS bearer identity of the dedicated EPS 
bearer. 


<— 


MODIFY EPS BEARER 
CONTEXT REQUEST 






32 
C 


Check: Does UE transmits a MODIFY EPS 
BEARER CONTEXT REJECT message with 
ESM cause #43? (see Note 4) 


-> 


MODIFY EPS BEARER 
CONTEXT REJECT 


4 


P 


33 


The SS releases the RRC connection. 


- 


- 


- 


- 


34 


Cause the UE to request connectivity to an 


- 


- 


- 


- 
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additional PDN (see note 1) 










34a 


The UE transmits a SERVICE REQUEST 


-> 


SERVICE REQUEST 


- 


- 


35 


The UE transmits a PDN CONNECTIVITY 
REQUEST message as specified to request an 
additional PDN. 


-> 


PDN CONNECTIVITY REQUEST 






36 


The SS transmits an ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message with IE EPS Bearer Identity set to 
new EPS bearer context. 

Note: SS allocates a PDN address of a PDN 
type which is compliant with the PDN type 
requested by the UE. 


<- 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST 






37 


The UE transmits an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message 
as specified. 


-> 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT ACCEPT 






38 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST relative 
to additional PDN. 

Note: the same PDN address is applicable 
because the linked EPS bearer ID refers to the 
default EBC allocated in step 3. 


<- 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






39 


The UE transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT ACCEPT message 
as specified. 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 






40 


The SS releases the RRC connection. 


- 


- 


- 


- 


41 


Cell A is a suitable cell 
Cell B is the serving cell 


- 


- 


- 


- 


42 


The UE transmit a TRACKING AREA UPDATE 
REQUEST message as specified on Cell B. 


~> 


TRACKING AREA UPDATE 
REQUEST 






43 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT indicating only one EPS 
bearer (default EBId-1) active in the EPS 
bearer context status IE. 

Note: 

The EPS bearer ID linked to the additional 

PDN is deactivated by SS. 


<— 


TRACKING AREA UPDATE 
ACCEPT 






43 
A 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message including the 
EPS bearer identity of the default EPS bearer 
to the additional PDN. This message is 
included in a DLInformationTransfer message. 


<- 


MODIFY EPS BEARER 
CONTEXT REQUEST 






43 
B 


Check: Does UE transmits a MODIFY EPS 
BEARER CONTEXT REJECT message with 
ESM cause #43?(see Note 3) 


-> 


MODIFY EPS BEARER 
CONTEXT REJECT 


4 


P 


43 
C 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message including the 
EPS bearer identity of the dedicated EPS 
bearer. This message is included in a 
DLInformationTransfer message. 


<— 


MODIFY EPS BEARER 
CONTEXT REQUEST 






43 
D 


Check: Does UE transmits a MODIFY EPS 
BEARER CONTEXT REJECT message with 
ESM cause #43? (see Note 4) 


-> 


MODIFY EPS BEARER 
CONTEXT REJECT 


4 


P 


44 


The SS releases the RRC connection. 


- 


- 


- 


- 


45 


Cause the UE to transmit data to the additional 
PDN (see note 1). 


- 


- 


- 


- 


46 


Check: Does the UE transmit SERVICE 
REQUEST and data to additional PDN? 


-> 


SERVICE REQUEST 


4 


F 


Note 1 : The request of connectivity to an additional PDN and the sending of data may be performed by IVIIVII or AT 

command. 
Note 2: After a correct SERVICE REQUEST is received then the SS performs the Radio Bearer Establishment 

procedure. The UE transmission of the RRCConnectionReconfigurationComplete message indicates the 

completion of the radio bearer establishment procedure and that the UE has changed EMM mode from 

EMM-IDLE to EMM-CONNECTED. 
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Note 3: It can be confirmed that the additional default EPS bearer has been deactivated by UE. 
Note 4: It can be confirmed that the dedicated EPS bearer has been deactivated by UE. 



10.4.1 .3.3 Specific message contents 

Table 10.4.1.3.3-1: Message PDN CONNECTIVITY REQUEST (step 2, 22 and 35, Table 10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-20 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


0000 


No EPS bearer 
identity assigned 




Procedure transaction identity 


PTI-1 


UE assigns a 
particular PTI not 
yet used between 
1 and 254 




ESIVI information transfer flag 


Not present 


This IE is only 
used during an 
attach procedure. 




Access point name 


APN-1 (New PDN name) 


The requested 
PDN is different 
from default PDN 





Table 10.4.1.3.3-2: Message ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST (step 3, 23 and 

36, Table 10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-6 and table 4.6.1-8 with condition UIVI-DRB-ADD(2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


SS assigns an 
additional EPS 
Bearer Id different 
from default EPS 
Bearer Id between 
5 and 15. 




Procedure transaction identity 


PTi-1 


SS re-uses the 
particular PTI 
defined by UE for 
this present 
additional PDN 
connectivity 
request 
procedure. 




Access point name 


APN-1 


SS re-uses the 
particular APN 
defined by UE for 
this present 
additional PDN 
connectivity 
request procedure 





Table 10.4.1.3.3-3: Message ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT (step 4, 24 and 

37, Table 10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-4 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


Same value as in 

ACTIVATE 

DEFAULT EPS 

BEARER 

CONTEXT 

REOUEST 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 
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Table 10.4.1.3.3-4: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST (step 5, 12, 

25 and 38, Table 10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-3 and table 4.6.1-8 with condition UIVI-DRB-ADD(3) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


7 


SS assigns a 
dedicated bearer 
Id different from 
default EBId and 
additional EBId 
and between 5 
and 15. 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 




Linked EPS bearer identity 


Default EBId-2 (same 
value like in table 
10.4.1.3.3-2) 






EPS QoS 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 


SS defines an 
additional 
dedicated EPS 
QoS 




TFT 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 







Table 10.4.1.3.3-5: Message ACTIVATE DEDICATED EPS BEARER CONTEXT ACCEPT (step 6, 13, 26 

and 39, Table 10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 


Information Element 


Value/Remarl< 


Comment 


Condition 


EPS bearer identity 


7 


Same value as in 

ACTIVATE 

DEDICATED EPS 

BEARER 

CONTEXT 

REQUEST in step 

5 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 





Table 10.4.1.3.3-6: Message DEACTIVATE EPS BEARER CONTEXT REQUEST (step 10, Table 

10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-12 and table 4.6.1-8 with condition DRB-REL(3) 


Information Element 


Value/Remarl< 


Comment 


Condition 


EPS bearer identity 


7 


Same value as in 

ACTIVATE 

DEDICATED EPS 

BEARER 

CONTEXT 

REQUEST of step 

5 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 




ESIVI cause 


00100100 


regular 
deactivation 




Protocol configuration options 


Not present 







ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1425 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



Table 10.4.1.3.3-7: Message DEACTIVATE EPS BEARER CONTEXT ACCEPT (step 11, Table 

10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


7 


Same value as in 

ACTIVATE 

DEDICATED EPS 

BEARER 

CONTEXT 

REOUEST of step 

5 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 





Table 10.4.1.3.3-8: Message DEACTIVATE EPS BEARER CONTEXT REQUEST (step 14, Table 

10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-12 and table 4.6.1-8 with condition DRB-REL(2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


Default EBId-2 


Same value as in 

ACTIVATE 

DEFAULT EPS 

BEARER 

CONTEXT 

REOUESTofstep 

3 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 




ESM cause 


00100100 


regular 
deactivation 




Protocol configuration options 


Not present 







Table 10.4.1.3.3-9: Message DEACTIVATE EPS BEARER CONTEXT ACCEPT (step 15, Table 

10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


Same value as in 

ACTIVATE 

DEFAULT EPS 

BEARER 

CONTEXT 

REOUEST of step 

3 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 
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Table 10.4.1. 3.3-9b: Message MODIFY EPS BEARER CONTEXT REQUEST (step 16, Table 10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 6 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


7 


Dedicated EPS 
bearer context 
which should have 
been deactivated 




Procedure transaction identity 





"No procedure 
transaction 
identity assigned" 




TFT 


According to reference 
dedicated EPS bearer 
context #2 except for II- 1 
operation code - see [1 8] 


SS modifies the 
current packet 
filters of the 
dedicated EPS 
bearer context. 




TFT operation code 


Replace packet filters in 
existing 1 1- 1 







Table 10.4.1.3.3-10: Message DEACTIVATE EPS BEARER CONTEXT REQUEST (step 18, Table 

10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-12 and table 4.6.1-8 with condition DRB-REL(2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


This value does 
not refer to an 
existing EPS 
bearer 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 




ESM cause 


00100100 


regular 
deactivation 




Protocol configuration options 


Not present 







Table 10.4.1.3.3-11 : Message DEACTIVATE EPS BEARER CONTEXT ACCEPT (step 19, Table 

10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


Same value as in 
DEACTIVATE 
EPS BEARER 
CONTEXT 
REOUEST of step 
16 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 
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Table 10.4.1. 3.3-11 a: Message RRCConnectionReconfiguration (step 30, Table 10. 4.1.3.2-1) 

Derivation path: 36.508 table 4.6.1-8 with condition SRB2-DRB(0, 1) 

Table 10.4.1.3.3-12: Message MODIFY EPS BEARER CONTEXT REQUEST (step 32 and 43A, Table 

10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 6 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


SS assigns the 
additional default 
EPS bearer 
context which isn't 
present. 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 





Table 10.4.1.3.3-13: Message MODIFY EPS BEARER CONTEXT REJECT (step 32A and 43B, Table 

10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 4 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


Same value as in 
MODIFY EPS 
BEARER 
CONTEXT 
REOUEST 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 




ESIVI cause 


00101011 


invalid EPS 
bearer identity 





Table 10.4.1.3.3-14: Message MODIFY EPS BEARER CONTEXT REQUEST (step 16, 32B and 43C, 

Table 10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 6 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


7 


SS assigns the 
dedicated EPS 
bearer context 
which isn't 
present. 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 
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Table 10.4.1.3.3-15: Message MODIFY EPS BEARER CONTEXT REJECT (step 17, 32C and 43D, Table 

10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-14 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


7 


Same value as in 
MODIFY EPS 
BEARER 
CONTEXT 
REOUEST 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 




ESIVI cause 


00101011 


invalid EPS 
bearer identity 





Table 10.4.1.3.3-16: Message TRACKING AREA UPDATE REQUEST (step 42, Table 10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer context status 


optional 


This IE may be 
present 




EPS bearer context status IE! 


57 






Length of EPS bearer context status contents 


4 


4 octets 




EBI(0)-EBI{4) 









EBI(5)-EBI{7) 


1 


EPS bearer 
contexts activated 
in preamble, step 
36 and step 38. 




EBI(8)-EBI(15) 










Table 10.4.1.3.3-17: Message TRACKING AREA UPDATE ACCEPT (step 43, Table 10.4.1.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer context status 


present 


TheSS 

deactivates the 
EPS bearer Id of 
the additional 
PDN given at step 
30. 




EPS bearer context status IE! 


57 






Length of EPS bearer context status contents 


4 


4 octets 




EBI(0)-EBI(4) 









EBI(5) 


1 


EPS bearer 
contexts activated 
in preamble 




EBI(6)-EBI{15) 










10.5 
10.5.1 

10.5.1.1 

(1) 



UE requested PDN connectivity 

UE requested PDN connectivity accepted by tine network 

Test Purpose (TP) 



with { UE in EMM-REGISTERED state and EMM- IDLE mode } 
ensure that { 

when { UE has uplink signalling pending } 

then { UE establishes the RRC connection with the RRC establishmentCause set to 'mo-Data' and 
sends a SERVICE REQUEST message } 
} 
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(2) 

with { UE is in EMM-REGISTERED mode } 
ensure that { 

when { UE is triggered to request connectivity to an additional PDN } 

then { the UE transmits a PDN CONNECTIVITY REQUEST message with the request type set to "initial 
request" and including APN } 
} 

(3) 

with { UE has sent a PDN CONNECTIVITY REQUEST message } 
ensure that { 

when { UE receives an RRCConnectionReconf iguration message including an ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST message with IE Procedure transaction identity matching the PDN CONNECTIVITY 
REQUEST message and an ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message linked to the EPS 
bearer context activated in the first message} 

then { UE transmits an ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT message and an ACTIVATE 
DEDICATED EPS BEARER CONTEXT ACCEPT message both containing the EPS bearer identity and enters EMM- 
REGISTERED state } 
} 

10.5.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 5.3.3.1, 
5.6.1.1, 5.6.1.2, 5.6.1.4, 6.2.2, 6.4.1.3, 6.4.2.3, 6.5.1.2 and Annex D, and TS 25.331 clause 5.3.3.3. 

[TS 24.301 clause 5.3.1.1] 

When the UE is in EMM-IDLE mode and needs to transmit an initial NAS message, the UE shall request the lower 
layer to establish a RRC connection. In this request to the lower layer the NAS shall provide to the lower layer the RRC 
establishment cause and the call type as specified in annex D of this specification. 



[TS 24.301 clause 5.6.1.1] 

The UE shall invoke the service request procedure when: 

c) the UE, in EMM-IDLE mode, has uplink signalling pending; 

[TS 24.301 clause 5.6.1.2] 

If the UE has pending uplink data or uplink signalling in EMM-IDLE mode to be transmitted or it responds to paging 
with CN domain indicator set to "PS", the UE initiates the service request procedure by sending a SERVICE REQUEST 
message to the MME, starts the timer T3417, and enters the state EMM-SERVICE-REQUEST-INITIATED. 

[TS 24.301 clause 5.6.1.4] 

For cases a, b, c and h in subclause 5.6.1.1, the UE shall treat the indication from the lower layers that the user plane 
radio bearer is set up as successful completion of the procedure. The UE shall stop the timer T3417 and enter the state 
EMM-REGISTERED. 

Upon successful completion of the procedure, the UE shall stop the timer T3417 and enter the state EMM- 
REGISTERED. 

[TS 24.301, Annex D] 
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Table D.1.1 : Mapping of NAS procedure to establishment cause and call type 



NAS procedure 


RRC establishment cause (according 3GPP TS 36.331 [22]) 


Call type 








Service Request 


If a SERVICE REQUEST is to request user plane radio 
resources, the RRC establishment cause shall be set to MO 
data. (See Notel) 


"originating calls" 


If a SERVICE REQUEST is to request resources for UL 
signalling, the RRC establishment cause shall be set to MO 
data. (See Note 1 ) 


"originating calls" 


If a SERVICE REQUEST is a response to paging where the CN 
domain indicator is set to "PS", the RRC establishment cause 
shall be set to MT access. (See Note 1) 


"terminating calls" 


If a EXTENDED SERVICE REQUEST has service type set to 
"mobile originating CS fallback or IxCS fallback", the RRC 
establishment cause shall be set to MO data. (See Notel). 


"originating calls" 


If a EXTENDED SERVICE REQUEST has service type set to 
"mobile terminating CS fallback or IxCS fallback", the RRC 
establishment cause shall be set to MT access. (See Notel). 


"terminating calls" 


If a EXTENDED SERVICE REQUEST has service type set to 
"mobile originating CS fallback emergency call or IxCS fallback 
emergency call", the RRC establishment cause shall be set to 
Emergency call. 
(See Notel). 


"emergency calls" 








Note 1 : For these NAS procedures initiated by UEs of access class 12, 13 or 14 in their home country, the RRC 
establishment cause will be set to "High priority access AC 1 1 - 15". For this purpose the home country is 
defined as the country of the MCC part of the IIVISI, see 3GPP TS 22.01 1 [1 A]. 

For these NAS procedures initiated by UE of access class 11 or 1 5 in their HPLMN (if the EHPLMN list is 
not present or is empty) or EHPLMN (if the EHPLIVIN list is present), the RRC establishment cause will be 
set to "High priority access AC 1 1 - 15". 



[TS 36.331, clause 5.3.3.3] 

The UE shall set the contents of RRCConnectionRequest message as follows: 
1> set the ue-Identity as follows: 

2> if upper layers provide an S-TMSI: 

3> set the ue-Identity to the value received from upper layers; 
2> else: 

3> draw a random value in the range .. 2'**'-l and set the ue-Identity to this value; 
NOTE 1 : Upper layers provide the S-TMSI if the UE is registered in the TA of the current cell. 
1> set the establishmentCause in accordance with the information received from upper layers; 
The UE shall submit the RRCConnectionRequest message to lower layers for transmission. 

[TS 24.301, clause 6.2.2] 

The UE shall set the PDN type IE in the PDN CONNECTIVITY REQUEST message, based on its IP stack 
configuration as follows: 

a) A UE, which is IPv6 and IPv4 capable and 
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has not been allocated an IP address for this APN, shall set the PDN type IE to IPv4v6. 

has been allocated an IPv4 address for this APN and received the ESM cause #52 "single address bearers 
only allowed", and is requesting an IPv6 address, shall set the PDN type IE to IPv6. 

has been allocated an IPv6 address for this APN and received the ESM cause #52 "single address bearers 
only allowed", and is requesting an IPv4 address, shall set the PDN type IE to IPv4. 

b) A UE, which is only IPv4 capable, shall set the PDN type IE to IPv4. 

c) A UE, which is only IPv6 capable, shall set the PDN type IE to IPv6. 

d) When the IP version capability of the UE is unknown in the UE (as in the case when the MT and TE are 
separated and the capability of the TE is not known in the MT), the UE shall set the PDN type IE to IPv4v6. 



[TS 24.301, clause 6.4.1.3] 

Upon receipt of the ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST message, the UE shall send an 
ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT message and enter the state BEARER CONTEXT 
ACTIVE. When the default bearer is activated as part of the attach procedure, the UE shall send the ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT message together with ATTACH COMPLETE message. When the 
default bearer is activated as the response to the stand-alone PDN CONNECTIVITY REQUEST message, the UE shall 
send the ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT message alone. 

The UE checks the PTI in the ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST message to identify the 
UE requested PDN connectivity procedure to which the default bearer context activation is related (see subclause 6.5.1). 



[TS 24.301, clause 6.4.2.3] 

Upon receipt of the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message, the UE shall first 
check the received TFT before taking it into use. Then the UE shall send an ACTIVATE DEDICATED EPS BEARER 
CONTEXT ACCEPT message and enter the state BEARER CONTEXT ACTIVE. The ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT message shall include the EPS bearer identity. 

The hnked EPS bearer identity included in the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST 

message indicates to the UE to which default bearer, IP address and PDN the dedicated bearer is linked. 

If the PTI is included in the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message, the UE uses 
the PTI to identify the UE requested bearer resource allocation procedure or the UE requested bearer resource 
modification procedure to which the dedicated bearer context activation is related. 

If the PTI is included in the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message and the PTI is 
associated to a UE requested bearer resource allocation procedure or a UE requested bearer resource modification 
procedure, the UE shall release the traffic flow aggregate description associated to the PTI value provided. 

The UE shall use the received TFT to apply mapping of uplink traffic flows to the radio bearer if the TFT contains 
packet filters for the uplink direction. 



[TS 24.301, clause 6.5.1.2] 



In order to request connectivity to a PDN using the default APN, the UE includes the access point name IE in the PDN 
CONNECTIVITY REQUEST message or, when applicable, in the ESM INFORMATION RESPONSE message, 
according to the following conditions: 

if use of a PDN using the default APN requires PAP/CHAP, then the UE should include the access point name 
IE; and 

in all other conditions, the UE need not include the access point name IE. 
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In order to request connectivity to an additional PDN, the UE shall send a PDN CONNECTIVITY REQUEST message 
including a requested APN to the MME, start timer T3482 and enter the state PROCEDURE TRANSACTION 
PENDING (see example in figure 6.5.1.2.1). In the PDN type information element the UE shall indicate the IP version 
capability of the IP stack associated with the UE as specified in subclause 6.4.1 

The UE shall set the request type to "initial request" when the UE is establishing connectivity to a PDN for the first 
time, i.e. when it is an initial attach to that PDN. The UE shall set the request type to "handover" when the connectivity 
to a PDN is established upon handover from a non-3GPP access network and the UE was connected to that PDN before 
the handover to the 3GPP access network. 



10.5.1.3 Test description 

10.5.1.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
UE: 

None. 

Preamble: 

- The UE is in state Registered, Idle mode (state 2) according to [18]. 
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10.5.1.3.2 



Test procedure sequence 

Table 10.5.1.3.2-1: Main Behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


lUlessage 






1 


Cause tlie UE to request connectivity to an 
additional PDN (see Note) 


- 


- 


- 


- 


la 


Check: Does UE transmit an 
RRCConnectionRequest message with 
establishmentCause set to 'mo-Data' followed 
by a SERVICE REQUEST message? 


-> 


SERVICE REQUEST 


1 


P 


2 


Check: Does the UE transmit a PDN 
CONNECTIVITY REQUEST message as 
specified to request an additional PDN? 


-> 


PDN CONNECTIVITY REQUEST 


2 


P 


3 


The SS transmits an ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message with IE EPS Bearer Identity set to 
new EPS bearer context and ACTIVATE 
DEDICATED EPS BEARER CONTEXT 
REQUEST message with IE Linked EPS 
bearer identity set to the new EPS bearer 
context.. 

Note: 

ACTIVATE DEFAULT EPS BEARER 
CONTEXT REQUEST and ACTIVATE 
DEDICATED EPS BEARER CONTEXT 
REQUEST are included in 
dedicatedlnfoNASList of 
RRCConnectionReconfiguration message. 


<— 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST 

ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 








EXCEPTION: In parallel with step 4 below, the 
test steps in the parallel behaviour in table 
10.5.1.3.2-2 is taking place 










4 


Check: Does the UE transmit an ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message for the additional default EPS 
Bearer? 


-> 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT ACCEPT 


3 


P 


5 


Void 










6 


Void 










7 


The SS releases the RRC connection. 


- 


- 


- 


- 


Note: The request of connectivity to an additional PDN may be performed by IVIIVII or AT command. 



Table 10.5.1.3.2-2: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 




U-S 


Message 


1 


Check: Does the UE transmit an ACTIVATE 
DEDICATED EPS BEARER CONTEXT 
ACCEPT message for the dedicated EPS 
Bearer? 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 


3 


P 
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10.5.1.3.3 Specific message contents 

Table 10.5.1.3.3-0: Message RRCConnectionRequest {step la, Table 10.5.1.3.2-1) 



Derivation path: 36.508 table 4.6.1-16 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionRequest ::= SEQUENCE { 
criticalExtensions CHOICE { 
rrcConnectionRequest-r8 SEQUENCE { 
establishmentCause 
} 
} 
} 


mo-Data 







Table 10.5.1.3.3-1: Message PDN CONNECTIVITY REQUEST (step 2, Table 10.5.1.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-20 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


0000 


No EPS bearer 
identity assigned 




Procedure transaction identity 


PTI-1 


UE assigns a 
particular PTI not 
yet used between 
and 255 




ESIVI information transfer flag 


Not present 


This IE is only 
used during an 
attach procedure. 




Access point name 


APN-1 (New PDN name) 


The requested 
PDN is different 
from default PDN 





Table 10.5.1.3.3-1a: Message RRCConnectionReconfiguration (step 3, Table 10.5.1.3.2-1) 



Derivation path: 36.508 table 4.6.1-8 using condition DRB(0,2) 


Information Element 


Value/Remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 
criticalExtensions CHOICE { 
c1 CHOICE! 
rrcConnectionReconfiguratlon-r8 SEQUENCE { 
dedicatedlnfoNASList SEQUENCE { 
dedicatedlnfoNAS[1] 
dedicated lnfoNAS[2] 
} 
} 
} 
} 
} 


2 entries 

See table 10.5.1.3.3-2 

See table 10.5.1.3.3-3 
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Table 10.5.1.3.3-2: Message ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST (step 3, Table 

10.5.1.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-6 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


6 






Procedure transaction identity 


PTI-1 


SS re-uses the 
particular PTI 
defined by UE for 
this present 
additional PDN 
connectivity 
request 
procedure. 




Access point name 


APN-1 


SS re-uses the 
particular APN 
defined by UE for 
this present 
additional PDN 
connectivity 
request procedure 





Table 10.5.1.3.3-3: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST (step 3, Table 

10.5.1.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-3 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


7 






Procedure transaction identity 





No procedure 
transaction 
identity assigned 




Linked EPS bearer identity 


6 






EPS QoS 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 


SS defines an 
additional 
dedicated EPS 
QoS 




TFT 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 







Table 10.5.1.3.3-4: Message ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT (step 4, Table 

10.5.1.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-4 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


6 






Procedure transaction identity 





No procedure 
transaction 
identity assigned 





Table 10.5.1.3.3-5: Message ACTIVATE DEDICATED EPS BEARER CONTEXT ACCEPT (step 6, Table 

10.5.1.3.2-2) 



Derivation Path: TS 36.508 Table 4.7.3-1 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


7 






Procedure transaction identity 





No procedure 
transaction 
identity assigned 
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10.5.2 Void 

1 0.5.3 UE requested PDN connectivity not accepted 

10.5.3.1 Test Purpose (TP) 
(1) 

with { the UE has sent a PDN CONNECTIVITY REQUEST message to an additional PDN } 
ensure that { 

when { the UE receives an PDN CONNECTIVITY REJECT message with PTI matching the PDN CONNECTIVITY 
REQUEST message and including a ESM cause value } 

then { the UE enters the state PROCEDURE TRANSACTION INACTIVE } 

} 

10.5.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 6.2.2, 
6.4.1.3, 6.4.2.3 and 6.5.1.2. 

[TS 24.301, clause 6.2.2] 

The UE shall set the PDN type IE in the PDN CONNECTIVITY REQUEST message, based on its IP stack 
configuration as follows: 

a) A UE, which is IPv6 and IPv4 capable and 

has not been allocated an IP address for this APN, shall set the PDN type IE to IPv4v6. 

has been allocated an IPv4 address for this APN and received the ESM cause #52 "single address bearers 
only allowed", and is requesting an IPv6 address, shall set the PDN type IE to IPv6. 

has been allocated an IPv6 address for this APN and received the ESM cause #52 "single address bearers 
only allowed", and is requesting an IPv4 address, shall set the PDN type IE to IPv4. 

b) A UE, which is only IPv4 capable, shall set the PDN type IE to IPv4. 

c) A UE, which is only IPv6 capable, shall set the PDN type IE to IPv6. 

d) When the IP version capability of the UE is unknown in the UE (as in the case when the MT and TE are 
separated and the capability of the TE is not known in the MT), the UE shall set the PDN type IE to IPv4v6. 



[TS 24.301, clause 6.5.1.2] 



In order to request connectivity to an additional PDN, the UE shall send a PDN CONNECTIVITY REQUEST message 
including a requested APN to the MME, start timer T3482 and enter the state PROCEDURE TRANSACTION 
PENDING (see example in figure 6.5.1.2.1). In the PDN type information element the UE shall indicate the IP version 
capability of the IP stack associated with the UE as specified in subclause 6.4. 1 

The UE shall set the request type to "initial request" when the UE is establishing connectivity to a PDN for the first 
time, i.e. when it is an initial attach to that PDN. The UE shall set the request type to "handover" when the connectivity 
to a PDN is established upon handover from a non-3GPP access network and the UE was connected to that PDN before 
the handover to the 3GPP access network. 



[TS 24.301, clause 6.5.1.4] 



Upon receipt of the PDN CONNECTIVITY REJECT message, the UE shall stop timer T3482 and enter the state 
PROCEDURE TRANSACTION INACTIVE. 
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The PDN CONNECTIVITY REJECT message contains an ESM cause IE that typically indicates one of the following 

ESM cause values: 

#8: operator determined barring; 

#26: insufficient resources; 

#27: missing or unknown APN; 

#28: unknown PDN type; 

#29: user authentication failed; 

#30: request rejected by Serving GW or PDN GW; 

#3 1 : request rejected, unspecified; 

#32: service option not supported; 

#33: requested service option not subscribed; 

#34: service option temporarily out of order; 

#35: PTI already in use; 

#38: network failure; 

#50: PDN type IPv4 only allowed; 

#5 1 : PDN type IPv6 only allowed; 

#53: ESM information not received; 

#54: PDN connection does not exist; 

#55: multiple PDN connections for a given APN not allowed; 

#95 -111: protocol errors; 

#1 12: APN restriction value incompatible with active EPS bearer context. 
10.5.3.3 Test description 

10.5.3.3.1 Pre-test conditions 

System Simulator: 

- Cell A. 
UE: 
None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18] (1 default EPS bearer context is active). 
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10.5.3.3.2 



Test procedure sequence 

Table 10.5.3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Cause the UE to request connectivity to an 
additional PDN (see Note) 


- 


- 


- 


- 


1a 


The UE transmits a SERVICE REQUEST 


-> 


SERVICE REQUEST 


- 


- 


2 


The UE transmit a PDN CONNECTIVITY 
REQUEST message as specified to request an 
additional PDN. 


-> 


PDN CONNECTIVITY REQUEST 






3 


The SS transmits a PDN CONNECTIVITY 
REJECT message. 


<- 


PDN CONNECTIVITY REJECT 


- 


- 


4 


Void 


- 


- 


- 


- 


5 


Void 


- 


- 


- 


- 


6 


The SS releases the RRC connection. 


- 


- 


- 


- 


7 


Cause the UE to request connectivity to an 
additional PDN (see Note) 


- 


- 


- 


- 


8 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


9 


The SS establishes a DRB associated with the 
default EPS bearer context activated during 
the preamble. 










8 


Check: Does the UE transmit a PDN 
CONNECTIVITY REQUEST? 


-> 


PDN CONNECTIVITY REQUEST 


1 


P 


9 


The SS transmits an ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message. 


<- 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST 






10 


Check: Does the UE transmit an ACTIVATE 
DEFAULT EPS BEARER CONTEXT ACCEPT 
message? 


-> 


ACTIVATE D FAULT EPS 
BEARER CONTEXT ACCEPT 


1 


P 


Note: The request of connectivity to an additional PDN may be performed by IVIMI or AT command. 



10.5.3.3.3 Specific message contents 

Table 10.5.3.3.3-1: Message PDN CONNECTIVITY REQUEST (step 2, table 10.5.3.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-20 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


0000 


No EPS bearer 
identity assigned 




Procedure transaction identity 


PTI-1 


UE assigns a 
particular PTI not 
yet used between 
1 and 254 




ESM information transfer flag 


Not present 


This IE is only 
activable during 
an attach 
procedure. 




Access point name 


APN-1 (New PDN name) 


The requested 
PDN is different 
from default PDN 
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Table 10.5.3.3.3-2: Message PDN CONNECTIVITY REJECT (step 3, table 10.5.3.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-19 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


0000 


No EPS bearer 
identity assigned 




Procedure transaction identity 


PTI-1 


The SS indicates 
the same value 
like received in 
the PDN 
CONNECTIVITY 
REQUEST 




ESM cause 


01101111 


"Protocol error, 
unspecified" 




Protocol configuration options 


Not present 







Table 10.5.3.3.3-3: Void 
Table 10.5.3.3.3-4: Message PDN CONNECTIVITY REQUEST (step 8, table 10.5.3.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-20 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


0000 


No EPS bearer 
identity assigned 




Procedure transaction identity 


PTI-2 


UE assigns a 
particular PTI not 
yet used between 
1 and 254 (may 
be identical to 
PTI-1) 




ESIVI information transfer flag 


Not present 


This IE is only 
activable during 
an attach 
procedure. 




Access point name 


APN-2 (New PDN name) 


The requested 
PDN is different 
from default PDN 
(may be identical 
toAPN-1) 





Table 10.5.3.3.3-5: Message ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST (step 10, table 

10.5.3.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-6 and table 4.6.1-8 with condition AM-DRB-ADD(2) 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


6 






Procedure transaction identity 


PTI-2 


SS re-uses the 
particular PTI 
defined by UE for 
this present 
additional PDN 
connectivity 
request 
procedure. 




Access point name 


APN-2 


SS re-uses the 
particular APN 
defined by UE for 
this present 
additional PDN 
connectivity 
request procedure 
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Table 10.5.3.3.3-6: Message ACTIVATE DEDICATED EPS BEARER CONTEXT ACCEPT (step 10, table 

10.5.3.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 


Same value as in 

ACTIVATE 

DEDICATED EPS 

BEARER 

CONTEXT 

REQUEST 




Procedure transaction identity 





"No procedure 
transaction 
Identity assigned" 





10.6 UE requested PDN disconnect 

1 0.6.1 UE requested PDN disconnect procedure accepted by tine network 



10.6.1.1 



(1) 



Test Purpose (TP) 



with { UE is in BEARER CONTEXT ACTIVE STATE state } 
ensure that { 

when { UE is triggered to disconnect from a PDN } 

then { UE sends a PDN DISCONNECT REQUEST message including the default EPS bearer identity 
associated with this PDN } 
} 

(2) 

with { UE is in PROCEDURE TRANSACTION PENDING state } 
ensure that { 

when { UE receives a DEACTIVATE EPS BEARER CONTEXT REQUEST message with any valid ESM cause } 

then { UE deactivates the default EPS bearer context for this PDN connection between the UE and 
the SS ) 



10.6.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 6.5.2.2, and 
6.5.2.4. 

[TS 24.301, clause 6.5.2.2] 

In order to request PDN disconnection from a PDN, the UE shall send a PDN DISCONNECT REQUEST message to 
the MME, start the timer T3492 and enter the state PROCEDURE TRANSACTION PENDING (see example in 
figure 6.5.2.2.1). The PDN DISCONNECT REQUEST message shall include the EPS bearer identity of the default 
bearer associated with the PDN to disconnect from as the linked EPS bearer identity in the PDN DISCONNECT 
REQUEST message. 

[TS 24.301, clause 6.5.2.3] 



Upon receipt of the DEACTIVATE EPS BEARER CONTEXT REQUEST message, the UE shall stop the timer T3492 
and enter the state PROCEDURE TRANSACTION INACTIVE. The behaviour of the UE is described in 

subclause 6.4.4. 



[TS 24.301, clause 6.4.4.2] 

If a NAS signalling connection exists when the MME initiates the EPS bearer context deactivation procedure, the MME 
shall initiate the EPS bearer context deactivation procedure by sending a DEACTIVATE EPS BEARER CONTEXT 
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REQUEST message to the UE, start the timer T3495, and enter the state BEARER CONTEXT INACTIVE PENDING 
(see example in figure 6.4.4.2.1). The DEACTIVATE EPS BEARER CONTEXT REQUEST message contains an ESM 
cause typically indicating one of the following: 

#8: operator determined barring; 

#36: regular deactivation; 

#38: network failure; or 

#1 12: APN restriction value incompatible with active EPS bearer context. 

The procedure transaction identity (PTI) shall also be included if the deactivation is triggered by a UE initiated bearer 
resource modification procedure or UE requested PDN disconnect procedure. 

10.6.1.3 Test description 

10.6.1.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18] on Cell A. 

Two default EPS bearer context are activated and present on UE side (a first PDN obtained during the attach 
procedure and an additional PDN). 



10.6.1.3.2 



Test procedure sequence 

Table 10.6.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request disconnection from 
the additional PDN (see Note 1) 


- 


- 


- 


- 


la 


The UE transmits a SERVICE REQUEST 


-> 


SERVICE REQUEST 


- 


- 


2 


Check: Does the UE transmit a PDN 
DISCONNECT REQUEST message as 
specified (to disconnect from the additional 
PDN)? 


-> 


PDN DISCONNECT REQUEST 


1 


P 


3 


The SS transmits a DEACTIVATE EPS 
BEARER CONTEXT REQUEST message 
included in an RRCConnectionReconfiguration 
message. 


<- 


DEACTIVATE EPS BEARER 
CONTEXT REQUEST 






4 


The UE transmits a DEACTIVATE EPS 
BEARER CONTEXT ACCEPT message. 


-> 


DEACTIVATE EPS BEARER 
CONTEXT ACCEPT 


2 


P 


5 


Void 










5a 


The SS releases the RRC connection. 


- 


- 


- 


- 


Note 1 : The request to disconnect from a PDN may be performed by MMI or AT command. 
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10.6.1.3.3 Specific message contents 

Table 10.6.1.3.3-1: Message PDN DISCONNECT REQUEST (step 2, Table 10.6.1.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-22 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


'0000' 


"no EPS bearer 
identity assigned" 




Procedure transaction identity 


PTI-1 


UE assigns a 
particular PTI not 
yet used between 
1 and 254 




Linked EPS bearer identity 


6 







Table 10.6.1. 3.3-1a: Message RRCConnectionReconfiguration (step 3, Table 10.6.1.3.2-1) 

Derivation path: 36.508 table 4.6.1-8 using condition DRB-REL(2) 

Table 10.6.1.3.3-2: Message DEACTIVATE EPS BEARER CONTEXT REQUEST (step 3, Table 

10.6.1.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-12 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


6 


SS re-uses the 
EPS Bearer Id 
defined by UE for 
this present PDN 
disconnection 
procedure. 




Procedure transaction identity 


PTI-1 


SS re-uses the 
particular PTI 
defined by UE for 
this present PDN 
disconnection 
procedure. 


UE- 
INITIATED 


ESIVI cause 


#36 


regular 
deactivation 





Table 10.6.1.3.3-3: Message DEACTIVATE EPS BEARER CONTEXT ACCEPT (step 4, Table 10.6.1.3.2- 

1) 



Derivation Path: TS 36.508 Table 4.7.3-1 1 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


6 


The same value 

as the value set in 

DEACTIVATE 

EPS BEARER 

CONTEXT 

REOUEST 

message. 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 





10.6.2 



10.6.2.1 



UE requested PDN disconnect procedure not accepted by the 
network 

Test Purpose (TP) 



(1) 



with { the UE is in PROCEDURE TRANSACTION PENDING state 
ensure that { 
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when { the UE receives a PDN DISCONNECT REJECT message with a cause #49: last PDN disconnection not 
allowed } 

then { the UE aborts the PDN disconnection procedure and does not deactivates the default EPS 
bearer context for this PDN connection } 



10.6.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clauses 6.5.2.2, and 
6.5.2.4. 

[TS 24.301, clause 6.5.2.2] 

In order to request PDN disconnection from a PDN, the UE shall send a PDN DISCONNECT REQUEST message to 
the MME, start the timer T3492 and enter the state PROCEDURE TRANSACTION PENDING (see example in 
figure 6.5.2.2.1). The PDN DISCONNECT REQUEST message shall include the EPS bearer identity of the default 
bearer associated with the PDN to disconnect from as the linked EPS bearer identity in the PDN DISCONNECT 
REQUEST message. 



[TS 24.301, clause 6.5.2.4] 

Upon receipt of the PDN DISCONNECT REQUEST message, if it is not accepted by the network, the MME shall send 
a PDN DISCONNECT REJECT message to the UE. The PDN DISCONNECT REJECT message shall contain the PTI 
and an ESM cause IE that typically indicates one of the following ESM cause values: 

#35: PTI already in use; 

#43: invalid EPS bearer identity; 

#49: last PDN disconnection not allowed; 

#95 -111: protocol errors. 

Upon receipt of the PDN DISCONNECT REJECT message, the UE shall stop the timer T3492, enter the state 
PROCEDURE TRANSACTION INACTIVE and abort the PDN disconnection procedure. Additionally, in all cases 
with the exception of the UE having received ESM cause #49 "last PDN disconnection not allowed", the UE shall 
deactivate all EPS bearer contexts for this PDN connection locally without peer-to-peer signalling between the UE and 
the MME. 

10.6.2.3 Test description 

10.6.2.3.1 Pre-test conditions 

System Simulator: 

- Cell A 

UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18] on Cell A. 
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10.6.2.3.2 



Test procedure sequence 

Table 10.6.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Cause the UE to request PDN disconnection 
from the default PDN (see note 1) 


- 


- 


- 


- 


- 


EXCEPTION: steps 2a1 to 2b2 describe two 
alternative behaviours allowed for the UE. 


- 


- 


- 


- 


2a1 


IF the UE transmits a SERVICE REQUEST 
within the next 10s, THEN all steps until step 
6a6 are executed. 


-> 


SERVICE REQUEST 






2a2 


The SS establishes the DRB associated with 
the default EPS bearer context activated 
during the preamble. 










2a3 


The UE transmits a PDN DISCONNECT 
REQUEST message for the default PDN 
connection. 


-> 


PDN DISCONNECT REQUEST 






2a4 


The SS transmits a PDN DISCONNECT 
REJECT message with cause #49 last PDN 
disconnection not allowed. 


<- 


PDN DISCONNECT REJECT 






2b1 


ELSE, the SS pages the UE. 


- 


- 


- 


- 


2b2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The SS tansmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST with a 
linked EPS bearer ID referring to the default 
EPS bearer context activated during the 
preamble 


<- 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






4 


Check: Does the UE transmit an ACTIVATE 
DEDICATED EPS BEARER CONTEXT 
ACCEPT message? (see Note 2) 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 


1 


P 


Note 1 : The request of disconnection to a PDN and tlie sending of data may be performed by IVIMI or AT 

command. 
Note 2: This confirms that the additional default EPS bearer has not been deactivated by UE. 



10.6.2.3.3 Specific message contents 

Table 10.6.2.3.3-1: Message PDN DISCONNECT REQUEST (step 2a3, table 10.6.2.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-22 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


'0000' 


"no EPS bearer 
identity assigned" 




Procedure transaction identity 


PTI-1 


UE assigns a 
particular PTI not 
yet used between 
1 and 254 




Linked EPS bearer identity 


6 
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Table 10.6.2.3.3-2: Message PDN DISCONNECT REJECT (step 2a4, table 10.6.2.3.2-1) 



Derivation Path: TS 36.508 Table 4.7.3-21 


Information Element 


Value/remark 


Comment 


Condition 


EPS bearer identity 


'0000' 


"no EPS bearer 
identity assigned" 




Procedure transaction identity 


PTI-1 


SS re-uses the 
particular PTI 
defined by UE for 
this present PDN 
disconnection 
procedure. 




ESIVI cause 


#49 


last PDN 

disconnection not 
allowed 





Table 10.6.2.3.3-3: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST (step 3, table 

10.6.2.3.2-1) 



Derivation path: 36.508 table 4.7.3-3 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 






Procedure transaction identity 





"No procedure 
transaction 
Identity assigned" 




Linked EPS bearer identity 


6 






EPS QoS 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 


SS defines an 
additional 
dedicated EPS 
QoS 




TFT 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 







Table 10.6.2.3.3-4: Message ACTIVATE DEDICATED EPS BEARER CONTEXT ACCEPT (step 4, Table 

10.6.2.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 






Procedure transaction identity 





"No procedure 
transaction 
identity assigned" 





10.7 
10.7.1 

10.7.1.1 
(1) 



UE requested bearer resource allocation 

UE requested bearer resource allocation accepted by the network / 
New EPS bearer context 

Test Purpose (TP) 



with { UE in PROCEDURE TRANSACTION INACTIVE state ancJ in EMM- IDLE mocJe 
ensure that { 

when { UE is requestecJ to allocate of bearer resource } 

then { UE sencJs a BEARER RESOURCE ALLOCATION REQUEST message } 



(2) 



with { UE has sent the BEARER RESOURCE ALLOCATION REQUEST message 
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ensure that { 

when { UE receives an ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message with the procedure 
transaction identity (PTI) indicated in the BEARER RESOURCE ALLOCATION REQUEST message } 
then { UE sends an ACTIVATE DEDICATED EPS BEARER CONTEXT ACCEPT message } 
} 

10.7.1.2 Conformance requirements 

References: The conformance requirements covered in tlie present TC are specified in: TS 24.301, clause 6.5.3.2 and 
6.5.3.3. 

[TS 24.301, clause 6.5.3.2] 

In order to request the allocation of bearer resources for one traffic flow aggregate, the UE shall send a BEARER 
RESOURCE ALLOCATION REQUEST message to the MME, start timer T3480 and enter the state PROCEDURE 
TRANSACTION PENDING (see example in figure 6.5.3.2.1). 

The UE shall include the EPS bearer identity of the default EPS bearer associated with the requested bearer resource in 
the Linked EPS bearer identity IE. The UE shall set the TFT operation code in the Traffic flow aggregate IE to "Create 
new TFT". In the Required traffic flow QoS IE, the UE shall indicate a QCl and, if the UE also includes a GBR, the 
additional GBR required for the traffic flow aggregate. 



[TS 24.301, clause 6.5.3.3] 



If the bearer resource allocation requested is accepted by the network, the MME shall initiate either a dedicated EPS 
bearer context activation procedure or an EPS bearer context modification procedure. Upon receipt of an ACTIVATE 
DEDICATED EPS BEARER CONTEXT REQUEST or MODIFY EPS BEARER CONTEXT REQUEST with a PTI 
which matches the value used for the BEARER RESOURCE ALLOCATION REQUEST, the UE shall stop timer 
T3480 and enter the state PROCEDURE TRANSACTION INACTIVE. 

If the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST is received, the UE shall verify that the EPS 
bearer identity given in the EPS bearer identity IE is not already used by any dedicated EPS bearer contexts associated 
with the included linked EPS bearer identity. The UE shall then proceed as described in subclause 6.4.2.3 or subclause 
6.4.2.4. 



10.7.1.3 Test description 

10.7.1.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 

A default EPS bearer is established between the first PDN and the UE. 
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10.7.1.3.2 



Test procedure sequence 

Table 10.7.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
allocation of dedicated EPS bearer associated 
with first PDN connectivity, (see Note) 










2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


Check: Does the UE transmit a BEARER 
RESOURCE ALLOCATION REOUEST 
message? 


-> 


BEARER RESOURCE 
ALLOCATION REQUEST 


1 


P 


4 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REOUEST 
message. 


<- 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






5 


Checl<: Does the UE transmit an ACTIVATE 
DEDICATED EPS BEARER CONTEXT 
ACCEPT message? 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 


2 


P 


Note: The trigger in step 1 and the RRC messages in steps 2 to 5 are the same as in the generic procedure in 
36.508 clause 6.4.3.1. 



10.7.1.3.3 Specific message contents 

Table 10.7.1.3.3-1: Message BEARER RESOURCE ALLOCATION REQUEST (step 3, Table 10.7.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-6B 


Information Element 


Value/Remark 


Comment 


Condition 


Linl<ed EPS bearer identity 


5 







Table 10.7.1.3.3-2: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST (step 4, Table 

10.7.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-3, condition UE-INITIATED and table 4.6.1-8 with condition AIVI-DRB-ADD(2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 






Linked EPS bearer identity 


5 







1 0.7.2 UE requested bearer resource allocation accepted by the network / 
Existing EPS bearer context 



10.7.2.1 



(1) 



Test Purpose (TP) 



with { UE in PROCEDURE TRANSACTION INACTIVE state and in EMM- IDLE mode } 
ensure that { 

when { UE is requested to allocate of bearer resource } 

then { UE sends a BEARER RESOURCE ALLOCATION REQUEST message } 



(2) 

with { UE has sent a BEARER RESOURCE ALLOCATION REQUEST message } 
ensure that { 

when { UE receives a MODIFY EPS BEARER CONTEXT REQUEST message with the procedure transaction 
identity (PTI) indicated in the BEARER RESOURCE ALLOCATION REQUEST message } 
then { UE sends a MODIFY EPS BEARER CONTEXT ACCEPT message } 
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10.7.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.5.3.2 and 
6.5.3.3. 

[TS 24.301, clause 6.5.3.2] 

In order to request the allocation of bearer resources for one traffic flow aggregate, the UE shall send a BEARER 
RESOURCE ALLOCATION REQUEST message to the MME, start timer T3480 and enter the state PROCEDURE 
TRANSACTION PENDING (see example in figure 6.5.3.2.1). 

The UE shall include the EPS bearer identity of the default EPS bearer associated with the requested bearer resource in 
the Linked EPS bearer identity IE. The UE shall set the TFT operation code in the Traffic flow aggregate IE to "Create 
new TFT". In the Required traffic flow QoS IE, the UE shall indicate a QCl and, if the UE also includes a GBR, the 
additional GBR required for the traffic flow aggregate. 



[TS 24.301, clause 6.5.3.3] 



If the bearer resource allocation requested is accepted by the network, the MME shall initiate either a dedicated EPS 
bearer context activation procedure or an EPS bearer context modification procedure. Upon receipt of an ACTIVATE 
DEDICATED EPS BEARER CONTEXT REQUEST or MODIFY EPS BEARER CONTEXT REQUEST with a PTI 
which matches the value used for the BEARER RESOURCE ALLOCATION REQUEST, the UE shall stop timer 
T3480 and enter the state PROCEDURE TRANSACTION INACTIVE. 



If the MODIFY EPS BEARER CONTEXT REQUEST is received, the UE verifies that the EPS bearer identity given in 
the EPS bearer identity IE is any of the active EPS bearer contexts. The UE shall then proceed as described in subclause 
6.4.3.3 or subclause 6.4.3.4. 

10.7.2.3 Test description 

10.7.2.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
UE: 

None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 

- A default EPS bearer is estabhshed between the first PDN and the UE. 
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10.7.2.3.2 



Test procedure sequence 

Table 10.7.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
allocation of dedicated EPS bearer associated 
with first PDN connectivity. (see Note) 










2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


Check: Does the UE transmit a BEARER 
RESOURCE ALLOCATION REQUEST 
message? 


-> 


BEARER RESOURCE 
ALLOCATION REQUEST 


1 


P 


4 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message. 


<- 


MODIFY EPS BEARER 
CONTEXT REQUEST 


- 


- 


5 


Check: Does the UE transmit a IVIODIFY EPS 
BEARER CONTEXT ACCEPT message? 


-> 


MODIFY EPS BEARER 
CONTEXT ACCEPT 


2 


P 


Note: The trigger in step 1 and the RRC messages in steps 2 to 5 are the same as in the generic procedure in 
36.508 clause 6.4.3.1. 



10.7.2.3.3 Specific message contents 

Table 10.7.2.3.3-1 : Message BEARER RESOURCE ALLOCATION REQUEST (step 3, Table 10.7.2.3.2-1) 



Derivation path: 36.508 table 4.7.3-6B 


Information Element 


Value/Remark 


Comment 


Condition 


Linked EPS bearer identity 


5 







Table 10.7.2.3.3-2: Message MODIFY EPS BEARER CONTEXT REQUEST (step 4, Table 10.7.2.3.2-1) 



Derivation path: 36.508 table 4.7.3-18, condition UE-INITIATED and table 4.6.1-8 with condition AM-DRB-ADD(I) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


5 






New EPS QoS 


According to reference 
default EPS bearer 
context #2 except for QCI 
-see [18] 






QCI 


'0000 01 01 'B 


5 

(non-GBR QCI) 





10.7.3 



10.7.3.1 



UE requested bearer resource allocation not accepted by the 
network 

Test Purpose (TP) 



(1) 



with { UE has sent the BEARER RESOURCE ALLOCATION REQUEST message } 
ensure that { 

when { UE receives a BEARER RESOURCE ALLOCATION REJECT message with the procedure transaction 
identity (PTI) indicated in the BEARER RESOURCE ALLOCATION REQUEST message and a cause "Protocol 
error, unspecified" } 

then { UE enters state PROCEDURE TRANSACTION INACTIVE } 



10.7.3.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.5.3.4 and 
7.3.1. 

[TS 24.301, clause 6.5.3.4] 
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If the bearer resource allocation requested cannot be accepted by the network, the MME shall send a BEARER 
RESOURCE ALLOCATION REJECT message to the UE. The message shall contain the PTI and an ESM cause value 
indicating the reason for rejecting the UE requested bearer resource allocation. 

The ESM cause value typically indicates one of the following: 

#26: insufficient resources; 

#30: request rejected by Serving GW or PDN GW; 

#3 1 : request rejected, unspecified; 

#32: service option not supported; 

#33: requested service option not subscribed; 

#34: service option temporarily out of order; 

#35: PTI already in use; 

#37: EPS QoS not accepted; 

#41: semantic error in the TFT operation; 

#42: syntactical error in the TFT operation; 

#43: invalid EPS bearer identity; 

#44: semantic error(s) in packet filter(s); 

#45: syntactical error(s) in packet filter(s); 

#56: collision with network initiated request; 

#59: unsupported QCI value; or 

#95 -111: protocol errors. 

Upon receipt of a BEARER RESOURCE ALLOCATION REJECT message, the UE shall stop the timer T3480, release 
the traffic flow aggregate description associated to the PTI value, and enter the state PROCEDURE TRANSACTION 
INACTIVE. 

The further actions to be performed by the UE are implementation dependent as part of upper layers responsibility. 

[TS 24.301, clause 7.3.1] 



The following UE procedures shall apply for handling an unknown, erroneous, or unforeseen PTI received in an ESM 

message: 



h) If the UE receives an ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message in which the 
PTI value is an assigned value that does not match any PTI in use, the UE shall respond with an ACTIVATE 
DEDICATED EPS BEARER CONTEXT REJECT message including ESM cause #47 "PTI mismatch". 



10.7.3.3 Test description 

10.7.3.3.1 Pre-test conditions 

System Simulator: 
- Cell A 
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UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 

A default EPS bearer is established between the first PDN and the UE. 
1 0.7.3.3.2 Test procedure sequence 

Table 10.7.3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
allocation of dedicated EPS bearer associated 
with first PDN connectivity. (see Note) 










2 


The UE transmits a SERVICE REQUEST 
message. 


~> 


SERVICE REQUEST 


- 


- 


3 


The UE transmits a BEARER RESOURCE 
ALLOCATION REOUEST message. 


-> 


BEARER RESOURCE 
ALLOCATION REQUEST 


- 


- 


4 


The SS transmits a BEARER RESOURCE 
ALLOCATION REJECT message. 


<- 


BEARER RESOURCE 
ALLOCATION REJECT 


- 


- 


5 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REOUEST 
message. 


<~ 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






6 


Check: Does the UE transmit an ACTIVATE 
DEDICATED EPS BEARER CONTEXT 
REJECT message? 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REJECT 


1 


P 


Note: The trigger in step 1 and the RRC messages in steps 2 to 6 are the same as in the generic procedure in 
36.508 clause 6.4.3.1. 



10.7.3.3.3 Specific message contents 

Table 10.7.3.3.3-1: Message BEARER RESOURCE ALLOCATION REQUEST (step 3, Table 10.7.3.3.2-1) 



Derivation path: 36.508 table 4.7.3-6B 


Information Element 


Value/Remark 


Comment 


Condition 


Linked EPS bearer identity 


5 






Table 10.7.3.3.3-2: Message BEARER RESOURCE ALLOCATION REJECT (step 4, Table 10.7.3.3.2-1) 


Derivation path: 36.508 table 4.7.3-6A 


Information Element 


Value/Remark 


Comment 


Condition 


ESM cause 


'01101111'B 


Protocol error, 
unspecified 





Table 10.7.3.3.3-3: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST (step 5, Table 

10.7.3.3.2-1) 



Derivation path: 36.508 table 4.7.3-3 and table 4.6.1-8 with condition AI\/1-DRB-ADD(2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 






Procedure transaction identity 


The same value as the 
value set in BEARER 
RESOURCE 
ALLOCATION 
REOUEST message in 
step 3. 






Linked EPS bearer identity 


5 
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Table 10.7.3.3.3-4: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REJECT (step 6, Table 

10.7.3.3.2-1) 



Derivation path: 36.508 table 4.7.3-2 


Information Element 


Value/Remark 


Comment 


Condition 


ESIVI cause 


'0010 1111'B 


PTI mismatch 





1 0.7.4 UE requested bearer resource allocation / Expiry of timer T3480 



10.7.4.1 



(1) 



Test Purpose (TP) 



with { UE has sent a BEARER RESOURCE ALLOCATION REQUEST message } 
ensure that { 

when { UE detects less than fifth expiry of timer T3480 } 

then { UE re-sends a BEARER RESOURCE ALLOCATION REQUEST message 



(2) 

with { UE has sent the BEARER RESOURCE ALLOCATION REQUEST message 5 times } 
ensure that { 

when { UE detects fifth expiry of timer T3480 } 

then { UE does not re- send a BEARER RESOURCE ALLOCATION REQUEST message } 



10.7.4.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.5.3.2 and 
6.5.3.5. 

[TS 24.301, clause 6.5.3.2] 

In order to request the allocation of bearer resources for one traffic flow aggregate, the UE shall send a BEARER 
RESOURCE ALLOCATION REQUEST message to the MME, start timer T3480 and enter the state PROCEDURE 
TRANSACTION PENDING (see example in figure 6.5.3.2.1). 



[TS 24.301, clause 6.5.3.5] 

a) Expiry of timer T3480: 

On the first expiry of the timer T3480, the UE shall resend the BEARER RESOURCE ALLOCATION 
REQUEST and shall reset and restart timer T3480. This retransmission is repeated four times, i.e. on the fifth 
expiry of timer T3480, the UE shall abort the procedure, release the PTI allocated for this activation and enter 
the state PROCEDURE TRANSACTION INACTIVE. 



10.7.4.3 Test description 

10.7.4.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
UE: 

None. 
Preamble: 

- The UE is in state Registered, Idle mode (state 2) according to [18]. 
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A default EPS bearer is established between the first PDN and the UE. 
1 0.7.4.3.2 Test procedure sequence 

Table 10.7.4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
allocation of dedicated EPS bearer associated 
with first PDN connectivity. (see Note) 










2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The UE transmits a BEARER RESOURCE 
ALLOCATION REOUEST message. 


-> 


BEARER RESOURCE 
ALLOCATION REQUEST 


- 


- 


4 


Wait for 8 s to ensure that T3480 expires (1^' 
expiry). 


- 


- 


- 


- 


5 


Check: Does the UE re-transmit a BEARER 
RESOURCE ALLOCATION REQUEST 
message? 


-> 


BEARER RESOURCE 
ALLOCATION REQUEST 


1 


P 


6 


Wait for 8 s to ensure that T3480 expires (2™ 
expiry). 


- 


- 


- 


- 


7 


Check: Does the UE re-transmit a BEARER 
RESOURCE ALLOCATION REQUEST 
message? 


-> 


BEARER RESOURCE 
ALLOCATION REQUEST 


1 


P 


8 


Wait for 8 s to ensure that T3480 expires (3™ 
expiry). 


- 


- 


- 


- 


9 


Check: Does the UE re-transmit a BEARER 
RESOURCE ALLOCATION REQUEST 
message? 


-> 


BEARER RESOURCE 
ALLOCATION REQUEST 


1 


P 


10 


Wait for 8 s to ensure that T3480 expires (4'" 
expiry). 


- 


- 


- 


- 


11 


Check: Does the UE re-transmit a BEARER 
RESOURCE ALLOCATION REQUEST 
message? 


-> 


BEARER RESOURCE 
ALLOCATION REQUEST 


1 


P 


12 


Wait for 8 s to ensure that T3480 expires (5'" 
expiry). 


- 


- 


- 


- 


13 


Check: Does the UE re-transmit a BEARER 
RESOURCE ALLOCATION REQUEST 
message? 


-> 


BEARER RESOURCE 
ALLOCATION REQUEST 


2 


F 


Note: The trigger in step 1 and the RRC messages in steps 2 to 13 are the same as in the generic procedure in 
36.508 clause 6.4.3.1. 



10.7.4.3.3 



Specific message contents 



Table 10.7.4.3.3-1: Message BEARER RESOURCE ALLOCATION REQUEST (step 3,5,7,9,11, Table 

10.7.4.3.2-1) 



Derivation path: 36.508 table 4.7.3-6B 


Information Element 


Value/Remark 


Comment 


Condition 


Linked EPS bearer identity 


5 







10.7.5 



10.7.5.1 



UE requested bearer resource allocation / BEARER RESOURCE 
ALLOCATION REJECT message including cause #43 "invalid EPS 
bearer identity" 

Test Purpose (TP) 



(1) 



with { UE has sent the BEARER RESOURCE ALLOCATION REQUEST message in order to establish dedicated 
EPS bearer between the additional PDN and the UE } 
ensure that { 

when { UE receives a BEARER RESOURCE ALLOCATION REJECT message with the procedure transaction 
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identity (PTI) indicated in the BEARER RESOURCE ALLOCATION REQUEST message and a cause "invalid EPS 
bearer identity" } 

then { UE deactivates the EPS bearer context (s) corresponding to the additional PDN locally } 
} 

10.7.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.5.1.1, 
6.5.1.3, 6.5.3.4 and 6.5.3.5. 

[TS 24.301, clause 6.5.1.1] 

The purpose of the UE requested PDN connectivity procedure is for a UE to request the setup of a default EPS bearer to 
a PDN. The UE requests connectivity to a PDN by sending a PDN CONNECTIVITY REQUEST message to the 
network. If accepted by the network, this procedure initiates the establishment of a default EPS bearer context. The 
procedure is used either to establish the first default bearer by including the PDN CONNECTIVITY REQUEST 
message into the initial attach message, or to establish subsequent default bearers to additional PDNs in order to allow 
the UE simultaneous access to multiple PDNs by sending the message stand-alone. 

[TS 24.301, clause 6.5.1.3] 



If connectivity with the requested PDN is accepted by the network, the MME shall initiate the default EPS bearer 
context activation procedure (see subclause 6.4.1). 



[TS 24.301, clause 6.5.3.4] 

If the bearer resource allocation requested cannot be accepted by the network, the MME shall send a BEARER 
RESOURCE ALLOCATION REJECT message to the UE. The message shall contain the PTI and an ESM cause value 
indicating the reason for rejecting the UE requested bearer resource allocation. 

The ESM cause value typically indicates one of the following: 



#43: invalid EPS bearer identity; 

Upon receipt of a BEARER RESOURCE ALLOCATION REJECT message, the UE shall stop the timer T3480, release 
the traffic flow aggregate description associated to the PTI value, and enter the state PROCEDURE TRANSACTION 
INACTIVE. 

The further actions to be performed by the UE are implementation dependent as part of upper layers responsibility. 

[TS 24.301, clause 6.5.3.5] 

The following abnormal cases can be identified: 

b) Unknown EPS bearer context 

Upon receipt of the BEARER RESOURCE ALLOCATION REJECT message including ESM cause #43 
"invalid EPS bearer identity", the UE shall deactivate the existing default EPS bearer context locally without 
peer-to-peer signalling between the UE and the MME. 

10.7.5.3 Test description 

10.7.5.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
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UE: 

None. 

Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [18]. 

A default EPS bearer is established between the first PDN and the UE. 
1 0.7.5.3.2 Test procedure sequence 

Table 10.7.5.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request connectivity to an 
additional PDN. (see Note 1) 


- 


- 


- 


- 


2 


The UE transmits a SERVICE REQUEST 
message. 


-> 


SERVICE REQUEST 


- 


- 


3 


The UE transmits a PDN CONNECTIVITY 
REQUEST message. 


-> 


PDN CONNECTIVITY REQUEST 


- 


- 


4 


The SS transmits an ACTIVATE DEFAULT 
EPS BEARER CONTEXT REQUEST 
message. 


<— 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT REQUEST 






5 


The UE transmits an ACTIVATE DEFAULT 
EPS BEARER CONTEXT ACCEPT message. 


-> 


ACTIVATE DEFAULT EPS 
BEARER CONTEXT ACCEPT 


- 


- 


6 


Cause the UE to request bearer resource 
allocation of dedicated EPS bearer associated 
with additional PDN connectivity, (see Note 2) 










7 


The UE transmits a BEARER RESOURCE 
ALLOCATION REQUEST message. 


-> 


BEARER RESOURCE 
ALLOCATION REQUEST 


- 


- 


8 


The SS transmits a BEARER RESOURCE 
ALLOCATION REJECT message. 


<~ 


BEARER RESOURCE 
ALLOCATION REJECT 


- 


- 


9 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST 
message. 


<~ 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






10 


Check: Does the UE transmit an ACTIVATE 
DEDICATED EPS BEARER CONTEXT 
REJECT message? 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REJECT 


1 


P 


Note 1 : The trigger in step 1 and the RRC messages in steps 2 to 5 are the same as in the generic procedure in 
36.508 clause 6.4.3.2. 

Note 2: The trigger in step 6 and the RRC messages in steps 7 to 10 are the same as in the generic procedure in 
36.508 clause 6.4.3.1. 



10.7.5.3.3 Specific message contents 

Table 10.7.5.3.3-1: Message PDN CONNECTIVITY REQUEST (step 3, Table 10.7.5.3.2-1) 



Derivation path: 36.508 table 4.7.3-20 


Information Element 


Value/Remark 


Comment 


Condition 


ESM information transfer flag 


Not present 






Access point name 


Arbitrary name 


different from first 
PDN 





Table 10.7.5.3.3-2: Message ACTIVATE DEFAULT EPS BEARER CONTEXT REQUEST (step 4, Table 

10.7.5.3.2-1) 



Derivation path: 36.508 table 4.7.3-6 and table 4.6.1-8 with condition AIV1-DRB-ADD(2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 
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Table 10.7.5.3.3-3: Message ACTIVATE DEFAULT EPS BEARER CONTEXT ACCEPT (step 5, Table 

10.7.5.3.2-1) 



Derivation path: 36.508 table 4.7.3-4 | 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 






Table 10.7.5.3.3-4: Message BEARER RESOURCE ALLOCATION REQUEST (step 7, Table 10.7.5.3.2-1) 


Derivation path: 36.508 table 4.7.3-6B | 


Information Element 


Value/Remark 


Comment 


Condition 


Linked EPS bearer identity 


6 






Table 10.7.5.3.3-5: Message BEARER RESOURCE ALLOCATION REJECT (step 8, Table 10.7.5.3.2-1) 


Derivation path: 36.508 table 4.7.3-6A | 


Information Element 


Value/Remark 


Comment 


Condition 


ESIVI cause 


'0010 1011'B 


Invalid EPS 
bearer identity 





Table 10.7.5.3.3-6: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST (step 9, Table 

10.7.5.3.2-1) 



Derivation path: 36.508 table 4.7.3-3 with condition NETWORK-INITIATED and table 4.6.1-8 with condition AIVI-DRB- 
ADD(3) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


7 






Linked EPS bearer identity 


6 







Table 10.7.5.3.3-7: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REJECT (step 10, Table 

10.7.5.3.2-1) 



Derivation path: 36.508 table 4.7.3-2 


Information Element 


Value/Remark 


Comment 


Condition 


ESM cause 


'0010 1011'B 


invalid EPS 
bearer identity 





10.8 
10.8.1 

10.8.1.1 
(1) 



UE requested bearer resource modification 

UE requested bearer resource modification accepted by tiie network 
/ New EPS bearer context 

Test Purpose (TP) 



with { UE in PROCEDURE TRANSACTION INACTIVE state and in EMM-CONNECTED mode } 
ensure that { 

when { UE is requested to modify of bearer resource corresponding to the dedicated bearer } 
then { UE sends a BEARER RESOURCE MODIFICATION REQUEST message } 
} 

(2) 

with { UE having sent the BEARER RESOURCE MODIFICATION REQUEST message } 
ensure that { 

when { UE receives an ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message with the procedure 
transaction identity (PTI) indicated in the BEARER RESOURCE MODIFICATION REQUEST message } 
then { UE sends an ACTIVATE DEDICATED EPS BEARER CONTEXT ACCEPT message } 
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10.8.1.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.4.2.3, 
6.5.4.2 and 6.5.4.3. 

[TS 24.301, clause 6.4.2.3] 



The Hnked EPS bearer identity included in the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST 
message indicates to the UE to which default bearer, IP address and PDN the dedicated bearer is linked. 

If the PTl is included in the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message, the UE uses 
the PTl to identify the UE requested bearer resource allocation procedure or the UE requested bearer resource 
modification procedure to which the dedicated bearer context activation is related. 



[TS 24.301, clause 6.5.4.2] 

In order to request the modification of bearer resources for one traffic flow aggregate, the UE shall send a BEARER 
RESOURCE MODIFICATION REQUEST message to the MME, start timer T3481 and enter the state PROCEDURE 
TRANSACTION PENDING (see example in figure 6.5.3.2.1). 



[TS 24.301, clause 6.5.4.3] 

Upon receipt of the BEARER RESOURCE MODIFICATION REQUEST message, the MME checks whether the 
resources requested by the UE can be established, modified or released by verifying the EPS bearer identity given in the 
EPS bearer identity for packet filter IE. 

If the bearer resource modification requested is accepted by the network, the MME shall initiate either a dedicated EPS 
bearer context activation procedure, an EPS bearer context modification procedure or an EPS bearer context 
deactivation procedure. 

Upon receipt of an ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST, MODIFY EPS BEARER 
CONTEXT REQUEST or DEACTIVATE EPS BEARER CONTEXT REQUEST with a PTl which matches the value 
used for the BEARER RESOURCE MODIFICATION REQUEST, the UE shall stop timer T3481 and enter the state 
PROCEDURE TRANSACTION INACTIVE. 

i) If the ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST is received, the UE shall verify that the 
EPS bearer identity given in the EPS bearer identity IE is not already used by any dedicated EPS bearer contexts 
associated with the included linked EPS bearer identity. The UE shall then proceed as described in 
subclause 6.4.2.3 or subclause 6.4.2.4. 



10.8.1.3 Test description 

10.8.1.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
UE: 

None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

- A default EPS bearer and a dedicated bearer are established between the first PDN and the UE. 
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10.8.1.3.2 



Test procedure sequence 

Table 10.8.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
modification of dedicated EPS bearer 
associated with first PDN connectivity. (see 
Note) 










2 


Checl<: Does the UE transmit a BEARER 
RESOURCE MODIFICATION REQUEST 
message? 


-> 


BEARER RESOURCE 
MODIFICATION REQUEST 


1 


P 


3 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REOUEST 
message. 


<~ 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






4 


Check: Does the UE transmit an ACTIVATE 
DEDICATED EPS BEARER CONTEXT 
ACCEPT message? 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT ACCEPT 


2 


P 


Note: The trigger in step 1 and the RRC messages in steps 2 to 4 are the same as in the generic procedure in 
36.508 clause 6.4.2.13. 



10.8.1.3.3 



Specific message contents 



Table 10.8.1.3.3-1 : Message ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST (step 3, Table 

10.8.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-3, condition UE-INITIATED and table 4.6.1-8 with condition AM-DRB-ADD(3) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


7 






EPS QoS 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 






TFT 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 







10.8.2 UE requested bearer resource modification accepted by tine networl< 
/ Existing EPS bearer context 



10.8.2.1 



(1) 



Test Purpose (TP) 



with { UE in PROCEDURE TRANSACTION INACTIVE state and in EMM-CONNECTED mode } 
ensure that { 

when { UE is requested to modify of bearer resource corresponding to the dedicated bearer } 
then { UE sends a BEARER RESOURCE MODIFICATION REQUEST message } 
} 

(2) 

with { UE having sent the BEARER RESOURCE MODIFICATION REQUEST message } 
ensure that { 

when { UE receives a MODIFY EPS BEARER CONTEXT REQUEST message with the procedure transaction 
identity (PTI) indicated in the BEARER RESOURCE MODIFICATION REQUEST message } 
then { UE sends a MODIFY EPS BEARER CONTEXT ACCEPT message } 



10.8.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.5.4.2, 
6.5.4.3 and 6.4.3.3. 

[TS 24.301, clause 6.5.4.2] 
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In order to request the modification of bearer resources for one traffic flow aggregate, the UE shall send a BEARER 
RESOURCE MODIFICATION REQUEST message to the MME, start timer T3481 and enter the state PROCEDURE 
TRANSACTION PENDING (see example in figure 6.5.3.2.1). 



[TS 24.301, clause 6.5.4.3] 

Upon receipt of the BEARER RESOURCE MODIFICATION REQUEST message, the MME checks whether the 
resources requested by the UE can be established, modified or released by verifying the EPS bearer identity given in the 
EPS bearer identity for packet filter IE. 

If the bearer resource modification requested is accepted by the network, the MME shall initiate either a dedicated EPS 
bearer context activation procedure, an EPS bearer context modification procedure or an EPS bearer context 
deactivation procedure. 

Upon receipt of an ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST, MODIFY EPS BEARER 
CONTEXT REQUEST or DEACTIVATE EPS BEARER CONTEXT REQUEST with a PTI which matches the value 
used for the BEARER RESOURCE MODIFICATION REQUEST, the UE shall stop timer T3481 and enter the state 
PROCEDURE TRANSACTION INACTIVE. 



ii) If the MODIFY EPS BEARER CONTEXT REQUEST is received, the UE verifies that the EPS bearer identity 
given in the EPS bearer identity IE is any of the active EPS bearer contexts. The UE shall then proceed as 
described in subclause 6.4.3.3 or subclause 6.4.3.4. 



[TS 24.301, clause 6.4.3.3] 



If the PTI is included in the MODIFY EPS BEARER CONTEXT REQUEST message, the UE uses the PTI to identify 
the UE requested bearer resource allocation procedure or the UE requested bearer resource modification procedure to 
which the EPS bearer context modification is related (see subclause 6.5.3 and subclause 6.5.4). 

If the PTI is included in the MODIFY EPS BEARER CONTEXT REQUEST message and the PTI is associated to a UE 
requested bearer resource allocation procedure or a UE requested bearer resource modification procedure, the UE shall 
release the traffic flow aggregate description associated to the PTI value provided. 



10.8.2.3 Test description 

10.8.2.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
UE: 
None 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

A default EPS bearer and a dedicated bearer are established between the first PDN and the UE. 
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10.8.2.3.2 



Test procedure sequence 

Table 10.8.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
modification of dedicated EPS bearer 
associated with first PDN connectivity. (see 
Note) 










2 


Checl<: Does the UE transmit a BEARER 
RESOURCE MODIFICATION REQUEST 
message? 


-> 


BEARER RESOURCE 
MODIFICATION REQUEST 


1 


P 


3 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message. 


<— 


MODIFY EPS BEARER 
CONTEXT REQUEST 


- 


- 


4 


Check: Does the UE transmit a MODIFY EPS 
BEARER CONTEXT ACCEPT message? 


-> 


MODIFY EPS BEARER 
CONTEXT ACCEPT 


2 


P 


Note: The trigger in step 1 and the RRC messages in steps 2 to 4 are the same as in the generic procedure in 
36.508 clause 6.4.3.3. 



10.8.2.3.3 



Specific message contents 



Table 10.8.2.3.3-1: Message BEARER RESOURCE MODIFICATION REQUEST (step 2, Table 10.8.2.3.2- 

1) 



Derivation path: 36.508 table 4.7.3-8 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity for packet filter 


6 







Table 10.8.2.3.3-2: Message MODIFY EPS BEARER CONTEXT REQUEST (step 3, Table 10.8.2.3.2-1) 



Derivation path: 36.508 table 4.7.3-18, condition UE-INITIATED and table 4.6.1-8 with condition AM-DRB-ADD(2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 






New EPS QoS 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 






TFT 


According to reference 
dedicated EPS bearer 
context #2 except for 1 1- 1 
operation code - see [18] 






TFT operation code 


'100'B 


Replace packet 
filters in existing 
Ihl 





10.8.3 



10.8.3.1 



UE requested bearer resource modification not accepted by tine 
network 

Test Purpose (TP) 



(1) 



with { UE has sent the BEARER RESOURCE MODIFICATION REQUEST message } 
ensure that { 

when { UE receives a BEARER RESOURCE MODIFICATION REJECT message with the procedure transaction 
identity (PTI) indicated in the BEARER RESOURCE MODIFICATION REQUEST message and a cause "Protocol 
error, unspecified" } 

then { UE enters state PROCEDURE TRANSACTION INACTIVE } 



10.8.3.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.5.4.4 and 
7.3.1. 
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[TS 24.301, clause 6.5.4.4] 

If the bearer resource modification requested cannot be accepted by the network, the MME shall send a BEARER 
RESOURCE MODIFICATION REJECT message to the UE. The message shall contain the PTl and an ESM cause 
value indicating the reason for rejecting the UE requested bearer resource modification. 

The ESM cause value typically indicates one of the following: 

#26: insufficient resources; 

#30: request rejected by Serving GW or PDN GW; 

#3 1 : request rejected, unspecified; 

#32: service option not supported; 

#33: requested service option not subscribed; 

#34: service option temporarily out of order; 

#35: PTl already in use; 

#37: EPS QoS not accepted; 

#41: semantic error in the TFT operation; 

#42: syntactical error in the TFT operation; 

#43: invalid EPS bearer identity; 

#44: semantic error(s) in packet filter(s); 

#45: syntactical error(s) in packet filter(s); 

#56: collision with network initiated request; 

#59: unsupported QCl value; or 

#95 -111: protocol errors. 



Upon receipt of a BEARER RESOURCE MODIFICATION REJECT message, the UE shall stop the timer T3481, 
release the traffic flow aggregate description associated to the PTl value, and enter the state PROCEDURE 
TRANSACTION INACTIVE. If the ESM cause included in the BEARER RESOURCE MODIFICATION REJECT 
message is #43 "invalid EPS bearer identity", the UE locally deactivates the EPS bearer context(s) without peer-to-peer 
ESM signalling. 

The further actions to be performed by the UE are implementation dependent as part of upper layers responsibility. 



[TS 24.301, clause 7.3.1] 



The following UE procedures shall apply for handling an unknown, erroneous, or unforeseen PTl received in an ESM 

message: 



h) If the UE receives an ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST message in which the 
PTl value is an assigned value that does not match any PTl in use, the UE shall respond with an ACTIVATE 
DEDICATED EPS BEARER CONTEXT REJECT message including ESM cause #47 "PTl mismatch". 
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10.8.3.3 Test description 

10.8.3.3.1 Pre-test conditions 
System Simulator: 

- Cell A 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

A default EPS bearer and a dedicated bearer are established between the first PDN and the UE. 

1 0.8.3.3.2 Test procedure sequence 

Table 10.8.3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
modification of dedicated EPS bearer 
associated with first PDN connectivity.(see 
Note) 










2 


The UE transmits a BEARER RESOURCE 
MODIFICATION REOUEST message. 


-> 


BEARER RESOURCE 
MODIFICATION REOUEST 


- 


- 


3 


The SS transmits a BEARER RESOURCE 
MODIFICATION REJECT message. 


<— 


BEARER RESOURCE 
MODIFICATION REJECT 


- 


- 


4 


The SS transmits an ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST 
message. 


<— 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REQUEST 






5 


Check: Does the UE transmit an ACTIVATE 
DEDICATED EPS BEARER CONTEXT 
REJECT message? 


-> 


ACTIVATE DEDICATED EPS 
BEARER CONTEXT REJECT 


1 


P 


Note: The trigger in step 1 and the RRC messages in steps 2 to 5 are the same as in the generic procedure in 
36.508 clause 6.4.3.3. 



10.8.3.3.3 



Specific message contents 



Table 10.8.3.3.3-1: Message BEARER RESOURCE MODIFICATION REQUEST (step 2, Table 10.8.3.3.2- 

1) 



Derivation path: 36.508 table 4.7.3-8 | 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity for packet filter 


6 






Table 10.8.3.3.3-2: Message BEARER RESOURCE MODIFICATION REJECT (step 3, Table 10.8.3.3.2-1) 


Derivation path: 36.508 table 4.7.3-6A 


Information Element 


Value/Remark 


Comment 


Condition 


ESM cause 


'01101111'B 


Protocol error, 
unspecified 
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Table 10.8.3.3.3-3: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST (step 4, Table 

10.8.3.3.2-1) 



Derivation path: 36.508 table 4.7.3-3 and table 4.6.1-8 with condition AM-DRB-ADD(3) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


7 






Procedure transaction identity 


The same value as the 
value set in BEARER 
RESOURCE 
MODIFICATION 
REQUEST message in 
step 2. 






Linked EPS bearer identity 


5 






EPS QoS 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 






TFT 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 







Table 10.8.3.3.3-4: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REJECT (step 5, Table 

10.8.3.3.2-1) 



Derivation path: 36.508 table 4.7.3-2 


Information Element 


Value/Remark 


Comment 


Condition 


ESM cause 


'00101111'B 


PTI mismatch 





1 0.8.4 UE requested bearer resource modification / Cause #36 "regular 
deactivation" 



10.8.4.1 



(1) 



Test Purpose (TP) 



with { UE in PROCEDURE TRANSACTION INACTIVE state and in EMM-CONNECTED mode } 
ensure that { 

when { UE is requested to release of bearer resources corresponding to the dedicated bearer } 
then { UE sends a BEARER RESOURCE MODIFICATION REQUEST message with a cause "regular 
deactivation" } 
} 

(2) 

with { UE having sent the BEARER RESOURCE MODIFICATION REQUEST message } 
ensure that { 

when { UE receives a DEACTIVATE EPS BEARER CONTEXT REQUEST message with the procedure transaction 
identity (PTI) indicated in the BEARER RESOURCE MODIFICATION REQUEST message and the EPS bearer 
identity pointing an existing EPS bearer context } 

then { UE deactivates the EPS bearer context identified by the EPS bearer identity indicated in 
the DEACTIVATE EPS BEARER CONTEXT REQUEST message and sends a DEACTIVATE EPS BEARER CONTEXT ACCEPT 
message } 



10.8.4.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.5.4.3, 
6.4.4.3 and 7.3.2. 

[TS 24.301, clause 6.5.4.3] 

Upon receipt of the BEARER RESOURCE MODIFICATION REQUEST message, the MME checks whether the 
resources requested by the UE can be established, modified or released by verifying the EPS bearer identity given in the 
EPS bearer identity for packet filter IE. 
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If the bearer resource modification requested is accepted by the network, the MME shall initiate either a dedicated EPS 
bearer context activation procedure, an EPS bearer context modification procedure or an EPS bearer context 
deactivation procedure. 

Upon receipt of an ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST, MODIFY EPS BEARER 
CONTEXT REQUEST or DEACTIVATE EPS BEARER CONTEXT REQUEST with a PTI which matches the value 
used for the BEARER RESOURCE MODIFICATION REQUEST, the UE shall stop timer T3481 and enter the state 
PROCEDURE TRANSACTION INACTIVE. 



iii) If the DEACTIVATE EPS BEARER CONTEXT REQUEST is received, the UE verifies that the EPS bearer 
identity given in the EPS bearer identity IE is any of the active EPS bearer contexts associated with the included 
linked EPS bearer identity The UE shall then proceed as described in subclause 6.4.4.3. 



[TS 24.301, clause 6.4.4.3] 

Upon receipt of the DEACTIVATE EPS BEARER CONTEXT REQUEST message, the UE shall delete the EPS bearer 
context identified by the EPS bearer identity. After deactivating the identified EPS bearer context, the UE shall respond 
to the MME with the DEACTIVATE EPS BEARER CONTEXT ACCEPT. 



Upon sending the DEACTIVATE EPS BEARER CONTEXT ACCEPT message, the UE shall enter the state BEARER 
CONTEXT INACTIVE 

If the PTI is included in the DEACTIVATE EPS BEARER CONTEXT REQUEST message, the UE uses the PTI to 
identify the UE requested bearer resource modification procedure or UE requested PDN disconnect procedure to which 
the EPS bearer context deactivation is related (see subclause 6.5.4). 

If the PTI is included in the DEACTIVATE EPS BEARER CONTEXT REQUEST message, the UE shall release the 
traffic flow aggregate description associated to the PTI value provided. 



[TS 24.301, clause 7.3.2] 



The following UE procedures shall apply for handling an unknown, erroneous, or unforeseen EPS bearer identity 
received in the header of an ESM message: 



h) If the UE receives a MODIFY EPS BEARER CONTEXT REQUEST message which includes an unassigned or 
reserved EPS bearer identity value or an assigned EPS bearer identity value that does not match an existing EPS 
bearer context, the UE shall respond with a MODIFY EPS BEARER CONTEXT REJECT message including 
ESM cause #43 "invalid EPS bearer identity". 



10.8.4.3 Test description 

10.8.4.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
UE: 
None. 
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Preamble: 



The UE is in state Generic RB Established (state 3) according to [18]. 

A default EPS bearer and a dedicated bearer are established between the first PDN and the UE. 



10.8.4.3.2 



Test procedure sequence 

Table 10.8.4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
release of dedicated EPS bearer associated 
with first PDN connectivity (see Note). 










2 


Check: Does the UE transmit a BEARER 
RESOURCE MODIFICATION REQUEST 
message? 


-> 


BEARER RESOURCE 
MODIFICATION REQUEST 


1 


P 


3 


The SS transmits a DEACTIVATE EPS 
BEARER CONTEXT REOUEST message. 


<- 


DEACTIVATE EPS BEARER 
CONTEXT REOUEST 


- 


- 


4 


Check: Does the UE transmit a DEACTIVATE 
EPS BEARER CONTEXT ACCEPT message? 


-> 


DEACTIVATE EPS BEARER 
CONTEXT ACCEPT 


2 


P 


5 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message. 


<~ 


MODIFY EPS BEARER 
CONTEXT REOUEST 


- 


- 


6 


Check: Does the UE transmit a MODIFY EPS 
BEARER CONTEXT REJECT message? 


-> 


MODIFY EPS BEARER 
CONTEXT REJECT 


2 


P 


Note: The trigger in step 1 and the RRC messages in steps 2 to 6 are the same as in the generic procedure in 36.508 
clause 6.4.3.4. 



10.8.4.3.3 



Specific message contents 



Table 10.8.4.3.3-1: Message BEARER RESOURCE MODIFICATION REQUEST (step 2, Table 10.8.4.3.2- 

1) 



Derivation path: 36.508 table 4.7.3-8, condition RELEASE-REQUESTED 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity for packet filter 


6 







Table 10.8.4.3.3-2: Message DEACTIVATE EPS BEARER CONTEXT REQUEST (step 3, Table 

10.8.4.3.2-1) 



Derivation path: 36.508 table 4.7.3-12, condition UE-INITIATED 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 







Table 10.8.4.3.3-3: Message MODIFY EPS BEARER CONTEXT REQUEST (step 5, Table 10.8.4.3.2-1) 



Derivation path: 36.508 table 4.7.3-18, condition NETWORK-INITIATED and table 4.6.1-8 with condition AM-DRB- 
ADD(2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 






New EPS QoS 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 






TFT 


According to reference 
dedicated EPS bearer 
context #2 except for 1 1- 1 
operation code - see [18] 






TFT operation code 


'100'B 


Replace packet 
filters in existing 
ll-l 
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Table 10.8.4.3.3-4: Message MODIFY EPS BEARER CONTEXT REJECT (step 6, Table 10.8.4.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 7 


Information Element 


Value/Remark 


Comment 


Condition 


ESIVI cause 


'0010 1011'B 


Invalid EPS 
bearer identity 





10.8.5 



10.8.5.1 



UE requested bearer resource modification / BEARER RESOURCE 
MODIFICATION REJECT message including cause #43 "invalid 
EPS bearer identity" 

Test Purpose (IP) 



(1) 



with { UE has sent the BEARER RESOURCE MODIFICATION REQUEST message } 
ensure that { 

when { UE receives a BEARER RESOURCE MODIFICATION REJECT message with the procedure transaction 
identity (PTI) indicated in the BEARER RESOURCE MODIFICATION REQUEST message and a cause "invalid 
EPS bearer identity" } 

then { UE deactivates the EPS bearer context identified by the EPS bearer identity indicated in 
the BEARER RESOURCE MODIFICATION REQUEST message } 



10.8.5.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.5.4.4, 
6.5.4.5 and 7.3.2. 

[TS 24.301, clause 6.5.4.4] 

If the bearer resource modification requested cannot be accepted by the network, the MME shall send a BEARER 
RESOURCE MODIFICATION REJECT message to the UE. The message shall contain the PTI and an ESM cause 
value indicating the reason for rejecting the UE requested bearer resource modification. 

The ESM cause value typically indicates one of the following: 

#43: invalid EPS bearer identity; 

Upon receipt of a BEARER RESOURCE MODIFICATION REJECT message, the UE shall stop the timer T3481, 
release the traffic flow aggregate description associated to the PTI value, and enter the state PROCEDURE 
TRANSACTION INACTIVE. If the ESM cause included in the BEARER RESOURCE MODIFICATION REJECT 
message is #43 "invalid EPS bearer identity", the UE locally deactivates the EPS bearer context(s) without peer-to-peer 
ESM signalling. 

The further actions to be performed by the UE are implementation dependent as part of upper layers responsibility. 

[TS 24.301, clause 6.5.4.5] 

The following abnormal cases can be identified: 

b) Unknown EPS bearer context 

Upon receipt of the BEARER RESOURCE MODIFICATION REJECT message including ESM cause #43 
"invalid EPS bearer identity", the UE shall deactivate the existing EPS bearer context locally without peer-to- 
peer signalling between the UE and the MME. 

[TS 24.301, clause 7.3.2] 
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The following UE procedures shall apply for handling an unknown, erroneous, or unforeseen EPS bearer identity 
received in the header of an ESM message: 



h) If the UE receives a MODIFY EPS BEARER CONTEXT REQUEST message which includes an unassigned or 
reserved EPS bearer identity value or an assigned EPS bearer identity value that does not match an existing EPS 
bearer context, the UE shall respond with a MODIFY EPS BEARER CONTEXT REJECT message including 
ESM cause #43 "invalid EPS bearer identity". 



10.8.5.3 Test description 

10.8.5.3.1 Pre-test conditions 
System Simulator: 

- Cell A 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

A default EPS bearer and a dedicated bearer are established between the first PDN and the UE. 

1 0.8.5.3.2 Test procedure sequence 

Table 10.8.5.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
modification of dedicated EPS bearer 
associated with first PDN connectivity.(see 
Note) 










2 


The UE transmits a BEARER RESOURCE 
MODIFICATION REQUEST message. 


-> 


BEARER RESOURCE 
MODIFICATION REQUEST 


- 


- 


3 


The SS transmits a BEARER RESOURCE 
MODIFICATION REJECT message. 


<~ 


BEARER RESOURCE 
MODIFICATION REJECT 


- 


- 


4 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message. 


<- 


MODIFY EPS BEARER 
CONTEXT REQUEST 


- 


- 


5 


Check: Does the UE transmit a MODIFY EPS 
BEARER CONTEXT REJECT message? 


-> 


MODIFY EPS BEARER 
CONTEXT REJECT 


1 


P 


Note: The trigger in step 1 and the RRC messages in steps 2 to 5 are the same as in the generic procedure in 
36.508 clause 6.4.3.3. 



10.8.5.3.3 



Specific message contents 



Table 10.8.5.3.3-1: Message BEARER RESOURCE MODIFICATION REQUEST (step 2, Table 10.8.5.3.2- 

1) 



Derivation path: 36.508 table 4.7.3-8 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity for pacl<et filter 


6 
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Table 10.8.5.3.3-2: Message BEARER RESOURCE MODIFICATION REJECT (step 3, Table 10.8.5.3.2-1) 



Derivation path: 36.508 table 4.7.3-7 


Information Element 


Value/Remark 


Comment 


Condition 


ESIVI cause 


'0010 1011'B 


Invalid EPS 
bearer identity 





Table 10.8.5.3.3-3: Message MODIFY EPS BEARER CONTEXT REQUEST (step 4, Table 10.8.5.3.2-1) 



Derivation path: 36.508 table 4.7.3-18 and table 4.6.1-8 with condition AM-DRB-ADD{2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 






Procedure transaction identity 


The same value as the 
value set in BEARER 
RESOURCE 
MODIFICATION 
REQUEST message in 
step 2. 






New EPS QoS 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 






TFT 


According to reference 
dedicated EPS bearer 
context #2 except for 1 1- 1 
operation code - see [18] 






TFT operation code 


'100'B 


Replace packet 
filters in existing 
Ihl 





Table 10.8.5.3.3-4: Message MODIFY EPS BEARER CONTEXT REJECT (step 5, Table 10.8.5.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 7 


Information Element 


Value/Remark 


Comment 


Condition 


ESIVI cause 


'0010 1011'B 


Invalid EPS 
bearer identity 





10.8.6 



10.8.6.1 



UE requested bearer resource modification / Collision of a UE 
requested bearer resource modification procedure and EPS bearer 
context deactivation procedure 

Test Purpose (TP) 



(1) 



with { UE having sent the BEARER RESOURCE MODIFICATION REQUEST message } 
ensure that { 

when { UE receives a DEACTIVATE EPS BEARER CONTEXT REQUEST message with an unassigned PTI value 
and the EPS bearer identity indicated in the BEARER RESOURCE MODIFICATION REQUEST message } 

then { UE aborts the UE requested bearer resource modification procedure and deactivates the EPS 
bearer context identified by the EPS bearer identity indicated in DEACTIVATE EPS BEARER CONTEXT 
REQUEST message and sends a DEACTIVATE EPS BEARER CONTEXT ACCEPT message } 



10.8.6.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 6.5.4.5 and 
7.3.2. 

[TS 24.301, clause 6.5.4.5] 

The following abnormal cases can be identified: 
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c) Collision of a UE requested bearer resource modification procedure and an EPS bearer context deactivation 
procedure. 

When the UE receives a DEACTIVATE EPS BEARER CONTEXT REQUEST message during the bearer 
resource modification procedure, and the EPS bearer identity indicated in the DEACTIVATE EPS BEARER 
CONTEXT REQUEST message is a EPS bearer context the UE indicated in the UE requested bearer resource 
modification procedure, then the UE shall abort the UE requested bearer resource modification procedure and 
proceed with the EPS bearer context deactivation procedure. 

[TS 24.301, clause 7.3.2] 



The following UE procedures shall apply for handling an unknown, erroneous, or unforeseen EPS bearer identity 
received in the header of an ESM message: 



h) If the UE receives a MODIFY EPS BEARER CONTEXT REQUEST message which includes an unassigned or 
reserved EPS bearer identity value or an assigned EPS bearer identity value that does not match an existing EPS 
bearer context, the UE shall respond with a MODIFY EPS BEARER CONTEXT REJECT message including 
ESM cause #43 "invalid EPS bearer identity". 



10.8.6.3 


Test description 


10.8.6.3.1 


Pre-test conditions 


System Simulator: 




- Cell A 




UE: 




None. 




Preamble: 





The UE is in state Generic RB Established (state 3) according to [18]. 

A default EPS bearer and a dedicated bearer are established between the first PDN and the UE. 
1 0.8.6.3.2 Test procedure sequence 

Table 10.8.6.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
modification of dedicated EPS bearer 
associated with first PDN connectivity.(see 
Note) 










2 


The UE transmits a BEARER RESOURCE 
MODIFICATION REQUEST message. 


-> 


BEARER RESOURCE 
MODIFICATION REQUEST 


- 


- 


3 


The SS transmits a DEACTIVATE EPS 
BEARER CONTEXT REQUEST message. 


<~ 


DEACTIVATE EPS BEARER 
CONTEXT REQUEST 


- 


- 


4 


Check: Does the UE transmit a DEACTIVATE 
EPS BEARER CONTEXT ACCEPT message? 


-> 


DEACTIVATE EPS BEARER 
CONTEXT ACCEPT 


1 


P 


5 


The SS transmits a MODIFY EPS BEARER 
CONTEXT REQUEST message. 


<- 


MODIFY EPS BEARER 
CONTEXT REQUEST 


- 


- 


6 


Check: Does the UE transmit a MODIFY EPS 
BEARER CONTEXT REJECT message? 


-> 


MODIFY EPS BEARER 
CONTEXT REJECT 


1 


P 


Note: The trigger in step 1 and the RRC messages in steps 2 to 6 are the same as in the generic procedure in 
36.508 clause 6.4.3.3. 
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10.8.6.3.3 



Specific message contents 



Table 10.8.6.3.3-1: Message BEARER RESOURCE MODIFICATION REQUEST (step 2, Table 10.8.6.3.2- 

1) 



Derivation path: 36.508 table 4.7.3-8 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity for pacl<et filter 


6 







Table 10.8.6.3.3-2: Message DEACTIVATE EPS BEARER CONTEXT REQUEST (step 3, Table 

10.8.6.3.2-1) 



Derivation path: 36.508 table 4.7.3-12, condition NETWORK-INITIATED 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 







Table 10.8.6.3.3-3: Message MODIFY EPS BEARER CONTEXT REQUEST (step 5, Table 10.8.6.3.2-1) 



Derivation path: 36.508 table 4.7.3-18, condition NETWORK-INITIATED and table 4.6.1-8 with condition AM-DRB- 
ADD(2) 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


6 






New EPS OoS 


According to reference 
dedicated EPS bearer 
context #2 -see [18] 






TFT 


According to reference 
dedicated EPS bearer 
context #2 except for 1 1- 1 
operation code - see [18] 






TFT operation code 


'100'B 


Replace packet 
filters in existing 
Ihl 





Table 10.8.6.3.3-4: Message MODIFY EPS BEARER CONTEXT REJECT (step 6, Table 10.8.6.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 7 


Information Element 


Value/Remark 


Comment 


Condition 


ESM cause 


'0010 1011'B 


Invalid EPS 
bearer identity 





1 0.8.7 UE requested bearer resource modification / Expiry of timer T3481 

10.8.7.1 Test Purpose (TP) 

(1) 

with { UE has sent a BEARER RESOURCE MODIFICATION REQUEST message } 
ensure that { 

when { UE detects less than fifth expiry of timer T3481 } 

then { UE re-sends a BEARER RESOURCE MODIFICATION REQUEST message } 
} 

(2) 

with { UE is in EMM-REGISTERED. NO-CELL-AVAILABLE state and has deactivated the EPS bearer context 
without peer-to-peer signalling between the UE and the MME } 
ensure that { 

when { UE receives indication of "back to E-UTRAN coverage" from the lower layers } 
then { UE sends TRACKING AREA UPDATE REQUEST message } 
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10.8.7.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.301, clause 5.5.3.2.2 and 
6.5.4.5. 

[TS 24.301, clause 5.5.3.2.2] 

The UE in state EMM-REGISTERED shall initiate the tracking area updating procedure by sending a TRACKING 
AREA UPDATE REQUEST message to the MME, 



f) when the UE deactivated EPS bearer context(s) locally while in EMM-REGISTERED.NO-CELL- 
AVAILABLE, and then returns to EMM-REGISTERED.NORMAL-SERVICE; 



[TS 24.301, clause 6.5.4.5] 

The following abnormal cases can be identified: 

a) Expiry of timer T348 1 : 

On the first expiry of the timer T3481, the UE shall resend the BEARER RESOURCE MODIFICATION 
REQUEST and shall reset and restart timer T3481. This retransmission is repeated four times, i.e. on the fifth 
expiry of timer T3481, the UE shall abort the procedure, release the PTI allocated for this activation and enter 
the state PROCEDURE TRANSACTION INACTIVE. In addition, if the UE had initiated resource release for all 
the traffic flows for the bearer, it shall deactivate the EPS bearer context locally without peer-to-peer signalling 
between the UE and the MME. In order to synchronize the EPS bearer context status with the MME, on 
indication of "back to E-UTRAN coverage" from the lower layers, the UE shall send a TRACKING AREA 
UPDATE REQUEST message that includes the EPS bearer context status IE to the MME. 



10.8.7.3 Test description 

10.8.7.3.1 Pre-test conditions 

System Simulator: 

- Cell A 
UE: 
None. 
Preamble: 

The UE is in state Generic RB Established (state 3) according to [18]. 

A default EPS bearer and a dedicated bearer are established between the first PDN and the UE. 
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10.8.7.3.2 



Test procedure sequence 

Table 10.8.7.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Cause the UE to request bearer resource 
release of dedicated EPS bearer associated 
with first PDN connectivity. (see Note) 










2 


The UE transmits a BEARER RESOURCE 
MODIFICATION REOUEST message. 


-> 


BEARER RESOURCE 
MODIFICATION REQUEST 


- 


- 


3 


Wait for 8 s to ensure that T3481 expires (1^' 
expiry). 


- 


- 


- 


- 


4 


Check: Does the UE transmit a BEARER 
RESOURCE MODIFICATION REQUEST 
message? 


-> 


BEARER RESOURCE 
MODIFICATION REQUEST 


1 


P 


5 


Wait for 8 s to ensure that T3481 expires (2"" 
expiry). 


- 


- 


- 


- 


6 


Check: Does the UE transmit a BEARER 
RESOURCE MODIFICATION REQUEST 
message? 


-> 


BEARER RESOURCE 
MODIFICATION REQUEST 


1 


P 


7 


Wait for 8 s to ensure that T3481 expires (3™ 
expiry). 


- 


- 


- 


- 


8 


Check: Does the UE transmit a BEARER 
RESOURCE MODIFICATION REQUEST 
message? 


-> 


BEARER RESOURCE 
MODIFICATION REQUEST 


1 


P 


9 


Wait for 8 s to ensure that T3481 expires (4" 
expiry). 


- 


- 


- 


- 


10 


Check: Does the UE transmit a BEARER 
RESOURCE MODIFICATION REQUEST 
message? 


-> 


BEARER RESOURCE 
MODIFICATION REQUEST 


1 


P 


11 


Set the cell type of Cell A to the "Non-suitable 
"Off" cell". 


- 


- 


- 


- 


12 


Wait for 8 s to ensure that T3481 expires (5'" 
expiry). 


- 


- 


- 


- 


13 


Set the cell type of Cell A to the "Suitable cell". 


- 


- 


- 


- 


14 


Check: Does the UE transmit a TRACKING 
AREA UPDATE REOUEST message? 


-> 


TRACKING AREA UPDATE 
REQUEST 


2 


P 


15 


The SS transmits a TRACKING AREA 
UPDATE ACCEPT message. 


<- 


TRACKING AREA UPDATE 
ACCEPT 


- 


- 


16 


The UE transmits a TRACKING AREA 
UPDATE COMPLETE message. 


-> 


TRACKING AREA UPDATE 
COMPLETE 


- 


- 


Note: The trigger in step 1 and the RRC messages in steps 2 to 10 are the same as in the generic procedure in 
36.508 clause 6.4.3.3. 



10.8.7.3.3 



Specific message contents 



Table 10.8.7.3.3-1 : Message BEARER RESOURCE MODIFICATION REQUEST (step 2, step 4, step 6, 

step 8 and step 10, Table 10.8.7.3.2-1) 



Derivation path: 36.508 table 4.7.3-8, condition RELEASE-REQUESTED 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity for packet filter 


6 







Table 10.8.7.3.3-2: Message TRACKING AREA UPDATE REQUEST (step 14, Table 10.8.7.3.2-1) 



Derivation path: 36.508 table 4.7.2-27 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer context status 








Length of EPS bearer context status contents 


2 


2 octets 




EBI(0)-EBI(4) 


'0 OOOO'B 






EBI{5) 


'1'B 






EBI(6)-EBI(15) 


'0000 0000 OO'B 
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Table 10.8.7.3.3-3: Message TRACKING AREA UPDATE ACCEPT (step 15, Table 10.8.7.3.2-1) 



Derivation path: 36.508 table 4.7.2-24 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer context status 








Length of EPS bearer context status contents 


2 


2 octets 




EBI(0)-EBI(4) 


'0 OOOO'B 






EBI(5) 


'1'B 






EBI(6)-EBI(15) 


'0000 0000 OO'B 
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11 
11.1 

11.1.1 

11.1.1.1 
(1) 



General tests 
SMS over SGs 
MT-SMS over SGs / Idle mode 

Test Purpose (TP) 



with { UE is IMSI attached for non-EPS services and UE has received a paging request with CN domain 
indicator set to "PS" in EMM- IDLE mode and UE has sent a SERVICE REQUEST message} 
ensure that { 

when { UE receives a CP-DATA containing an RP-DATA RPDU {SMS DELIVER TPDU) encapsulated in a 
Downlink NAS transport message } 

then { UE sends a CP-ACK encapsulated in an Uplink NAS transport message followed by a CP-DATA 
containing an RP-ACK RPDU {SMS DELIVER REPORT TPDU) encapsulated in an Uplink NAS transport message} 



11.1.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301, clauses 
5.6.3.1, 5.6.3.3 and 9.9.3.22. 



[TS 24.301, clause 5.6.3.1] 

The purpose of the transport of NAS messages procedure is to carry SMS messages in an encapsulated form between 
the MME and the UE. The procedure may be initiated by the UE or the network and can only be used when the UE is 
attached for EPS services and IMSI attached for non-EPS services and is in EMM-CONNECTED mode. 

[TS 24.301, clause 5.6.3.3] 

The network initiates the procedure by sending a DOWNLINK NAS TRANSPORT message. When receiving the 
DOWNLINK NAS TRANSPORT message, the EMM entity in the UE shall forward the contents of the NAS message 
container IE to the SMS entity. 

[TS 24.301, clause 9.9.3.22] 

This information element is used to encapsulate the SMS messages transferred between the UE and the network. The 
NAS message container information element is coded as shown in figure 9.9.3.22.1 and table 9.9.3.22.1. 

The NAS message container is a type 4 information element with a minimum length of 4 octets and a maximum length 
of 253 octets. 



8|7 |6 |5 |4|3| 2 |1 




NAS message container lEI 


octet 1 


Length of NAS message container contents 


octet 2 




octet 3 


NAS message container contents 






octet n 



Figure 9.9.3.22.1 : NAS message container information element 



Table 9.9.3.22.1 : NAS message container information element 



NAS message container contents (octet 3 to octet n) 

This IE can contain an SMS message (i.e. CP-DATA, CP-ACK or CP-ERROR) as 
defined in subclause 7.2 in 3GPP TS 24.01 1 [13A]. 
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11.1.1.3 Test description 

11.1.1.3.1 Pre-test conditions 
System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 
- Cell A belongs TAI-1. 

Cell A is set to the "Serving cell". 
UE: 

The UE does not have any stored SMS message. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 

11.1.1.3.2 Test procedure sequence 

Table 11.1.1 .3.2-1 : Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS pages the UE using S-TMSI with CN 
domain indicator set to "PS'. 


- 


- 


- 


- 


2 


The UE transmits a SERVICE REQUEST 
message. 


— > 


SERVICE REQUEST 


~ 


- 


3 


The SS transmits a CP-DATA containing an 
RP-DATA RPDU (SMS DELIVER TPDU) 
encapsulated in a Downlink NAS transport 
message to the UE. 


<— 


DQWNLINK NAS TRANSPORT 






4 


Check: Does the UE transmit a CP-ACK 
encapsulated in an Uplink NAS transport 
message? 


— > 


UPLINK NAS TRANSPORT 


1 


P 


5 


Check: Does the UE transmit a CP-DATA 
containing an RP-ACK RPDU (SMS DELIVER 
REPORT TPDU) encapsulated in an Uplink 
NAS transport message? 


— > 


UPLINK NAS TRANSPORT 


1 


P 


6 


The SS transmits a CP-ACK encapsulated in a 
Downlink NAS transport message to the UE. 


<— 


DOWNLINK NAS TRANSPORT 


- 


- 



11.1.1 .3.3 Specific message contents 

Table 11.1.1.3.3-1: IVIessage DOWNLINK NAS TRANSPORT (step 3, Table 11.1.1.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 2A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.1.3.3-2 







Table 11.1.1.3.3-2: Message CP-DATA (step 3, Table 11.1.1.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




Messsage type 


'00000001'B 


CP-DATA 




CP-User data 


Set according to Table 
11.1.1.3.3-3 
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Table 11.1.1.3.3-3: Message RP-DATA RPDU (step 3, Table 11.1.1.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


RP-Message Type 


'001 'B 


RP-DATA_PDU 
downlink 




RP-Message Reference 


present 






RP-Originator Address 


present 


1-12 octets 




RP-Destination Address 


present 


1 octet 




RP-User Data 


Set according to Table 
11.1.1.3.3-4 







Table 11.1.1.3.3-4: Message SMS DELIVER TPDU (step 3, Table 11.1.1.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


TP-PID 


Different from Type 0: 
"01000000"B 






TP-UDL 


160 






TP-UD (140 octets) 


text of message (160 
characters) 


The 160 

characters in TP- 
UD shall include 
at least one 
occurrence of 
each character in 
the default 
alphabet (see 
3GPP TS 23.038, 
clause 6.2.1). 





Table 11.1.1.3.3-5: Message UPLINK NAS TRANSPORT (step 4, Table 11.1.1.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-27A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.1.3.3-6 







Table 11.1.1.3.3-6: Message CP-ACK (step 4, Table 11.1.1.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




IVIesssage type 


'000001 OO'B 


CP-ACK 





Table 11.1.1.3.3-7: Message UPLINK NAS TRANSPORT (step 5, Table 11.1.1.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-27A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.1.3.387 







Table 11.1.1.3.3-8: Message CP-DATA (step 5, Table 11.1.1.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




IVIesssage type 


'00000001 'B 


CP-DATA 




CP-User data 


Set according to Table 
11.1.1.3.3-9 
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Table 11.1.1.3.3-9: Message RP-ACK RPDU (step 5, Table 11.1.1.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


RP-Message Type 


'010'B 


RP-ACK_PDU 
uplink 




RP-Message Reference 


present 






RP-User Data 


Set according to Table 
11.1.3.3.3-10 







Table 11.1.1.3.3-10: Message SMS DELIVER REPORT TPDU (step 5, Table 11.1.1.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


TP-MTI 


'OO'B 


SMS-DELIVER 
REPORT 




TP-FCS 


Not present 







Table 11.1.1.3.3-11: Message DOWNLINK NAS TRANSPORT (step 6, Table 11.1.1.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 2A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.1.3.3-12 







Table 11.1.1.3.3-12: Message CP-ACK (step 6, Table 11.1.1.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




Messsage type 


'000001 OO'B 


CP-ACK 





11.1.2 MT-SMS over SGs / Active mode 

11.1.2.1 Test Purpose (TP) 

(1) 

with { UE is IMSI attached for non-EPS services and in EMM-CONNECTED mode } 
ensure that { 

when { UE receives a CP-DATA containing an RP-DATA RPDU {SMS DELIVER TPDU) encapsulated in a 
Downlink NAS transport message } 

then { UE sends a CP-ACK encapsulated in an Uplink NAS transport message followed by a CP-DATA 
containing an RP-ACK RPDU {SMS DELIVER REPORT TPDU) encapsulated in an Uplink NAS transport message} 



11.1.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301, clauses 
5.6.3.1,5.6.3.3, and 9.9.3.22. 

[TS 24.301, clause 5.6.3.1] 

The purpose of the transport of NAS messages procedure is to carry SMS messages in an encapsulated form between 
the MME and the UE. The procedure may be initiated by the UE or the network and can only be used when the UE is 
attached for EPS services and IMSI attached for non-EPS services and is in EMM-CONNECTED mode. 

[TS 24.301, clause 5.6.3.3] 

The network initiates the procedure by sending a DOWNLINK NAS TRANSPORT message. When receiving the 
DOWNLINK NAS TRANSPORT message, the EMM entity in the UE shall forward the contents of the NAS message 
container IE to the SMS entity. 

[TS 24.301, clause 9.9.3.22] 

This information element is used to encapsulate the SMS messages transferred between the UE and the network. The 
NAS message container information element is coded as shown in figure 9.9.3.22.1 and table 9.9.3.22.1. 
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The NAS message container is a type 4 information element with a minimum length of 4 octets and a maximum length 
of 253 octets. 



8|7 |6 |5 |4|3| 2 |1 




NAS message container lEI 


octet 1 


Length of NAS message container contents 


octet 2 




octet 3 


NAS message container contents 






octet n 



Figure 9.9.3.22.1 : NAS message container information element 



Table 9.9.3.22.1 : NAS message container information element 



NAS message container contents (octet 3 to octet n) 

This IE can contain an SMS message (i.e. CP-DATA, CP-ACK or CP-ERROR) as 
defined in subclause 7.2 in 3GPP TS 24.01 1 [13A]. 



11.1.2.3 Test description 

11.1.2.3.1 Pre-test conditions 
System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 
- Cell A belongs TAI-1. 

Cell A is set to the "Serving cell". 
UE: 

The UE does not have any stored SMS message. 
Preamble: 

UE is in state Generic RB Established (state 3) on Cell A according to [18]. 

11.1.2.3.2 Test procedure sequence 

Table 11.1.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits a CP-DATA containing an 
RP-DATA RPDU (SMS DELIVER TPDU) 
encapsulated in a Downlink NAS transport 
message to the UE. 


<— 


DOWNLINK NAS TRANSPORT 






2 


Check: Does the UE transmit a CP-ACK 
encapsulated in an Uplink NAS transport 
message? 


— > 


UPLINK NAS TRANSPORT 


1 


P 


3 


Check: Does the UE transmit a CP-DATA 
containing an RP-ACK RPDU (SMS DELIVER 
REPORT TPDU) encapsulated in an Uplink 
NAS transport message? 


— > 


UPLINK NAS TRANSPORT 


1 


P 


4 


The SS transmits a CP-ACK encapsulated in a 
Downlink NAS transport message to the UE. 


<— 


DOWNLINK NAS TRANSPORT 


- 


- 
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1 1 .1 .2.3.3 Specific message contents 

Table 11.1.2.3.3-1: Message DOWNLINK NAS TRANSPORT (step 1, Table 11.1.2.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 2A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.2.3.3-2 







Table 11.1.2.3.3-2: Message CP-DATA (step 1, Table 11.1.2.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




IVIesssage type 


'00000001 'B 


CP-DATA 




CP-User data 


Set according to Table 
11.1.2.3.3-3 







Table 11.1.2.3.3-3: Message RP-DATA RPDU (step 1, Table 11.1.2.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


RP-Message Type 


'001 'B 


RP-DATA_PDU 
downlink 




RP-Message Reference 


present 






RP-Originator Address 


present 


1-12 octets 




RP-Destination Address 


present 


1 octet 




RP-User Data 


Set according to Table 
11.1.2.3.3-4 







Table 11.1.2.3.3-4: Message SMS DELIVER TPDU (step 1, Table 11.1.2.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


TP-PID 


Different from Type 0: 
"OIOOOOOO'B 






TP-UDL 


160 






TP-UD (140 octets) 


text of message (160 
characters) 


The 160 

characters in TP- 
UD shall include 
at least one 
occurrence of 
each character in 
the default 
alphabet (see 
3GPP TS 23.038, 
clause 6.2.1). 





Table 11.1.2.3.3-5: Message UPLINK NAS TRANSPORT (step 2, Table 11.1.2.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-27A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.2.3.3-6 







Table 11.1.2.3.3-6: Message CP-ACK (step 2, Table 11.1.2.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




IVIesssage type 


'000001 OO'B 


CP-ACK 
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Table 11.1.2.3.3-7: Message UPLINK NAS TRANSPORT (step 3, Table 11.1.2.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-27A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.2.3.3-8 







Table 11.1.2.3.3-8: Message CP-DATA (step 3, Table 11.1.2.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




l\/lesssage type 


'00000001 'B 


CP-DATA 




CP-User data 


Set according to Table 
11.1.3.3.3-9 







Table 11.1.2.3.3-9: Message RP-ACK RPDU (step 3, Table 11.1.2.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


RP-Message Type 


'010'B 


RP-ACK_PDU 
uplink 




RP-Message Reference 


present 






RP-User Data 


Set according to Table 
11.1.2.3.3-10 







Table 11.1.2.3.3-10: Message SMS DELIVER REPORT TPDU (step 3, Table 11.1.2.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


TP-MTI 


'OO'B 


SMS-DELIVER 
REPORT 




TP-FCS 


Not present 







Table 11.1.2.3.3-12: Message DOWNLINK NAS TRANSPORT (step 4, Table 11.1.2.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 2A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.2.3.3-12 







Table 11.1.2.3.3-12: Message CP-ACK (step 4, Table 11.1.2.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




Messsage type 


'000001 OO'B 


CP-ACK 





11.1.3 MO-SMS over SGs / Idle mode 



11.1.3.1 



Test Purpose (TP) 



(1) 

with { UE is IMSI attached for non-EPS services and in EMM- IDLE mode } 
ensure that { 

when { a MO SMS is initiated at the UE } 

then { UE sends an SERVICE REQUEST message followed by a CP-DATA containing an RP-DATA RPDU 
{SMS SUBMIT TPDU) encapsulated in an Uplink NAS transport message } 
} 

(2) 

with { UE is IMSI attached for non-EPS services and UE has sent an SERVICE REQUEST message triggered 
by MO SMS followed by a CP-DATA containing an RP-DATA RPDU {SMS SUBMIT TPDU) encapsulated in an 
Uplink NAS transport message } 
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ensure that { 

when { UE receives a CP-DATA containing an RP-ACK RPDU {SMS SUBMIT REPORT TPDU) encapsulated in a 
Downlink NAS transport message } 

then { UE sends a CP-ACK encapsulated in an Uplink NAS Transport message } 



11.1.3.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301, clauses 
5.6.3.1, 5.6.3.2 and 9.9.3.22., TS 23.401 clause 5.3.4.1. 

[TS 24.301, clause 5.6.3.1] 

The purpose of the transport of NAS messages procedure is to carry SMS messages in an encapsulated form between 
the MME and the UE. The procedure may be initiated by the UE or the network and can only be used when the UE is 
attached for EPS services and IMSl attached for non-EPS services and is in EMM-CONNECTED mode. 

[TS 24.301, clause 5.6.3.2] 

Upon request from the SMS entity to send an SMS message, the EMM entity in the UE initiates the procedure by 
sending an UPLINK NAS TRANSPORT message including the SMS message in the NAS message container IE. 

[TS 24.301, clause 9.9.3.22] 

This information element is used to encapsulate the SMS messages transferred between the UE and the network. The 
NAS message container information element is coded as shown in figure 9.9.3.22.1 and table 9.9.3.22.1. 

The NAS message container is a type 4 information element with a minimum length of 4 octets and a maximum length 
of 253 octets. 



8|7|6|5|4|3|2 |1 




NAS message container lEI 


octet 1 


Length of NAS message container contents 


octet 2 




octet 3 


NAS message container contents 






octet n 



Figure 9.9.3.22.1 : NAS message container information element 



Table 9.9.3.22.1 : NAS message container information element 



NAS message container contents (octet 3 to octet n) 



This IE can contain an SMS message (i.e. CP-DATA, CP-ACK or CP-ERROR) as 
defined in subclause 7.2 in 3GPP TS 24.01 1 [13A]. 



[TS 23.401, clause 5.3.4.1] 

1. The UE sends NAS message Service Request towards the MME encapsulated in an RRC message to the 
eNodeB. The RRC message(s) that can be used to carry the S-TMSl and this NAS message are described in 
TS 36.300 [5]. 

2. The eNodeB forwards NAS message to MME. NAS message is encapsulated in an Sl-AP: Initial UE Message 
(NAS message, TAlH-ECGl of the serving cell, S-TMSl, CSG ID, CSG access Mode). Details of this step are 
described in TS 36.300 [5]. If the MME can't handle the Service Request it will reject it. CSG ID is provided if 
the UE sends the Service Request message via a CSG cell or a hybrid cell. CSG access mode is provided if the 
UE sends the Service Request message via a hybrid cell. If the CSG access mode is not provided but the CSG ID 
is provided, the MME shall consider the cell as a CSG cell. 

If a CSG ID is indicated and CSG access mode is not provided, and there is no subscription data for this CSG ID 
or the CSG subscription is expired, the MME rejects the Service Request with an appropriate cause. The UE 
shall remove the CSG ID of the cell where the UE has initiated the service request procedure from the Allowed 
CSG list, if present. 
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For UEs with emergency EPS bearers, i.e. at least one EPS bearer has an ARP values reserved for emergency 
services, if CSG access restrictions do not allow the UE to get normal services the MME shall deactivate all non- 
emergency bearers and accept the Service Request. 

3. NAS authentication/security procedures as defined in clause 5.3.10 on "Security function" may be performed. 

4. The MME sends Sl-AP Initial Context Setup Request (Serving GW address, Sl-TEID(s) (UL), EPS Bearer 
QoS(s), Security Context, MME Signalling Connection Id, Handover Restriction List, CSG Membership 
Indication) message to the eNodeB. This step activates the radio and SI bearers for all the active EPS Bearers. 
The eNodeB stores the Security Context, MME Signalling Connection Id, EPS Bearer QoS(s) and Sl-TEID(s) in 
the UE RAN context. The step is described in detail in TS 36.300 [5]. Handover Restriction List is described in 
clause 4.3.5.7 "Mobility Restrictions". 

The MME shall only request to establish Emergency EPS Bearer if the UE is not allowed to access the cell 
where the UE initiated the service request procedure due to CSG access restriction. 

If the Service Request is performed via a hybrid cell, CSG Membership Indication indicating whether the UE is a 
CSG member shall be included in the Sl-AP message from the MME to the RAN. Based on this information the 
RAN can perform differentiated treatment for CSG and non-CSG members. 

5. The eNodeB performs the radio bearer establishment procedure. The user plane security is established at this 
step, which is described in detail in TS 36.300 [5]. When the user plane radio bearers are setup. EPS bearer state 
synchronization is performed between the UE and the network, i.e. the UE shall locally remove any EPS bearer 
for which no radio bearers are setup and, if the radio bearer for a default EPS bearer is not established, the UE 
shall locally deactivate all EPS bearers associated to that default EPS bearer. 



11.1.3.3 Test description 

11.1.3.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 
- Cell A belongs TAI-1. 

Cell A is set to the "Serving cell". 
UE: 

The UE does not have any stored SMS message. 
Preamble: 

UE is in state Registered, Idle Mode (state 2) on Cell A according to [18]. 
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11.1.3.3.2 



Test procedure sequence 

Table 11.1.3.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Sending of a 160 character MO SMS is 
initiated at the UE via MMI or AT command 


- 


- 


- 


- 


2 


Checl<: Does the UE transmit an SERVICE 
REQUEST message? 


-> 


SERVICE REOUEST 


1 


P 


3 


Checl<: Does the UE transmit a CP-DATA 
containing an RP-DATA RPDU (SMS SUBMIT 
TPDU) encapsulated in an Uplink NAS 
transport message? 


-> 


UPLINK NAS TRANSPORT 


1 


P 


4 


The SS transmits a CP-ACK encapsulated in a 
Downlink NAS Transport message. 


<- 


DOWNLINK NAS TRANSPORT 


- 


- 


5 


The SS transmits a CP-DATA containing an 
RP-ACK RPDU (SMS SUBMIT REPORT 
TPDU) encapsulated in an Downlink NAS 
transport message 


<~ 


DOWNLINK NAS TRANSPORT 






6 


Check: Does the UE transmit a CP-ACK 
encapsulated in an Uplink NAS Transport 
message? 


-> 


UPLINK NAS TRANSPORT 


2 


P 



1 1 .1 .3.3.3 Specific message contents 

Table 11.1.3.3.3-1: IVIessage UPLINK NAS TRANSPORT (step 3, Table 11.1.3.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-27A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.3.3.3-2 







Table 11.1.3.3.3-2: Message CP-DATA (step 3, Table 11.1.3.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




Messsage type 


'00000001 'B 


CP-DATA 




CP-User data 


Set according to Table 
11.1.3.3.3-3 







Table 11.1.3.3.3-3: Message RP-DATA RPDU (step 3, Table 11.1.3.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


RP-Message Type 


'OOO'B 


RP-DATA_PDU 
uplink 




RP-Message Reference 


present 






RP-Originator Address 


present 


1 octet 




RP-Destination Address 


present 


1-12 octets 




RP-User Data 


Set according to Table 
11.1.3.3.3-4 







Table 11.1.3.3.3-4: Message SMS SUBMIT TPDU (step 3, Table 11.1.3.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


TP-MTI 


'01 'B 


SMS-SUBMIT 




TP-PID 


Different from Type 0: 
"OIOOOOOO'B 






TP-UDL 


160 






TP-UD (140 octets) 


text of message (160 
characters) 
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Table 11.1.3.3.3-5: Message DOWNLINK NAS TRANSPORT (step 4, Table 11.1.3.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 2A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.3.3.3-6 







Table 11.1.3.3.3-6: Message CP-ACK (step 4, Table 11.1.3.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




IVIesssage type 


'000001 OO'B 


CP-ACK 





Table 11.1.3.3.3-7: Message DOWNLINK NAS TRANSPORT (step 5, Table 11.1.3.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 2A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.3.3.3-8 







Table 11.1.3.3.3-8: Message CP-DATA (step 5, Table 11.1.3.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




IVIesssage type 


'00000001 'B 


CP-DATA 




CP-User data 


Set according to Table 
11.1.3.3.3-9 







Table 11.1.3.3.3-9: Message RP-ACK RPDU (step 5, Table 11.1.3.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


RP-Message Type 


'011'B 


RP-ACK_PDU 
downlink 




RP-Message Reference 


present 






RP-User Data 


Set according to Table 
11.1.3.3.3-10 







Table 11.1.3.3.3-10: Message SMS SUBMIT REPORT TPDU (step 4, Table 11.1.3.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


TP-MTl 


'01 'B 


SMS-SUBMIT 
REPORT 




TP-FCS 


Not present 







Table 11.1.3.3.3-11: Message UPLINK NAS TRANSPORT (step 6, Table 11.1.3.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-27A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.3.3.3-12 







Table 11.1.3.3.3-12: Message CP-ACK (step 6, Table 11.1.3.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




Messsage type 


'000001 OO'B 


CP-ACK 
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11.1.4 MO-SMS over SGs / Active mode 

11.1.4.1 Test Purpose (TP) 

(1) 

with { UE is IMSI attached for non-EPS services and in EMM-CONNECTED mode } 
ensure that { 

when { a MO SMS is initiated at the UE } 

then { UE sends a CP-DATA containing an RP-DATA RPDU {SMS SUBMIT TPDU) encapsulated in an Uplink 
NAS transport message } 



} 



(2) 



with { UE is IMSI attached for non-EPS services and in EMM-CONNECTED mode and UE has sent a CP-DATA 
containing an RP-DATA RPDU {SMS SUBMIT TPDU) encapsulated in an Uplink NAS transport message } 
ensure that { 

when { UE receives a CP-DATA containing an RP-ACK RPDU {SMS SUBMIT REPORT TPDU) encapsulated in a 
Downlink NAS transport message } 

then { UE sends a CP-ACK encapsulated in an Uplink NAS Transport message } 



11.1.4.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 24.301, clauses 
5.6.3.1, 5.6.3.2 and 9.9.3.22, and TS 23.401, clause 5.3.4.1. 

[TS 24.301, clause 5.6.3.1] 

The purpose of the transport of NAS messages procedure is to carry SMS messages in an encapsulated form between 
the MME and the UE. The procedure may be initiated by the UE or the network and can only be used when the UE is 
attached for EPS services and IMSI attached for non-EPS services and is in EMM-CONNECTED mode. 

[TS 24.301, clause 5.6.3.2] 

Upon request from the SMS entity to send an SMS message, the EMM entity in the UE initiates the procedure by 
sending an UPLINK NAS TRANSPORT message including the SMS message in the NAS message container IE. 

[TS 24.301, clause 9.9.3.22] 

This information element is used to encapsulate the SMS messages transferred between the UE and the network. The 
NAS message container information element is coded as shown in Table 9.9.3.22.1 and 9.9.3.22.2. 

The NAS message container is a type 4 information element with a minimum length of 4 octets and a maximum length 
of 253 octets. 

Table 9.9.3.22.1 : NAS message container information element 



8|7 |6 |5 |4|3| 2 |1 




NAS message container lEI 


octet 1 


Length of NAS message container contents 


octet 2 




octet 3 


NAS message container contents 






octet n 



Table 9.9.3.22.2: NAS message container information element 



NAS message container contents (octet 3 to octet n) 

This IE can contain an SMS message (i.e. CP-DATA, CP-ACK or CP-ERROR) as 
defined in subclause 7.2 in 3GPP TS 24.01 1 [13A]. 



[TS 23.401, clause 5.3.4] 
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1. The UE sends NAS message Service Request towards the MME encapsulated in an RRC message to the 
eNodeB. The RRC message(s) that can be used to carry the S-TMSI and this NAS message are described in 
TS 36.300 [5]. 

2. The eNodeB forwards NAS message to MME. NAS message is encapsulated in an Sl-AP: Initial UE Message 
(NAS message, TAI+ECGI of the serving cell, S-TMSI, CSG ID, CSG access Mode). Details of this step are 
described in TS 36.300 [5]. If the MME can't handle the Service Request it will reject it. CSG ID is provided if 
the UE attaches via a closed or hybrid mode CSG cell. CSG access mode is provided if the UE sends the Service 
Request message via a hybrid mode CSG cell. If the CSG access mode is not provided but the CSG ID is 
provided, the MME shall consider the CSG cell as a closed mode CSG cell. 

If a CSG ID is indicated and CSG access mode is "closed" or CSG access mode is not provided, and there is no 
subscription data for this CSG ID or the CSG subscription is expired, the MME rejects the Service Request with 
an appropriate cause. The UE shall remove the CSG ID of the cell where the UE has initiated the service request 
procedure from the Allowed CSG list. 

3. NAS authentication procedures may be performed. 

4. The MME sends Sl-AP Initial Context Setup Request (Serving GW address, Sl-TEID(s) (UL), EPS Bearer 
QoS(s), Security Context, MME Signalling Connection Id, Handover Restriction List) message to the eNodeB. 
This step activates the radio and SI bearers for all the active EPS Bearers. The eNodeB stores the Security 
Context, MME Signalling Connection Id, EPS Bearer QoS(s) and Sl-TEID(s) in the UE RAN context. The step 
is described in detail in TS 36.300 [5]. Handover Restriction List is described in clause 4.3.5.7 "Mobility 
Restrictions". 

5. The eNodeB performs the radio bearer establishment procedure. The user plane security is established at this 
step, which is described in detail in TS 36.300 [5]. When the user plane radio bearers are setup the Service 
Request is completed and EPS bearer state is synchronized between the UE and the network, i.e. the UE should 
remove the EPS bearer for which no radio bearers are setup. 



11.1.4.3 Test description 

11.1.4.3.1 Pre-test conditions 

System Simulator: 

Cell A is configured according to Table 6.3.2.2-1 in [18]. 

- Cell A belongs TAI-l. 

Cell A is set to the "Serving cell". 
UE: 

- The UE does not have any stored SMS message. 
Preamble: 

UE is in state Generic RB Established (state 3) on Cell A according to [18]. 
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11.1.4.3.2 



Test procedure sequence 

Table 11.1.4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Sending of a 160 character MO SMS is 
initiated at the UE via MMI or AT command 


- 


- 


- 


- 


2 


Checl<: Does the UE transmit a CP-DATA 
containing an RP-DATA RPDU (SMS SUBMIT 
TPDU) encapsulated in an Uplink NAS 
transport message? 


-> 


UPLINK NAS TRANSPORT 


1 


P 


3 


The SS transmits a CP-ACK encapsulated in a 
Downlink NAS Transport message. 


<- 


DOWNLINK NAS TRANSPORT 


- 


- 


4 


The SS transmits a CP-DATA containing an 
RP-ACK RPDU(SMS SUBMIT REPORT 
TPDU) encapsulated in an Downlink NAS 
transport message 


<- 


DOWNLINK NAS TRANSPORT 






5 


Check: Does the UE transmit a CP-ACK 
encapsulated in an Uplink NAS Transport 
message? 


-> 


UPLINK NAS TRANSPORT 


2 


P 



1 1 .1 .4.3.3 Specific message contents 

Table 11.1.4.3.3-1: IVIessage UPLINK NAS TRANSPORT (step 2, Table 11.1.4.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-27A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.4.3.3-2 







Table 11.1.4.3.3-2: Message CP-DATA (step 2, Table 11.1.4.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




Messsage type 


'00000001 'B 


CP-DATA 




CP-User data 


Set according to Table 
11.1.4.3.3-3 







Table 11.1.4.3.3-3: Message RP-DATA RPDU (step 2, Table 11.1.4.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


RP-Message Type 


'OOO'B 


RP-DATA uplink 




RP-Message Reference 


present 






RP-Originator Address 


present 


1 octet 




RP-Destination Address 


present 


1-12 octets 




RP-User Data 


Set according to Table 
11.1.4.3.3-4 







Table 11.1.4.3.3-4: Message SMS SUBMIT TPDU (step 2, Table 11.1.4.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


TP-MTI 


'01 'B 


SMS-SUBMIT 




TP-PID 


Different from Type 0: 
"OIOOOOOO'B 






TP-UDL 


160 






TP-UD (140 octets) 


text of message (160 
characters) 
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Table 11.1.4.3.3-5: Message DOWNLINK NAS TRANSPORT (step 3, Table 11.1.4.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 2A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.4.3.3-6 







Table 11.1.4.3.3-6: Message CP-ACK (step 3 Table 11.1.4.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




IVIesssage type 


'000001 OO'B 


CP-ACK 





Table 11.1.4.3.3-7: Message DOWNLINK NAS TRANSPORT (step 4, Table 11.1.4.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-1 2A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.4.3.3-8 







Table 11.1.4.3.3-8: Message CP-DATA (step 4, Table 11.1.4.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




IVIesssage type 


'00000001 'B 


CP-DATA 




CP-User data 


Set according to Table 
11.1.4.3.3-9 







Table 11.1.4.3.3-9: Message RP-ACK RPDU (step 4, Table 11.1.4.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


RP-Message Type 


'011'B 


RP-ACK_PDU 
downlink 




RP-Message Reference 


present 






RP-User Data 


Set according to Table 
11.1.4.3.3-10 







Table 11.1.4.3.3-10: Message SMS SUBMIT REPORT TPDU (step 4, Table 11.1.4.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


TP-MTI 


'01 'B 


SMS-SUBMIT 
REPORT 




TP-FCS 


Not present 







Table 11.1.4.3.3-11: Message UPLINK NAS TRANSPORT (step 5, Table 11.1.4.3.2-1) 



Derivation Path: 36.508 clause 4.7.2-27A 


Information Element 


Value/remark 


Comment 


Condition 


NAS message container 


Set according to Table 
11.1.4.3.3-12 







Table 11.1.4.3.3-12: Message CP-ACK (step 5, Table 11.1.4.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


'1001'B 


SMS messages 




Messsage type 


'000001 OO'B 


CP-ACK 
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1 2 E-UTRA radio bearer tests 
12.1 General 

The present clause defines radio bearer combinations as well as generic E-UTRA radio bearer test procedures. The 
generic E-UTRA radio bearer test procedures include generic TPs and test description. The TCs that follow verify 
specific E-UTRA radio bearer combinations by indicating the relevant combinations and making reference to the 
generic procedures' TPs and test description as appropriate. The reference to the generic TP shall be understood not as 
having the same TP rather as applying the same TP to a different E-UTRA radio bearer combination. 

12.1.0 Definition of radio bearer combinations 

The radio bearer combinations tested are listed in table 12-1. The radio bearer combinations and identifiers (1 to 13) are 
according to the radio bearer combinations and identifier in TS 36.331 Annex B.l. 

Table 12-1: Radio Bearer Combinations 



RB 

combination 

identifier 


Radio bearer combination 


1 


SRB1 and SRB2 for DCCH + IxAM DRB 


2 


SRB1 and SRB2 for DCCH + IxAM DRB + IxUM DRB 


3 


SRB1 and SRB2 for DCCH + 2xAM DRB 


4 


SRB1 and SRB2 for DCCH + 2xAM DRB + IxUM DRB 


5 


SRB1 and SRB2 for DCCH + 2xAM DRB + 2xUM DRB 


6 


SRB1 and SRB2 for DCCH + 3xAM DRB 


7 


SRB1 and SRB2 for DCCH + 3xAM DRB + IxUM DRB 


8 


SRB1 and SRB2 for DCCH + 3xAM DRB + 2xUM DRB 


9 


SRB1 and SRB2 for DCCH + 4xAM DRB 


10 


SRB1 and SRB2 for DCCH + 4xAM DRB + IxUM DRB 


11 


SRB1 and SRB2 for DCCH + 4xAM DRB + 2xUM DRB 


12 


SRB1 and SRB2 for DCCH + 5xAM DRB + 3xUM DRB 


13 


SRB1 and SRB2 for DCCH + 8xAM DRB 



12.1 .1 Generic E-UTRA radio bearer test procedure / MIMO not configured 

12.1.1.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state with a "n x AM DRB + m x UM DRB" radio bearer combination 
established and physical layer configured for SISO transmission} 
ensure that { 

when { UE receives a PDCP SDU on each configured AM and UM DRB within the same TTI } 
then { UE forward the received PDCP SDUs to upper layer } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state with "an x AM DRB + m x UM DRB" radio bearer combination 
established } 
ensure that { 

when { UE has pending data in the transmission buffer corresponding to a complete PDCP SDU on each 
configured AM and UM DRB and UE receives an UL Grant allowing UE to transmit all pending data } 
then { UE transmits a PDCP SDU on each configured AM and UM DRB within the same TTI } 



12.1.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36-series Layer 1, 
Layer 2 and Layer 3 core specifications. 
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12.1.1.3 
12.1.1.3.1 
System Simulator 
- Cell 1 



Test description 
Pre-test conditions 



UE: 



None 



Preamble 



The UE is in state Loopback Activated (state 4) according to [18]. 

Radio bearer for combination SRB 1 and SRB2 for n x AM DRB + m x UM DRB is used where n and m are 
specified in the test case. 



12.1.1.3.2 



Test procedure sequence 

Table 12.1.1.3-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


lUlessage 






1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


The SS transmits a PDCP SDU of size 40 
bytes on each configured AM DRB and a 
PDCP SDU of size 40 bytes on each 
configured UM DRB in the same TTI 


<- 


PDCP SDUs 






2a 


SS respond to any scheduling request from the 
UE by an UL Grant of 32 bits. (Note 1 ) 


<— 


(UL Grant, 32 bits) 


- 


- 


3 


SS waits until UE transmit a BSR with 'Buffer 
size' field set to value indicating that all data 
received in step 2 is pending for transmission. 










4 


SS transmits an UL grants to enable UE to 
return all pending data in one TTI 


<- 


(UL grant) 


- 


- 


5 


Check: Does UE transmit a PDCP SDU on 
each configure AM and UM DRB of the same 
size and content as transmitted by the SS in 
step 2? 


~> 


PDCP SDUs 


1,2 


P 


6 


The SS releases the connection 


- 


- 


- 


- 


Note 1 : 32 bits enables UE to transmit a MAC PDU with a MAC BSR header and a Short BSR (1 bytes) or a Long 
BSR (3 byte). 



12.1 .1 .3.3 Specific Message Contents 

None 

12.1.2 Generic E-UTRA radio bearer test procedure / MIMO configured 

12.1.2.1 Test Purpose (TP) 

(1) 

with { UE in E-UTRA RRC_CONNECTED state with a "n x AM DRB + m x UM DRB" radio bearer combination 
established and physical layer configured for MIMO transmission} 
ensure that { 

when { UE receives, on each configured MIMO flow, a PDCP SDU on each configured AM and UM DRB 
within the same TTI } 

then { UE forward the received PDCP SDUs to upper layer } 
} 

(2) 

with { UE in E-UTRA RRC_CONNECTED state with a "n x AM DRB + m x UM DRB" radio bearer combination 
established } 
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ensure that { 

when { UE has pending data in the transmission buffer corresponding to two complete PDCP SDUs on 
each configured AM and UM DRB and UE receives an UL Grant allowing UE to transmit all pending data 
then { UE transmits two PDCP SDUs on each configured AM and UM DRB } 



12.1.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: 3GPP TS 36-series Layer 1, 
Layer 2 and Layer 3 core specifications. 

12.1.2.3 Test description 

12.1.2.3.1 Pre-test conditions 

System Simulator 

- Cell 1 (MIMO) 

UE: 

None 
Preamble 

The UE is in state Loopback Activated (state 4) according to [18] using condition 2TX to configure MIMO. 

Radio bearer for combination SRB 1 and SRB2 for n x AM DRB + m x UM DRB is used where n and m are 
specified in the test case. 



12.1.2.3.2 



Test procedure sequence 

Table 12.1.1.3-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


lUlessage 






1 


The SS ignores scheduling requests and does 
not allocate any uplink grant. 


- 


- 


- 


- 


2 


The SS transmits two PDCP SDUs of size 40 
bytes on each configured AM DRB and two 
PDCP SDUs of size 40 bytes on each 
configured UM DRB in the same TTI. The 
PDCP SDUs are transmitted on the physical 
layer equally split between transport block 1 
and transport block 2. 


<~ 


PDCP SDUs 






2a 


SS respond to any scheduling request from the 
UE by an UL Grant of 32 bits. (Note 1 ) 


<- 


(UL Grant, 32 bits) 


- 


- 


3 


SS waits until UE transmit a BSR with 
'Buffer size' field set to value indicating 
that all data received in step 2 is pending 
for transmission. 










4 


SS transmits an UL grants to enable UE to 
return all pending data in one TTI 


- 


- 


- 


- 


5 


Check: Does UE transmit two PDCP SDUs on 
each configured AM and UM DRB of the same 
size and content as transmitted by the SS in 
step 2? 


-> 


PDCP SDUs 


1,2 


P 


6 


The SS releases the connection 


- 


- 


- 


- 


Note 1 : 32 bits enables UE to transmit a MAC PDU with a MAC BSR header and a Short BSR (1 bytes) or a Long 
BSR (3 byte). 



12.1.2.3.3 
None 



Specific Message Contents 
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12.2 

12.2.1 

12.2.1.1 

See 12.1.1.1 

12.2.1.2 

See 12.1.1.2 

12.2.1.3 

12.2.1.3.1 

System Simulator 

- See 12.1.1.3 
UE: 

- See 12.1.1.3 
Preamble 



MIMO not configured 

Data transfer of E-UTRA radio bearer combinations 1 ,3,6 and 9 

Test Purpose (TP) 

Conformance requirements 

Test description 
Pre-test conditions 



The number of AM data radio bearers (n) and UM data radio bearers (m) for each execution is specified in table 
12.2.1.3.1-1. 

Table 12.2.1.3.1-1 : Test parameters (m,n) for each execution (k) 



Execution 
k 


Number 

of AM 

DRBs 

n 


Number 

of UM 

DRBs 

m 


Radio bearer combination 


1 


1 


- 


1 : SRB1 and SRB2 for DCCH + 1xAM DRB 


2 


2 


- 


3: SRB1 and SRB2 for DCCH + 2xAM DRB 


3 


3 


- 


6: SRB1 and SRB2 for DCCH + 3xAM DRB 


4 


4 


- 


9: SRB1 and SRB2 for DCCH + 4xAM DRB 



12.2.1.3.2 



Test procedure sequence 

Table 12.2.1.4.1-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


Message 








EXCEPTION: Step 1 is repeated for execution 
counter k=1 to 4 


- 


- 


- 


- 


1 


Generic test procedure in 12.1.1 is executed 
for execution k with number of AM DRB (n) 
and number of UM DRB (m) as specified in 
table 12.2.1.3.1-1. 











12.2.1 .3.3 Specific Message Contents 

None 

1 2.2.2 Data transfer of E-UTRA radio bearer combinations 2,4,7 and 1 

12.2.2.1 Test Purpose (TP) 
See 12.1.1.1 

12.2.2.2 Conformance requirements 

See 12.1.1.2 
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12.2.2.3 Test description 

12.2.2.3.1 Pre-test conditions 

System Simulator 

- See 12.1.1.3 
UE: 

- See 12.1.1.3 

Preamble 

The number of AM data radio bearers (n) and UM data radio bearers (m) for each execution is specified in table 
12.2.2.3.1-1. 

Table 12.2.2.3.1-1 : Test parameters (m,n) for each execution (k)1 



Execution 
k 


Number 

of AlUI 

DRBs 

n 


Number 

of UIUI 

DRBs 

m 


Radio bearer combination 


1 


1 


1 


2: SRB1 and SRB2 for DCCH + 1xAM DRB + 1xUM DRB 


2 


2 


1 


4: SRB1 and SRB2 for DCCH + 2xAM DRB + 1xUM DRB 


3 


3 


1 


7: SRB1 and SRB2 for DCCH + 3xAM DRB + 1xUM DRB 


4 


4 


1 


10: SRB1 and SRB2 for DCCH + 4xAM DRB + IxUM DRB 



12.2.2.3.2 



Test procedure sequence 

Table 12.2.2.4.1-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


Message 








EXCEPTION: Step 1 is repeated for execution 
counter k=1 to 4 


- 


- 


- 


- 


1 


Generic test procedure in 12.1.1 Is executed 
for execution k with number of AlVI DRB (n) 
and number of UIVI DRB (m) as specified in 
table 12.2.2.3.1-1. 











12.2.2.3.3 Specific Message Contents 

None 

1 2.2.3 Data transfer of E-UTRA radio bearer combinations 5,8, 11 and 1 2 

12.2.3.1 
See 12.1.1.1 



12.2.3.2 

See 12.1.1.2 
12.2.3.3 
12.2.3.3.1 
System Simulator 

- See 12.1.1.3 
UE: 

- See 12.1.1.3 



Test Purpose (TP) 
Conformance requirements 



Test description 
Pre-test conditions 
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The number of AM data radio bearers (n) and UM data radio bearers (m) for each execution is specified in table 
12.2.3.3.1-1. 

Table 12.2.3.3.1-1 : Test parameters (m,n) for each execution (k) 



Execution 
K 


Number 

of AlUI 

DRBs 

n 


Number 

of UIUI 

DRBs 

m 


Radio bearer combination 


1 


2 


2 


5: SRB1 and SRB2 for DCCH + 2xAM DRB + 2xUM DRB 


2 


3 


2 


8: SRB1 and SRB2 for DCCH + 3xAM DRB + 2xUM DRB 


3 


4 


2 


1 1 : SRB1 and SRB2 for DCCH + 4xAM DRB + 2xUM DRB 


4 


5 


3 


12: SRB1 and SRB2 for DCCH + 5xAM DRB + 3xUM DRB 



12.2.3.3.2 



Test procedure sequence 

Table 12.2.3.4.1-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


Message 








EXCEPTION: Step 1 is repeated for execution 
counter l<=1 to 4 


- 


- 


- 


- 


1 


Generic test procedure in 12.1.1 is executed 
for execution l< witli number of AlVI DRB (n) 
and number of UIVI DRB (m) as specified in 
table 12.2.3.3.1-1. 











12.2.3.3.3 Specific Message Contents 

None 

1 2.2.4 Data transfer of E-UTRA radio bearer combination 1 3 

12.2.4.1 

See 12.1.1.1 

12.2.4.2 

See 12.1.1.2 

12.2.4.3 

12.2.4.3.1 

System Simulator 

- See 12.1.1.3 
UE: 

- See 12.1.1.3 
Preamble 

The number of AM data radio bearers (n) and UM data radio bearers (m) is specified in table 12.2.4.3.1-1. 



Test Purpose (TP) 

Conformance requirements 

Test description 
Pre-test conditions 
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Table 12.2.4.3.1-1 : Test parameters (m,n) for execution (l<) 



Execution 
k 


Number 

of AM 

DRBs 

n 


Number 

of UM 

DRBs 

m 


Radio bearer combination 


1 


8 





13: SRB1 and SRB2 for DCCH + 8xAM DRB 



12.2.4.3.2 



Test procedure sequence 

Table 12.2.4.4.1-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


Message 






1 


Generic test procedure in 12.1.1 is executed 
for execution 1 witli number of AlVI DRB (n) 
and number of UIVI DRB (m) as specified in 
table 12.2.4.3.1-1. 











12.2.4.3.3 
None 



Specific Message Contents 



12.3 MIMO configured 

1 2.3.1 Data transfer of E-UTRA radio bearer combinations 1 ,3,6 and 9 / 
MIMO 



Test Purpose (TP) 

Conformance requirements 

Test description 
Pre-test conditions 



12.3.1.1 

See 12.1.2.1 

12.3.1.2 

See 12.1.2.2 

12.3.1.3 

12.3.1.3.1 

System Simulator 

- See 12.1.2.3 
UE: 

- See 12.1.2.3 

Preamble 

The number of AM data radio bearers (n) and UM data radio bearers (m) for each execution is specified in table 
12.3.1.3.1-1. 

Table 12.3.1.3.1-1 : Test parameters (m,n) for each execution (k) 



Execution 
k 


Number of 

AM DRBs 

n 


Number of 

UM DRBs 

m 


Radio bearer combination 


1 


1 


- 


1 : SRB1 and SRB2 for DCCH + IxAM DRB 


2 


2 


- 


3: SRB1 and SRB2 for DCCH + 2xAM DRB 


3 


3 


- 


6: SRB1 and SRB2 for DCCH + 3xAM DRB 


4 


4 


- 


9: SRB1 and SRB2 for DCCH + 4xAM DRB 
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12.3.1.3.2 



Test procedure sequence 

Table 12.3.1.4.1-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


lUlessage 








EXCEPTION: Step 1 is repeated for execution 
counter k=1 to 4 


- 


- 


- 


- 


1 


Generic test procedure in 12.1.2 is executed 
for execution l< witli number of AlVI DRB (n) 
and number of UIVI DRB (m) as specified in 
table 12.3.1.3.1-1. 











12.3.1.3.3 
None 



Specific Message Contents 



1 2.3.2 Data transfer of E-UTRA radio bearer combinations 2,4,7 and 1 / 
MIMO 



Test Purpose (TP) 

Conformance requirements 

Test description 
Pre-test conditions 



12.3.2.1 

See 12.1.2.1 

12.3.2.2 

See 12.1.2.2 

12.3.2.3 

12.3.2.3.1 

System Simulator 

- See 12.1.2.3 
UE: 

- See 12.1.2.3 

Preamble 

The number of AM data radio bearers (n) and UM data radio bearers (m) for each execution is specified in table 
12.3.2.3.1-1. 

Table 12.3.2.3.1-1 : Test parameters (m,n) for each execution (k) 



Execution 
k 


Number of 

AM DRBs 

n 


Number of 

UM DRBs 

M 


Radio bearer combination 


1 


1 


- 


1 : SRB1 and SRB2 for DCCH + IxAM DRB 


2 


2 


- 


3: SRB1 and SRB2 for DCCH + 2xAM DRB 


3 


3 


- 


6: SRB1 and SRB2 for DCCH + 3xAM DRB 


4 


4 


- 


9: SRB1 and SRB2 for DCCH + 4xAM DRB 
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12.3.2.3.2 



Test procedure sequence 

Table 12.3.2.4.1-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


Message 








EXCEPTION: Step 1 is repeated for execution 
counter k=1 to 4 


- 


- 


- 


- 


1 


Generic test procedure in 12.1.2 is executed 
for execution l< witli number of AlVI DRB (n) 
and number of UIVI DRB (m) as specified in 
table 12.3.2.3.1-1. 











12.3.2.3.3 
None 



Specific Message Contents 



1 2.3.3 Data transfer of E-UTRA radio bearer combinations 5,8,1 1 and 1 2 / 
MIMO 



Test Purpose (TP) 

Conformance requirements 

Test description 
Pre-test conditions 



12.3.3.1 

See 12.1.2.1 

12.3.3.2 

See 12.1.2.2 

12.3.3.3 

12.3.3.3.1 

System Simulator 

- See 12.1.2.3 
UE: 

- See 12.1.2.3 

Preamble 

The number of AM data radio bearers (n) and UM data radio bearers (m) for each execution is specified in table 
12.3.3.3.1-1. 

Table 12.3.3.3.1-1 : Test parameters (m,n) for each execution (k) 



Execution 
K 


Number 

of AM 

DRBs 

n 


Number 

of UM 

DRBs 

m 


Radio bearer combination 


1 


2 


2 


5: SRB1 and SRB2 for DCCH + 2xAM DRB + 2xUM DRB 


2 


3 


2 


8: SRB1 and SRB2 for DCCH + 3xAM DRB + 2xUM DRB 


3 


4 


2 


1 1 : SRB1 and SRB2 for DCCH + 4xAM DRB + 2xUM DRB 


4 


5 


3 


12: SRB1 and SRB2 for DCCH + 5xAM DRB + 3xUM DRB 
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12.3.3.3.2 



Test procedure sequence 

Table 12.3.3.4.1-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


Message 








EXCEPTION: Step 1 is repeated for execution 
counter k=1 to 4 


- 


- 


- 


- 


1 


Generic test procedure in 12.1.2 is executed 
for execution l< witli number of AlVI DRB (n) 
and number of UIVI DRB (m) as specified in 
table 12.3.3.3.1-1. 











12.3.3.3.3 Specific Message Contents 

None 

1 2.3.4 Data transfer of E-UTRA radio bearer combination 1 3 / MIMO 

12.3.4.1 

See 12.1.2.1 

12.3.4.2 

See 12.1.2.2 

12.3.4.3 

12.3.4.3.1 

System Simulator 

- See 12.1.2.3 
UE: 

- See 12.1.2.3 
Preamble 

The number of AM data radio bearers (n) and UM data radio bearers (m) is specified in table 12.3.4.3.1-1. 
Table 12.3.4.3.1-1 : Test parameters (m,n) for each execution (k) 



Test Purpose (TP) 

Conformance requirements 

Test description 
Pre-test conditions 



Execution 
k 


Number 

of AM 

DRBs 

n 


Number 

of UM 

DRBs 

m 


Radio bearer combination 


1 


8 





13: SRB1 and SRB2 for DCCH + 8xAM DRB 



12.3.4.3.2 



Test procedure sequence 

Table 12.3.4.4.1-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 






U-S 


Message 






1 


Generic test procedure in 12.1.2 is executed 
for execution 1 with number of AlVI DRB (n) 
and number of UM DRB (m) as specified in 
table 12.3.4.3.1-1. 











12.3.4.3.3 
None 



Specific Message Contents 
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13 Multi layer Procedures 
13.1 Call setup 



13.1.1 Activation and deactivation of additional data radio bearer in E- 
UTRA 

13.1.1.1 Test Purpose (TP) 
(1) 

with { UE has a default EPS bearer context and dedicated EPS bearer context active and the 
associated DRBs are established } 
ensure that { 

when { UE receives donwlink data on the radio bearer associated with the default or the dedicated 
EPS bearer context } 

then { UE delivers the downlink data to upper layers } 
} 

(2) 

with { UE has a default EPS bearer context and dedicated EPS bearer context active and the 
associated DRBs are established } 
ensure that { 

when { uplink data are submitted for transmission } 

then { UE transmits the uplink data on the radio bearer associated with the default EPS bearer 
context or the dedicated EPS bearer context according to configured TFT} 
} 

(3) 

with { UE has a default EPS bearer context and the dedicated EPS bearer context was deactivated } 
ensure that { 

when { UE receives donwlink data on the radio bearer associated with the default EPS bearer 
context } 

then { UE delivers the downlink data to upper layers } 
} 

(4) 

with { UE has a default EPS bearer context and the dedicated EPS bearer context was deactivated } 
ensure that { 

when { uplink data are submitted for transmission } 

then { UE transmits the uplink data on the radio bearer associated with the default EPS bearer 
context } 

} 

13.1 .1 .2 Conformance requirements 

Same Conformance requirements as in clause 8.2.1.3, 8.2.3.1, 10.2.1 and 10.4.1 

13.1.1.3 Test description 
13.1.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1. 

UE: 

None. 

Preamble: 

The UE is in state Generic RB Established, UE test mode activated (state 3 A) according to [18] using the UE TEST 
LOOP MODE B. 
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13.1.1.3.2 



Test procedure sequence 

Table 13.1.1.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


SS transmits an 

RRCConnectionReconfiguration message to 
establish a data radio bearer. 
The SS transmits a ACTIVATE DEDICATED 
EPS BEARER CONTEXT REQUEST 
message activating a new EPS bearer context. 

The NAS message is included in a 
RRCConnectionReconfiguration message. 


<— 


RRCConnectionReconfiguration 
NAS: ACTIVATE DEDICATED 
EPS BEARER CONTEXT 
REQUEST 






2 


The UE transmit a 

RRCConnectionReconfigurationComplete 
message to confirm the establishment of data 
radio bearer. 


-> 


RRCConnectionReconfigurationC 
ompiete 






3 


The UE transmits an ACTIVATE DEDICATE 
EPS BEARER CONTEXT ACCEPT message. 


~> 


ULInformationTransfer 

NAS: ACTIVATE DEDICATE EPS 

BEARER CONTEXT ACCEPT 






4 


The SS closes the UE test loop mode. 


- 


- 


- 


- 


5 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context. 


<- 


IP packet 






6 


Check: Does the UE loop back the IP packet 
on the DRB associated with the default EPS 
bearer context? 


-> 


IP packet 


1,2 


P 


7 


The SS transmits one IP packet to the UE on 
the DRB associated with the dedicated EPS 
bearer context. 


<— 


IP packet 






8 


Check: Does the UE loop back the IP packet 
on the DRB associated with the dedicated 
EPS bearer context? 


-> 


IP packet 


1,2 


P 


9 


SS transmits an 

RRCConnectionReconfiguration message to 

release a data radio bearer. 

The SS transmits a DEACTIVATE EPS 

BEARER CONTEXT REQUEST including the 

EPS bearer identity of the dedicated EPS 

bearer. 

The NAS message is included in a 
RRCConnectionReconfiguration message. 


<- 


RRCConnectionReconfiguration 
NAS: DEACTIVATE EPS 
BEARER CONTEXT REQUEST 






10 


The UE transmits an 

RRCConnectionReconfigurationComplete 

message. 


-> 


RRCConnectionReconfigurationC 
ompiete 






11 


The UE transmit a DEACTIVATE EPS 
BEARER CONTEXT ACCEPT. 


-> 


ULInformationTransfer 
NAS:DEACTIVATE EPS BEARER 
CONTEXT ACCEPT 






12 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context. 


<- 


IP packet 






13 


Check: Does the UE loop back the IP packet 
on the DRB associated with the default EPS 
bearer context? 


-> 


IP packet 


3,4 


P 
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13.1 .1 .3.3 Specific message contents 

Table 13.1.1.3.3-1 : Message RRCConnectionReconfiguration (step 1, Table 13.1.1.3.2-1) 



Derivation Path: 36.508 table 4.6.1-8, condition DRB(1,0) 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








rrcConnectionReconfiguration-r8 SEQUENCE { 








dedicatedlnfoNASList SEQUENCE 
(SIZE(1..maxDRB))0F 


1 entry 






dedicatedlnfoNAS[1] 


octet string 


ACTIVATE 
DEDICATED EPS 
BEARER 
CONTEXT 
REQUEST 
according 36.508 
table 4.7.3-3 




} 








} 








1 








1 









Table 13.1.1.3.3-2: Message ACTIVATE DEDICATED EPS BEARER CONTEXT REQUEST (step 1, Table 

13.1.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-3 


Information Element 


Value/Remarl< 


Comment 


Condition 


EPS bearer identity 


EBId-1 


SS defines a 
dedicated bearer 
Id different from 
default EBId and 
between 5 and 15. 




Procedure transaction identity 





"No procedure 
transaction 
identity assigned" 




Linked EPS bearer identity 


Default EBId 


SS re-uses the 
EPS bearer 
identity of the 
default EPS 
bearer context. 




EPS QoS 


According to reference 
dedicated EPS bearer 
context #1 - see [18] 






TFT 


According to reference 
dedicated EPS bearer 
context #1- see [18] 







Table 13.1.1.3.3-3: Message ACTIVATE DEDICATE EPS BEARER CONTEXT ACCEPT (step 3, Table 

13.1.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 


Information Element 


Value/Remarl< 


Comment 


Condition 


EPS bearer identity 


EBId-1 


Same value as in 

ACTIVATE 

DEDICATED EPS 

BEARER 

CONTEXT 

REQUEST 




Procedure transaction identity 





"No procedure 
transaction 
identity assigned" 
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Table 13.1.1.3.3-4: Message RRCConnectionReconfiguration (step 9, Table 13.1.1.3.2-1) 



Derivation Path: 36.508 table 4.6.1-8 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionReconfiguration ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE{ 








rrcConnectionReconfiguration-r8 SEQUENCE { 








dedicatedlnfoNASLIst SEQUENCE 
(SIZE(1..maxDRB)) OF SEQUENCE { 








DedicatedlnfoNAS[1] 


DEACTIVATE EPS 
BEARER CONTEXT 
REQUEST 






} 








radioResourceConfigDedicated 


RadioResourceConfigDe 
dicated-DRB-RELEASE 






1 








} 








} 








} 









Table 13.1.1.3.3-5: Message RadioResourceConfigDedicated-DRB-RELEASE (step 9, Table 13.1.1.3.2- 

1) 



Derivation Path: 36.331 clause 6.3.2 


Information Element 


Value/remark 


Comment 


Condition 


RadioResourceConfigDedicated ::= SEQUENCE { 








srb-ToAddlVlodList 


Not present 






drb-ToAddModList 


Not present 






drb-ToReleaseList SEQUENCE (SIZE (L.maxDRB)) 
OF SEQUENCE { 


1 entry 






drb-ldentity[1] 


2 






} 








mac-IVIainConfig CHOICE { } 


Not present 






sps-Config 


Not present 






physicalConfigDedicated 


Not present 






1 









Table 13.1.1.3.3-6: Message DEACTIVATE EPS BEARER CONTEXT REQUEST (step 9, Table 13.1.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 2 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


EBId-1 


Same value as in 

ACTIVATE 

DEDICATED EPS 

BEARER 

CONTEXT 

REQUEST of step 

1 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 




ESIVI cause 


00100100 


''Regular 
deactivation" 




Protocol configuration options 


Not present 
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Table 13.1.1.3.3-7: Message DEACTIVATE EPS BEARER CONTEXT REQUEST (step 11, Table 13.1.1.3.2-1) 



Derivation path: 36.508 table 4.7.3-1 1 


Information Element 


Value/Remark 


Comment 


Condition 


EPS bearer identity 


EBId-1 


Same value as in 

ACTIVATE 

DEDICATED EPS 

BEARER 

CONTEXT 

REQUEST of step 

1 




Procedure transaction identity 





No procedure 
transaction 
identity assigned 





13.1.3 Call setup from E-UTRAN RRC_CONNECTED / CS fallback to 
UTRAN with Redirection / MT call 



13.1.3.1 



(1) 



Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE receives a DLInformationTransfer message containing a CS SERVICE NOTIFICATION message } 
then { UE transmits an ULInformationTransfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile terminating CS fallback or IxCS fallback" } 
} 

(2) 

with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile terminating CS fallback or IxCS fallback" } 
ensure that { 

when { SS transmits an RRCConnectionRelease message with redirection to a UTRA cell in a different 
location area and operating in NMO I } 

then { UE tunes to UTRA cell and performs a RA Update procedure } 
} 

(3) 

with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile terminating CS fallback or IxCS fallback" and tuned to 
UTRA cell and initiated a RA Update procedure } 
ensure that { 

when { UE completes the RA Update procedure } 

then { UE transmits a PAGING RESPONSE on UTRA cell to set up MT CS call } 



(4) 

with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile terminating CS fallback or IxCS fallback" and tuned to 
UTRA cell and initiated a RA Update procedure and having pending UL data to send} 
ensure that { 

when { UE completes the RA Update procedure } 

then { UE transmits a SERVICE REQUEST to set up PS bearers on UTRA cell } 
} 

(5) 

with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile terminating CS fallback or IxCS fallback" and tuned to 
UTRA cell and initiated a RA Update procedure and having pending UL data to send} 
ensure that { 

when { PS bearers have been set up on UTRA cell } 
then { UE transmits pending UL data } 
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13.1.3.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are those listed in TC 8.1.3.6, plus those specified 
in: TS 23.272, clause 7.4, and TS 24.301, clause 5.6.2.3. 

[TS 23.272, clause 7.4] 



UE/MS 



eNodeB 



1c 



1 b. Extended 



Service Requ is\ 



2. Optional M 
"3a."NACC7 



5. S1 UE Context Release 



9. Paging Res 



9a. Signalling 



BSS/RNS 



CS Paging h otification 



Id. S1-AP message with CS F ; I 



lasurement R 



3b. Signallinc 
4. S1-AP: 



SI 



ponse 



Connection R 



9b. Location fi rea Update or 



10. CS Call Eitablishment p'ocedure 



MME 



iport I 

connection releasle 



UE Context Re^iase Request 



6._LA U_pdate 3r_Combined_iWLA_Update oi^IjA Update_or LA Uf|date and RA Ugdate j 
7a. Suspend (see TS 23.06(11) 



slease 

< 



Combined RA/LA 



MSC 



- 1a. Paging Reg iest 



1a. Service R, 



Rcie 



1c. CS Paging R!q|ect 
llback indicator 



7b. Suspend 



8. Update be; rer(s) 



9a. C )nnection Reject 



Update 



S-GW 



luest 



Request/ Respcnse 



SGSN 



If the 
MSC is 
changed 



Figure 7.4-1: CS Page in E-UTRAN, Call in GERAN/UTRAN without PS HO 



la. The MSC receives an incoming voice call and responds by sending a Paging Request (IMSI or TMSI, optional 
Caller Line Identification and Connection Management information) to the MME over a SGs interface. The 
MSC only sends a CS Page for an UE that provides location update information using the SGs interface. In 
active mode the MME has an established SI connection and if the MME did not return the "SMS-only" 
indication to the UE during Attach or Combined TA/LA Update procedures, the MME reuses the existing 
connection to relay the CS Service Notification to the UE. 

If the MME returned the "SMS-only" indication to the UE during Attach or Combined TA/LA Update 
procedures, the MME shall not send the CS Service Notification to the UE and sends Paging Reject towards 
MSC to stop CS Paging procedure, and this CSFB procedure stops. 

The eNB forwards the paging message to the UE. The message contains CN Domain indicator and, if received 
from the MSC, the Caller Line Identification if available and needed. 

The MME immediately sends the SGs Service Request message to the MSC. Receipt of the SGs Service Request 
message stops the MSC retransmitting the SGs interface Paging message. 

NOTE 1 : The pre-configured policy may be used by UE to avoid being disturbed without Caller Line Identification 
display and the detailed handling is to be decided by CT WGl and CT WG6. 

NOTE 2: This procedure can also take place immediately after MSC receives MAP_PRN from HSS, if pre-paging 
is deployed. Caller Line Identification is also provided in the case of pre-paging. 
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NOTE 3: In order to avoid the calling party experiencing a potentially long period of silence, the MSC may use the 
SGs Service Request message as a trigger to inform the calling party that the call is progressing. 

lb. UE sends an Extended Service Request (CS Fallback Indicator, Reject or Accept) message to the MME. 
Extended Service Request message is encapsulated in RRC and Sl-AP messages. CS Fallback Indicator 
indicates MME to perform CS Fallback. The UE may decide to reject CSFB based on Caller Line Identification. 

Ic. Upon receiving the Extended Service Request (CSFB, Reject), the MME sends Paging Reject towards MSC to 
stop CS Paging procedure and this CSFB procedure stops. 

Id. The MME sends a Service Accept message encapsulated in an Sl-AP message that also includes the UE Radio 
Capabilities and a CS Fallback Indicator. This message: indicates to the eNB that the UE should be moved to 
UTRAN/GERAN. 

2. The eNodeB may optionally solicit a measurement report from the UE to determine the target GERAN cell to 
which the redirection procedure will be performed. 

3a. If the UE and network support inter-RAT cell change order to GERAN and the target cell is GERAN: The 
eNodeB triggers an inter-RAT cell change order (optionally with NACC) to a GERAN neighbour cell by 
sending an RRC message to the UE. The inter-RAT cell change order may contain a CS Fallback Indicator 
which indicates to UE that the cell change order is triggered due to a CS fallback request. If the inter-RAT cell 
change order contains a CS Fallback Indicator and the UE fails to establish connection to the target RAT, then 
the UE considers that CS fallback has failed. Service Request procedure is considered to be successfully 
completed when cell change order procedure is completed successfully. 

3b. If the UE or the network does not support inter-RAT handover from E-UTRAN to GERAN/UTRAN nor inter- 
RAT cell change order to GERAN: The eNodeB triggers RRC connection release with redirection to 
GERAN/UTRAN instead of PS HO or NACC. 

NOTE 4: Service Request procedure supervision timer shall be sufficiently long considering the optional 

measurement reporting at step 2. 

4. The eNodeB sends an S 1 UE Context Release Request (Cause) message to the MME. Cause indicates that the 
UE is not available for PS service. 

5. SI UE Context in the eNodeB is released as specified in TS 23.401 [2]. 

6. The UE moves to the new cell in GERAN/UTRAN, establishes a radio signalling connection. 

If the UE obtains LA information of the new cell (e.g. based on the system information) and the LA of the new 
cell is different from the one stored in the UE, it performs a Location Area Update or a Combined RA/LA 
Update procedure in case the target system operates in Network Mode of Operation (NMO) I. Alternatively, in 
NMO I, the UE in GERAN may perform LA update over the RR connection instead of combined RA/LA update 
over the packet access as defined in TS 24.008 [21], clause 4.7.5.2.5, unless enhanced CS establishment in DTM 
is supported. If MSC is changed, the Roaming Retry for CSFB procedure as defined in clause 7.5 is triggered by 
Location Area Update or combined RA/LA update. 

If the UE moves to an UTRAN cell and ISR is not active or the RA of the cell is different to the one the UE is 
registered in, the UE performs a Routing Area Update. This can be performed as part of the combined RA/LA 
Update procedure when the LA of the new cell is different from the one stored in the UE and the target system 
operates in NMO I. 

7. If the target RAT is GERAN and DTM is not supported, the UE starts the Suspend procedure specified in 

TS 23.060 [3], clause 16.2.1.1.2. This triggers the SGSN to send a Suspend Request message to the MME. The 
MME returns a Suspend Response to the SGSN, which contains the MM and PDP contexts of the UE. 

8. If PS services are suspended, the MME starts the preservation of non-GBR bearers and the deactivation of GBR 
bearers. 

9. The UE responds to the paging by sending a Paging Response message as specified in TS 44.018 [4] or 
TS 25.331 [7]. When received at the BSS/RNS, the Paging Response is forwarded to the MSC. 

NOTE 5: The MSC should be prepared to receive a Paging Response after a relatively long time from when the CS 
Paging Request was sent (step la). 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1506 ETSI TS 136 523-1 V9.1.1 (2010-07) 

9a. If the MSC that receives the Paging Response is different from the MSC that sent the Paging Request and if the 
Location Area Update / Combined RA/LA Update was not performed in step 6, the MSC shall reject the Paging 
Response by releasing the A/Iu-cs connection. The BSS/RNS in turn releases the signalling connection for CS 
domain. 

9b. The signalling connection release shall trigger the UE to perform a Location Area Update as follows: 

If the target system operates in Network Mode of Operation (NMO) I and if the target system is UTRAN or the 
target system is GERAN supporting DTM and the UE supports DTM, the UE shall perform a combined RA/LA 
update, as defined in TS 23.060 [3]. 

If the target system operates in NMO II or III the UE performs a Location Area Update towards the MSC. 

The Location Area Update triggers the Roaming Retry for CS Fallback procedure as defined in clause 7.5. 

10. The CS Call Establishment procedure is initiated. 

[TS 24.301, clause 5.6.2.3] 

The network may initiate the paging procedure for non-EPS services when the UE is IMSI attached for non-EPS 
services (see example in figure 5.6.2.3.1). 

UE AS MME 

Request paging 
Paging 



EXTENDED SERVICE REQUEST 



Figure 5.6.2.3.1 : Paging procedure for CS fallbacl< to A/Gb or lu mode 



To initiate the procedure when no NAS signalling connection exists, the EMM entity in the network requests the lower 
layer to start paging (see 3GPP TS 36.300 [20], 3GPP TS 36.413 [23]). The paging message includes a CN domain 
indicator set to "CS" in order to indicate that this is paging for CS fallback. 

NOTE: The timer T3413 is not started in the network when the paging procedure is initiated for CS fallback. 

To notify the UE about an incoming mobile terminating CS service when a NAS signalling connection exists, the EMM 
entity in the network shall send a CS SERVICE NOTIFICATION message. This message may also include CS service 
related parameters (e.g. Calling Line Identification, SS or LCS related parameters). 

Upon reception of a paging indication, the UE shall respond with an EXTENDED SERVICE REQUEST. If the paging 
is received in EMM -IDLE mode, the UE shall respond immediately. If the paging is received as NAS CS 
NOTIFICATION message in EMM-CONNECTED mode, the UE may request upper layers input i.e. to accept or reject 
CS fallback before responding with an EXTENDED SERVICE REQUEST. The response is indicated in the CSFB 
response information element in the EXTENDED SERVICE REQUEST message in both EMM-IDLE and EMM- 
CONNECTED modes. 

13.1.3.3 Test description 

13.1.3.3.1 Pre-test conditions 

System Simulator: 

2 cells, one E-UTRA and one UTRA cell and different location areas: 

- Cell 1 E-UTRA serving cell 
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Cell 5 suitable neighbour UTRA cell 

The parameters settings and power levels for Cell 1 and Cell 5 are selected according to [18], [5] and Table 
13.1.3.3.2-1 so that camping on Cell 1 is guaranteed and no cell re-selection to Cell 5 can take place (utra 
priority is lower than serving and S ceii i > Thresh ceii i.iow)- 

UE: 

None. 

Preamble: 

The UE is in state Loopback actived (state 4) on cell 1 according to [18] using UE test loop mode B with 
IP_PDU_delay set to 255 sec. 

13.1.3.3.2 Test procedure sequence 

Table 13.1.3.3.2-1 shows the cell power levels after the preamble. 

Table 13.1.3.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 5 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-75 


- 


The power levels are such that 
camping on Cell 1 is guaranteed. 


CPICH Ec 


dBm/3.84 MHz 


- 


-70 
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Table 13.1.3.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 1 . 


<- 


IP packet 






2 


The SS transmits a DLInformationTransfer 
message on Cell 1 containing a CS SERVICE 
NOTIFICATION message. 


<— 


DLInformationTransfer 
NAS: CS SERVICE 
NOTIFICATION 








EXCEPTION: Step Sal describes behaviour 
that depends on the UE capability; the "lower 
case letter" identifies a step sequence that 
takes place if a capability is supported. 










3a1 


IF the UE needs to request upper layer input 
before accepting the CS fallback, the incoming 
CS call is accepted at the UE through MMI or 
AT command. 










4 


Check: Does the UE transmit an 
ULInformationTranfer message containing an 
EXTENDED SERVICE REQUEST with 
Service Type IE set to "mobile terminating CS 
fallback or IxCS fallback" on Cell 1 ? 


-> 


ULInformationTransfer 
NAS: EXTENDED SERVICE 
REQUEST 


1 


P 


5 


The SS transmits an RRCConnectionRelease 
message on Cell 1 with IE 
redirectionlnformation including UTRA- 
CarrierFreq of Cell 5. 


<— 


RRCConnectionRelease 






6 


Check: Does the UE transmit an RRC 
CONNECTION REQUEST message with 
Establishment cause 'Signaling" to initiate RA 
Update procedure? 


-> 


RRC CONNECTION REQUEST 


2 


P 


7- 
13 


Steps 2 to 4 and 7 to 1 of the generic test 
procedure in TS 36.508 subclause 6.4.2.8 are 
performed on Cell 5. 












EXCEPTION: In parallel to the events 
described in steps 14 to 25, the steps specified 
in Table 13.1.3.3.2-3 should take place. 










14 


Check: Does the UE transmit a PAGING 
RESPONSE on Cell 5? 


-> 


PAGING RESPONSE 


3 


P 


15- 
25 


Steps 7 to 17 of the generic test procedure in 
TS 34.108 subclause 7.2.3.1 are performed on 
Cell 5. 
NOTE: Mobile terminating CS call is set up. 











Table 13.1.3.3.2-3: Parallel behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Check: Does the UE transmit a ROUTING 
AREA UPDATE REQUEST message on Cell 5 
with the "follow-on request pending" flag set? 


-> 


ROUTING AREA UPDATE 
REQUEST 


4 


P 


2 


The SS transmits a ROUTING AREA UPDATE 
ACCEPT on Cell 5. 


<- 


ROUTING AREA UPDATE 
ACCEPT 


- 


- 


3 


The UE sends ROUTING AREA UPDATE 
COMPLETE message. 


-> 


ROUTING AREA UPDATE 
COMPLETE 


- 


- 


4-5 


Steps 11 to 1 2 of the generic test procedure in 
TS 34.108 subclause 7.2.4.2 are performed on 
Cell 5. 

NOTE: Mobile originating packet switched 
session is set up. 










6 


Check: Does the UE loop back the IP packet 
received in Step 1 on the RAB associated with 
the PDP context active on Cell 5? 


-> 


IP packet 


5 


P 
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13.1.3.3.3 



Specific message contents 



Table 13.1.3.3.3-1 : SystemlnformationBlockTypel for cell 1 (preamble and all steps, Table 13.1.3.3.2- 

2) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type1 ::= SEQUENCE { 








schedulinginfoLlst ::= SEQUENCE (SIZE (L.tnaxSI- 
Message)) OF SEQUENCE {} 


Combination 4 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB6 are 
transmitted 




1 









Table 13.1.3.3.3-2: SystemlnformationBlockTypeG ior cell 1 (preamble and all steps, Table 13.1.3.3.2- 

2) 



Derivation Path: 36.508 Table 4.4.3.3-5 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockType6 ::= SEQUENCE { 








carrierFreqListUTRA-FDD SEQUENCE (SIZE 
(1..maxUTRA-FDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA- 
FDD 


ceilReselectionPriority 


3 


Lower priority than 
E-UTRA 




} 








carrierFreqListUTRA-TDD SEQUENCE (SIZE 
(1..maxUTRA-TDD-Carrier)) OF SEQUENCE { 


1 entry 




UTRA- 
TDD 


ceilReselectionPriority 


3 


Lower priority than 
E-UTRA 




1 








} 









Table 13.1.3.3.3-3: DLInformationTransfer {step 2, Table 13.1.3.3.2-2) 



Derivation Path: 36.508 Table 4.6.1-3 


Information Element 


Value/remark 


Comment 


Condition 


DLInformationTransfer ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE { 








dllnformationTransfer-r8 SEQUENCE { 








dedicated InfoType CHOICE { 








dedicatedlnfoNAS 


Set according to 36.508 
Table 4.7.2-8A 


CS SERVICE 
NOTIFICATION 




1 








} 








} 








} 








} 
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Table 13.1.3.3.3-4: ULInformationTransfer (step 4, Table 13.1.3.3.2-2) 



Derivation Path: 36.508 Table 4.6.1-25 


Information Element 


Value/remark 


Comment 


Condition 


ULInformationTransfer ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE { 








ullnformationTransfer-r8 SEQUENCE { 








dedicated InfoType CHQICE { 








dedicatedlnfoNAS 


Set according to Table 
13.1.3.3.3-5 


EXTENDED 

SERVICE 

REQUEST 




} 








} 








1 








1 








} 









Table 13.1.3.3.3-5: EXTENDED SERVICE REQUEST (step 4, Table 13.1.3.3.2-2) 



Derivation Path: 36.508 Table 4.7.2-14A 


Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


EMM 






Service type 


'0001 'B 


mobile terminating 
CS fallback or 
IxCS fallback 




CSFB response 


'001 'B 


CS fallback 
accepted by the 
UE 





Table 13.1.3.3.3-6: RRCConnectionRelease (step 5, Table 13.1.3.3.2-2) 



Derivation Path: 36.508 Table 4.6.1.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE { 








rrcConnectionRelease-r8 SEQUENCE { 








redirectedCarrierlnfo ::= CHQICE { 








utra-FDD 


Downlink UARFCN of cell 
5 




UTRA- 
FDD 


utra-TDD 


Downlink UARFCN of cell 
5 




UTRA- 
TDD 


1 








1 








} 









Table 13.1.3.3.3-7: RRC CONNECTION REQUEST (step 6, Table 13.1.3.3.2-2) 



Derivation Path: 34.108 clause 9.1.1 


Information Element 


Value/remark 


Comment 


Condition 


Establishment cause 


Signaling 







Table 13.1.3.3.3-8: SERVICE REQUEST (step 1, Table 13.1.3.3.2-3) 



Derivation Path: 24.008 Table 9.4.20 


Information Element 


Value/remark 


Comment 


Condition 


Service type 


'001 'B 


Data 
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13.1.5 Call setup from E-UTRAN RRC_CONNECTED / CS fallback to 
UTRAN with handover / MO call 

13.1.5.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state having requested CS call setup } 
ensure that { 

when { UE receives a MobilityFromEUTRACommand message including a cs-Fallbacklndicator set to 
'true' and a targetRAT-Type set to 'utra' } 

then { UE transmits a HANDOVER TO UTRAN COMPLETE message and continues the PS data service } 
} 

13.1.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 36.331, clause 5.4.3.3. 

[TS 36.331, clause 5.4.3.3] 

The UE shall be able to receive a MobilityFromEUTRACommand message and perform a cell change order to GERAN, 
even if no prior UE measurements have been performed on the target cell. 

The UE shall: 

1> stop timer T310, if running; 

1> if the MobilityFromEUTRACommand message includes the purpose set to 'handover': 

2> if the targetRAT-Type is set to 'utra' or 'geran': 

3> consider inter-RAT mobility as initiated towards the RAT indicated by the targetRAT-Type included in 
the MobilityFromEUTRACommand message; 

3> forward the nas-SecurityParamFromEUTRA to the upper layers; 

3> access the target cell indicated in the inter-RAT message in accordance with the specifications of the 
target RAT; 

13.1.5.3 Test description 
13.1.5.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 5. 
UE: 

None. 
Preamble: 

- The UE is in state Loopback Activated (state 4) with condition UE TEST LOOP MODE B on Cell 1 according 
to [18]. 

- The UE has a valid TMSI (TMSl- 1 ) and is registered in LAI- 1 . 
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13.1.5.3.2 



Test procedure sequence 

Table 13.1.5.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 1 . 


<— 


IP packet 






2 


The UE loops back the IP packet on the DRB 
associated with the default EPS bearer context 
on Cell 1. 


-> 


IP packet 






3 


Cause the UE to originate CS call, (see Note 
1) 


- 


- 


- 


- 


4 


The UE transmits an ULInformationTransfer 
message on Cell 1 . 

This message includes an EX 1 ENDED 
SERVICE REQUEST message. 


-> 


ULInformationTransfer 






5 


The SS transmits a 

MobilityFromEUTRACommand message on 
CelM. 


<— 


l\/lobilityFromEUTRACommand 






6 


Check: Does the UE transmit a HANDOVER 
TO UTRAN COMPLETE message on Cell 5? 


-> 


HANDOVER TO UTRAN 
COMPLETE 


1 


P 




Generic test procedure in TS 34.108 
subclause 7.4.2.9.2.2 is performed on Cell 5. 
NOTE: The UE performs Radio Bearer 
Establishment in a UTRAN cell. 










7 


The SS transmits a SECURITY MODE 
COMMAND message on Cell 5 in order to 
activate integrity protection. 


<— 


SECURITY MODE COMMAND 






8 


The UE transmits a SECURITY MODE 
COMPLETE message on Cell 5. 


-> 


SECURITY MODE COMPLETE 


- 


- 


9 


The SS transmits an UTRAN MOBILITY 
INFORMATION message to notify CN 
information on Cell 5. 


<— 


UTRAN MOBILITY 
INFORMATION 






10 


The UE transmits an UTRAN MOBILITY 
INFORMATION CONFIRM message on Cell 5. 


~> 


UTRAN MOBILITY 
INFORMATION CONFIRM 


- 


- 


11 


The UE transmits an INITIAL DIRECT 
TRANSFER message on Cell 5. 
This message includes a ROUTING AREA 
UPDATE REOUEST message. 


-> 


INITIAL DIRECT TRANSFER 






12 


The SS transmits a DOWNLINK DIRECT 
TRANSFER message on Cell 5. 
This message includes a ROUTING AREA 
UPDATE ACCEPT message. 


<~ 


DOWNLINK DIRECT TRANSFER 






13 


The UE transmits an UPLINK DIRECT 
TRANSFER message on Cell 5. 
This message includes a ROUTING AREA 
UPDATE COMPLETE message. 


-> 


UPLINK DIRECT TRANSFER 






14 


The SS transmits one IP packet to the UE on 
the PS RAB on Cell 5. 


<- 


IP packet 


- 


- 


15 


Check: Does the UE loop back the IP packet 
on the PS RAB on Cell 5? 


-> 


IP packet 


1 


P 


Note 1 : The trigger in step 3 is the same as in the generic procedure in 36.508 clause 6.4.3.5. 
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13.1 .5.3.3 Specific message contents 

Table 13.1.5.3.3-1: MobilityFromEUTRACommand {step 5, Table 13.1.5.3.2-1) 



Derivation Path: 36.508, Table 4.6.1-6 


Information Element 


Value/remark 


Comment 


Condition 


MobilityFromEUTRACommand ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








mobilityFromEUTRACommand-r8 SEQUENCE { 








cs-Fallbacklndicator 


true 






purpose CHOICE! 








handover SEQUENCE { 








targetRAT-Type 


utra 






targetRAT-MessageContainer 


HANDOVER TO UTRAN 
COMMAND(UTRA RRC 
message) 






nas-SecurityParamFromEUTRA 


The 4 least significant 
bits of the NAS downlink 
COUNT value 






systemlnformation 


Not present 






1 








} 








} 








} 








1 








} 









Table 13.1.5.3.3-2: HANDOVER TO UTRAN COMMAND (Table 13.1.5.3.3-1) 

Derivation Path: 36.508, Table 4. 7B. 1-1, condition UTRA PS RB 



13.1.7 



13.1.7.1 



Call setup from E-UTRA RRCJDLE / CS fallback to GSM with 
redirection / MT call 

Test Purpose (TP) 



(1) 



with {UE in E-UTRA RRC_IDLE state } 
ensure that { 

when { UE receives a Paging message for CS service, and UE has Set up RRCConnection with the E- 
UTRA cell} 

then { UE transmits an ULInformationTransfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile terminating CS fallback or IxCS fallback" } 



} 



(2) 



with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile terminating CS fallback or IxCS fallback" } 
ensure that { 

when { SS transmits an RRCConnectionRelease message with redirection to a GSM cell in a different 
location area and operating in NMD I } 

then { UE tunes to GSM cell and performs a RA Update procedure } 



(3) 

with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile terminating CS fallback or IxCS fallback" and tuned to 
GSM cell and initiated a RA Update procedure } 
ensure that { 

when { UE completes the RA Update procedure } 

then { UE transmits a PAGING RESPONSE on GSM cell to set up MT CS call } 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1514 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



13.1.7.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are those listed in TC 8.1.3.8, plus those specified 
in: TS 23.272, clause 7.4, and TS 24.301, clause 5.6.2.3.. 

[TS 23.272, clause 7.2] 

The procedure for Mobile Terminating Call in idle mode is illustrated in figure 7.2-1. 



UE 



eNodeB 



6. Paging 



o 



MME 



5. Paging 



7a. Extended Service Request 



7b. Initial UE Context Setup 



8a. PS handover 

8b. eNB assis:ed cell change 



RNC/BSC 



MSC 
VLR 



HSS 



2. SRI procedire in TS 23.018 



3. lAM 



4. Paging 



G-MSC 



1. lAM 



I 8c. Location Area Update 
8d. Paging Response 



9b. RRC Release 



8d. Paging Response 



Option 1: 

O 9a- Establish CS connection I MSC is not 



' ciianged 



9b. Connection Reiect 



Location Area Update and Roaming Retry for CS Fallback (clause 7.5) 



I Option 2: 
I l\^SC is 
I clianged 



Figure 7.2-1 : Mobile Terminating Call in idle mode 



1. G-MSC receives lAM. 

2. G-MSC retrieves routing information of the terminating UE by Send Routing Info procedures as specified in 

TS 23.018 [5]. 

3. G-MSC sends I AM to the MSC on the terminating side as specified in TS 23.018 [5]. 

4. The MME receives a Paging (IMSI, VLR TMSI, Location Information) message from the MSC over a SGs 
interface. The TMSI (or IMSI) received from the MSC is used by the MME to find the S-TMSI which is used as 
the paging address on the radio interface If location information is reliably known by MME (i.e. MME stores the 
list of TAs), the MME shall page the UE in all the TAs. If the MME does not have a stored TA list for the UE, 
the MME should use the location information received from the MSC to page the UE. 

NOTE 1: This procedure takes place before step 3, immediately after MSC receives MAP_PRN from HSS, if pre- 
paging is deployed. 

5. The MME sends a Paging (as specified in TS 23.401 [2]) message to each eNodeB. The Paging message 
includes a suitable UE Identity (i.e. S-TMSI or IMSI) and a CN Domain Indicator that indicates which domain 
(CS or PS) initiated the paging message. In this case it shall be set to "CS" by the MME. 

6. The radio resource part of the paging procedure takes place. The message contains a suitable UE Identity (i.e. 
S-TMSI or IMSI) and a CN Domain indicator. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1515 ETSI TS 136 523-1 V9.1.1 (2010-07) 

7a. The UE establishes an RRC connection and sends an Extended Service Request (CS Fallback Indicator) to 
MME. The UE indicates its S-TMSI in the RRC signalling. The Extended Service Request message is 
encapsulated in RRC and Sl-AP messages. The CS Fallback Indicator indicates to the MME that CS Fallback 
for this UE is required. 

7b. MME sends Sl-AP: Initial UE Context Setup (UE capabilities, CS Fallback Indicator and other parameters 
specified in TS 23.401 [2]) to indicate the eNodeB to move the UE to UTRAN/GERAN. 

8a. Target RAT has PS HO capability: Upon receipt of the Initial UE Context Setup message with a CS Fallback 
Indicator the eNodeB may optionally solicit measurement reports from the UE to determine the target cell to 
which PS handover will be performed. A PS handover is then performed as specified in TS 23.401 [2]. As part of 
this PS handover, the UE receives a HO from E-UTRAN Command that may contain a CS Fallback Indicator, 
which indicates to UE that the handover is triggered due to a CS fallback request. If the HO from E-UTRAN 
Command contains a CS Fallback Indicator and the UE fails to establish connection to the target RAT, then the 
UE considers that CS fallback has failed. 

8b. Target RAT has no PS HO capability. Upon receipt of the Initial UE Context Setup message with a CS Fallback 
Indicator the eNodeB may optionally solicit measurement reports from the UE to determine the target cell to 
redirect the UE to. After that, the eNB releases the RRC Connection with a redirection info to change to CS 
capable RATs (RAT, frequency, cell info). As an option the inter-RAT system information might be provided by 
the eNodeB using the NACC procedure for GERAN. In this case the UE receives in inter-RAT cell change order 
that may contain a CS Fallback Indicator which indicates to UE that the cell change order is triggered due to a 
CS fallback request. If the inter-RAT cell change order contains a CS Fallback Indicator and the UE fails to 
establish connection to the target RAT, then the UE considers that CS fallback has failed. 

8c. If the UE obtains LA/RA information of the new UTRAN/GERAN cell (e.g. based on the system information or 
redirection info) and the LA/RA of the new cell is different from the one stored in the UE, it performs a Location 
Area Update or a Combined RA/LA procedure if the target system operates in Network Mode of Operation 
(NMO) I, according to TS 23.060 [3]. 

8d. The UE responds with a page response message to the MSC as follows: 

If Target RAT is UTRAN or GERAN lu mode, the UE establishes an RRC connection and responds to the 
paging in an RRC Initial Direct Transfer message as specified in TS 25.331 [7]. The CN Domain Indicator is 
set to "CS" in the Initial Direct Transfer message. When received at the RNC, the Paging Response message 
is sent in an RANAP Initial UE message to the MSC. 

If Target RAT is GERAN A/Gb mode: the UE establishes an RR connection by using the procedures 
specified in TS 44.018 [6] (i.e. UE requests and is assigned a dedicated channel where it sends a SABM 
containing a layer 3 Service Request message = PAGING RESPONSE to the BSS and the BSS responds by 
sending a UA). After the establishment of the main signalling link as described in TS 44.018 [4] the UE 
enters either Dual Transfer Mode or Dedicated Mode and the CS call establishment procedure completes. 
When received at the BSC, the Paging Response message is sent in a BSSAP COMPLETE LAYER 3 
INFORMATION message to the MSC as specified in TS 48.008 [6]. 

NOTE 2: The BSS should be prepared to receive a PAGING RESPONSE even when a corresponding PAGING 

REQUEST has not been sent by this BSS. Also, the MSC should be prepared to receive a paging response 
after a relatively long time from when the CS Paging was sent (step 4). 

9a. In case the MSC serving the 2G/3G cell is the same as the MSC that served the UE while camped on LTE, it 
shall stop the paging response timer and establish the CS connection. 

9b. If the MSC that receives the paging response is different from the MSC that sent the paging request and if the 
Location Area Update / Combined RA/LA Update was not performed in step 8c, the MSC shall reject the page 
response by releasing the A/lu-cs connection. The BSC/RNC in turn releases the RRC/RR connection. The 
RRC/RR release shall trigger the UE to perform a Location Area Update as follows: 

If the target system operates in Network Mode of Operation (NMO) I the UE shall perform a combined 
RA/LA update, as defined in TS 23.060 [3]. 

If the target system operates in NMO II or III the UE performs a Location Area Update towards the MSC. 

The Location Area Update triggers the Roaming Retry for CS Fallback procedure as defined in clause 7.5. 
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When the target system operates in Network Mode of Operation (NMO) I then, if the UE is still in UTRAN/GERAN 
after the CS voice call is terminated, and if a combined RA/LA update has not already been performed, the UE 
performs a combined RA/LA update procedure. This procedure is used to create a Gs association between the 
MSCA^LR and the SGSN, and to release the SGs association. 

When the target system operates in Network Mode of Operation (NMO) II or III then, if the UE is still in 
UTRAN/GERAN after the CS voice call is terminated, and if a LA update has not already been performed, the UE 
performs a LA update procedure. This procedure is used to release the SGs association between the MSC/VLR and the 
MME. 

[TS 24.301, clause 5.6.2.3] 

The network may initiate the paging procedure for non-EPS services when the UE is IMSI attached for non-EPS 
services (see example in figure 5.6.2.3.1). 

UE AS MME 

Request paging 
Paging 



EXTENDED SERVICE REQUEST 



Figure 5.6.2.3.1 : Paging procedure for CS fallback to A/Gb or lu mode 



To initiate the procedure when no NAS signalling connection exists, the EMM entity in the network requests the lower 
layer to start paging (see 3GPP TS 36.300 [20], 3GPP TS 36.413 [23]). The paging message includes a CN domain 
indicator set to "CS" in order to indicate that this is paging for CS fallback. 

NOTE: The timer T3413 is not started in the network when the paging procedure is initiated for CS fallback. 

To notify the UE about an incoming mobile terminating CS service when a NAS signalling connection exists, the EMM 
entity in the network shall send a CS SERVICE NOTIFICATION message. This message may also include CS service 
related parameters (e.g. Calling Line Identification, SS or LCS related parameters). 

Upon reception of a paging indication, the UE shall respond with an EXTENDED SERVICE REQUEST. If the paging 
is received in EMM -IDLE mode, the UE shall respond immediately. If the paging is received as NAS CS 
NOTIFICATION message in EMM-CONNECTED mode, the UE may request upper layers input i.e. to accept or reject 
CS fallback before responding with an EXTENDED SERVICE REQUEST. The response is indicated in the CSFB 
response information element in the EXTENDED SERVICE REQUEST message in both EMM-IDLE and EMM- 
CONNECTED modes. 

13.1.7.3 Test description 

13.1.7.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 and Cell 24. 
UE: 

None. 
Preamble: 

The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

13.1.7.3.2 Test procedure sequence 
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Table 13.1.3.3.2-1 shows the cell power levels after the preamble. 

Table 13.1.7.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 24 


Remark 


TO 


Cell-specific RS EPRE 


dBm/15kHz 


-70 


- 


The power levels are such that 
camping on Cell 1 is guaranteed. 


GERAN Cell Power 


dBm 


- 


-80 



Table 13.1.7.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits a Paging message on Colli . 


<- 


Paging 


- 


- 


2 


The UE transmits an RRCConnectionRequest 
message on CelH. 


-> 


RRCConnectionRequest 


- 


- 


3 


The SS transmits an RRCConnectionSetup 
message on Colli. 


<— 


RRCConnectionSetup 


- 


- 


4 


The UE transmits an 

RRCConnectionSetupComplete message on 
Colli. 


-> 


RRCConnectionSetupComplete 






5 


Check: Does the UE transmint an 
ULInformationTransfer message on Colli ? The 
meesage includes an EXTENDED SERVICE 
REQUEST message. 


-> 


ULInformationTransfer 
EXTENDED SERVICE REQUEST 


1 


P 


6 


The SS transmits a RRCConnectionRelease 
message on Cell 1 with IE 
redirectedCarrierlnfo including geran 
frequency of Cell 24. 


<— 


RRCConnectionRelease 






7 


Check: Does the UE transmit a CHANNEL 
REQUEST message on Cell 24? 


-> 


CHANNEL REQUEST 


2 


P 


8-17 


Steps 2 to 1 1 of the generic test procedure in 

TS 36.508 subclause 6.4.2. 9are performed on 

Cell 24. 

Note: Routing area updating procedure is 

performed. 










18 


Check: Does the UE transmit a PAGING 
RESPONSE on Cell 24? 


-> 


PAGING RESPONSE 


3 


P 


19- 
36 


Steps 72 to 1 9 of the generic test procedure in 
TS 51 .01 0-1 subclause 1 0.1 .3 are performed 
on Cell 24. 
NOTE: Mobile terminating CS call is set up. 











13.1.7.3.3 



Specific message contents 



Table 13.1.7.3.3-1 : SystemlnformationBlockTypel for cell 1 (preamble and all steps, Table 13.1.7.3.2- 

2) 



Derivation Path: 36.508 table 4.4.3.2-3 | 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnfoLlst ::= SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCER 


Combination 5 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB7 are 
transmitted 




} 
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Table 13.1.7.3.3-2: Systemlnformation BlockType7 ior ceW 1 (preamble and all steps, Table 13.1.7.3.2- 

2) 



Derivation Path: 36.508 Table 4.4.3.3-6 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type7 ::= SEQUENCE { 








carrierFreqslnfoListcarrierFreqslnfoListSEQUENCE 
(SIZE (L.maxGNFG)) OF SEQUENCE { 


1 entry 






carrierFreqs SEQUENCE { 








startingARFCN[1] 


f11 






1 








1 








} 









Table 13.1.7.3.3-3: Pag/ng (stepi , Table 13.1.7.3.2-2) 



Derivation Path: 36.508 Table 4.6.1-7 


Information Element 


Value/remark 


Comment 


Condition 


Paging ::= SEQUENCE { 








pagingRecordList SEQUENCE (SIZE 
(1 ..maxPaqeRec)) OF SEQUENCE { 


1 entry 






ue-ldentity[1] CHOICE { 








imsi 


Set to the value of the 
IMSI of the UE 






} 








cn-Domain[1] 


Cs 






} 








} 









Table 13.1.7.3.3-4: ULInformationTransfer {step 5, Table 13.1.7.3.2-2) 



Derivation Path: 36.508 Table 4.6.1-25 


Information Element 


Value/remark 


Comment 


Condition 


ULInformationTransfer ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








ullnformationTransfer-rS SEQUENCE { 








dedicated InfoType CHOICE { 








dedicated InfoNAS 


Set according to Table 
13.1.3.3.3-5 


EXTENDED 

SERVICE 

REQUEST 




} 








} 








1 








1 








} 









Table 13.1.7.3.3-5: EXTENDED SERVICE REQUEST (step 5, Table 13.1.7.3.2-2) 



Derivation Path: 36.508 Table 4.7.2-14A 


Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


EMM 






Service type 


'0001 'B 


mobile terminating 
CS fallback or 
IxCS fallback 




CSFB response 


'001 'B 


CS fallback 
accepted by the 
UE 
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Table 13.1.7.3.3-6: RRCConnection Release (step 6, Table 13.1.7.3.2-2) 



Derivation Path: 36.508 Table 4.6.1.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE { 








rrcConnectionRelease-r8 SEOUENCE { 








redirectedCarrierlnfo ::= CHOICE { 








qeran 


f11 






} 








} 








} 








} 








} 









1 3.1 .8 Call setup from E-UTRA RRC_CONNECTED/ CS fallback to GSM 
with Redirection / MO call 



13.1.8.1 



(1) 



Test Purpose (TP) 



with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE is triggered by upper layers to perform a circuit switched voice call } 
then { UE transmits an ULInformationTransfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile originating CS fallback or IxCS fallback" } 



(2) 

with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile originating CS fallback or IxCS fallback" } 
ensure that { 

when { SS transmits an RRCConnectionRelease message with redirection to a GERAN cell in a 
different location area and operating in NMO I } 

then { UE tunes to GERAN cell and performs combined LA/RA update procedure, or alternatively LA 
Update procedure only} 
} 

(3) 

with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile originating CS fallback or IxCS fallback" } 
ensure that { 

when { UE has tuned to GERAN cell and performed LA Update procedure } 

then { UE transmits GPRS SUSPENSION REQUEST to suspend data services over GPRS } 
} 

(4) 

with { UE having transmitted an ULInformationTranfer message containing an EXTENDED SERVICE REQUEST 
message with Service Type IE set to "mobile originating CS fallback or IxCS fallback" and tuned to 
GERAN cell and initiated a LA Update procedure } 
ensure that { 

when { After UE tuned to GERAN cell and performed LA Update procedure } 

then { UE completes MO circuit switched voice call setup procedure on GERAN } 



13.1.8.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are those listed in TC 8.1.3.6, plus those specified 
in: TS 23.272, clause 6.3, and TS 24.301, clause 5.6.1.1. 

[TS 23.272, clause 6.3] 
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UE/MS 



eNodeB 



1a. Extended SBrvice Request 



2. Optional Miiasurement R ;port Solicitation 



3a. NACC, 3b, 



5. S1 UECon 



BSS/RNS 



1 b. S1 -AP mc ssage with CS F; 



RRC connect on 
4. S1-AP:S1 



ext Release 



IVIME 



release 
UE Context Release Request 



IVISC 



llback indicator 



S-GW 



SGSN 



6. LA Update or Combined FiA/LA Update or F!A Update or LA 



Jpdate and RA 



Update 



7a. Suspend { 



lee 23.060) , 



7b. Suspend Flequest / Response 



9. CS MO cal 



^ 8. Update bea 



•er(s) 



H' 



10a. Service Reject 



10b. Location 



Area Update 



10c. CS MO call 



In case MSC ' 
changed 



1 1 . Routing Aiea Update or 



Combined RA/LA 



Update 



Figure 6.3-1 : CS Call Request in E-UTRAN, Call in GERAN/UTRAN without PS HO 



la. The UE sends an Extended Service Request (CS Fallback Indicator) to the MME. Extended Service Request 
message is encapsulated in RRC and Sl-AP messages. CS Fallback Indicator indicates MME to perform CS 
Fallback. The UE only transmits this request if it is attached to CS domain (with a combined EPS/lMSl Attach) 
and can not initiate an IMS voice session (because e.g. the UE is not IMS registered or IMS voice services are 
not supported by the serving IP-CAN, home PLMN or UE). 

lb. The MME sends an Sl-AP Request message to eNB that includes a CS Fallback Indicator. This message 
indicates to the eNB that the UE should be moved to UTRAN/GERAN. 

2. The eNodeB may optionally solicit a measurement report from the UE to determine the target GERAN cell to 
which the redirection procedure will be performed. 

3a. If the UE and network support inter-RAT cell change order to GERAN and the target cell is GERAN: The 
eNodeB triggers an inter-RAT cell change order (optionally with NACC) to a GERAN neighbour cell by 
sending an RRC message to the UE. The inter-RAT cell change order may contain a CS Fallback Indicator 
which indicates to UE that the cell change order is triggered due to a CS fallback request. If the inter-RAT cell 
change order contains a CS Fallback Indicator and the UE fails to establish connection to the target RAT, then 
the UE considers that CS fallback has failed. Service Request procedure is considered to be successfully 
completed when cell change order procedure is completed successfully. 

3b. If the UE or the network does not support inter-RAT handover from E-UTRAN to GERAN/UTRAN nor inter- 
RAT cell change order to GERAN: The eNodeB triggers RRC connection release with redirection to 
GERANAJTRAN instead of PS HO or NACC. 

NOTE 2: Service Request procedure supervision timer shall be sufficiently long considering the optional 
measurement reporting at step 2. 

4. The eNodeB sends an S 1 UE Context Release Request (Cause) message to the MME. Cause indicates that the 
UE is not available for the PS service. 
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5. SI UE Context in the eNodeB is released as specified in TS 23.401 [2]. 

6. The UE moves to the new cell in GERAN/UTRAN and establishes a radio signalling connection. 

If the UE obtains LA information of the new cell (e.g. based on the system information) and the LA of the new 
cell is different from the one stored in the UE, it performs a Location Area Update or a Combined RA/LA 
Update procedure in case the target system operates in Network Mode of Operation (NMO) I. Alternatively, in 
NMO I, the UE in GERAN may perform LA update over the RR connection instead of combined RA/LA update 
over the packet access, as defined in TS 24.008 [21], clause 4.7.5.2.5, unless enhanced CS establishment in DTM 
is supported. 

If the UE moves to an UTRAN cell and ISR is not active or the RA of the cell is different to the one the UE is 
registered in, the UE performs a Routing Area Update. This can be performed as part of the combined RA/LA 
Update procedure when the LA of the new cell is different from the one stored in the UE and the target system 
operates in NMO I. 

7. If the target RAT is GERAN and DTM is not supported, the UE starts the Suspend procedure specified in 

TS 23.060 [3], clause 16.2.1.1.2. This triggers the SGSN to send a Suspend Request message to the MME. The 
MME returns a Suspend Response to the SGSN, which contains the MM and PDF contexts of the UE. 

8. If PS services are suspended, the MME starts the preservation of non-GBR bearers and the deactivation of GBR 
bearers. 

9. The UE continues with the MO call setup procedure. 

10a. In case the MSC serving the 2G/3G cell is different from the MSC that served the UE while camped on 
E-UTRAN and if the Location Area Update / Combined RA/LA Update was not performed in step 6, the MSC 
shall reject the call setup service request, if implicit location update is not performed. 

10b. A UE detecting that the MSC rejected the service request shall perform the Location Area Update according 
to existing GERAN or UTRAN procedures. 

10c. After completion of the Location Area Update the UE continues with a MO call setup procedure. 

1 1 . After the CS voice call is terminated and if the UE is in GERAN and PS services are suspended, then (as 

specified in TS 23.060 [3]) the UE shall resume PS services by sending a Routing Area Update Request message 
to the SGSN. The Update Type depends on the mode of operation of the GERAN network, e.g. in mode I a 
Combined RA/LA Update is used and in mode II or III Routing Area Update is used. 

If the UE remains on UTRAN/GERAN after the CS voice call is terminated the UE performs normal mobility 
management procedures as defined in TS 23.060 [3] and TS 24.008 [21], i.e. if the UE is not registered in the current 
RA/LA, the UE performs combined RA/LA update procedure when the target system operates in NMO I, or separate 
LA update and RA update procedures when the target system operates in NMO II/III. Also for NMO I if the UE 
performed only RA update due to the CS call the UE performs a combined RA/LA update (see TS 23.060 [3], 
clause 6.3.1) which creates the Gs association. 

[TS 24.301, clause 5.6.1.1] 

The purpose of the service request procedure is to transfer the EMM mode from EMM-IDLE to EMM-CONNECTED 
mode and establish the radio and S 1 bearers when uplink user data or signalling is to be sent. Another purpose of this 
procedure is to invoke MO/MT CS fallback procedures. 

This procedure is used when: 

the network has downlink signalling pending; 

the UE has uplink signalling pending; 

the UE or the network has user data pending and the UE is in EMM-IDLE mode; 

the UE in EMM-IDLE or EMM-CONNECTED mode has requested to perform mobile originating/terminating 
CS fallback; 

the network has downlink cdma2000® signalling pending; or 

the UE has uplink cdma2000® signalling pending. 
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The service request procedure is initiated by the UE, however, for the downlink transfer of signalHng, cdma2000" 
signalling or user data in EMM-IDLE mode, the trigger is given by the network by means of the paging procedure (see 
subclause 5.6.2). 

The UE shall invoke the service request procedure when: 

a) the UE in EMM -IDLE mode receives a paging request with CN domain indicator set to "PS" from the network; 

b) the UE, in EMM -IDLE mode, has pending user data to be sent; 

c) the UE, in EMM-IDLE mode, has uplink signalling pending; 

d) the UE in EMM-IDLE or EMM-CONNECTED mode is configured to use CS fallback and has a mobile 
originating CS fallback request from the upper layer; 

e) the UE in EMM -IDLE mode is configured to use CS fallback and receives a paging request with CN domain 
indicator set to "CS", or the UE in EMM-CONNECTED mode is configured to use CS fallback and receives a 
CS SERVICE NOTIFICATION message; 

f) the UE in EMM-IDLE or EMM-CONNECTED mode is configured to use IxCS fallback and has a mobile 
originating IxCS fallback request from the upper layer; 

g) the UE in EMM-CONNECTED mode is configured to use IxCS fallback and accepts cdma2000'' signalling 
messages containing a IxCS paging request; or 

h) the UE, in EMM-IDLE mode, has uplink cdma2000® signalling pending. 

[TS 24.008, clause 4.5.1.1, item d)] 

d) When the MS is IMSI attached for CS services via EMM combined procedures, as described in 

3GPP TS 24.301 [120], and the MS is camping on an E-UTRAN cell, the MM sublayer requests EMM to initiate 
a service request procedure for CS fallback. The MM connection establishment is delayed until the MS changes 
to a GERAN or UTRAN cell. 

If the MS enters a GERAN or UTRAN cell, then the MS shall initiate the MM connection establishment and 
send a CM SERVICE REQUEST message. If the MS determines that it is in a different location area than the 
stored location area, the MS shall first initiate a normal location updating procedure or a combined routing area 
update procedure, depending on Network Mode of Operation. The MM connection establishment is delayed until 
successful completion of the normal location updating or combined routing area update procedure. In A/Gb 
mode, if the MS is a non DTM MS, or a DTM MS in a cell not supporting DTM, the MS may perform location 
area updating procedure instead of combined routing area update procedure in NMO I. 

13.1.8.3 Test description 

13.1.8.3.1 Pre-test conditions 

System Simulator: 

- 2 cells, one E-UTRA and one GERAN cell: 

- Cell 1 E-UTRA serving cell 

- Cell 24 suitable neighbour GERAN cell 

o Cell 24 system information indicates that NMO 1 is used 

The parameters settings and power levels for Cell 1 and Cell 24 are selected according to [18], [5] so that 
camping on Cell 1 is guaranteed and no cell re-selection to Cell 24 can take place (GERAN priority is lower 
than serving and S cdi i > Thresh ceii i.iow)- 

UE: 

None 
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Preamble: 



The UE is in state Generic RB Established (state 3) according to [18], with ATTACH ACCEPT message 
content modified as indicated in table 13.1.8.3.3-1. 
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13.1.8.3.2 



Test procedure sequence 

Table 13.1.8.3.2-2: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Cause the UE to originate CS call, (see 
Note 1 ) 


- 


- 


- 


- 


2 


Check: Does the UE transmit an 
ULInformationTranfer message containing 
an EXTENDED SERVICE REQUEST with 
Service Type IE set to "mobile originated 
CS fallback or 1 xCS fallback" on Cell 1 ? 


-> 


UL Information Transfer 
NAS: EXTENDED SERVICE 
REQUEST 


1 


P 


3 


The SS transmits an 

RRCConnectionRelease message on Cell 
1 with IE rec//recfeQ'Came/-/nfo including 
ARFCN of Cell 24. 


<~ 


RRCConnectionRelease 








EXCEPTION: In case the UE does not 
choose to perform combined RA/LA 
procedure, the UE will perform LA update. 
In this case steps 4a1 -4a8 are executed. 










4a1 


UE transmits CHANNEL REQUEST 
message to initiate LA Update procedure 


-> 


CHANNEL REQUEST 


- 


- 


4a2 


A RR connection is established 


<— 


IMMEDIATE ASSIGNMENT 


- 


- 


4a3 


Check: Does the UE transmit LQCATIQN 
UPDATING REQUEST? 


-> 


LOCATION UPDATING 
REQUEST 


2 


P 


4a4 


The SS transmits AUTHENTICATION 
REQUEST 


<- 


AUTHENTICATION REQUEST 


- 


- 


4a5 


The UE transmits AUTHENTICATION 
RESPONSE 


-> 


AUTHENTICATION RESPONSE 


- 


- 


4a6 


The SS transmits CIPHERING MODE 
COMMAND 


<~ 


CIPHERING MODE COMMAND 


- 


- 


4a7 


The UE transmits CIPHERING MODE 
COMPLETE 


~> 


CIPHERING MODE COMPLETE 


- 


- 


4a8 


The SS transmits MM LOCATION 
UPDATING ACCEPT 


<~ 


LOCATION UPDATING ACCEPT 


- 


- 




EXCEPTION: In case UE chooses to 
perform combined RA/LA procedure, steps 
4b1 -4b1 3 are executed. 










4b1 


UE transmits CHANNEL REQUEST 
message to initiate combined LA/RA 
Update procedure 


-> 


CHANNEL REQUEST 






4b2 


An uplink TBF is established 


- 


- 


- 


- 


4b3- 
4b12 


UE will perform steps 1 to 1 of the generic 
test procedure in TS 36.508 table 6.4.2.9-1 
(Routing area update procedure on a new 
GERAN cell) are performed on Cell 24. 
NOTE: UE performing combined RA/LA 
updating procedure. 










4b13 


Check: Does the UE transmit a ROUTING 
AREA UPDATE COMPLETE message? 


-> 


ROUTING AREA UPDATING 
COMPLETE 


2 


P 


5 


Check: The UE transmits GPRS 
SUSPENSION REQUEST to indicate to 
the network to suspend transmission of 
data on GPRS. 


-> 


GPRS SUSPENSION REQUEST 


3 


P 


6-21 


UE will perform steps 1 to 1 6 of the generic 
test procedure in TS 51.010 subclause 
10.2.3 (mobile originating speech calls) are 
performed on Cell 24. 










22 


Check: Does the UE send CONNECT 
ACKNOWLEDGE to complete the MO 
circuit switched voice call setup 
procedure? 


-> 


CONNECT ACKNOWLEDGE 


4 


P 


23 


The voice call is ended on the UE 


- 


- 


- 


- 


Note 1 : The trigger in step 1 is the same as in the generic procedure in 36.508 clause 6.4.3.5. 
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13.1.8.3.3 



Specific message contents 
Table ^3.^.8.3.3-^: ATTACH ACCEPT ior cell 1 (preamble) 



Derivation Path: 36.508 table 4.7.2-1 


Information Element 


Value/remark 


Comment 


Condition 


Location area identification 








LAC 


2 







Table 13.1.8.3.3-2: SystemlnformationBlockTypel for cell 1 (preamble and all steps, Table 13.1.8.3.2-2 

and Table 13.1.8.3.2-3) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type1 ::= SEQUENCE { 








schedulinglnfoList ::= SEQUENCE (SIZE (L.maxSI- 
Message)) OF SEQUENCE {} 


Combination 4 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3 and 
SIB7 are 
transmitted 




} 









Table 13.1.8.3.3-3: SystemlnformationBlockTypeV ior cell 1 (preamble and all steps, Table 13.1.8.3.2-2 

and Table 13.1.8.3.2-3) 



Derivation Path: 36.508 Table 4.4.3.3-5 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type7 ::= SEQUENCE { 








carrierPreqslnfoList SEQUENCE (SIZE (1.. 
maxGNFG)) QF SEQUENCE { 


1 entry 






cellReselectionPriority 


3 


Lower priority than 
E-UTRA 




1 








} 









Table 13.1.8.3.3-4: ULInformationTransfer (step 2, Table 13.1.8.3.2-2) 



Derivation Path: 36.508 Table 4.6.1-25 


Information Element 


Value/remark 


Comment 


Condition 


ULInformationTransfer ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








ullnformationTransfer-r8 SEQUENCE { 








dedicated InfoType CHOICE { 








dedicated InfoNAS 


Set according to Table 
13.1.3.3.3-5 


EXTENDED 

SERVICE 

REQUEST 




1 








} 








} 








} 








1 









Table 13.1.8.3.3-5: EXTENDED SERVICE REQUEST (step 2, Table 13.1.8.3.2-2) 



Derivation Path: 36.508 Table 4.7.2-14A 


Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


EMM 






Service type 


'GOGG'B 


mobile originating 
CS fallback or 
1xCS fallback 
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Table 13.1.8.3.3-6: RRCConnection Release (step 3, Table 13.1.8.3.2-2) 



Derivation Path: 36.508 Table 4.6.1.1-15 


Information Element 


Value/remark 


Comment 


Condition 


RRCConnectionRelease ::= SEQUENCE { 








criticalExtensions CHQICE { 








c1 CHQICE { 








rrcConnectionRelease-r8 SEQUENCE { 








redirectedCarrierlnfo ::= CHOICE { 








Geran 


f11 






} 








} 








} 









Table 13.1.8.3.3-7: GPRS SUSPENSION REQUEST (step 5, Table 13.1.8.3.2-2) 



Derivation Path: 36.508 Table 4.7.2-14A 


Information Element 


Value/remark 


Comment 


Condition 


Protocol discriminator 


RR 






Service type 


'00110100'B 


GPRS 

SUSPENSION 

REQUEST 




Suspension cause 


'OOOOOOOO'B 


IVIobile originating 
call 





13.2 

13.2.1 

13.2.1.1 
(1) 



RRC connection reconfiguration 

RRC connection reconfiguration / E-UTRA to E-UTRA 

Test Purpose (TP) 



with { UE has a default EPS bearer context } 
ensure that { 

when { UE receives donwlink data on the radio bearer associated with the default EPS bearer 
context } 

then { UE delivers the downlink data to upper layers } 



} 



(2) 



with { UE has a default EPS bearer context } 
ensure that { 

when { uplink data are submitted for transmission } 

then { UE transmits the uplink data on the radio bearer associated with the default EPS bearer 
context } 

} 

(3) 

with { UE has a default EPS bearer context and successful completion of the intra- frequency handover 

} 

ensure that { 

when { UE receives donwlink data on the radio bearer associated with the default EPS bearer 
context } 

then { UE delivers the downlink data to upper layers } 



} 



(4) 



with { UE has a default EPS bearer context and successful completion of the intra- frequency handover 

} 

ensure that { 

when { uplink data are submitted for transmission } 

then { UE transmits the uplink data on the radio bearer associated with the default EPS bearer 
context } 
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13.2.1.2 Conformance requirements 

Same Conformance requirements as in clause 8.2.4.2. 

References: The conformance requirements covered in the present TC are specified in: TS23.401, clause 5.5.1.1.1. 

[TS 23.401, clause 5.5.1.1.1] 

These procedures are used to hand over a UE from a source eNodeB to a target eNodeB using the X2 reference point. In 
these procedures the MME is unchanged. Two procedures are defined depending on whether the Serving GW is 
unchanged or is relocated. In addition to the X2 reference point between the source and target eNodeB, the procedures 
rely on the presence of S 1-MME reference point between the MME and the source eNodeB as well as between the 
MME and the target eNodeB. 

The handover preparation and execution phases are performed as specified in TS 36.300 [5]. 

If the serving PLMN changes during handover, the source eNB shall initiate an S 1 -based handover instead of an X2- 
based handover. 

When the UE receives the handover command it will remove any EPS bearers for which it did not receive the 
corresponding EPS radio bearers in the target cell. As part of handover execution, downlink packets are forwarded from 
the source eNodeB to the target eNodeB. When the UE has arrived to the target eNodeB, downlink data forwarded from 
the source eNodeB can be sent to it. Uplink data from the UE can be delivered via the (source) Serving GW to the PDN 
GW. Only the handover completion phase is affected by a potential change of the Serving GW, the handover 
preparation and execution phases are identical. 

If the MME receives a rejection to a NAS procedure (e.g. dedicated bearer establishment/modification/release; location 
reporting control; NAS message transfer; etc.) from the eNodeB with an indication that an X2 handover is in progress 
(see TS 36.300 [5]), the MME shall reattempt the same NAS procedure either when the handover is complete or the 
handover is deemed to have failed. The failure is known by expiry of the timer guarding the NAS procedure. 



13.2.1.3 
13.2.1.3.1 
System Simulator: 

- Cell 1 and Cell 2 
UE: 
None. 
Preamble: 



Test description 
Pre-test conditions 



The UE is in state Generic RB Estabhshed (state 4) on Cell 1 according to [18] using the UE TEST LOOP MODE 



B. 

13.2.1.3.2 



Test procedure sequence 



Table 13.2.1.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after Preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 13.2.1.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 2 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-91 


The power level value shall be such that 
measurement results for Cell 1 (M1) and 
Cell 2 (M2) satisfy exit condition for event 
A3(M2 + Hys<M1). 


Tl 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-91 


-85 


The power level value shall be such that 
measurement results for Cell 1 (M1) and 
Cell 2 (M2) satisfy entry condition for event 
A3(M2-Hys>M1). 
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Table 13.2.1.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 1. 


<~ 


IP packet 






2 


Check: Does the UE loop back the IP packet 
on the DRB associated with the default EPS 
bearer context on Cell 1 ? 






1,2 


P 


3 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to setup intra frequency measurement. 


<~ 


RRCConnectionReconfiguration 






4 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationC 
ompiete 






5 


The SS changes Cell 1 and Cell 2 parameters 
according to the row "T1" in table 13.2.1.3.2-1 


- 


- 


- 


- 


6 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 with the 
measured RSRP and RSRQ value for Cell 2. 


-> 


MeasurementReport 






7 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to order the UE to perform intra 
frequency handover to Cell 2. 


<— 


RRCConnectionReconfiguration 






8 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 2 to confirm the successful 
completion of the intra frequency handover. 


~> 


RRCConnectionReconfigurationC 
ompiete 






9 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 2. 


<- 


IP packet 






10 


Check: Does the UE loop back the IP packet 
on the DRB associated with the default EPS 
bearer context on Cell 2? 






3,4 


P 



13.2.1.3.3 



Specific message contents 

Table 13.2.1.3.3-1 : ACTIVATE TEST MODE (preamble) 



Derivation Path: 36.508, Table 4.7A-1 , condition UE TEST LOOP IVIODE B 



Table 13.2.1.3.3-2: RRCConnectionReconfiguration (Step 3, Table 13.2.1.3.2-2) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 
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Table 13.2.1.3.3-3: MeasurementConfiguration (Step 3, Table 13.2.1.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-1 


Information Element 


Value/Remark 


Comment 


Condition 


measurementConfiguration ::= SEQUENCE { 








measObjectToAddModifyLlst SEQUENCE (SIZE 
(1 ..maxObjectId)) QF SEQUENCE { 


1 entry 






measQbjectld[1] 


ldMeasObject-f1 






measQbject[1] 


MeasObjectEUTRA- 
GENERIC(fl) 






1 








reportConfigToAddModifyList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


ldReportConfJg-A3 






reportConfig[1] 


ReportConfig-A3 






1 








measldToAddModifyList SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasQbject-f1 






reportConfigld[1] 


ldReportConfig-A3 






} 








Table 13.2.1.3.3-4: MeasurementReport {Step 6, Table 13.2.1.3.2-2) 


Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


IVIeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






} 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(L.tnaxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 2 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








} 








} 








1 








1 








} 








} 








} 








Table 13.2.1.3.3-5: RRCConnectionReconfiguration (Step 7, Table 13.2.1.3.2-2) 


Derivation Path: 36.508, Table 4.6.1-8, condition HO 
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Table 13.2.1.3.3-6: MobilityControllnfo (step 7, Table 13.2.1.3.2-2) 



Derivation Path: 36.508 clause 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cell 2 






carrierFreq 


Not present 






} 








} 









13.3.1 Intra-system connection re-establishment 



Intra-system connection re-establishment / Radio link recovery while T310 is 
running 



13.3.1.1 

13.3.1.1.1 Test Purpose (IP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state and has data to transmit} 
ensure that { 

when { UE detects radio link recovery while T310 is running} 
then { UE resumes the RRC connection without explicit signalling and continues data transfer} 
} 

13.3.1.1.2 Conformance requirements 
Refer to TS 36.523-1 clause 8.5.1.5.2. 

13.3.1.1.3 Test description 

13.3.1.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1 
UE: 
None. 

- The condition SRB2-DRB(1,0) is used for step 8 in 4.5.3A.3 according to [18]. 

- The UE is in state Loopback Activated (state 4) on Cell 1 according to [18] using the UE TEST LOOP MODE 
B. 

13.3.1 .1 .3.2 Test procedure sequence 

Table 13.3.1.1.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions, while columns marked "Tl" 
is to be applied subsequently. The exact instants on which these values shall be applied are described in the texts in this 
clause. 

Table 13.3.1.1.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Remark 


TO 


RS EPRE 


dBm/1 
5kHz 


Pdefault 


Power level from 36.508 
clause 6.2.2.1. Pdetauitas 
serving cell. 


Tl 


RS EPRE 


dBm/1 
5kHz 


Poff 


Poff as as non-suitable "Off" 
cell. 


T2 


RS EPRE 


dBm/1 
5kHz 


Pdefault 


Pdefauitas serving cell. 
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Table 13.3.1.1.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 1 . 


<- 


IP packet 






2 


The SS reduce DL RS TX power level of Cell 1 
from "TO" to "T1 " in table 1 3.3.1 .1 .3.2-1 . 


- 


- 


- 


- 


3 


The SS waits for 1 .5s. T31 is 2s. 


- 


- 


- 


- 


4 


The SS recovers DL RS TX power level of Cell 
1 from "T1 " to "T2" in table 13.3.1.1.3.2-1. 


- 


- 


- 


- 


5 


Check: Does the UE loop back the IP packet 
on the DRB associated with the default EPS 
bearer context on Cell 1 ?{ Note 1 ) 


— > 


IP packet 


1 


P 


Note 1 : Triggered when timer T_delay_modeB (IP PDU delay time) expires and pending uplinl< data exist in 
buffered PDCP SDUs according to [25] clause 5.4.4.3. 



13.3.1 .1 .3.3 Specific message contents 

Table 13.3.1.1.3.3-1: ACTIVATE TEST MODE (preamble, Table 13.3.1.1.3.2-2) 

Derivation Path: 36.508, Table 4.7A-1 , condition UE TEST LOOP MODE B 

Table 13.3.1.1.3.3-2: CLOSE UE TEST LOOP (preamble, Table 13.3.1.1.3.2-2) 



Derivation Path: 36.508, Table 4.7A-3, condition UE TEST LOOP MODE B | 


Information Element 


Value/remark 


Comment 


Condition 


UE test loop mode B LB setup 








IP PDU delay 


00000101 


5 seconds 



Table 13.3.1.1.3.3-3: SystemlnformationBlockType2 (preamble and all steps. Table 13.3.1.1.3.2-2) 



Derivation path: 36.508 table 4.4.3.3-1 | 


Information Element 


Value/Remark 


Comment 


Condition 


SystemlnformationBlockType2 ::= SEQUENCE { 








ue-TimersAndConstants { 








1310 


ms2000 






1 








} 









1 3.3.1 .2 Intra-system connection re-establishment / Re-establishment of a new 
connection when further data is to be transferred 

13.3.1.2.1 Test Purpose (TP) 
(1) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE detects radio link failure on expiry of timer T310 } 
then { UE starts timer T311 and UE initiates the RRC Connection re-establishment procedure 



(2) 

with { UE in E-UTRA RRC_CONNECTED state } 
ensure that { 

when { UE detects radio link failure and successfully completes the RRC Connection re- 
establishment procedure and has data available for transmission } 

then { UE use the DRB configured by network side and resume the data transfer } 
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13.3.1.2.2 Conformance requirements 
Refer to TS 36.523-1 clause 8.5.1.1.2. 

13.3.1.2.3 Test description 

13.3.1.2.3.1 Pre-test conditions 
System Simulator: 

2 cells on same E-UTRA frequency: 

Cell 1 (default parameters) serving cell 

Cell 2 intra-frequency cell 
UE: 
None. 
Preamble: 

- The condition SRB2-DRB(1,0) is used for step 8 in 4.5.3A.3 according to [18]. 

- The UE is in state Loopback Activated (state 4) on Cell 1 according to [18] using the UE TEST LOOP MODE B. 

13.3.1 .2.3.2 Test procedure sequence 

Table 13.3.1.2.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 1. 


<— 


IP packet 






2 


The SS changes the power level of cell 1 to 
non-suitable "Off" and changes the power level 
of cell 2 to suitable according to TS 36.508 
subclause 6.2.2.1 in order that the radio link 
quality of Cell 1 is degraded. 










3 


Check: Does the UE initiate an RRC 
connection re-establisment procedure and 
transmit an 

RRCConnectionReestablishmentRequest 
message on Cell 2? 


-> 


RRCConnectionReestablishment 
Request 


1 


P 


4 


The SS transmits 
RRCConnectionReestablishment message 


<- 


RRCConnectionReestabiisiiment 


- 


- 


5 


UE transmits an 

RRCConnectionReestablishmentComplete 

message 


-> 


RRCConnectionReestabiisiiment 
Complete 






6 


The SS transmits 
RRCConnectionReconfiguration message 


<- 


RRCConnectionReconfiguration 


- 


- 


7 


UE transmits an 

RRCConnectionConfigurationComplete 

message 


-> 


RRCConnectionReconflgurationC 
omplete 






8 


Check: Does the UE loop back the IP packet 
on the DRB associated with the default EPS 
bearer context on Cell 2? 


-> 


IP packet 


2 


P 



13.3.1 .2.3.3 Specific message contents 
None. 
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13.4 Mobility 

13.4.1 I ntra-system mobility 

1 3.4.1 .2 Inter-frequency mobility / E-UTRA to E-UTRA packet 

13.4.1.2.1 Test Purpose (TP) 
(1) 

with { UE has a default EPS bearer context } 
ensure that { 

when { UE receives downlink data on the radio bearer associated with the default EPS bearer 
context } 

then { UE delivers the downlink data to upper layers } 
} 

(2) 

with { UE has a default EPS bearer context } 
ensure that { 

when { uplink data are submitted for transmission } 

then { UE transmits the uplink data on the radio bearer associated with the default EPS bearer 
context } 

} 

(3) 

with { UE has a default EPS bearer context and successful completion of the inter- frequency handover 

} 

ensure that { 

when { UE receives downlink data on the radio bearer associated with the default EPS bearer 
context } 

then { UE delivers the downlink data to upper layers } 
} 

(4) 

with { UE has a default EPS bearer context and successful completion of the inter- frequency handover 

} 

ensure that { 

when { uplink data are submitted for transmission } 

then { UE transmits the uplink data on the radio bearer associated with the default EPS bearer 
context } 

} 

13.4.1.2.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 23.401, clauses 5.5.1.1.1. 

[TS 23.401, clause 5.5.1.1.1] 

These procedures are used to hand over a UE from a source eNodeB to a target eNodeB using the X2 reference point. In 
these procedures the MME is unchanged. Two procedures are defined depending on whether the Serving GW is 
unchanged or is relocated. In addition to the X2 reference point between the source and target eNodeB, the procedures 
rely on the presence of S 1-MME reference point between the MME and the source eNodeB as well as between the 
MME and the target eNodeB. 

The handover preparation and execution phases are performed as specified in TS 36.300 [5]. 

If the serving PLMN changes during handover, the source eNB shall initiate an SI -based handover instead of an X2- 
based handover. 

When the UE receives the handover command it will remove any EPS bearers for which it did not receive the 
corresponding EPS radio bearers in the target cell. As part of handover execution, downlink packets are forwarded from 
the source eNodeB to the target eNodeB. When the UE has arrived to the target eNodeB, downlink data forwarded from 
the source eNodeB can be sent to it. Uplink data from the UE can be delivered via the (source) Serving GW to the PDN 
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GW. Only the handover completion phase is affected by a potential change of the Serving GW, the handover 
preparation and execution phases are identical. 

If the MME receives a rejection to a NAS procedure (e.g. dedicated bearer establishment/modification/release; location 
reporting control; NAS message transfer; etc.) from the eNodeB with an indication that an X2 handover is in progress 
(see TS 36.300 [5]), the MME shall reattempt the same NAS procedure either when the handover is complete or the 
handover is deemed to have failed. The failure is known by expiry of the timer guarding the NAS procedure. 



Test description 
Pre-test conditions 



13.4.1.2.3 
13.4.1.2.3.1 
System Simulator: 

- Cell 1 and Cell 3 
UE: 

None. 
Preamble: 

- The UE is in state Generic RB Established (state 4) on Cell 1 according to [18] using the UE TEST LOOP 
MODE B. 



13.4.1.2.3.2 



Test procedure sequence 



Table 13.4.1.2.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 13.4.1.2.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelM 


Cell 3 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-97 


The power level values are such that 
measurement results for Cell 1 (M1) and 
Cell 3 (M3) satisfy exit condition for event 
A3(M3<M1). 


Tl 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


-73 


The power level values are such that 
measurement results for Cell 1 (M1) and 
Cell 3 (IV13) satisfy entry condition for event 
A3(M3>M1). 
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Table 13.4.1.2.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 1. 


<- 


IP packet 






2 


Check: Does the UE loop back the IP packet 
on the DRB associated with the default EPS 
bearer context on Cell 1 ? 


-> 


IP packet 


1,2 


P 


3 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to setup inter frequency measurement 
and reporting for event A3. 


<— 


RRCConnectionReconfiguration 






4 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationC 
ompiete 






5 


The SS changes Cell 3 parameters according 
to the row "T1 " in table 13.4.1 .2.3.2-1 


- 


- 


- 


- 


6 


The UE transmits a MeasurementReport 
message on Cell 1 to report event A3 with the 
measured RSRP and RSRQ value for Cell 3. 


-> 


MeasurementReport 






7 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to order the UE to perform inter 
frequency handover to Cell 3. 


<- 


RRCConnectionReconfiguration 






8 


The UE transmit an 

RRCConnectionReconfigurationComplete 
message on Cell 3 to confirm the successful 
completion of the inter frequency handover. 


-> 


RRCConnectionReconfigurationC 
ompiete 






9 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 3. 


<— 


IP packet 






10 


Check: Does the UE loop back the IP packet 
on the DRB associated with the default EPS 
bearer context on Cell 3? 


-> 


IP packet 


3,4 


P 



13.4.1.2.3.3 



Specific message contents 
Table 13.4.1.2.3.3-1 : ACTIVATE TEST MODE (preamble) 



Derivation Path: 36.508, Table 4.7A-1 , condition UE TEST LOOP IVIODE B 



Table 13.4.1.2.3.3-2: RRCConnectionReconfiguration (step 3, Table 13.4.1.2.3.2-2) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 
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Table 13.4.1.2.3.3-3: MeasConfig (step 3, Table 13.4.1.2.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-1 with condition INTER-FREQ 


Information Element 


Value/Remark 


Comment 


Condition 


MeasConfig ::= SEQUENCE { 








measObjectToAddModifyUst SEQUENCE (SIZE 
(1 ..maxQbjectId)) QF SEQUENCE { 


1 entry 






measQbjectld[1] 


ldMeasQbject-f2 






measQbject[1] 


MeasObjectEUTRA- 
GENERIC(f2) 






1 








reportConfigToAddModifyList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


IdReportConfigEUTRA- 
A3 






reportConfig[1] 


ReportConfigEUTRA-A3 






1 








measldToAddModifyLlst SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasQbject-f2 






reportConfigld[1] 


IdReportConflgEUTRA- 
A3 






} 








} 









Table 13.4.1.2.3.3-4: MeasurementReport {step 6, Table 13.4.1.2.3.2-2) 



Derivation Path: 36.508, Table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 








measResultNeighCells CHOICE { 








measResultListEUTRA SEQUENCE (SIZE 
(L.tnaxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 3 






cgi-lnfo[1] 


Not present 






measResult[1] SEQUENCE { 








rsrpResult 


(0..97) 






rsrqResult 


(0..34) 






} 








1 








} 








} 








} 








1 








1 








} 









Table 13.4.1.2.3.3-5: RRCConnectionReconfiguration (step 7, Table 13.4.1.2.3.2-2) 

Derivation Path: 36.508, Table 4.6.1-8, condition HO 
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Table 13.4.1.2.3.3-6: MobilityControllnfo (step 7, Table 13.4.1.2.3.2-2) 



Derivation Path: 36.508 clause 4.6.5-1 


Information Element 


Value/remark 


Comment 


Condition 


MobilityControllnfo ::= SEQUENCE { 








targetPhysCellld 


PhysicalCellldentity of 
Cells 






carrierFreq SEQUENCE { 








dl-CarrierFreq 


Same downlink EARFCN 
as used for Cell 3 






ul-CarrierFreq 


Not present 






} 








} 









13.4.2 Inter-system mobility packet 

1 3.4.2.1 inter-system mobility / E-UTRA to UTRA packet 

13.4.2.1.1 Test Purpose (IP) 

(1) 

with { UE has a default EPS bearer context } 
ensure that { 

when { UE receives downlink data on the radio bearer associated with the default EPS bearer 
context } 

then { UE delivers the downlink data to upper layers } 
} 

(2) 

with { UE has a default EPS bearer context } 
ensure that { 

when { uplink data are submitted for transmission } 

then { UE transmits the uplink data on the radio bearer associated with the default EPS bearer 
context } 



} 



(3) 



with { UE has a radio access bearer context and successful completion of the inter- system handover 
ensure that { 

when { UE receives downlink data on the radio bearer associated with the radio access bearer 
context } 

then { UE delivers the downlink data to upper layers } 



} 



(4) 



with { UE has a radio access bearer context and successful completion of the inter- system handover 
ensure that { 

when { uplink data are submitted for transmission } 

then { UE transmits the uplink data on the radio bearer associated with the radio access bearer 
context } 



13.4.2.1.2 



Conformance requirements 



References: The conformance requirements covered in the current TC are those listed in TC 8.4.1.2, plus those specified 
in: TS 23.401, clauses 5.5.2.1.2, 5.5.2.1.3. 

[TS 23.401, clause 5.5.2.1.2] 
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Figure 5.5.2.1.2-1 : E-UTRAN to UTRAN lu mode Inter RAT HO, preparation phase 



1. The source eNodeB decides to initiate an Inter-RAT handover to the target access network, UTRAN lu mode. At 
this point both upUnk and downHnk user data is transmitted via the following: Bearer(s) between UE and source 
eNodeB, GTP tunnel(s) between source eNodeB, Serving GW and PDN GW. 

NOTE 1 : The process leading to the handover decision is outside of the scope of this specification. 

2. The source eNodeB sends a Handover Required (SlAP Cause, Target RNC Identifier, Source eNodeB Identifier, 
Source to Target Transparent Container) message to the source MME to request the CN to establish resources in 
the target RNC, target SGSN and the Serving GW. The bearers that will be subject to data forwarding (if any) 
are identified by the target SGSN in a later step (see step 7 below). 

3. The source MME determines from the 'Target RNC Identifier' IE that the type of handover is IRAT Handover to 
UTRAN lu mode. The Source MME initiates the Handover resource allocation procedure by sending a Forward 
Relocation Request (IMSI, Target Identification, MM Context, PDN Connections, MME Tunnel Endpoint 
Identifier for Control Plane, MME Address for Control plane. Source to Target Transparent Container, RAN 
Cause, MS Info Change Reporting Action (if available), ISR Supported, TI(s)) message to the target SGSN. The 
information ISR Supported is indicated if the source MME is capable to activate ISR for the UE. When ISR is 
activated the message should be sent to the SGSN that maintains ISR for the UE when this SGSN is serving the 
target identified by the Target Identification. This message includes all PDN Connections active in the source 
system and for each PDN Connection includes the associated APN, the address and the uplink Tunnel endpoint 
parameters of the Serving GW for control plane, and a list of EPS Bearer Contexts. RAN Cause indicates the 
SlAP Cause as received from source eNodeB. 

The target SGSN maps the EPS bearers to PDP contexts 1-to-l and maps the EPS Bearer QoS parameter values 
of an EPS bearer to the pre-Rel-8 QoS parameter values of a bearer context as defined in Annex E 

Prioritization of PDP Contexts is performed by the target core network node, i.e. target SGSN. 

The MM context contains security related information, e.g. supported ciphering algorithms as described in 
TS 29.274 [43]. Handhng of security keys is described in TS 33.401 [41]. 

The target SGSN shall determine the Maximum APN restriction based on the APN Restriction of each bearer 
context in the Forward Relocation Request, and shall subsequently store the new Maximum APN restriction 
value. 

4. The target SGSN determines if the Serving GW is to be relocated, e.g., due to PLMN change. If the Serving GW 
is to be relocated, the target SGSN selects the target Serving GW as described under clause 4.3.8.2 on "Serving 
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GW selection function", and sends a Create Session Request message (IMSI, SGSN Tunnel Endpoint Identifier 
for Control Plane, SGSN Address for Control plane, PDN GW address(es) for user plane, PDN GW UL TElD(s) 
for user plane, PDN GW address(es) for control plane, and PDN GW TEID(s) for control plane, the Protocol 
Type over S5/S8) per PDN connection to the target Serving GW. The Protocol Type over S5/S8 is provided to 
Serving GW which protocol should be used over S5/S8 interface. 

The target SGSN establishes the EPS Bearer context(s) in the indicated order. The SGSN deactivates the EPS 
Bearer contexts which cannot be established. 

4a. The target Serving GW allocates its local resources and returns a Create Session Response (Serving GW 
address(es) for user plane. Serving GW UL TEID(s) for user plane. Serving GW Address for control plane. 
Serving GW TEID for control plane) message to the target SGSN. 

5. The target SGSN requests the target RNC to establish the radio network resources (RABs) by sending the 
message Relocation Request (UE Identifier, Cause, CN Domain Indicator, Integrity protection information (i.e. 
IK and allowed Integrity Protection algorithms). Encryption information (i.e. CK and allowed Ciphering 
algorithms), RAB to be setup list. Source RNC to Target RNC Transparent Container, Service Handover related 
information). If the Access Restriction is present in the MM context, the Service Handover related information 
shall be included by the target SGSN for the Relocation Request message in order for RNC to restrict the UE in 
connected mode to handover to the RAT prohibited by the Access Restriction. 

For each RAB requested to be established, RABs To Be Setup shall contain information such as RAB ID, RAB 
parameters. Transport Layer Address, and lu Transport Association. The RAB ID information element contains 
the NS API value, and the RAB parameters information element gives the QoS profile. The Transport Layer 
Address is the Serving GW Address for user plane (if Direct Tunnel is used) or the SGSN Address for user plane 
(if Direct Tunnel is not used), and the lu Transport Association corresponds to the uplink Tunnel Endpoint 
Identifier Data in Serving GW or SGSN respectively. 

Ciphering and integrity protection keys are sent to the target RNC to allow data transfer to continue in the new 
RAT/mode target cell without requiring a new AKA (Authentication and Key Agreement) procedure. 
Information that is required to be sent to the UE (either in the Relocation Command message or after the 
handover completion message) from RRC in the target RNC shall be included in the RRC message sent from the 
target RNC to the UE via the transparent container. More details are described in TS 33.401 [41]. 

In the target RNC radio and lu user plane resources are reserved for the accepted RABs. Cause indicates the 
RAN Cause as received from source MME. The Source RNC to Target RNC Transparent Container includes the 
value from the Source to Target Transparent Container received from the source eNodeB. 

5a. The target RNC allocates the resources and returns the applicable parameters to the target SGSN in the message 
Relocation Request Acknowledge (Target RNC to Source RNC Transparent Container, RABs setup list, RABs 
failed to setup list). 

Upon sending the Relocation Request Acknowledge message the target RNC shall be prepared to receive 
downlink GTP PDUs from the Serving GW, or Target SGSN if Direct Tunnel is not used, for the accepted 
RABs. 

Each RAB in the RABs setup list is defined by a Transport Layer Address, which is the target RNC Address for 
user data, and the lu Transport Association, which corresponds to the downlink Tunnel Endpoint Identifier for 
user data. 

Any EPS Bearer contexts for which a RAB was not established are maintained in the target SGSN and the UE. 
These EPS Bearer contexts shall be deactivated by the target SGSN via explicit SM procedures upon the 
completion of the routing area update (RAU) procedure. 

6. If 'Indirect Forwarding' and relocation of Serving GW apply and Direct Tunnel is used, the target SGSN sends a 
Create Indirect Data Forwarding Tunnel Request message (Target RNC Address and TEID(s) for data 
forwarding) to the Serving GW. If 'Indirect Forwarding' and relocation of Serving GW apply and Direct Tunnel 
is not used, then the target SGSN sends a Create Indirect Data Forwarding Tunnel Request message (SGSN 
Address and TEID(s) for data forwarding) to the Serving GW. 

Indirect forwarding may be performed via a Serving GW which is different from the Serving GW used as the 
anchor point for the UE. 
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6a. The Serving GW returns a Create Indirect Data Forwarding Tunnel Response (Cause, Serving GW Address(es) 
and TEID(s) for data forwarding) message to the target SGSN. 

7. The target SGSN sends the message Forward Relocation Response (Cause, SGSN Tunnel Endpoint Identifier for 
Control Plane, SGSN Address for Control Plane, Target to Source Transparent Container, Cause, RAB Setup 
Information, Additional RAB Setup Information, Address(es) and TEID(s) for User Traffic Data Forwarding, 
Serving GW change indication) to the source MME. Serving GW change indication indicates a new Serving GW 
has been selected. The Target to Source Transparent Container contains the value from the Target RNC to 
Source RNC Transparent Container received from the target RNC. 

The IE 'Address(es) and TEID(s) for User Traffic Data Forwarding' defines the destination tunnelling endpoint 
for data forwarding in target system, and it is set as follows: 

If 'Direct Forwarding' applies, or if 'Indirect Forwarding' and no relocation of Serving GW apply and Direct 
Tunnel is used, then the IE 'Address(es) and TEID(s) for User Traffic Data Forwarding' contains the 
addresses and GTP-U tunnel endpoint parameters to the Target RNC received in step 5a. 

If 'Indirect Forwarding' and relocation of Serving GW apply, then the IE 'Address(es) and TEID(s) for User 
Traffic Data Forwarding' contains the addresses and GTP-U tunnel endpoint parameters to the Serving GW 
received in step 6a. This is independent from using Direct Tunnel or not. 

If 'Indirect Forwarding' applies and Direct Tunnel is not used and relocation of Serving GW does not apply, 
then the IE 'Address(es) and TEID(s) for User Traffic Data Forwarding' contains the addresses and GTP-U 
tunnel endpoint parameters to the Target SGSN. 

8. If "Indirect Forwarding" applies, the Source MME sends the message Create Indirect Data Forwarding Tunnel 
Request (Address(es) and TEID(s) for Data Forwarding (received in step 7)), EPS Bearer ID(s)) to the Serving 
GW used for indirect forwarding. 

Indirect forwarding may be performed via a Serving GW which is different from the Serving GW used as the 
anchor point for the UE. 

8a. The Serving GW returns the forwarding parameters by sending the message Create Indirect Data Forwarding 
Tunnel Response (Cause, Serving GW Address(es) and TEID(s) for Data Forwarding). If the Serving GW 
doesn't support data forwarding, an appropriate cause value shall be returned and the Serving GW Address(es) 
and TEID(s) will not be included in the message. 

[TS 23.401, clause 5.5.2.1.3] 
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Figure 5.5.2.1 .3-1 : E-UTRAN to UTRAN lu mode Inter RAT HO, execution phase 



NOTE: For a PMIP -based S5/S8, procedure steps (A) and (B) are defined in TS 23.402 [2]. Step (B) shows PCRF 
interaction in the case of PMIP-based S5/S8. Steps 8 and 8a concern GTP based S5/S8 

The source eNodeB continues to receive downlink and uplink user plane PDUs. 

1 . The source MME completes the preparation phase towards source eNodeB by sending the message Handover 
Command (Target to Source Transparent Container, E-RABs to Release List, Bearers Subject to Data 
Forwarding List). The "Bearers Subject to Data forwarding list" IE may be included in the message and it shall 
be a list of 'Address(es) and TEID(s) for user traffic data forwarding' received from target side in the preparation 
phase (Step 7 of the preparation phase) when 'Direct Forwarding' applies, or the parameters received in Step 8a 
of the preparation phase when 'Indirect Forwarding' applies. 
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The source eNodeB initiates data forwarding for bearers specified in the "Bearers Subject to Data Forwarding 
List". The data forwarding may go directly to target RNC or alternatively go via the Serving GW if so decided 
by source MME and or/ target SGSN in the preparation phase. 

2. The source eNodeB will give a command to the UE to handover to the target access network via the message HO 
from E-UTRAN Command. This message includes a transparent container including radio aspect parameters that 
the target RNC has set-up in the preparation phase. The details of this E-UTRAN specific signalling are 
described in TS 36.300 [5]. 

Upon the reception of the HO from E-UTRAN Command message containing the Handover Command message, 
the UE shall associate its bearer IDs to the respective RABs based on the relation with the NSAPI and shall 
suspend the uplink transmission of the user plane data. 

3. Void. 

4. The UE moves to the target UTRAN lu (3G) system and executes the handover according to the parameters 
provided in the message delivered in step 2. The procedure is the same as in step 6 and 8 in clause 5.2.2.2 in 
TS 43.129 [8] with the additional function of association of the received RABs and existing Bearer Id related to 
the particular NSAPI. 

The UE may resume the user data transfer only for those NSAPIs for which there are radio resources allocated in 
the target RNC. 

The UE locally deactivates ISR by setting its TIN from "RAT-related TMSI" to "GUTI", if any EPS bearer 
context activated after the ISR was activated in the UE exists. 



Test description 
Pre-test conditions 



13.4.2.1.3 
13.4.2.1.3.1 
System Simulator: 

- Cell 1 and Cell 5 
UE: 
None. 
Preamble: 
- The UE is in state Generic RB Established (state 4) on Cell 1 according to [18] using the UE TEST LOOP MODE 



B. 



13.4.2.1.3.2 



Test procedure sequence 



Table 13.4.2.1.3.2-1 illustrates the downlink power levels and other changing parameters to be applied for the cells at 
various time instants of the test execution. Row marked "TO" denotes the initial conditions after preamble, while 
columns marked "Tl" is to be applied subsequently. The exact instants on which these values shall be applied are 
described in the texts in this clause. 

Table 13.4.2.1.3.2-1 : Time instances of cell power level and parameter changes 





Parameter 


Unit 


CelH 


Cell 5 


Remark 


TO 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-85 


- 


The power level values are such that 
entering conditions for event B2 are not 
satisfied. 


CPICH_Ec 


dBm/3.8 
4 MHz 


- 


-22.5 


Tl 


Cell-specific RS 
EPRE 


dBm/15k 
Hz 


-100 


- 


The power level values are such that 
entering conditions for event B2 are 
satisfied. 


CPICH_Ec 


dBm/3.8 
4 MHz 


- 


-12 
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Table 13.4.2.1.3.2-2: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS transmits one IP packet to the UE on 
the DRB associated with the default EPS 
bearer context on Cell 1. 


<~ 


IP packet 






2 


Check: Does the UE loop back the IP packet 
on the DRB associated with the default EPS 
bearer context on Cell 1 ? 


-> 


IP packet 


1,2 


P 


3 


The SS transmits an 

RRCConnectionReconfiguration message on 
Cell 1 to setup inter RAT measurement and 
reporting for event 82. 


<~ 


RRCConnectionReconfiguration 






4 


The UE transmits an 

RRCConnectionReconfigurationComplete 
message on Cell 1. 


-> 


RRCConnectionReconfigurationC 
omplete 






5 


The SS changes the power level for Cell 1 and 
Cell 5 according to the row "T1 " in table 
13.4.2.1.3.2-1 










6 


The UE transmits a MeasurementReport 
message on Cell 1 to report event 82 for Cell 
5. 


-> 


MeasurementReport 






7 


The SS transmits an 

MobilityFromEUTRACommand message on 
Cell 1 to order the UE to perform inter system 
handover to Cell 5. 


<— 


MobiiityFromEUTRACommand 






8 


The UE transmit a HANDOVER TO UTRAN 
COIVIPLETE message on Cell 5 to confirm the 
successful completion of the inter system 
handover. 


-> 


HANDOVER TO UTRAN 
COMPLETE 






9- 
15 


Steps 4 to 10 of the Routing Area Update 
procedure described in TS 36.508 subclause 
6.4.2.8 are performed on Cell 5. 
NOTE: The UE performs RAU procedure. 










16 


The SS transmits one IP packet to the UE on 
the DR8 associated with the RA8 context on 
Cell 5. 


<— 


IP packet 






17 


Check: Does the UE loop back the IP packet 
on the DR8 associated with the RA8 context 
on Cell 5? 


-> 


IP packet 


3,4 


P 



13.4.2.1.3.3 



Specific message contents 
Table 13.4.2.1.3.3-1 : ACTIVATE TEST MODE (preamble) 



Derivation Path: 36.508, Table 4.7A-1 , condition UE TEST LOOP MODE 8 



Table 13.4.2.1.3.3-2: RRCConnectionReconfiguration (step 3, Table 13.4.2.1.3.2-2) 



Derivation Path: 36.508 clause 4.6.1 table 4.6.1-8 with condition MEAS 
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Table 13.4.2.1.3.3-3: MeasConfig (step 3, Table 13.4.2.1.3.2-2) 



Derivation path: 36.508 clause 4.6.6 table 4.6.6-1 with condition UTRAN 


Information Element 


Value/Remark 


Comment 


Condition 


measurementConfiguration ::= SEQUENCE { 








measObjectToAddModifyList SEQUENCE (SIZE 
(1 ..maxObjectId)) QF SEQUENCE { 


1 entry 






measQbjectld[1] 


ldlVleasQbject-f8 






measQbject[1] 


MeasObjectUTRA- 
GENERIC(f8) 






1 








reportConfigToAddModifyList SEQUENCE (SIZE 
(1 ..maxReportConfigId)) QF SEQUENCE { 


1 entry 






reportConfigld[1] 


IdReportConfiglnterRAT- 
B2-UTRA 






reportConfig[1] 


ReportConfiglnterRAT- 
B2-UTRA(-90, -18) 






} 








measldToAddModifyLlst SEQUENCE (SIZE 
(1 ..maxMeasId)) OF SEQUENCE { 


1 entry 






measld[1] 


1 






measQbjectld[1] 


ldMeasQbject-f8 






reportConfigld[1] 


IdReportConfiglnterRAT- 
B2-UTRA 






} 








} 








Table 13.4.2.1.3.3-4: MeasurementReport (step 6, Table 13.4.2.1.3.2-2) 


Derivation Path: 36.508, table 4.6.1-5 


Information Element 


Value/remark 


Comment 


Condition 


MeasurementReport ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








measurementReport-r8 SEQUENCE { 








measResults SEQUENCE { 








measid 


1 






measResultServCell SEQUENCE { 








rsrpResult 


(0..97) 






rsrq Result 


(0..34) 






1 








measResultNeighCells CHOICE { 








measResultListUTRA SEQUENCE (SIZE 
(1..nnaxCellReport)) OF SEQUENCE { 


1 entry 






physCellld[1] 


PhysicalCellldentity of 
Cell 5 






cqi-lnfo[1] 


Not present 






measResult[1] SEQUENCE! 








utra-RSCP 


(-5..91) 






utra-EcNO 


(0..49) 






1 








1 








} 








} 








} 








1 








1 








} 
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Table 13.4.2.1.3.3-5: MobilityFromEUTRACommand (step 7, Table 13.4.2.1.3.2-2) 



Derivation Path: 36.508 table 4.6.1-6 


Information Element 


Value/remark Comment 


Condition 


MobilityFromEUTRACommand ::= SEQUENCE { 








criticalExtensions CHOICE { 








c1 CHOICE! 








mobilityFromEUTRACommand-r8 SEQUENCE { 








purpose CHOICE { 








handover SEQUENCE { 








targetRAT-Type 


utra 






targetRAT-MessageContainer 


HANDOVER TO UTRAN 
COMMAND 






nas-SecurityParamFromEUTRA 


The 4 least significant 
bits of the NAS downlink 
COUNT value 






systemlnformation 


Not present 






} 








} 








} 








1 








} 








} 









Table 13.4.2.1.3.3-6: HANDOVER TO UTRAN COMMAND (Table 13.4.2.1.3.3-5) 

Derivation Path: 36.508 table 4.7B. 1-1, condition UTRA PS RB 

1 4 ETWS 

14.1 ETWS reception in RRC_IDLE state / Duplicate detection 



14.1.1 
(1) 



Test Purpose (TP) 



with { UE in RRC_IDLE state and follow the reception of Paging message with etws-Indication } 
ensure that { 

when { UE start to acquire ETWS message from SIBIO and SIBll } 

then { UE successfully received the ETWS message and activated the "User Alerting" popup display 



} 



} 



14.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 23.401, clause 5.12.2; TS 
36.331, clauses 5.2.2.4, 5.2.2.17, 5.2.2.18, 5.3.2.3. 

[TS 23.401, clause 5.12.2] 

The Warning message to be broadcast is delivered via MMEs to multiple eNodeBs. The eNodeB(s) are responsible for 
scheduling the broadcast of the new message and the repetitions in each cell. 

The overall warning message delivery procedure is presented in figure 5.12.2.1-1: 
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Figure 5.12.2.1-1 : Warning message delivery procedure 



7a. If the UE has been configured to receive primary notification "without security", and the UE has authenticated 
the core network of the eNodeB it is camped on, then the UE can use "warning type" values, 'earthquake', 
'tsunami' or 'earthquake and tsunami', immediately to alert the user. When "warning type" is 'test', the UE silently 
discards the primary notification, but the UE specially designed for testing purposes may proceed with the 
following procedures. 

The UE activates reception of the broadcast messages containing the "warning message". 

If the "digital signature" and "timestamp" are present and security checks fail, then the UE notifies the user of 
this fact and stops the user alerting. 

If both the "digital signature" and "timestamp" are present and security checks pass, then the UE indicates the 
contents of the "warning message" to the user along with an indication that the message has been authenticated. 

In other cases the UE indicates the contents of the "warning message" to the user along with an indication that 
the message has not been authenticated. 

UE shall detect duplicate primary notifications and secondary notifications, including when UE changes the cell. 

7b. If the UE has not been configured to receive primary notification "without security" on that PLMN, or the UE 
has not authenticated the network, the UE activates reception of the broadcast messages containing the "warning 
message". When "warning type" is 'test', the UE silently discards the primary notification, but the UE specially 
designed for testing purposes may proceed with the following procedures. 

Unless both the "digital signature" and "timestamp" are present and the security checks pass, the UE shall ignore 
the message, return to normal idle mode, and ignore primary notifications for the next X seconds. 

NOTE 7: Repetition period X is subject to regulatory requirements, but, in the absence of these requirements being 
included in the 3GPP specifications, the UE manufacturer may assume a value of 60 seconds. 

If both the "digital signature" and "timestamp" are present and security checks pass, then the UE alerts the user; 
and indicates the contents of the "warning message" to the user along with an indication that the message has 
been authenticated. 
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The network shall use UTC time when constructing the "timestamp". The "timestamp" security check shall only 
pass if the "digital signature" check passes and the "timestamp" in the message is within 10 minutes of the UE's 
internal Emergency Warning System clock. The UE shall save all warning messages received within the 
previous 10 minutes up to a maximum number of N messages, and reject incoming messages that contain the 
same "timestamp" as a currently saved message. 

NOTE 8: The value N is subject to regulatory requirements, but, in the absence of these requirements being 

included in the 3GPP specifications, the UE manufacturer can assume a value of 20. A value of 20 would 
mean that up to 20 genuine warning messages can be sent to the same UE within a period of 10 minutes. 
If more than 20 genuine warning messages are sent within a period of 10 minutes, then it cannot be 
guaranteed that a UE would reject a maliciously replayed warning message. 

[TS 36.331, clause 5.2.2.4] 

The UE shall: 



1> if the UE is ETWS capable: 

2> upon entering a cell during RRC_IDLE, following successful handover or upon connection re-establishment: 

3> discard any previously buffered warningMessageSegment; 

3> clear, if any, the current values of messageldentifier and serialNumber for 
SystemlnformationBlockType 1 1 ; 

2> when the UE acquires SystemlnformationBlockTypel following ETWS indication, upon entering a cell 
during RRC_IDLE, following successful handover or upon connection re-establishment: 

3> \f schedulinglnfoList indicates that SystemlnformationBlockTypelO is present: 

4> start acquiring SystemlnformationBlockTypelO immediately; 
3> if schedulinglnfoList indicates that SystemlnformationBlockTypel 1 is present: 

4> start acquiring SystemlnformationBlockTypel 1 immediately; 

NOTE 2: UEs shall start acquiring SystemlnformationBlockTypelO and SystemlnformationBlockTypel 1 as 

described above even when systemlnfoValueTag in SystemlnformationBlockTypel has not changed. 

[TS 36.331, clause 5.2.2.17] 

Upon receiving SystemlnformationBlockTypelO, the UE shall: 

1> forward the received wamingType, warningSecuritylnfo (if present), messageldentifier and serialNumber to 
upper layers; 

[TS 36.331, clause 5.2.2.18] 

Upon receiving SystemlnformationBlockTypel 1 , the UE shall: 

1> if there is no current value for messageldentifier and serialNumber for SystemlnformationBlockTypel 1 ; or 

1> if either the received value of messageldentifier or of serialNumber or of both are different from the current 
values of messageldentifier and serialNumber for SystemlnformationBlockTypel 1: 

2> use the received values of messageldentifier and serialNumber for SystemlnformationBlockType 11 as the 
current values of messageldentifier and serialNumber for SystemlnformationBlockType 11; 

2> discard any previously buffered warningMessageSegment; 

2> if all segments of a warning message have been received: 

3> assemble the wamingMessage from the received warningMessageSegment; 

3> forward the received wamingMessage, messageldentifier, serialNumber and dataCodingScheme to upper 
layers; 
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3> stop reception of SystemlnformationBlockTypel 1; 

3> discard the current values of messageldentifier and serialNumber for SystemlnformationBtockTypell; 
2> else: 

3> store the received warningMessageSegment; 

3> continue reception of SystemlnformationBlockTypel 1; 

1> else if all segments of a warning message have been received: 

2> assemble the warningMessage from the received warningMessageSegment; 

2> forward the received complete warningMessage, messageldentifier, serialNumber and dataCodingScheme to 
upper layers; 

2> stop reception of SystemlnformationBlockTypel 1; 

2> discard the current values of messageldentifier and serialNumber for SystemlnformationBlockTypel!; 
1> else: 

2> store the received warningMessageSegment; 

2> continue reception of SystemlnformationBlockTypel!; 
[TS 36.33!, clause 5.3.2.3] 
Upon receiving the Paging message, the UE shall: 

!> if the etws-Indication is included and the UE is ETWS capable: 

2> re-acquire SystemlnformationBlockTypel immediately, i.e., without waiting until the next system information 
modification period boundary; 

2> if the schedulinglnfoList indicates that SystemlnformationBlockTypelO is present: 

3> acquire SystemlnformationBlockTypelO; 
2> if the schedulinglnfoList indicates that SystemlnformationBlockTypel 1 is present: 
3> acquire SystemlnformationBlockTypel!; 
14.1.3 Test description 

14.1.3.1 Pre-test conditions 

System Simulator: 

- Cell ! 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle mode (state 2) according to [!8]. 
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14.1.3.2 



Test procedure sequence 

Table 14.1.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS include an ETWS message with new 
messageldentifier and serialNumber in 
SystemlnformationBlockTypeW and 
SystemlnformationBlockType11 and transmit a 
Paging message including etws-lndication on 
Cell 1 (N0TE1). 


<— 


Paging 






2 


Check: Does the UE indicate the contents of 
the "warning message" to the user? 


- 


- 


1 


P 


3 


The SS wait for 10s. 


- 


- 


- 


- 


4 


The SS include an ETWS message with same 
messageldentifier and seriaiNumber in 
SystemlnformationBlockTypelO and 
SystemlnformationBlockType11 and transmit a 
Paging message including etws-lndication on 
Cell 1 (N0TE1). 


<— 


Paging 






5 


Check: Does the UE indicate the contents of 
the "warning message" to the user? 


- 


- 


1 


F 


N0TE1 : SystemlnformationBlockType11 contain 3 segments. 



14.1 .3.3 Specific message contents 

Table 14.1.3.3-1 : SystemlnformationBlockTypel for Cell 1 (all steps, Table 14.1.3.2-1) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnformation ::= SEQUENCE (SIZE 
(1 ..maxSI-Message)) OF SEQUENCE {} 


Combination 8 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3, SIB10 
and SIB11 are 
transmitted 




} 
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Table 14.1.3.3-2: SystemlnformationBlockTypeW ior Cell 1 (all steps, Table 14.1.3.2-1 ) 



Derivation Path: 36.508 clause 4.4.3.3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypelO ::= SEQUENCE { 








messageldentifier 


'0001 0001 0000 001 0'B 


ETWS message 
identifier for 
earthquake and 
tsunami message 
[see TS 23.041] 




serialNumber 

- Geographical Scope (2 bit) 

- IVIessage Code (10 bit) 

- Emergency User Alert (1 bit) 

- Popup (1 bit) 

- Update Number (4 bit) 


'001 1 0000 0000 OOOO'B 
Octet 1 bit 7 ~ 6 

Octet 1 bit 5 ~ Octet 2 bit 

4 

Octet 1 bit 5 

Octet 1 bit 4 
Octet 2 bit 3 ~ 


Cell wide; 

'11 0000 OOOO'B 

Activate 

emergency user 
alert; 
Activate popup; 

For each update, 

incremented by 

one. 

[see TS 23.041] 




warningType 

- Warning Type Value (7 bit) 

- Emergency User Alert (1 bit) 

- Popup (1 bit) 

- Padding (7 bit) 


'0000 0101 1000 OOOO'B 
Octet 1 bit 7 ~ 1 

Octet 1 bit 
Octet 2 bit 7 


Earthquake and 

Tsunami; 

Activate 

emergency user 

alert; 

Activate Popup. 

[see TS 23.041] 




warningSecuritylnfo 


Not present 






} 
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Table 14.1.3.3-3: SystemlnformationBlockType11 (1^' Segment) for Cell 1 (all steps, Table 14.1.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type1 1 ::= SEQUENCE { 








messageldentifier 


'0001 0001 0000 001 0'B 


ETWS message 
identifier for 
earthquake and 
tsunami message 
[see TS 23.041] 




serialNumber 

- Geographical Scope (2 bit) 

- IVIessage Code (10 bit) 

- Emergency User Alert (1 bit) 

- Popup (1 bit) 

- Update Number (4 bit) 


'001 1 0000 0000 OOOO'B 
Octet 1 bit 7 ~ 6 

Octet 1 bit 5 ~ Octet 2 bit 

4 

Octet 1 bit 5 

Octet 1 bit 4 
Octet 2 bit 3 ~ 


Cell wide; 

'11 0000 OOOO'B 

Activate 

emergency user 
alert; 
Activate popup; 

For each update, 

incremented by 

one. 

[see TS 23.041] 




warninglVlessageSegmentType 


notLastSegment 






warninglVlessageSegmentNumber 









warninglVlessageSegment 


Octetstring of N 


where N > 1 and 
less than 1246. 
[see TS 23.041] 




dataCodingScheme 


Bitstring(8) ID of the 
alphabet/coding and the 
applied language [see TS 
23.041] 






} 
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nd 



Table 14.1.3.3-4: SystemlnformationBlockTypell (2 Segment) for Cell 1 (all steps, Table 14.1.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel 1 ::= SEQUENCE { 








messageldentifier 


'0001 0001 0000 001 0'B 


ETWS message 
identifier for 
earthquake and 
tsunami message 
[see TS 23.041] 




serialNumber 

- Geographical Scope (2 bit) 

- IVIessage Code (10 bit) 

- Emergency User Alert (1 bit) 

- Popup (1 bit) 

- Update Number (4 bit) 


'001 1 0000 0000 OOOO'B 
Octet 1 bit 7 ~ 6 

Octet 1 bit 5 ~ Octet 2 bit 

4 

Octet 1 bit 5 

Octet 1 bit 4 
Octet 2 bit 3 ~ 


Cell wide; 

'11 0000 OOOO'B 

Activate 

emergency user 
alert; 
Activate popup; 

For each update, 

incremented by 

one. 

[see TS 23.041] 




warninglVlessageSegmentType 


notLastSegment 






warninglVlessageSegmentNumber 


1 






warninglVlessageSegment 


Octetstring of N 


where N > 1 and 
less than 1246. 
[see TS 23.041] 




dataCodingScheme 


Not present 






} 









Table 14.1.3.3-5: SystemlnformationBlockTypell (3'" Segment) for Cell 1 (all steps, Table 14.1.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel 1 ::= SEQUENCE { 








messageldentifier 


'0001 0001 0000 001 0'B 


ETWS message 
identifier for 
earthquake and 
tsunami message 
[see TS 23.041] 




serialNumber 

- Geographical Scope (2 bit) 

- Message Code (10 bit) 

- Emergency User Alert (1 bit) 

- Popup (1 bit) 

- Update Number (4 bit) 


'001 1 0000 0000 OOOO'B 
Octet 1 bit 7 ~ 6 

Octet 1 bit 5 ~ Octet 2 bit 

4 

Octet 1 bit 5 

Octet 1 bit 4 
Octet 2 bit 3 ~ 


Cell wide; 

'1 1 0000 OOOO'B 

Activate 

emergency user 
alert; 
Activate popup; 

For each update, 

incremented by 

one. 

[see TS 23.041] 




warninglVlessageSegmentType 


lastSegment 






warninglVlessageSegmentNumber 


2 






warninglVlessageSegment 


Octetstring of N 


where N > 1 and 
less than 1246. 
[see TS 23.041] 




dataCodingScheme 


Not present 






1 
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Table 14.1.3.3-6: Paging (step 1 and step 4, Table 14.1.3.2-1) 



Derivation Path: 36.508 Table 4.6.1-7 


Information Element 


Value/remark 


Comment 


Condition 


Paging ::= SEQUENCE { 








pagingRecordList 


Not present 






systemlnfolVlodification 


Not present 






etws-lndication 


true 






nonCriticalExtension SEQUENCE {} 


Not present 






\ 









14.2 



14.2.1 



ETWS reception in RRC_CONNECTED state / Duplicate 
detection 

Test Purpose (TP) 



(1) 



with { UE in RRC_CONNECTED state and follow the reception of Paging message with etws-lndication } 
ensure that { 

when { UE start to acquire ETWS message from SIBIO and SIBll } 

then { UE successfully received the ETWS message and activated the "User Alerting" popup display 



} 



14.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 23.401, clause 5.12.2; TS 
36.331, clauses 5.2.2.4, 5.2.2.17, 5.2.2.18, 5.3.2.3. 

[TS 23.401, clause 5.12.2] 

The Warning message to be broadcast is delivered via MMEs to multiple eNodeBs. The eNodeB(s) are responsible for 
scheduling the broadcast of the new message and the repetitions in each cell. 

The overall warning message delivery procedure is presented in figure 5.12.2.1-1: 



UE 



0. Rec 
Current 



7. User 
Alerting 



eNodeB 



istration and 
time 



Security procedures; 



6. Cell Broadcast 
delivery 



6. Write 



MME 



5. W rite-Replace Warning 



Replace Warning 



8. Record 
of messagb 
trace record 



CBC 



1. 



emergency Broadcast Request 



2. Write-Replace Warning Request 



Request 



Response 



success/failure 
delivery in 



CBE 



3. Write-Replace V^arning Confirm 

► 

4. Emergency Broadcast Response 



Figure 5.12.2.1-1 : Warning message delivery procedure 
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7a. If the UE has been configured to receive primary notification "without security", and the UE has authenticated 
the core network of the eNodeB it is camped on, then the UE can use "warning type" values, 'earthquake', 
'tsunami' or 'earthquake and tsunami', immediately to alert the user. When "warning type" is 'test', the UE silently 
discards the primary notification, but the UE specially designed for testing purposes may proceed with the 
following procedures. 

The UE activates reception of the broadcast messages containing the "warning message". 

If the "digital signature" and "timestamp" are present and security checks fail, then the UE notifies the user of 
this fact and stops the user alerting. 

If both the "digital signature" and "timestamp" are present and security checks pass, then the UE indicates the 
contents of the "warning message" to the user along with an indication that the message has been authenticated. 

In other cases the UE indicates the contents of the "warning message" to the user along with an indication that 
the message has not been authenticated. 

UE shall detect duplicate primary notifications and secondary notifications, including when UE changes the cell. 

7b. If the UE has not been configured to receive primary notification "without security" on that PLMN, or the UE 
has not authenticated the network, the UE activates reception of the broadcast messages containing the "warning 
message". When "warning type" is 'test', the UE silently discards the primary notification, but the UE specially 
designed for testing purposes may proceed with the following procedures. 

Unless both the "digital signature" and "timestamp" are present and the security checks pass, the UE shall ignore 
the message, return to normal idle mode, and ignore primary notifications for the next X seconds. 

NOTE 7: Repetition period X is subject to regulatory requirements, but, in the absence of these requirements being 
included in the 3GPP specifications, the UE manufacturer may assume a value of 60 seconds. 

If both the "digital signature" and "timestamp" are present and security checks pass, then the UE alerts the user; 
and indicates the contents of the "warning message" to the user along with an indication that the message has 
been authenticated. 

The network shall use UTC time when constructing the "timestamp". The "timestamp" security check shall only 
pass if the "digital signature" check passes and the "timestamp" in the message is within 10 minutes of the UE's 
internal Emergency Warning System clock. The UE shall save all warning messages received within the 
previous 10 minutes up to a maximum number of N messages, and reject incoming messages that contain the 
same "timestamp" as a currently saved message. 

NOTE 8: The value N is subject to regulatory requirements, but, in the absence of these requirements being 

included in the 3GPP specifications, the UE manufacturer can assume a value of 20. A value of 20 would 
mean that up to 20 genuine warning messages can be sent to the same UE within a period of 10 minutes. 
If more than 20 genuine warning messages are sent within a period of 10 minutes, then it cannot be 
guaranteed that a UE would reject a maliciously replayed warning message. 

[TS 36.331, clause 5.2.2.4] 

The UE shall: 



1> if the UE is ETWS capable: 

2> upon entering a cell during RRC_IDLE, following successful handover or upon connection re-establishment: 

3> discard any previously buffered warningMessageSegment; 

3> clear, if any, the current values of messageldentifier and serialNumber for 
SystemlnformationBlockTypel 1; 

2> when the UE acquires SystemlnformationBlockTypel following ETWS indication, upon entering a cell 
during RRC_IDLE, following successful handover or upon connection re-establishment: 
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3> if schedulinglnfoList indicates that SystemlnformationBlockTypelO is present: 

4> start acquiring SystemlnformationBlockTypelO immediately; 
3> if schedulinglnfoList indicates that SystemlnformationBlockTypel 1 is present: 

4> start acquiring SystemlnformationBlockTypel 1 immediately; 

NOTE 2: UEs shall start acquiring SystemlnformationBlockTypelO and SystemlnformationBlockTypell as 

described above even when systemlnfoValueTag in SystemlnformationBlockTypel has not changed. 

[TS 36.331, clause 5.2.2.17] 

Upon receiving SystemlnformationBlockTypelO, the UE shall: 

1> forward the received wamingType, warningSecuritylnfo (if present), messageldentifier and serialNumber to 
upper layers; 

[TS 36.331, clause 5.2.2.18] 

Upon receiving SystemlnformationBlockTypel 1 , the UE shall: 

1> if there is no current value for messageldentifier and serialNumber for SystemlnformationBlockTypel 1; or 

1> if either the received value of messageldentifier or of serialNumber or of both are different from the current 
values of messageldentifier and serialNumber for SystemlnformationBlockTypell: 

2> use the received values of messageldentifier and serialNumber for SystemlnformationBlockTypel 1 as the 
current values of messageldentifier and serialNumber for SystemlnformationBlockTypel 1; 

2> discard any previously buffered warningMessageSegment; 

2> if all segments of a warning message have been received: 

3> assemble the warningMessage from the received warningMessageSegment; 

3> forward the received warningMessage, messageldentifier, serialNumber and dataCodingScheme to upper 
layers; 

3> stop reception of SystemlnformationBlockTypel 1; 

3> discard the current values of messageldentifier and serialNumber for SystemlnformationBlockTypell; 
2> else: 

3> store the received warningMessageSegment; 

3> continue reception of SystemlnformationBlockTypel 1; 

1> else if all segments of a warning message have been received: 

2> assemble the warningMessage from the received warningMessageSegment; 

2> forward the received complete warningMessage, messageldentifier, serialNumber and dataCodingScheme to 
upper layers; 

2> stop reception of SystemlnformationBlockTypel 1; 

2> discard the current values of messageldentifier and serialNumber for SystemlnformationBlockTypell; 
1> else: 

2> store the received warningMessageSegment; 

2> continue reception of SystemlnformationBlockTypel 1; 
[TS 36.331, clause 5.3.2.3] 
Upon receiving the Paging message, the UE shall: 
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1> if the etws-Indication is included and the UE is ETWS capable: 

2> re-acquire SystemlnformationBlockTypel immediately, i.e., without waiting until the next system information 
modification period boundary; 

2> if the scheduUnglnfoList indicates that SystemlnformationBlockTypelO is present: 

3> acquire SystemlnformationBlockTypelO; 
2> if the scheduUnglnfoList indicates that SystemlnformationBlockTypel 1 is present: 
3> acquire SystemlnformationBlockTypell; 
14.2.3 Test description 

14.2.3.1 Pre-test conditions 

System Simulator: 

- Cell 1 
UE: 
None. 
Preamble: 
- The UE is in state Generic RB Established (state 3) according to [18]. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1557 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



14.2.3.2 



Test procedure sequence 

Table 14.2.3.2-1: Main behaviour 



St 


Procedure 


lUlessage Sequence 


TP 


Verdict 




U-S 


Message 


1 


The SS include an ETWS message with new 
messageldentifier and serialNumber in 
SystemlnformationBlockTypeW and 
SystemlnformationBlockType11 and transmit a 
Paging message including etws-lndication on 
Cell 1 (N0TE1). 


<— 


Paging 






2 


Check: Does the UE indicate the contents of 
the "warning message" to the user? 


- 


- 


1 


P 


3 


The SS wait for 10s. 


- 


- 


- 


- 


4 


The SS include an ETWS message with same 
messageldentifier and seriaiNumber in 
SystemlnformationBlockTypelO and 
SystemlnformationBlockType11 and transmit a 
Paging message including etws-lndication on 
Cell 1 (N0TE1). 


<— 


Paging 






5 


Check: Does the UE indicate the contents of 
the "warning message" to the user? 


- 


- 


1 


F 


N0TE1 : SystemlnformationBlockType11 contain 3 segments. 



14.2.3.3 Specific message contents 

Table 14.2.3.3-1 : SystemlnformationBlockTypel for Cell 1 (all steps, Table 14.2.3.2-1) 



Derivation Path: 36.508 table 4.4.3.2-3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel ::= SEQUENCE { 








schedulinglnformation ::= SEQUENCE (SIZE 
(1 ..maxSI-Message)) OF SEQUENCE {} 


Combination 8 in TS 
36.508 section 4.4.3.1 


SIB2, SIB3, SIB10 
andSIBII are 
transmitted 




} 
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Table 14.2.3.3-2: SystemlnformationBlockTypeW ior Cell 1 (all steps, Table 14.2.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypelO ::= SEQUENCE { 








messageldentifier 


'0001 0001 0000 001 0'B 


ETWS message 
identifier for 
earthquake and 
tsunami message 
[see TS 23.041] 




serialNumber 

- Geographical Scope (2 bit) 

- IVIessage Code (10 bit) 

- Emergency User Alert (1 bit) 

- Popup (1 bit) 

- Update Number (4 bit) 


'001 1 0000 0000 OOOO'B 
Octet 1 bit 7 ~ 6 

Octet 1 bit 5 ~ Octet 2 bit 

4 

Octet 1 bit 5 

Octet 1 bit 4 
Octet 2 bit 3 ~ 


Cell wide; 

'11 0000 OOOO'B 

Activate 

emergency user 
alert; 
Activate popup; 

For each update, 

incremented by 

one. 

[see TS 23.041] 




warningType 

- Warning Type Value (7 bit) 

- Emergency User Alert (1 bit) 

- Popup (1 bit) 

- Padding (7 bit) 


'0000 0101 1000 OOOO'B 
Octet 1 bit 7 ~ 1 

Octet 1 bit 
Octet 2 bit 7 


Earthquake and 

Tsunami; 

Activate 

emergency user 

alert; 

Activate Popup. 

[see TS 23.041] 




warningSecuritylnfo 


Not present 






} 
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Table 14.2.3.3-3: SystemlnformationBlockType11 (1^' Segment) for Cell 1 (all steps, Table 14.2.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlocl<Type1 1 ::= SEQUENCE { 








messageldentifier 


'0001 0001 0000 001 0'B 


ETWS message 
identifier for 
earthquake and 
tsunami message 
[see TS 23.041] 




serialNumber 

- Geographical Scope (2 bit) 

- IVIessage Code (10 bit) 

- Emergency User Alert (1 bit) 

- Popup (1 bit) 

- Update Number (4 bit) 


'001 1 0000 0000 OOOO'B 
Octet 1 bit 7 ~ 6 

Octet 1 bit 5 ~ Octet 2 bit 

4 

Octet 1 bit 5 

Octet 1 bit 4 
Octet 2 bit 3 ~ 


Cell wide; 

'11 0000 OOOO'B 

Activate 

emergency user 
alert; 
Activate popup; 

For each update, 

incremented by 

one. 

[see TS 23.041] 




warninglVlessageSegmentType 


notLastSegment 






warninglVlessageSegmentNumber 









warninglVlessageSegment 


Octetstring of N 


where N > 1 and 
less than 1246. 
[see TS 23.041] 




dataCodingScheme 


Bitstring(8) ID of the 
alphabet/coding and the 
applied language [see TS 
23.041] 






} 
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nd 



Table 14.2.3.3-4: SystemlnformationBlockTypell (2 Segment) for Cell 1 (all steps, Table 14.2.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel 1 ::= SEQUENCE { 








messageldentifier 


'0001 0001 0000 001 0'B 


ETWS message 
identifier for 
earthquake and 
tsunami message 
[see TS 23.041] 




serialNumber 

- Geographical Scope (2 bit) 

- IVIessage Code (10 bit) 

- Emergency User Alert (1 bit) 

- Popup (1 bit) 

- Update Number (4 bit) 


'001 1 0000 0000 OOOO'B 
Octet 1 bit 7 ~ 6 

Octet 1 bit 5 ~ Octet 2 bit 

4 

Octet 1 bit 5 

Octet 1 bit 4 
Octet 2 bit 3 ~ 


Cell wide; 

'11 0000 OOOO'B 

Activate 

emergency user 
alert; 
Activate popup; 

For each update, 

incremented by 

one. 

[see TS 23.041] 




warninglVlessageSegmentType 


notLastSegment 






warninglVlessageSegmentNumber 


1 






warninglVlessageSegment 


Octetstring of N 


where N > 1 and 
less than 1246. 
[see TS 23.041] 




dataCodingScheme 


Not present 






} 









Table 14.2.3.3-5: SystemlnformationBlockTypell (3'" Segment) for Cell 1 (all steps, Table 14.2.3.2-1) 



Derivation Path: 36.508 clause 4.4.3.3 


Information Element 


Value/remark 


Comment 


Condition 


SystemlnformationBlockTypel 1 ::= SEQUENCE { 








messageldentifier 


'0001 0001 0000 001 0'B 


ETWS message 
identifier for 
earthquake and 
tsunami message 
[see TS 23.041] 




serialNumber 

- Geographical Scope (2 bit) 

- Message Code (10 bit) 

- Emergency User Alert (1 bit) 

- Popup (1 bit) 

- Update Number (4 bit) 


'001 1 0000 0000 OOOO'B 
Octet 1 bit 7 ~ 6 

Octet 1 bit 5 ~ Octet 2 bit 

4 

Octet 1 bit 5 

Octet 1 bit 4 
Octet 2 bit 3 ~ 


Cell wide; 

'1 1 0000 OOOO'B 

Activate 

emergency user 
alert; 
Activate popup; 

For each update, 

incremented by 

one. 

[see TS 23.041] 




warninglVlessageSegmentType 


lastSegment 






warninglVlessageSegmentNumber 


2 






warninglVlessageSegment 


Octetstring of N 


where N > 1 and 
less than 1246. 
[see TS 23.041] 




dataCodingScheme 


Not present 






1 
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Table 14.2.3.3-6: Paging (step 1 and step 4, Table 14.2.3.2-1) 



Derivation Path: 36.508 Table 4.6.1-7 


Information Element 


Value/remark 


Comment 


Condition 


Paging ::= SEQUENCE { 








pagingRecordList 


Not present 






systemlnfolVlodification 


Not present 






etws-lndication 


true 






nonCriticalExtension SEQUENCE {} 


Not present 






\ 









15 

15.1 

15.1.1 
(1) 



Mobility management based on DSI\/IIPv6 (Dual- 
Stack Mobile IPv6) 

Discovery of the home agent via DNS 

Test Purpose (TP) 



with { UE has acquired an IP address and UE is configured with a DNS server address and UE is 
configured with the HA-APN Network Identifier } 
ensure that { 

when { UE is configured to discover IP address of Home Agent via DNS } 

then { UE transmits a DNS Query with QNAME set to FQDN of the Home Agent } 



15.1.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.303, clauses 5.1.2.1.1 and 
5.1.2.1.2. 

[TS 24.303, clause 5.1.2.1.1] 

The first procedure the UE needs to perform for DSMIPv6 initial attach is the discovery of the node acting as the HA. 

The UE can discover the IP addresses of the HA in one of the four following ways: 

- via DNS; 

via attach procedure for 3GPP access or trusted non-3GPP access (if supported) based on protocol configuration 
options; 

via IKEv2 during tunnel setup to ePDG for untrusted non-3GPP accesses; 

- via DHCPv6. 

If the UE does not obtain the IP addresses of the HA via PCO during the 3GPP or trusted non-3GPP (if supported) 
attach or via IKEv2 signalling, it shall follow either the procedures described in subclause 5.1.2.1.5 or the procedures 
described in subclause 5. 1 .2. 1 .2. The UE may be configured to perform both procedures in parallel or one of the two 
procedures only in case the other failed. 

[TS 24.303, clause 5.1.2.1.2] 

A UE performing Home Agent discovery based on DNS shall support the implementation of standard DNS 
mechanisms. 

The UE shall perform DNS Lookup by Home Agent Name as specified in IETF RFC 5026 [10] .The QNAME shall be 
set to the requested HA-APN. The HA-APN shall be constructed as specified in 3GPP TS 23.003 [17]. If a HA has both 
an IPv4 and an IPv6 address, the corresponding DNS record should be configured with both 'AAAA' and 'A' records. 
Accordingly the UE should perform one DNS lookup procedure to retrieve both 'AAAA' and 'A' records. The DNS 
server replies with one 'AAAA' and one 'A' record. 
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15.1.3 Test description 

15.1.3.1 Pre-test conditions 
System Simulator: 

- Cell 1. 
UE: 

The UE is configured to discover the Home Agent address via DNS. 
The UE is configured with a DNS server address. 
The UE is configured with the HA-APN Network Identifier. 
Preamble: 

The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

- The UE has acquired an IP address. 

15.1.3.2 Test procedure sequence 

Table 15.1.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The UE transmits a DNS Query message with 
QNAME set to FQDN of the Home Agent 
(derived from HA-APN Network Identifier and 
PLMN information). 


-> 


DNS Query 


1 


P 


2 


The SS transmits a DNS Response message 
with the IPv6 and IPv4 addresses of the Home 
Agent. 


<— 


DNS Response 







15.1.3.3 



Specific message contents 
Table 15.1.3.3-1: Message DNS Query (step 1, Table 15.1.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


QR= 


'0' 


query 




QPCQDE= 


'0000' 


QUERY 




QNAME= 


Fully Qualified Domain 
Name of the Home Agent 


Derived from HA- 
APN Network 
Identifier and 
PLMN information 
as per TS 23.003 
clause 21 .2 




QTYPE= 


A 


This is the query 
for the IPv4 
address 




QCLASS= 


IN 






QNAME= 


Fully Qualified Domain 
Name of the Home Agent 


Derived from HA- 
APN Network 
Identifier and 
PLMN information 
as per TS 23.003 
clause 21 .2 




QTYPE= 


AAAA 


This is the query 
for the IPv6 
address 




QCLASS= 


IN 
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Table 15.1.3.3-2: Message DNS Response (step 2, Table 15.1.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


QR= 


'1' 


response 




OPCODE= 


'0000' 


QUERY 




QNAME= 


Same as received in 
DNS Query 






QTYPE= 


A 






QCLASS= 


IN 






QNAME= 


Same as received in 
DNS Query 






QTYPE= 


AAAA 






QCLASS= 


IN 






RR{ 








NAME 


Same as received in 
DNS Query 






TYPE 


A 






CLASS 


IN 






RDATA 


IPv4 address of HA 






} 








RR{ 








NAME 


Same as received in 
DNS Query 






TYPE 


AAAA 






CLASS 


IN 






RDATA 


IPv6 address of HA 






} 









15.2 

15.2.1 
(1) 



Discovery of the Home Agent via DHCP 

Test Purpose (TP) 



with { UE has acquired an IP address and UE is configured with the HA-APN Network Identifier } 
ensure that { 

when { UE is configured to discover IP address of Home Agent via DHCP } 

then { UE transmits a DHCP Information-Request with Home Network Identifier Option containing 
the FQDN of the Home Agent} 



15.2.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.303, clauses 5.1.2.1.1 and 
5.1.2.1.5. 

[TS 24.303, clause 5.1.2.1.1] 

The first procedure the UE needs to perform for DSMIPv6 initial attach is the discovery of the node acting as the HA. 

The UE can discover the IP addresses of the HA in one of the four following ways: 

- via DNS; 

via attach procedure for 3GPP access or trusted non-3GPP access (if supported) based on protocol configuration 
options; 

via IKEv2 during tunnel setup to ePDG for untrusted non-3GPP accesses; 

- via DHCPv6. 

If the UE does not obtain the IP addresses of the HA via PCO during the 3GPP or trusted non-3GPP (if supported) 
attach or via IKEv2 signalling, it shall follow either the procedures described in subclause 5.1.2.1.5 or the procedures 
described in subclause 5. 1 .2. 1 .2. The UE may be configured to perform both procedures in parallel or one of the two 
procedures only in case the other failed. 
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[TS 24.303, clause 5.1.2.1.5] 

The HA address discovery via DHCPv6 is possible in the following cases: 

in 3GPP access, or 

in trusted non-3GPP access, when a DHCPv6 relay exists in the trusted non-3GPP access and the PDN GW is 
the DHCPv6 server, or 

in trusted non-3GPP access, when the DHCPv6 server is in the trusted non-3GPP access and it has the HA 
addresse information from static configuration, or received via STa reference point as specified in 
3GPPTS 29.273 [20]. 

A UE performing HA discovery based on DHCPv6 shall support the implementation of stateless DHCPv6 as specified 
in IETF RFC 3736 [13] and the DHCPv6 options as specified in draft-ietf-mip6-hiopt [12]. 

In order to discover the address of the HA the UE shall send an Information-Request message including the Home 
Network Identifier Option. 

In order to connect to a HA for a specific target PDN, the UE shall set the id-type to 1 and include the desired HA-APN 
in the Home Network Identifier field. 

The HA information is provided to the UE within a Home Network Information Option as described in draft-ietf-mip6- 
hiopt [12]. This option shall include either the available HA addresses (both the IPv6 address and the IPv4 address of 
the HA, if available) or the HA FQDN. In the latter case the UE shall perform a DNS Lookup by Home Agent Name as 
specified in IETF RFC 5026 [10]. The QNAME shall be set to the received HA FQDN. 

If a HA has both an IPv4 and an IPv6 address, the corresponding DNS record should be configured with both 'AAAA' 
and 'A' records. Accordingly the UE should perform one DNS lookup procedure to retrieve both 'AAAA' and 'A' 
records. The DNS server replies with one 'AAAA' and one 'A' record. 



Test description 
Pre-test conditions 



15.2.3 

15.2.3.1 

System Simulator: 

- Cell 1. 
UE: 

The UE is configured to discover the address of the Home Agent via DHCPv6. 

The UE is configured with the HA-APN Network Identifier. 
Preamble: 

The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

The UE has acquired an IPv6 address. 
1 5.2.3.2 Test procedure sequence 

Table 15.2.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Check: Does the UE transmit a DHCP 
Information-Request including a Home 
Network Information Option? 


-> 


DHCP Information-Request 


1 


P 


2 


The SS transmits a DHCP Reply message 
including a Home Network Information Option. 


<- 


DHCP Reply message 


- 


- 
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15.2.3.3 Specific message contents 

Table 15.2.3.3-1: DHCP Information-Request (step 1, Table 15.2.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


msg-type 


'00001011'B 


Information- 
Request 




Transaction- id 


Set by UE 






option-code 


'0000000000000001'B 


Option Client ID 




DUID 


Set by UE 






option-code 


'000000000000011 0'B 


Option ORO 




Requested-option-code-1 


FFS 


Home Network 
Identifier Option 




Id-type 


'00000001 'B 


Target network 
identity present 




Sub-opt-code 


'00000001 'B 


Home network 
identifier 




Home Network Parameter 


Fully Qualified Domain 
Name 


Derived from HA- 
APN Network 
Identifier and 
PLIVIN information 
as per TS 23.003 
clause 21 .2 





Table 15.2.3.3-2: DHCP Reply message (step 2, Table 15.2.3.2-2) 



Field 


Value/remarl< 


Comment 


Condition 


msg-type 


'000001 11'B 


Reply 




Transaction- id 


Set as the same value of 
Transaction-id in step 1 






option-code 


'0000000000000001'B 


Option Client ID 




DUID 


Set as the DUID of the 
client received in in step 
1 






option-code 


'000000000000001 0'B 


Option Server ID 




DUID 


Set by SS 






Home Network Identifier Option 


FFS 


Home Network 
Identifier Option 




Id-type 


'00000001 'B 


Target network 
identity present 




Sub-opt-code 


'00000001 'B 


Home network 
identifier 




Home Network Parameter 


Fully Qualified Domain 
Name 


Derived from HA- 
APN Network 
Identifier and 
PLIVIN information 
as per TS 23.003 
clause 21 .2 




Sub-opt-code 


'0000001 1'B 


IPv6 address 




Home Network Parameter 


IPv6 address of the 
Home Agent 






Sub-opt-code 


'000001 OO'B 


IPv4 address 
(optional value) 




Home Network Parameter 


IPv4 address of the 
Home Agent 







1 5.3 Discovery of the Home Agent via IKEv2 witii ePDG 

15.3.1 Test Purpose (IP) 

(1) 

with { UE has acquired an IP address } 
ensure that { 

when { UE has acquired the IP address of the ePDG } 
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then { UE transmits an IKE_SA_INIT message addressed to the ePDG to initiate security 
association establishment } 



(2) 

with { UE has transmitted an IKE_SA_INIT message addressed to the ePDG to initiate security 
association establishment } 
ensure that { 

when { UE receives an IKE_SA_INIT response message } 

then { UE transmits an IKE_AUTH Request message containing the configuration payload 
HOME_AGENT_ADRESS to receive the Home Agent address } 
} 

(3) 

with { UE has transmitted an IKE_AUTH Request message containing the configuration payload 
HOME_AGENT_ADRESS to receive the Home Agent address } 
ensure that { 

when { UE receives an IKE_AUTH Response message including an EAP-Request/AKA Challenge } 
then { UE transmits an IKE_AUTH Request message containing the correct EAP-Response/AKA- 
Challenge } 

} 

(4) 

with { UE has transmitted an IKE_AUTH Request message containing an EAP-Response/AKA-Challenge } 
ensure that { 

when { UE receives an IKE_AUTH Response message including EAP-Success } 

then { UE transmits an IKE_AUTH Request message with Authentication payload } 
} 

15.3.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.303, clauses 5.1.2.1.1 and 
5.1.2.1 .4, and TS 24.302, clauses 7.2.2 and 7.4. 1 . 

[TS 24.303, clause 5.1.2.1.1] 

The first procedure the UE needs to perform for DSMIPv6 initial attach is the discovery of the node acting as the HA. 

The UE can discover the IP addresses of the HA in one of the four following ways: 

- via DNS; 

via attach procedure for 3GPP access or trusted non-3GPP access (if supported) based on protocol configuration 
options; 

via IKEv2 during tunnel setup to ePDG for untrusted non-3GPP accesses; 

- via DHCPv6. 

If the UE does not obtain the IP addresses of the HA via PCO during the 3GPP or trusted non-3GPP (if supported) 
attach or via IKEv2 signalling, it shall follow either the procedures described in subclause 5.1.2.1.5 or the procedures 
described in subclause 5. 1 .2. 1 .2. The UE may be configured to perform both procedures in parallel or one of the two 
procedures only in case the other failed. 

[TS 24.303, clause 5.1.2.1.4] 

The UE may request the IPv6 and optionally the IPv4 address of the HA during the tunnel establishment procedure with 
the ePDG. The details of this procedure are described in 3GPP TS 24.302 [21]. 

[TS 24.302, clause 7.2.2] 

Once the ePDG has been selected, the UE shall initiate the IPsec tunnel establishment procedure using the IKEv2 
protocol as defined in IETF RFC 4306 [28] and 3GPP TS 33.402 [15]. 

[-] 
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If the UE supports DSMIPv6, the UE may request the HA IP address(es), by including a corresponding 
CFG_REQUEST Configuration Payload containing a HOME_AGENT_ADDRESS attribute. The 
HOME_AGENT_ADDRESS attribute content is defined in subclause 8.2.4.1. The HA IP address(es) requested in this 
attribute are for the APN for which the IPsec tunnel with the ePDG is set-up. In the CFG_REQUEST, the UE sets 
respectively the IPv6 address field and the optional IPv4 address field of the HOME_AGENT_ADDRESS attribute to 
0::0 and to 0.0.0.0. 

In case the UE wants to establish multiple PDN connections and if the UE uses DSMIPv6 for mobility management, the 
UE shall use DNS as defined in 3GPP TS 24.303 [11] to discover the HA IP address(es) for the additional PDN 
connections after IKEv2 security association was established to the ePDG. 

[TS 24.302, clause 7.4.1] 

Upon receipt of an IKE_AUTH request message from the UE requesting the establishment of a tunnel, the ePDG shall 
proceed with authentication and authorization. The basic procedure described in 3GPP TS 33.402 [15], while further 
details are given below. 

[-] 

During the IKEv2 authentication and tunnel establishment, if the UE requested the HA IP address(es) and if DSMIPv6 
was chosen and if the HA IP address(es) are available, the ePDG shall provide the HA IP address(es) (IPv6 address and 
optionally IPv4 address) for the corresponding APN as specified by the "IDr" payload in the IKE_AUTH request 
message by including in the CFG_REPLY Configuration Payload a HOME_AGENT_ADDRESS attribute. In the 
CFG_REPLY, the ePDG sets respectively the IPv6 Home Agent address field and optionally the IPv4 Home Agent 
address field of the HOME_AGENT_ADDRESS attribute to the IPv6 address of the HA and to the IPv4 address of the 
HA. If no IPv4 HA address is available at the ePDG or if it was not requested by the UE, the ePDG shall omit the IPv4 
Home Agent Address field. If the ePDG is not able to provide an IPv6 HA address for the corresponding APN, then the 
ePDG shall not include a HOME_AGENT_ADDRESS attribute in the CFG_REPLY. 

15.3.3 Test description 

15.3.3.1 Pre-test conditions 

System Simulator: 

- Cell 27 (WLAN) 
UE: 

None. 
Preamble: 

- The UE is connected to WLAN on Cell 27. 
The UE has acquired an IP address. 

The has discovered ePDG and acquired an IP address of it 
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15.5.3.2 



Test procedure sequence 

Table 15.5.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Check: Does the UE transmit an IKE_SA_INIT 
message addressed to the ePDG? 


-> 


IKE_SA_INIT 


1 


P 


2 


The SS transmits an IKE SA INIT message. 


<— 


IKE SA INIT 


- 


- 


3 


Checl<: Does the UE transmit an IKE_AUTH 
Request message containing the configuration 
payload HOME AGENT ADDRESS, a MN- 
NAI derived from UE IIVISI in the IDi field and 
anAPN in the IDr field? 


-> 


IKE_AUTH Request 


2 


P 


4 


The SS transmits an IKEAUTH Response 
message including an EAP-Request/AKA- 
Challenge. 


<~ 


IKE_AUTH Response 






5 


Check: Does the UE transmit an IKE_AUTH 
Request message including the EAP- 
Response/AKA-Challenge? 


-> 


IKE_AUTH Request 


3 


P 


6 


The SS transmits an IKE_AUTH Response 
message including EAP-Success. 


<- 


IKE_AUTH Response 


- 


- 


7 


Check: Does the UE transmit an IKE_AUTH 
Request message with Authentication 
payload? 


-> 


IKE_AUTH Request 


4 


P 


8 


The SS transmits an IKE_AUTH Response 
message with configuration payload 
HOME_AGENT_ADDRESS containing the 
Home Address associated to the UE. 


<~ 


IKE_AUTH Response 
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15.5.3.3 



Specific message contents 
Table 15.5.3.3-1 : Message IKE_SA_INIT (step 1, Table 15.5.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE SA SPI 


Set by the UE 






Responder's IKE_SA SPI 





First message jn 

IKE_SA_INIT 

exchange 




Next Payload 


'001 00001 'B 


SA 




Exchange Type 


'001 0001 0'B 


IKE SA INIT 




Security Association Payload 








Next Payload 


'001 0001 0'B 


KE 




IVIore proposal 


'0000001 0'B 






Proposal # 


'00000001 'B 


First cryptographic 
suite (section 6.5 
of TS 33.234) 




Protocol ID 


'00000001 'B 


IKE 




SPI size 


'OOOOOOOO'B 






Number of transforms 


'0000001 0'B 






More transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform ID 


'0000001 1'B 


SDESinCBC 

mode 

(ENCR 3DES) 




More transform 


'0000001 1'B 


This is the 
transform for prf 




Transform type 


'0000001 0'B 


PRF 




Transform ID 


'0000001 0'B 


PRF HMAC SHA 
1 (HMAC-SHA1) 




More transform 


'0000001 1'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform ID 


'0000001 0'B 


HMAC-SHA1-96 
(AUTH HMAC S 
HA1 96) 




Last transform 


'OOOOOOOO'B 


This is the 
transform for DH 




Transform type 


'000001 OO'B 


DH 




Transform ID 


'0000001 0'B 


Diffie-Hellman 
group 2 (1024-bit 
MODP) 




Last proposal 


'OOOOOOOO'B 






Proposal # 


'0000001 0'B 


Second 
cryptographic 
suite (section 6.5 
of TS 33.234) 




Protocol ID 


'00000001 'B 


IKE 




SPI size 


'OOOOOOOO'B 






Number of transforms 


'0000001 0'B 






More transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform ID 


'00001 01 1'B 


AESwith 128-bit 

keys in CBC 

mode 

(ENCR AES CB 

C) 




More transform 


'0000001 1'B 


This is the 
transform for prf 




Transform type 


'0000001 0'B 


PRF 




Transform ID 


'000001 OO'B 


PRF AES128 XC 
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BC AES-XCBC- 
PRF-128 




More transform 


'0000001 1'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform ID 


'000001 01 'B 


AES-XCBC-MAC- 
96(AUTH AES- 
XGBC -96) 




Last transform 


'OOOOOOOO'B 


This is the 
transform for DH 




Transform type 


'000001 OO'B 


DH 




Transform ID 


'0000001 0'B 


Diffie-Hellman 
group 2 {1024-bit 
MODP) 




Key Exchange Payload 








Next Payload 


'00101000'B 


Nonce 




DH Group # 


'000000000000001 0'B 


DH group 2 




Key Exchange data 


Set by the UE 






Nonce Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Nonce data 


Random number set by 
theUE 






Table 15.5.3.3-2: Message IKE_SA_INIT (step 2, Table 15.5.3.2-1) 


Information Element 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UEin IKE SA INITas 
Stepi 






Responder's IKE SA SPI 


Set by the SS 






Next Payload 


'001 00001 'B 


SA 




Exchange Type 


'001 0001 0'B 


IKE SA INIT 




Security Association Payload 








Next Payload 


'001 0001 0'B 


KE 




Proposal 


One of the 2 proposals 
included in IKE_SA_INIT 
at Step 1 






Key Exchange Payload 








Next payload 


'00 101000'B 


Nonce 




DH Group # 


'000000000000001 0'B 


DH group 2 




Key Exchange data 


Set by the SS 






Nonce Payload 








Nex t payload 


'OOOOOOOO'B 


No Next Payload 




Nonce data 


Set by the SS 
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Table 15.5.3.3-3: Message IKE_AUTH Request (step 3, Table 15.5.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'001 0001 1'B 


IDi 




Initialization Vector 


Random value set by the 
UE 






Encrypted IKE Payloads 








Identification - Initiator Payload 








Next Payload 


'00101 11 1'B 


CP 




ID Type 


0000001 OB 






ID 


Set to MN-NAI 






Configuration Payload 








Next Payload 


'001 00001 'B 


SA 




CFG Type 


'00000001 'B 


Request 




Configuration Attribute 


'FFS' 


HOME AGENT A 
DDRESS attribute 




Length 


Depending on the 
presence of IPv4 
attribute 








'00000000000000000000 
00000000000000000000 
00000000000000000000 
00000000000000000000 
00000000000000000000 
00000000000000000000 
OOOOOOOO'B 


IPv6 address 






'00000000000000000000 
OOOOOOOOOOOO'B 


IPv4 address 
(optional) 




Security Association Payload 








Next Payload 


'00101100'B 


TSi 




Proposals 


Any set of allowed values 






Traffic Selector- Initiator Payload 








Next Payload 


'00101100'B 


TSr 




Traffic selector data 


Any allowed set of values 






Traffic Selector - Responder Payload 








Next Payload 


'00100100'B 


IDr 




Traffic selector data 


Any allowed set of values 






Identification - Responder Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




ID Type 


'0000001 0'B 






ID 


APN 






Padding 


Set by the UE 


Fields from 

Encrypted 

payload 




Pad Length 


Set by the UE 


Fields from 

Encrypted 

payload 




Integrity checksum data 


Set by the UE 


Fields from 

Encrypted 

payload 
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Table 15.5.3.3-4: Message IKE_AUTH Response (step 4, Table 15.5.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'00100100'B 


IDr 




Initialization Vector 


Set by the SS 






Encrypted IKE Payloads 








Identification - Responder Payload 








Next Payload 


'00100101'B 


CERT 




ID Type 


'0000001 0'B 






ID 


APN 






Certificate Payload 








Next Payload 


'00110000'B 


EAP 




Cert encoding 


'000001 OO'B 


X.509 certificate - 
signature 




Certificate data 


Set by the SS 


DER encoded 
X.509 certificate 




Extensible Authentication Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Code 


'00000001 'B 


Request 




Type 


'0001011 1'B 


AKA 




Subtype 




AKA-Challenge 




Attribute type 


'00000001 'B 


AT RAND 




AT_RAND 


An arbitrarily selected 
128 bits value 






Attribute Type 


'0000001 0'B 


AT AUTN 




AT_AUTN 


See TS 24.301 [28] 
subclause 9.9.3.2 






Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 
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Table 15.5.3.3-5: Message IKE_AUTH Request (step 5, Table 15.5.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by UE 
at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'00110000'B 


EAP 




Initialization Vector 


Random value set by the 
UE 






Encrypted IKE Payloads 








Extensible Authentication Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Code 


'0000001 0'B 


Response 




Type 


'0001011 1'B 


AKA 




Subtype 




AKA-Challenge 




Attribute type 


'0000001 1'B 


AT RES 




AT_RES 


See TS 24.301 [28] 
subclause 9.9.3.4 






Padding 


Set by the UE 


Fields from 
Encryption 
payload 




Pad Length 


Set by the UE 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the UE 


Fields from 
Encryption 
payload 




Table 15.5.3.3-6: Message IKE_AUTH Response (step 6, Table 15.5.3.2-1) 


Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'00110000'B 


EAP 




Initialization Vector 


Set by the SS 






Encrypted IKE Payloads 








Extensible Authentication Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Code 


'0000001 1'B 


Success 




Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 
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Table 15.5.3.3-7: Message IKE_AUTH Request (step 7, Table 15.5.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's iKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPi 


Same as that set by the 
SS at Step 2 






Next Payioad 


'00101110'B 


E 




Exchange Type 


'00100011' 


IKE AUTH 




Encrypted Payioad 








Next Payioad 


'00100111'B 


AUTH 




Initialization Vector 


Random value set by the 
UE 






Encrypted IKE Payioads 








Authentication Payioad 








Next Payioad 


'OOOOOOOO'B 


No Next Payioad 




Auth iVIethod 


'0000001 0'B 


Shared Key 
Integrity code 




Auth Data 


derived from the iVlSK 
obtained from AKA 
exchange 


RFC 4306 defines 
the function to 
derive this key 
(section 2.15) 




Padding 


Set by the UE 


Fieids from 
Encryption 
payioad 




Pad Length 


Set by the UE 


Fieids from 
Encryption 
payioad 




Integrity checi<sum data 


Set by the UE 


Fieids from 
Encryption 
payioad 
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Table 15.5.3.3-8: Message IKE_AUTH Response (step 8, Table 15.5.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's iKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPi 


Same as that set by the 
SS at Step 2 






Next Payioad 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payioad 








Next Payioad 


'001 0011 1'B 


AUTH 




Initiaiization Vector 


Set by the SS 






Encrypted IKE Payioads 








Authentication Payioad 








Next Payioad 


'00101 11 1'B 


CP 




Auth iVIethod 


'0000001 0'B 


Shared Key 
Integrity code 




Auth Data 


derived from the IVISK 
obtained from AKA 
exchange 


RFC 4306 defines 
the function to 
derive this key 
(section 2.15) 




Configuration Payioad 








Next Payioad 


'001 00001 "B 


SA 




CFG Type 


'0000001 0'B 


Reply 




Configuration Attribute 


'FFS' 


HOME AGENT A 
DDRESS attribute 




Length 


Depending on the 
presence of IPv4 
attribute 








Set by SS 


IPv6 address 






Set by SS if requested by 
the UE and if available 


IPv4 address 
(optional) 




Security Association Payioad 








Next Payioad 


'00101101' 


TSi 




Proposal 


One of the 2 proposals 
included in IKE_AUTH 
Request at Step 3 






Traffic Selector - Initiator Payioad 








Next Payioad 


'00101100'B 


TSr 




Traffic Selector data 


Any allowed set of values 






Traffic Selector - Responder Payioad 








Next Payioad 


'OOOOOOOO'B 


No Next Payioad 




Traffic Selector data 


Any allowed set of values 






Padding 


Set by the SS 


Fields from 
Encryption 
payioad 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payioad 




Integrity checl<sum data 


Set by the SS 


Fields from 
Encryption 
payioad 





15.4 



15.4.1 



Security association establisinment witin Home Agent reallocation 
procedure 

Test Purpose (TP) 



(1) 



with { UE has acquired an IP address } 
ensure that { 

when { UE has acquired the IP address of the Home Agent 
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then { UE transmits an IKE_SA_INIT message addressed to the Home Agent to initiate security 
association establishment } 
} 

(2) 

with { UE has transmitted an IKE_SA_INIT message addressed to the Home Agent to initiate security 
association establishment } 
ensure that { 

when { UE receives an IKE_SA_INIT response message } 

then { UE transmits an IKE_AUTH Request message containing the configuration payload 
MIP6_H0ME_PREFIX to receive the prefix to use for Home Address configuration } 
} 

(3) 

with { UE has transmitted an IKE_AUTH Request message containing the configuration payload 
MIPG_HOME_PREFIX to receive the prefix to use for Home Address configuration } 
ensure that { 

when { UE receives an IKE_AUTH Response message including an EAP-Request/AKA Challenge } 
then { UE transmits an IKE_AUTH Request message containing the correct EAP-Response/AKA- 
Challenge } 

} 

(4) 

with { UE has transmitted an IKE_AUTH Request message containing an EAP-Response/AKA-Challenge } 
ensure that { 

when { UE receives an IKE_AUTH Response message including EAP-Success } 

then { UE transmits an IKE_AUTH Request message with Authentication payload } 
} 

(5) 

with { UE has transmitted an IKE_AUTH Request message with Authentication payload } 
ensure that { 

when { UE receives an IKE_AUTH Response message with Notify payload with a REDIRECT attribute 
containing the HOME AGENT address to connect to } 

then { UE transmits an IKE_SA_INIT message addressed to the Home Agent whose address was 
received in the Notify Payload to initiate security association establishment } 
} 

15.4.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.303, clauses 5.1.2.2 and 
5.1.3.1. 

[TS 24.303, clause 5. 1.2.2] 

The UE shall support the IKEv2 protocol (see IETF RFC 4306 [14]) for negotiating the IPsec security association to 
secure DSMIPv6 signalling and shall support EAP over IKEv2 as described in IETF RFC 4306 [14] to perform 
authentication with an AAA server. In a case an additional authentication and authorization of the IPSec security 
association is needed with an external AAA server, then the additional authentication steps during the IKEv2 exchange 
shall be supported as specified in IETF RFC 4739 [23] and described in 3GPP TS 33.234 [24]. 

The UE shall support IPsec ESP (see IETF RFC 4303 [11]) in order to provide authentication of Binding Update and 
Binding Acknowledgement messages as specified in IETF RFC 4877 [4]. The UE shall support multiple authentication 
exchanges in the IKEv2 protocol as specified in IETF RFC 4739 [23] in order to support authentication with an external 
AAA server. The UE shall support the redirect mechanism as defined in draft-ietf-ipsecme-ikev2 -redirect [30]. 

The UE shall initiate the security association establishment procedure by sending the IKE_SA_INIT request message 
defined in IETF RFC 4306 [14] to the HA. The UE shall indicate support for the HA reallocation by including a 
REDIRECT_SUPPORTED payload in the IKE_SA_INIT request as specified in draft-ietf-ipsecme-ikev2 -redirect [30]. 
On receipt of an IKE_S A_INIT response, the UE shall send an IKE_AUTH request message including the MN-NAI in 
the IDi payload and the Access Point Name (APN) of the target PDN the UE wants to connect to in the IDr payload. 
The APN shall be formatted as defined in 3GPP TS 23.003 [17]. The username part of the MN-NAI included in "IDi" 
payload may be an IMSI, pseudonym or re-authentication ID. The UE shall include in the IDi payload the same MN- 
NAI it includes in the EAP-Response/Identity within the EAP-AKA exchange. 

In the very first EAP-Response/Identity within the IKEv2 exchange the UE shall include a NAI whose username is 
derived from IMSI. In subsequent exchanges the UE should use pseudonyms and re-authentication identities provided 
by the 3GPP AAA server as specified in IETF RFC 4187 [26]. 
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NOTE: Fast re-authentication mechanism is optional, and therefore is an implementation option in the UE and 
operator configuration issue (i.e. it also depends on whether the AAA server sent a re-authentication ID 
during previous EAP authentication) whether to use it during security association establishment. 

EAP-AKA over IKEv2 shall be used to authenticate UE in the IKE_AUTH exchange, while public key signature based 
authentication with certificates shall be used to authenticate the HA. 



During the IKEv2 exchange, the UE shall request the allocation of an IPv6 home prefix through the Configuration 
Payload in the IKE_AUTH. Since in EPS a unique IPv6 prefix is assigned to the UE, the UE shall include a 
MIP6_HOME_PREFIX attribute in the CFG_REQUEST message as described in IETF RFC 5026 [10]. In addition the 
UE may include the INTERNAL_IP6_DNS attribute in the CFG_REQUEST as described in IETF RFC 4306 [14] to 
request the DNS server IPv6 address of the PLMN it is connecting to via DSMIPv6. In the same way the UE may 
include the INTERNAL_IP4_DNS attribute in the CFG_REQUEST to request the IPv4 address of the DNS server. 

The UE shall then auto-configure a Home Address from the IPv6 prefix received from the HA and shall run a 
CREATE_CHILD_SA exchange to create the security association for the new Home Address. In the 
CREATE_CHILD_SA exchange the UE shall include the Home Address and the appropriate selectors in the TSi 
(Traffic Selector-initiator) payload to negotiate the IPsec security association for protecting the Binding Update and 
Binding Acknowledgement messages as specified in IETF RFC 4877 [4]. 

[TS 24.303, clause 5.1.3.1] 

The HA shall support the IKEv2 protocol (see IETF RFC 4306 [14]) for negotiating the IPsec security association to 
secure DSMIPv6 signalling and shall support EAP over IKEv2 as described in IETF RFC 4306 [14] to perform UE 
authentication with an AAA server. If an additional authentication and authorization of the IPSec security association 
were needed with an external AAA server, then the additional authentication steps during the IKEv2 exchange shall be 
supported as specified in IETF RFC 4739 [23] and defined in 3GPP TS 33.234 [24]. The HA shall support IPsec ESP 
(see IETF RFC 4303 [1 1]) in order to provide authentication of Binding Update and Binding Acknowledgement 
messages as specified in IETF RFC 4877 [4]. The HA shall support multiple authentication exchanges in the IKEv2 
protocol as specified in IETF RFC 4739 [23] in order to support authentication with an external AAA server. 

The HA shall complete the IKE_SA_INIT exchange as specified in IETF RFC 4306 [14]. The HA shall include in the 
IDr the same value included by the UE in the IDr payload of the request. 

Upon successful authorization and authentication, the HA shall accept the security association establishment request by 
sending the IKE_AUTH response message with the CFG_REPLY payload including the IPv6 Home Network Prefix 
allocated to the UE in the MIP6_H0ME_PREFIX attribute. This prefix information shall include the prefix length as 
specified in IETF RFC 5026 [10]. If the UE included the INTERN AL_IP6_DNS or the INTERN AL_IP4_DNS in the 
CFG_REQUEST, the HA shall include the same attribute in the CFG_REPLY including zero or more DNS server 
addresses as specified in IETF RFC 4306 [14] 

If the 3GPP AAA server triggers the HA to perform a HA reallocation procedure as specified in 3GPP TS 33.402 [18], 
the HA learns the IP address of the target HA as specified in 3GPP TS 29.273 [20]. The HA shall provide to the UE the 
target HA IP address in the REDIRECT payload during IKE_AUTH exchange as specified in 3GPP TS 33.402 [18]. 
The encoding of the REDIRECT payload in the IKE_AUTH response message is specified in draft-ietf-ipsecme-ikev2- 
redirect [30]. The HA shall not assign an IPv6 prefix to the UE in the IKE_AUTH exchange. The HA shall remove the 
states of the IKEv2 security association with the UE after receiving an IKEv2 Informational message with a DELETE 
payload from the UE. 



15.4.3 


Test description 


15.4.3.1 


Pre-test conditions 


System Simulator: 




- Cell 1. 





UE: 
None. 
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Preamble: 



The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

The UE has acquired an IP address. 

The UE has discovered the IP address of the Home Agent (either via DNS, DHCPv6, IKEv2 signalling or during 
Attach Procedure via PCO). 



15.4.3.2 



Test procedure sequence 

Table 15.4.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


Check: Does the UE transmit an IKE_SA_INIT 
message addressed to the Home Agent? 


-> 


IKE_SA_INIT 


1 


P 


2 


The SS transmits an IKE SA INIT message. 


<— 


IKE SA INIT 


- 


- 


3 


Checl<: Does the UE transmit an IKE_AUTH 
Request message containing the configuration 
payload MIP6_H0ME_PREFIX, a MN-NAI 
derived from UE IMSI in the IDi field and an 
APN in the IDr field? 


~> 


IKE_AUTH Request 


2 


P 


4 


The SS transmits an IKE_AUTH Response 
message including an EAP-Request/AKA- 
Challenge. 


<- 


IKE_AUTH Response 






5 


Check: Does the UE transmit an IKE_AUTH 
Request message including the EAP- 
Response/AKA-Challenge? 


-> 


IKE_AUTH Request 


3 


P 


6 


The SS transmits an IKEAUTH Response 
message including EAP-Success. 


<~ 


IKE_AUTH Response 


- 


- 


7 


Check: Does the UE transmit an IKE_AUTH 
Request message with Authentication 
payload? 


-> 


IKE_AUTH Request 


4 


P 


8 


The SS transmits an IKE_AUTH Response 
message with Notify payload containing 
REDIRECT attribute with the Home Agent to 
be used 


<~ 


1KE_AUTH Response 






9 


Check: Does the UE transmit an IKE_SA_INIT 
message addressed to the Home Agent whose 
address was provided in the REDIRECT Notify 
payload?. 


~> 


1KE_SA_INIT 


5 


P 
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15.4.3.3 



Specific message contents 
Table 15.4.3.3-1 : Message IKE_SA_INIT (step 1, Table 15.4.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE SA SPI 


Set by the UE 






Responder's IKE_SA SPI 





First message jn 

IKE_SA_INIT 

exchange 




Next Payload 


'001 00001 'B 


SA 




Exchange Type 


'001 0001 0'B 


IKE SA INIT 




Security Association Payload 








Next Payload 


'001 0001 0'B 


KE 




IVIore proposal 


'0000001 0'B 






Proposal # 


'00000001 'B 


First cryptographic 
suite (section 6.5 
of TS 33.234) 




Protocol ID 


'00000001 'B 


IKE 




SPI size 


'OOOOOOOO'B 






Number of transforms 


'0000001 0'B 






More transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform ID 


'0000001 1'B 


SDESinCBC 

mode 

(ENCR 3DES) 




More transform 


'0000001 1'B 


This is the 
transform for prf 




Transform type 


'0000001 0'B 


PRF 




Transform ID 


'0000001 0'B 


PRF HMAC SHA 
1 (HMAC-SHA1) 




More transform 


'0000001 1'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform ID 


'0000001 0'B 


HMAC-SHA1-96 
(AUTH HMAC S 
HA1 96) 




Last transform 


'OOOOOOOO'B 


This is the 
transform for DH 




Transform type 


'000001 OO'B 


DH 




Transform ID 


'0000001 0'B 


Diffie-Hellman 
group 2 (1024-bit 
MODP) 




Last proposal 


'OOOOOOOO'B 






Proposal # 


'0000001 0'B 


Second 
cryptographic 
suite (section 6.5 
of TS 33.234) 




Protocol ID 


'00000001 'B 


IKE 




SPI size 


'OOOOOOOO'B 






Number of transforms 


'0000001 0'B 






More transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform ID 


'00001 01 1'B 


AESwith 128-bit 

keys in CBC 

mode 

(ENCR AES CB 

C) 




More transform 


'0000001 1'B 


This is the 
transform for prf 




Transform type 


'0000001 0'B 


PRF 




Transform ID 


'000001 OO'B 


PRF AES128 XC 
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BC AES-XCBC- 
PRF-128 




More transform 


'0000001 1'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform ID 


'000001 01 'B 


AES-XCBC-MAC- 
96(AUTH AES- 
XCBC -96) 




Last transform 


'OOOOOOOO'B 


This is the 
transform for DH 




Transform type 


'000001 OO'B 


DH 




Transform ID 


'0000001 0'B 


Diffie-Hellman 
group 2 {1024-bit 
MODP) 




Key Exchange Payload 








Next Payload 


'00101000'B 


Nonce 




DH Group # 


'000000000000001 0'B 


DH group 2 




Key Exchange data 


Set by the UE 






Nonce Payload 








Next Payload 


'00101001'B 


Notify 

(REDIRECT SUP 
PORTED) 




Nonce data 


Random number set by 
theUE 






REDIRECT SUPPORTED Notify Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Protocol ID 


'OOOOOOOO'B 


Notification is not 
specific to a 
particular security 
association 




SPI size 


'OOOOOOOO'B 


SPI field not 
present 




Notify Message Type 


'01 0000000001 Oil 0'B 


REDIRECT SUP 
PORTED 




Table 15.4.3.3-2: Message IKE_SA_INIT (step 2, Table 15.4.3.2-1) 


Information Element 


Vaiue/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UEin IKE SA INITas 
Stepi 






Responder's IKE SA SPI 


Set by the SS 






Next Payload 


'001 00001 'B 


SA 




Exchange Type 


'001 0001 0'B 


IKE SA INIT 




Security Association Payload 








Next Payload 


'001 0001 0'B 


KE 




Proposal 


One of the 2 proposals 
included in IKE_SA_INIT 
at Step 1 






Key Exchange Payload 








Next payload 


'00 101000'B 


Nonce 




DH Group # 


'000000000000001 0'B 


DH group 2 




Key Exchange data 


Set by the SS 






Nonce Payload 








Nex t payload 


'OOOOOOOO'B 


No Next Payload 




Nonce data 


Set by the SS 
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Table 15.4.3.3-3: Message IKE_AUTH Request (step 3, Table 15.4.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'001 0001 1'B 


IDi 




Initialization Vector 


Random value set by the 
UE 






Encrypted IKE Payloads 








Identification - Initiator Payload 








Next Payload 


'00101 11 1'B 


CP 




ID Type 


0000001 OB 






ID 


Set to MN-NAI 






Configuration Payload 








Next Payload 


'001 00001 'B 


SA 




CFG Type 


'00000001 'B 


Request 




Configuration Attribute 


'00010000'B 


MIP6 HOME PR 
EFIX attribute 




Length 


'OOOOOOOOOOOOOOOO'B 






Security Association Payload 








Next Payload 


'00101100'B 


TSi 




Proposals 


Any set of allowed values 






Traffic Selector- Initiator Payload 








Next Payload 


'00101100'B 


TSr 




Traffic selector data 


Any allowed set of values 






Traffic Selector - Responder Payload 








Next Payload 


'00100100'B 


IDr 




Traffic selector data 


Any allowed set of values 






Identification - Responder Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




ID Type 


'0000001 0'B 






ID 


APN 






Padding 


Set by the UE 


Fields from 

Encrypted 

payload 




Pad Length 


Set by the UE 


Fields from 

Encrypted 

payload 




Integrity checksum data 


Set by the UE 


Fields from 

Encrypted 

payload 
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Table 15.4.3.3-4: Message IKE_AUTH Response (step 4, Table 15.4.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'00100100'B 


IDr 




Initialization Vector 


Set by the SS 






Encrypted IKE Payloads 








Identification - Responder Payload 








Next Payload 


'00100101'B 


CERT 




ID Type 


'0000001 0'B 






ID 


APN 






Certificate Payload 








Next Payload 


'00110000'B 


EAP 




Cert encoding 


'000001 OO'B 


X.509 certificate - 
signature 




Certificate data 


Set by the SS 


DER encoded 
X.509 certificate 




Extensible Authentication Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Code 


'00000001 'B 


Request 




Type 


'0001011 1'B 


AKA 




Subtype 




AKA-Challenge 




Attribute type 


'00000001 'B 


AT RAND 




AT_RAND 


An arbitrarily selected 
128 bits value 






Attribute Type 


'0000001 0'B 


AT AUTN 




AT_AUTN 


See TS 24.301 [28] 
subclause 9.9.3.2 






Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 
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Table 15.4.3.3-5: Message IKE_AUTH Request (step 5, Table 15.4.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by UE 
at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'00110000'B 


EAP 




Initialization Vector 


Random value set by the 
UE 






Encrypted IKE Payloads 








Extensible Authentication Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Code 


'0000001 0'B 


Response 




Type 


'0001011 1'B 


AKA 




Subtype 




AKA-Challenge 




Attribute type 


'0000001 1'B 


AT RES 




AT_RES 


See TS 24.301 [28] 
subclause 9.9.3.4 






Padding 


Set by the UE 


Fields from 
Encryption 
payload 




Pad Length 


Set by the UE 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the UE 


Fields from 
Encryption 
payload 




Table 15.4.3.3-6: Message IKE_AUTH Response (step 6, Table 15.4.3.2-1) 


Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'00110000'B 


EAP 




Initialization Vector 


Set by the SS 






Encrypted IKE Payloads 








Extensible Authentication Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Code 


'0000001 1'B 


Success 




Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 
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Table 15.4.3.3-7: Message IKE_AUTH Request (step 7, Table 15.4.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's iKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPi 


Same as that set by the 
SS at Step 2 






Next Payioad 


'00101110'B 


E 




Exchange Type 


'00100011' 


IKE AUTH 




Encrypted Payioad 








Next Payioad 


'00100111'B 


AUTH 




Initialization Vector 


Random value set by the 
UE 






Encrypted IKE Payioads 








Authentication Payioad 








Next Payioad 


'OOOOOOOO'B 


No Next Payioad 




Auth iVIethod 


'0000001 0'B 


Shared Key 
Integrity code 




Auth Data 


derived from the iVlSK 
obtained from AKA 
exchange 


RFC 4306 defines 
the function to 
derive this key 
(section 2.15) 




Padding 


Set by the UE 


Fieids from 
Encryption 
payioad 




Pad Length 


Set by the UE 


Fieids from 
Encryption 
payioad 




Integrity checi<sum data 


Set by the UE 


Fieids from 
Encryption 
payioad 
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Table 15.4.3.3-8: Message IKE_AUTH Response (step 8, Table 15.4.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'001 0011 1'B 


AUTH 




Initialization Vector 


Set by the SS 






Encrypted IKE Payloads 








Authentication Payload 








Next Payload 


'00101001'B 


Notify 




Auth IVIethod 


'0000001 0'B 


Shared Key 
Integrity code 




Auth Data 


derived from the IVISK 
obtained from AKA 
exchange 


RFC 4306 defines 
the function to 
derive this key 
(section 2.15) 




Notify Payload 








Next Payload 


'001 00001 'B 


SA 




Protocol ID 


'OOOOOOOO'B 


Notification is not 
specific to a 
particular security 
association 




SPI Size 


'OOOOOOOO'B 


SPI field not 
present 




Notify IVIessage Type Length 


'01 0000000001 Oil 1'B 


REDIRECT 




GW Ident Type 


'000001 01 'B 






New Responder GW Identity 


IPv6 address of the HA 
to relocate 






GW Ident Type 


'00000001 'B 






New Responder GW Identity 


IPv4 address of the HA 
to relocate 


Optional 




Security Association Payload 








Next Payload 


'00101101' 


TSi 




Proposal 


One of the 2 proposals 
included in IKE_AUTH 
Request at Step 3 






Traffic Selector- Initiator Payload 








Next Payload 


'00101100'B 


TSr 




Traffic Selector data 


Any allowed set of values 






Traffic Selector - Responder Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Traffic Selector data 


Any allowed set of values 






Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 
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Table 15.4.3.3-910: Message IKE_SA_INIT (step 109, Table 15.4.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE SA SPI 


Set by the UE 






Responder's IKE_SA SPI 





First message jn 

IKE_SA_INIT 

exchange 




Next Payload 


'001 00001 'B 


SA 




Exchange Type 


'001 0001 0'B 


IKE SA INIT 




Security Association Payload 








Next Payload 


'001 0001 0'B 


KE 




IVIore proposal 


'0000001 0'B 






Proposal # 


'00000001 'B 


First cryptographic 
suite (section 6.5 
of TS 33.234) 




Protocol ID 


'00000001 'B 


IKE 




SPI size 


'OOOOOOOO'B 






Number of transforms 


'0000001 0'B 






More transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform ID 


'0000001 1'B 


3DES in CBC 

mode 

(ENCR 3DES) 




More transform 


'0000001 1'B 


This is the 
transform for prf 




Transform type 


'0000001 0'B 


PRF 




Transform ID 


'0000001 0'B 


PRF HMAC SHA 
1 (HMAC-SHA1) 




More transform 


'0000001 1'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform ID 


'0000001 0'B 


HMAC-SHA1-96 
(AUTH HMAC S 
HA1 96) 




Last transform 


'OOOOOOOO'B 


This is the 
transform for DH 




Transform type 


'000001 OO'B 


DH 




Transform ID 


'0000001 0'B 


Diffie-Hellman 
group 2 (1024-bit 
MODP) 




Last proposal 


'OOOOOOOO'B 






Proposal # 


'0000001 0'B 


Second 
cryptographic 
suite (section 6.5 
of TS 33.234) 




Protocol ID 


'00000001 'B 


IKE 




SPI size 


'OOOOOOOO'B 






Number of transforms 


'0000001 0'B 






More transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform ID 


'00001 01 1'B 


AESwith 128-bit 

keys in CBC 

mode 

(ENCR AES CB 

C) 




More transform 


'0000001 1'B 


This is the 
transform for prf 




Transform type 


'0000001 0'B 


PRF 




Transform ID 


'000001 OO'B 


PRF AES128 XC 
BC AES-XCBC- 
PRF-128 
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More transform 


'0000001 1'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform ID 


'000001 01 'B 


AES-XGBG-MAG- 
96(AUTH AES- 
XGBG -96) 




Last transform 


'OOOOOOOO'B 


This is the 
transform for DH 




Transform type 


'000001 OO'B 


DH 




Transform ID 


'0000001 0'B 


Diffie-Hellman 
group 2 (1024-bit 
MODP) 




Key Exchange Payload 








Next Payload 


'00101000'B 


Nonce 




DH Group # 


'000000000000001 0'B 


DH group 2 




Key Exchange data 


Set by the UE 






Nonce Payload 








Next Payload 


'00101001'B 


Notify 

(REDIRECT SUP 
PORTED) 




Nonce data 


Random number set by 
theUE 






REDIRECT SUPPORTED Notify Payload 








Next Payload 


'00101001'B 


Notify 

(REDIRECT FRO 
M) 




Protocol ID 


'OOOOOOOO'B 


Notification is not 
specific to a 
particular security 
association 




SPI size 


'OOOOOOOO'B 


SPI field not 
present 




Notify IVIessage Type 


'01 0000000001 Oil 0'B 


REDIRECT SUP 
PORTED 




Notify Payload 








Next Payload 


'OOOOOOOO'B 


No next payload 




Protocol ID 


'OOOOOOOO'B 


Notification is not 
specific to a 
particular security 
association 




SPI Size 


'OOOOOOOO'B 


SPI field not 
present 




Notify IVIessage Type 


'01 0000000001 lOOO'B 


REDIRECT From 




GW Ident Type 


Any allowed value (IPv6 
or IPv4 or HA FQDN) 


Set depending on 
how the UE has 
discovered the HA 
in the preamble 




New Responder GW Identity 


Depends on GW Ident 
type 







15.5 



15.5.1 



Security association establisinment witinout inome agent 
reallocation procedure 

Test Purpose (TP) 



(1) 



with { UE has acquired an IP address } 
ensure that { 

when { UE has acquired the IP address of the Home Agent } 

then { UE transmits an IKE_SA_INIT message addressed to the Home Agent to initiate security 
association establishment } 
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(2) 

with { UE has transmitted an IKE_SA_INIT message addressed to the Home Agent to initiate security 
association establishment } 
ensure that { 

when { UE receives an IKE_SA_INIT response message } 

then { UE transmits an IKE_AUTH Request message containing the configuration payload 
MIP6_H0ME_PREFIX to receive the prefix to use for Home Address configuration } 
} 

(3) 

with { UE has transmitted an IKE_AUTH Request message containing the configuration payload 
MIP6_H0ME_PREFIX to receive the prefix to use for Home Address configuration } 
ensure that { 

when { UE receives an IKE_AUTH Response message including an EAP-Request/AKA Challenge } 
then { UE transmits an IKE_AUTH Request message containing the correct EAP-Response/AKA- 
Challenge } 

} 

(4) 

with { UE has transmitted an IKE_AUTH Request message containing an EAP-Response/AKA-Challenge } 
ensure that { 

when { UE receives an IKE_AUTH Response message including EAP-Success } 

then { UE transmits an IKE_AUTH Request message with Authentication payload } 
} 

(5) 

with { UE has transmitted an IKE_AUTH Request message with Authentication payload } 
ensure that { 

when { UE receives an IKE_AUTH Response message with configuration payload MIP6_H0ME_PREFIX 
containing the Home Network Prefix HNP associated to the UE } 

then { UE transmits a CREATE_CHILD_SA Request message including traffic selectors fields {TSi 
and TSr) that contain the parameters identifying the Binding Update (BU) /Binding Acknowledgments 
(BA) messages } 
} 

15.5.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.303, clause 5.1.2.2. 

[TS 24.303, clause 5.1.2.2] 

The UE shall support the IKEv2 protocol (see IETF RFC 4306 [14]) for negotiating the IPsec security association to 
secure DSMIPv6 signalling and shall support EAP over IKEv2 as described in IETF RFC 4306 [14] to perform 
authentication with an AAA server. In a case an additional authentication and authorization of the IPSec security 
association is needed with an external AAA server, then the additional authentication steps during the IKEv2 exchange 
shall be supported as specified in IETF RFC 4739 [23] and described in 3GPP TS 33.234 [24]. 

The UE shall support IPsec ESP (see IETF RFC 4303 [11]) in order to provide authentication of Binding Update and 
Binding Acknowledgement messages as specified in IETF RFC 4877 [4]. The UE shall support multiple authentication 
exchanges in the IKEv2 protocol as specified in IETF RFC 4739 [23] in order to support authentication with an external 
AAA server. The UE shall support the redirect mechanism as defined in draft-ietf-ipsecme-ikev2 -redirect [30]. 

The UE shall initiate the security association establishment procedure by sending the IKE_SA_INIT request message 
defined in IETF RFC 4306 [14] to the HA. The UE shall indicate support for the HA reallocation by including a 
REDIRECT_SUPPORTED payload in the IKE_SA_INIT request as specified in draft-ietf-ipsecme-ikev2 -redirect [30]. 
On receipt of an IKE_S A_INIT response, the UE shall send an IKE_AUTH request message including the MN-NAI in 
the IDi payload and the Access Point Name (APN) of the target PDN the UE wants to connect to in the IDr payload. 
The APN shall be formatted as defined in 3GPP TS 23.003 [17]. The username part of the MN-NAI included in "IDi" 
payload may be an IMSI, pseudonym or re-authentication ID. The UE shall include in the IDi payload the same MN- 
NAI it includes in the EAP-Response/Identity within the EAP-AKA exchange. 

In the very first EAP-Response/Identity within the IKEv2 exchange the UE shall include a NAI whose username is 
derived from IMSI. In subsequent exchanges the UE should use pseudonyms and re-authentication identities provided 
by the 3GPP AAA server as specified in IETF RFC 4187 [26]. 
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NOTE: Fast re-authentication mechanism is optional, and therefore is an implementation option in the UE and 
operator configuration issue (i.e. it also depends on whether the AAA server sent a re-authentication ID 
during previous EAP authentication) whether to use it during security association establishment. 

EAP-AKA over IKEv2 shall be used to authenticate UE in the IKE_AUTH exchange, while public key signature based 
authentication with certificates shall be used to authenticate the HA. 



During the IKEv2 exchange, the UE shall request the allocation of an IPv6 home prefix through the Configuration 
Payload in the IKE_AUTH. Since in EPS a unique IPv6 prefix is assigned to the UE, the UE shall include a 
MIP6_HOME_PREFIX attribute in the CFG_REQUEST message as described in IETF RFC 5026 [10]. In addition the 
UE may include the INTERNAL_IP6_DNS attribute in the CFG_REQUEST as described in IETF RFC 4306 [14] to 
request the DNS server IPv6 address of the PLMN it is connecting to via DSMIPv6. In the same way the UE may 
include the INTERNAL_IP4_DNS attribute in the CFG_REQUEST to request the IPv4 address of the DNS server. 

The UE shall then auto-configure a Home Address from the IPv6 prefix received from the HA and shall run a 
CREATE_CHILD_SA exchange to create the security association for the new Home Address. In the 
CREATE_CHILD_SA exchange the UE shall include the Home Address and the appropriate selectors in the TSi 
(Traffic Selector-initiator) payload to negotiate the IPsec security association for protecting the Binding Update and 
Binding Acknowledgement messages as specified in IETF RFC 4877 [4]. 



15.5.3 


Test description 


15.5.3.1 


Pre-test conditions 


System Simulator: 




- Cell 1. 





UE: 

None. 

Preamble: 

- The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

- The UE has acquired an IP address. 

The UE has discovered the IP address of the Home Agent (either via DNS, DHCPv6, IKEv2 signalling or during 
Attach Procedure via PCO). 
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15.5.3.2 



Test procedure sequence 

Table 15.5.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Check: Does the UE transmit an IKE_SA_INIT 
message addressed to the Home Agent? 


-> 


IKE_SA_INIT 


1 


P 


2 


The SS transmits an IKE SA INIT message. 


<— 


IKE SA INIT 


- 


- 


3 


Checl<: Does the UE transmit an IKE_AUTH 
Request message containing the configuration 
payload M1P6_H0ME_PREFIX, a MN-NAI 
derived from UE IMSI in the IDi field and an 
APN in the IDr field? 


-> 


IKE_AUTH Request 


2 


P 


4 


The SS transmits an IKEAUTH Response 
message including an EAP-Request/AKA- 
Challenge. 


<~ 


IKE_AUTH Response 






5 


Check: Does the UE transmit an IKE_AUTH 
Request message including the EAP- 
Response/AKA-Challenge? 


-> 


IKE_AUTH Request 


3 


P 


6 


The SS transmits an IKE_AUTH Response 
message including EAP-Success. 


<- 


IKE_AUTH Response 


- 


- 


7 


Check: Does the UE transmit an IKE_AUTH 
Request message with Authentication 
payload? 


-> 


IKE_AUTH Request 


4 


P 


8 


The SS transmits an IKE_AUTH Response 
message with configuration payload 
MIP6_H0ME_PREFIX containing the Home 
Network Prefix HNP associated to the UE. 


<~ 


IKE_AUTH Response 






9 


Check: Does the UE transmit a 
CREATE_CHILD_SA Request message 
including traffic selectors fields (TSi and TSr) 
that contain the parameters identifying the 
Binding Update (BU) / Binding 
Acknowledgments (BA) messages? 


~> 


CREATE_CHILD_SA Request 


5 


P 


10 


The SS transmits a CREATE_CHILD_SA 
Response message. 


<— 


CREATE_CHILD_SA Response 


- 


- 
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15.5.3.3 



Specific message contents 
Table 15.5.3.3-1 : Message IKE_SA_INIT (step 1, Table 15.5.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE SA SPI 


Set by the UE 






Responder's IKE_SA SPI 





First message jn 

IKE_SA_INIT 

exchange 




Next Payload 


'001 00001 'B 


SA 




Exchange Type 


'001 0001 0'B 


IKE SA INIT 




Security Association Payload 








Next Payload 


'001 0001 0'B 


KE 




IVIore proposal 


'0000001 0'B 






Proposal # 


'00000001 'B 


First cryptographic 
suite (section 6.5 
of TS 33.234) 




Protocol ID 


'00000001 'B 


IKE 




SPI size 


'OOOOOOOO'B 






Number of transforms 


'0000001 0'B 






More transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform ID 


'0000001 1'B 


SDESinCBC 

mode 

(ENCR 3DES) 




More transform 


'0000001 1'B 


This is the 
transform for prf 




Transform type 


'0000001 0'B 


PRF 




Transform ID 


'0000001 0'B 


PRF HMAC SHA 
1 (HMAC-SHA1) 




More transform 


'0000001 1'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform ID 


'0000001 0'B 


HMAC-SHA1-96 
(AUTH HMAC S 
HA1 96) 




Last transform 


'OOOOOOOO'B 


This is the 
transform for DH 




Transform type 


'000001 OO'B 


DH 




Transform ID 


'0000001 0'B 


Diffie-Hellman 
group 2 (1024-bit 
MODP) 




Last proposal 


'OOOOOOOO'B 






Proposal # 


'0000001 0'B 


Second 
cryptographic 
suite (section 6.5 
of TS 33.234) 




Protocol ID 


'00000001 'B 


IKE 




SPI size 


'OOOOOOOO'B 






Number of transforms 


'0000001 0'B 






More transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform ID 


'00001 01 1'B 


AESwith 128-bit 

keys in CBC 

mode 

(ENCR AES CB 

C) 




More transform 


'0000001 1'B 


This is the 
transform for prf 




Transform type 


'0000001 0'B 


PRF 




Transform ID 


'000001 OO'B 


PRF AES128 XC 
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BC AES-XCBC- 
PRF-128 




More transform 


'0000001 1'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform ID 


'000001 01 'B 


AES-XCBC-MAC- 
96(AUTH AES- 
XCBC -96) 




Last transform 


'OOOOOOOO'B 


This is the 
transform for DH 




Transform type 


'000001 OO'B 


DH 




Transform ID 


'0000001 0'B 


Diffie-Hellman 
group 2 {1024-bit 
MODP) 




Key Exchange Payload 








Next Payload 


'00101000'B 


Nonce 




DH Group # 


'000000000000001 0'B 


DH group 2 




Key Exchange data 


Set by the UE 






Nonce Payload 








Next Payload 


'00101001'B 


Notify 

(REDIRECT SUP 
PORTED) 




Nonce data 


Random number set by 
theUE 






REDIRECT SUPPORTED Notify Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Protocol ID 


'OOOOOOOO'B 


Notification is not 
specific to a 
particular security 
association 




SPI size 


'OOOOOOOO'B 


SPI field not 
present 




Notify Message Type 


'01 0000000001 Oil 0'B 


REDIRECT SUP 
PORTED 




Table 15.5.3.3-2: Message IKE_SA_INIT (step 2, Table 15.5.3.2-1) 


Information Element 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UEin IKE SA INITas 
Stepi 






Responder's IKE SA SPI 


Set by the SS 






Next Payload 


'001 00001 'B 


SA 




Exchange Type 


'001 0001 0'B 


IKE SA INIT 




Security Association Payload 








Next Payload 


'001 0001 0'B 


KE 




Proposal 


One of the 2 proposals 
included in IKE_SA_INIT 
at Step 1 






Key Exchange Payload 








Next payload 


'00 101000'B 


Nonce 




DH Group # 


'000000000000001 0'B 


DH group 2 




Key Exchange data 


Set by the SS 






Nonce Payload 








Nex t payload 


'OOOOOOOO'B 


No Next Payload 




Nonce data 


Set by the SS 
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Table 15.5.3.3-3: Message IKE_AUTH Request (step 3, Table 15.5.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'001 0001 1'B 


IDi 




Initialization Vector 


Random value set by the 
UE 






Encrypted IKE Payloads 








Identification - Initiator Payload 








Next Payload 


'00101 11 1'B 


CP 




ID Type 


0000001 OB 






ID 


Set to MN-NAI 






Configuration Payload 








Next Payload 


'001 00001 'B 


SA 




CFG Type 


'00000001 'B 


Request 




Configuration Attribute 


'00010000'B 


MIP6 HOME PR 
EFIX attribute 




Length 


'OOOOOOOOOOOOOOOO'B 






Security Association Payload 








Next Payload 


'00101100'B 


TSi 




Proposals 


Any set of allowed values 






Traffic Selector- Initiator Payload 








Next Payload 


'00101100'B 


TSr 




Traffic selector data 


Any allowed set of values 






Traffic Selector - Responder Payload 








Next Payload 


'00100100'B 


IDr 




Traffic selector data 


Any allowed set of values 






Identification - Responder Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




ID Type 


'0000001 0'B 






ID 


APN 






Padding 


Set by the UE 


Fields from 

Encrypted 

payload 




Pad Length 


Set by the UE 


Fields from 

Encrypted 

payload 




Integrity checksum data 


Set by the UE 


Fields from 

Encrypted 

payload 
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Table 15.5.3.3-4: Message IKE_AUTH Response (step 4, Table 15.5.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'00100100'B 


IDr 




Initialization Vector 


Set by the SS 






Encrypted IKE Payloads 








Identification - Responder Payload 








Next Payload 


'00100101'B 


CERT 




ID Type 


'0000001 0'B 






ID 


APN 






Certificate Payload 








Next Payload 


'00110000'B 


EAP 




Cert encoding 


'000001 OO'B 


X.509 certificate - 
signature 




Certificate data 


Set by the SS 


DER encoded 
X.509 certificate 




Extensible Authentication Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Code 


'00000001 'B 


Request 




Type 


'0001011 1'B 


AKA 




Subtype 




AKA-Challenge 




Attribute type 


'00000001 'B 


AT RAND 




AT_RAND 


An arbitrarily selected 
128 bits value 






Attribute Type 


'0000001 0'B 


AT AUTN 




AT_AUTN 


See TS 24.301 [28] 
subclause 9.9.3.2 






Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 
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Table 15.5.3.3-5: Message IKE_AUTH Request (step 5, Table 15.5.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by UE 
at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'00110000'B 


EAP 




Initialization Vector 


Random value set by the 
UE 






Encrypted IKE Payloads 








Extensible Authentication Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Code 


'0000001 0'B 


Response 




Type 


'0001011 1'B 


AKA 




Subtype 




AKA-Challenge 




Attribute type 


'0000001 1'B 


AT RES 




AT_RES 


See TS 24.301 [28] 
subclause 9.9.3.4 






Padding 


Set by the UE 


Fields from 
Encryption 
payload 




Pad Length 


Set by the UE 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the UE 


Fields from 
Encryption 
payload 




Table 15.5.3.3-6: Message IKE_AUTH Response (step 6, Table 15.5.3.2-1) 


Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'00110000'B 


EAP 




Initialization Vector 


Set by the SS 






Encrypted IKE Payloads 








Extensible Authentication Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Code 


'0000001 1'B 


Success 




Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 
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Table 15.5.3.3-7: Message IKE_AUTH Request (step 7, Table 15.5.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's iKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPi 


Same as that set by the 
SS at Step 2 






Next Payioad 


'00101110'B 


E 




Exchange Type 


'00100011' 


IKE AUTH 




Encrypted Payioad 








Next Payioad 


'00100111'B 


AUTH 




Initialization Vector 


Random value set by the 
UE 






Encrypted IKE Payioads 








Authentication Payioad 








Next Payioad 


'OOOOOOOO'B 


No Next Payioad 




Auth iVIethod 


'0000001 0'B 


Shared Key 
Integrity code 




Auth Data 


derived from the iVlSK 
obtained from AKA 
exchange 


RFC 4306 defines 
the function to 
derive this key 
(section 2.15) 




Padding 


Set by the UE 


Fieids from 
Encryption 
payioad 




Pad Length 


Set by the UE 


Fieids from 
Encryption 
payioad 




Integrity checi<sum data 


Set by the UE 


Fieids from 
Encryption 
payioad 
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Table 15.5.3.3-8: Message IKE_AUTH Response (step 8, Table 15.5.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'001 0001 1'B 


IKE AUTH 




Encrypted Payload 








Next Payload 


'001 0011 1'B 


AUTH 




Initialization Vector 


Set by the SS 






Encrypted IKE Payloads 








Authentication Payload 








Next Payload 


'00101 11 1'B 


CP 




Auth IVIethod 


'0000001 0'B 


Shared Key 
Integrity code 




Auth Data 


derived from the IVISK 
obtained from AKA 
exchange 


RFC 4306 defines 
the function to 
derive this key 
(section 2.15) 




Configuration Payload 








Next Payload 


'001 00001 'B 


SA 




CFG Type 


'0000001 0'B 


Reply 




Configuration Attribute 


'00010000'B 


MIP6 HOME PR 
EFIX attribute 




Length 


'000000000001 01 01 'B 






Prefix lifetime 


Any allowed value 






Home Prefix 


IPv6 prefix- 16 bytes 






Prefix length 


'10000000'B 


Prefix length must 
be 64 




Security Association Payload 








Next Payload 


'00101101' 


TSi 




Proposal 


One of the 2 proposals 
included in IKE_AUTH 
Request at Step 3 






Traffic Selector- Initiator Payload 








Next Payload 


'00101100'B 


TSr 




Traffic Selector data 


Any allowed set of values 






Traffic Selector - Responder Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Traffic Selector data 


Any allowed set of values 






Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 
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Table 15.5.3.3-9: Message CREATE_CHILD_SA Request (step 9, Table 15.5.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'00 100100'B 


CREATE CHILD 
SA 




Encrypted Payload 








Next Payload 


'001 00001 'B 


SA 




Initialization Vector 


Random value set by the 
UE 






Encrypted IKE Payloads 








Security Association Payload 








Next Payload 


'00101000'B 


Ni 




More proposal 


'0000001 0'B 






Proposal # 


'00000001 'B 


First cryptographic 
suite (section 6.6 
of TS 33.234) 




Protocol ID 


'0000001 1'B 


ESP 




SPI size 


'000001 OO'B 






# of transforms 


'0000001 0'B 






SPI 


Set by the UE 






More transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform ID 


'0000001 1'B 


3DESinCBC 

mode 

(ENCR 3DES) 




Last transform 


'OOOOOOOO'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform attribute ID 


'0000001 0'B 


HMAC-SHA1-96 
(AUTH HMAC S 
HA1 96) 




Last proposal 


'OOOOOOOO'B 






Proposal # 


'0000001 0'B 


Second 
cryptographic 
suite (section 6.6 
of TS 33.234) 




Protocol ID 


'0000001 1'B 


ESP 




SPI size 


'000001 OO'B 






# of transforms 


'0000001 0'B 






SPI 


Set by the UE 






More transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform ID 


'00001 01 1'B 


AES with 128-bit 

keys in CBC 

mode 

(ENCR AES CB 

C) 




Last transform 


'OOOOOOOO'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform ID 


'000001 01 'B 


AES-XCBC-MAC- 
96 (AUTH AES- 
XCBC -96) 




Nonce Payload 
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Next Payload 


'00101100'B 


TSi 




Nonce data 


Random number set by 
theUE 






Traffic Selector- Initiator Payload 








Next Payload 


'00101101'B 


TSr 




Traffic Selector data 


Any set of values 
containing the traffic 
selector of the 
CREATE_CHILD_SA 
Response at Step 1 






Traffic Selector - Responder Payload 








Next Payload 


'00101001'B 


Notify (Use 
transport mode) 




Traffic Selector data 


Any set of values 
containing the traffic 
selector of the 
CREATE_CHILD_SA 
Response at Step 1 






Use transport mode Notify Payload 








Next payload 


'00101001'B 


Notify (Use 
transport mode) 




Protocol ID 


'0000001 1'B 


ESP 




SPI size 


'000001 OO'B 






Notify IVIessage Type 


'100000000000011 1'B 


Use transport 
mode 




SPI 


Same as that set by the 
UE in SA proposal #1 






Use transport mode Notify Payload 








Next payload 


'OOOOOOOO'B 


No Next Payload 




Protocol ID 


'0000001 1'B 


ESP 




SPI size 


'000001 OO'B 






Notify IVIessage Type 


'100000000000011 1'B 


Use transport 
mode 




SPI 


Same as that set by the 
UE in SA proposal #1 






Padding 


Set by the UE 


Fields from 
Encryption 
payload 




Pad Length 


Set by the UE 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the UE 


Fields from 
Encryption 
payload 
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Table 15.5.3.3-10: Message CREATE_CHILD_SA Response (step 10, Table 15.5.3.2-1) 



Field 


Value/remarl< 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 1 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 2 






Next Payload 


'00101110'B 


E 




Exchange Type 


'00 100100'B 


CREATE CHILD 
SA 




Encrypted Payload 








Next Payload 


'00100001' 


SA 




Initialization Vector 


Set by the SS 






Encrypted IKE Payloads 








Security Association Payload 








Next Payload 


'00101000'B 


Nr 




Last proposal 


'OOOOOOOO'B 






Proposal # 


One of the 2 proposals 
included in the 
CREATE_CHILD_SA 
Request at Step 9 






Protocol ID 


'0000001 1'B 


ESP 




SPI size 


'000001 OO'B 






SPI 


Set by the SS 






First transform 


'0000001 1'B 


This is the 
transform for 
confidentiality 




Transform type 


'00000001 'B 


Encription 




Transform attribute type 


The corresponding value 
of the chosen proposal 






Last transform 


'OOOOOOOO'B 


This is the 
transform for 
integrity 




Transform type 


'0000001 1'B 


Integrity 




Transform attribute type 


The corresponding value 
of the chosen proposal 






Nonce Payload 








Next Payload 


'00101100'B 


TSi 




Nonce data 


Set by the SS 






Traffic Selector- Initiator Payload 








Next Payload 


'00101101'B 


TSr 




Number of traffic selectors 


'0000001 0'B 






TS type 


'00001 OOO'B 


IPv6 range 




IP protocol 


'100001 11B 


Mobility header 




Start port 


'000001 01 OOOOOOOO'B 


BU 




End port 


'000001 01 OOOOOOOO'B 


BU 




Starting-address 


HoA address derived 
from HNP 






Ending address 


HoA address derived 
from HNP 






TS type 


'00001 OOO'B 


IPv6 range 




IP protocol 


'100001 11B 


Mobility header 




Start port 


'000001 1000000000'B 


BA 




End port 


'000001 1000000000'B 


BA 




Starting-address 


HoA address derived 
from HNP 






Ending address 


HoA address derived 
from HNP 






Traffic Selector - Responder Payload 








Next Payload 


'00101001'B 


Notify (Use 
transport mode) 




Number of traffic selectors 


'0000001 0'B 






Ts type 


'00001 OOO'B 


IPv6 range 




IP protocol 


'100001 11B 


Mobility header 




Start port 


'000001 01 OOOOOOOO'B 


BU 
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End port 


'000001 01 OOOOOOOO'B 


BU 




Starting-address 


HA address 






Ending address 


HA address 






TS type 


'00001 OOO'B 


IPv6 range 




IP protocol 


'1 00001 11'B 


Mobility header 




Start port 


'000001 1000000000'B 


BA 




End port 


'000001 1000000000'B 


BA 




Starting-address 


HA address 






Ending address 


HA address 






Use transport mode Notify Payload 








Next Payload 


'OOOOOOOO'B 






Protocol ID 


'0000001 1'B 


ESP 




SPI size 


Set by the SS 






Notify IVIessage Type 


'10000000000001 11'B 


Use transport 
mode 




SPI 


Same as that set by the 
SS in the accepted SA 
proposal 






Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 





15.6 

15.6.1 

(1) 



Registration of a new IPv6 CoA (Binding Update/Acknowledgment 
procedure in IPv6 network) 

Test Purpose (TP) 



with { UE has established a security association with the Home Agent and received the IPv6 Home 
Address } 
ensure that { 

when { UE receives a Router Advertisement containing an IPv6 prefix different from the Home 
Network Prefix assigned to the UE during the preamble and different from the prefixes contained in 
the UE's Prefix list } 

then { UE transmits a Binding Update message in order to register it Home Address and Care-of- 
Address at the Home Agent } 



15.6.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.303, clauses 5.1.2.3, 
5.1.2.4, and 5.2.2.3. 

[TS 24.303, clause 5. 1.2.3] 

The DSMIPv6 Home Link Detection Function is used by the UE to detect if an access interface is on the home link for 
a PDN from a DSMIPv6 perspective. The Home Link Detection function shall be performed before sending DSMlPv6 
Binding Update via the same access interface. 

To perform the Home Link Detection procedure, the UE shall compare the assigned Home Network Prefix for a PDN 
with the IPv6 prefix or prefixes included in the Prefix Information Option in the Router Advertisements received on the 
local link. The Home Network Prefix can be assigned in a 3GPP access via PCO, as specified in 3GPP TS 24.301 [15], 
or via IKEv2 as specified in subclause 5.1.2.2. If there is a match between the Home Network Prefix and one of the 
local prefixes, the UE is attached on the home link over the respective access interface and shall not send a Binding 
Update to the HA unless the UE currently has a valid DSMIPv6 Binding Update list entry. If the UE has a valid 
DSMIPv6 Binding Update list entry, the UE shall proceed to perform the action specified in subclause 5.2.2.4. If there 
is not any match, the UE shall proceed as specified in subclause 5.1.2.4. 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 1602 ETSI TS 136 523-1 V9.1.1 (2010-07) 

NOTE: The UE does not need to run IKEv2 for home link detection if the Home Network prefix is dynamically 
received in a PCO Information Element. 

[TS 24.303, clause 5.1.2.4] 

After establishing the security association and obtaining the IPv6 Home Address, the UE shall send a Binding Update 
message as specified in IETF RFC 3775 [6] and IETF RFC 5555 [2] in order to register its Home Address and Care-of 
Address at the HA, if it detects it is in the foreign network. 

If both IPv4 and IPv6 Care-of Address are received at the foreign network, the UE shall first attempt to use the IPv6 
Care-of Address for its binding registration. The UE shall not register both IPv4 and IPv6 Care-of Address to its HA. 

If IPv6 Care-of Address is used for initial binding registration, the UE shall send the Binding Update message to the 
IPv6 address of the HA. In this Binding Update message the H (home registration) and A (acknowledge) bits shall be 
set. If the UE needs an IPv4 Home Address, the UE shall include the 0.0.0.0 address in the IPv4 Home Address option 
to request a dynamic IPv4 Home Address. 

When IPv6 Care-of Address is used for initial binding registration, the Alternate Care-of Address option shall be used 
by the UE to carry the Care-of Address inside a Mobility Header which is protected by ESP. If this option is present, the 
address included in this option is the same address present in the source address of the IPv6 packet. 

If IPv4 Care-of Address is used for initial binding registration, the UE shall send the Binding Update as follows (see 
IETF RFC 5555 [2]): 

The IPv6 packet, with the IPv6 Home Address as the Source Address field of the IPv6 header, shall be 
encapsulated in UDP. 

The UE shall include the IPv4 Care-of Address as the Source Address field of the IPv4 header and the HA IPv4 
address as the Destination Address field of the IPv4 header. 

The UE shall include the IPv4 Care-of Address option containing the IPv4 Care-of Address. 

The UE shall set the H (home registration) and A (acknowledge) flags. 

- The UE shall set the F (UDP encapsulation required) flag to 0. 

- The UE shall set the R (Mobile Router Flag) flag to 1 . 

If the UE needs an IPv4 Home Address, the UE shall include an IPv4 Home Address option with the 0.0.0.0 
address in the Binding Update message, as defined in IETF RFC 5555 [2]. 

When the UE receives the Binding Acknowledgement from the HA, it shall validate it based on the rules described in 
IETF RFC 3775 [6] and IETF RFC 5555 [2]. If the Binding Acknowledgement contains the successful status code 
("Binding Update Accepted"), the UE shall create an entry for the registered Home Address in its Binding Update List 
and may start sending packets containing its IPv6 Home Address or other IPv6 addresses auto-configured from the 
assigned home network prefix. 

If the Binding Acknowledgement contains a value of 128, the UE may re-send the BU as specified in 

IETF RFC 3775 [6]. If the Binding Acknowledgement contains a value from 129 to 133 as specified in 

IETF RFC 3775 [6] or a value from 140 to 143 as specified in IETF RFC 3963 [29], the UE shall not send the BU to the 

HA and should discover another HA. 

If the Binding Acknowledgment contains an IPv4 Address Acknowledgement option with status code value from to 
127 (indicating success), the UE shall create two entries in its Binding Update List, one for the IPv6 Home Address and 
another for the IPv4 Home Address. If the Binding Acknowledgement contains an IPv4 Address Acknowledgment 
option with status code indicating error (i.e. 128 or higher), the UE shall create an entry only for the IPv6 HoA in its 
binding update list. Moreover, if the status code is 129 ("Administratively prohibited") or 132 ("Dynamic IPv4 home 
address assignment not available"), the UE shall not re-send the Binding Update and it shall use only the IPv6 HoA. If 
the Binding Acknowledgement contains an IPv4 Address Acknowledgement option with status 128 ("Failure, reason 
unspecified"), 130 ("Incorrect IPv4 home address"), 131 ("Invalid IPv4 address") or 133 ("Prefix allocation 
unauthorized") it shall re-send the Binding Update including the 0.0.0.0 address in the IPv4 Home Address option. If 
the Binding Acknowledgement does not contain an IPv4 Address Acknowledgment option, the UE shall create an entry 
only for the IPv6 HoA in its binding update list. 

NOTE: The value to be used to identify the IPv4 address acknowledgement option in the mobility header is 30; 
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The UE may then send data traffic either with the IPv6 Home Address or with the IPv4 Home Address. If the UE is 
located on an IP6-enabled link, it shall send IPv6 packets as described in IETF RFC 3775 [6]; IPv4 traffic shall be 
encapsulated in IPv6 packets as described in IETF RFC 5555 [2]. If the UE is located on an IPv4-only link and the 
Binding Acknowledgement contains the NAT detection option with the F flag set, the UE shall send IPv6 and IPv4 
packets following the vanilla UDP encapsulation rules specified in IETF RFC 5555 [2]. Otherwise the UE shall send 
IPv6 and IPv4 packets encapsulated in IPv4 as specified in IETF RFC 5555 [2]. 

Once the DSMIPv6 tunnel is established, the UE may build a DHCPv4 or DHCPv6 message as described in 
IETF RFC 4039 [26] or IETF RFC 3736 [13] respectively and send it via the DSMIPv6 tunnel as described in 
IETF RFC 3775 [6] in order to retrieve additional parameters, e.g. Vendor-specific options. 

[TS 24.303, clause 5.2.2.3] 

If the access network supports IPv6, as soon as the UE has received via a Router Advertisement at least an IPv6 prefix 
which is not present in its Prefix List, the UE shall perform the Home Link detection as specified in subclause 5.1.2.3. 

If the UE detects it is not attached to the home link, the UE shall send a Binding Update to the HA including the newly 
configured IP address as the Care-of Address in the Source IP address of the packet and optionally in the Alternate 
Care-of Address Option [6]. The UE build the Binding Update message as specified in IETF RFC 3775 [6]. 

If the UE has been assigned also an IPv4 Home Address and wants to update also the binding for it, the UE shall 
include the IPv4 Home Address option including the assigned IPv4 Home Address in the same Binding Update 

message. 

If the UE has been assigned also an IPv4 Home Address and wants to release it, the UE shall not include any IPv4 
Home Address option in the same Binding Update. 

If the UE does not have an IPv4 Home Address but wants to configure one, the UE shall include the IPv4 Home 
Address option with the 0.0.0.0 address as specified in subclause 5.1.2.4. 

If the access network supports only IPv4, as soon as the UE has configured an IPv4 Care-of Address which is different 
from the previous Care-of Address, the UE shall send a Binding Update tunnelled in UDP as specified in draft-ietf- 
mext-nemo-v4traversal [2]. The UE shall set the F flag to "0". The UE shall set the R flag to "1". 

Independent of an IPv6 or IPv4 access network the UE shall set the Key Management Capability (K) bit in the Binding 
Update message. 

15.6.3 Test description 

15.6.3.1 Pre-test conditions 

System Simulator: 

- Cell 1. 

UE: 

The UE's Prefix List has been cleared. 

Preamble: 

The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

The UE has acquired an IPv6 address. 

The UE has established a security association with the Home Agent and obtained an IPv6 Home Address, by 
executing the steps in test case 15.5 with the following exception: the IPv6 home prefix assigned to the UE by 
the SS shall be the same as the prefix used during IP address acquisition by the UE. 
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15.6.3.2 



Test procedure sequence 

Table 15.6.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS broadcasts a Router Advertisement 
with a Prefix Information Option containing an 
IPv6 prefix different from the Home Networl< 
Prefix assigned to the UE during the preamble. 










2 


Check: Does the UE transmit a Binding Update 
with its IPv6 CoA in the IP Source Address 
field of the IP Header and the IPv6 Home 
Agent address in the IP destination Address 
field of the IP header? 


-> 


Binding Update 


1 


P 


3 


The SS transmits a Binding Acknowledgement 
accepting the Binding Update. 


<— 


Binding Acknowledgement 


- 


- 



15.6.3.3 



Specific message contents 
Table 15.6.3.3-1 : Router Advertisement (step 1, Table 15.6.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


Type 


'100001 10'B 






Code 


'OOOOOOOO'B 






Checksum 


Set by SS 


ICMP checksum 




Cur Hop Limit 


'OOOOOOOO'B 


Unspecified 




M 


Set by the SS 









Set by the SS 


Depends on 
access network 
specific settings 




H 


'O'B 






Prf 


Set by the SS 


Depends on 
access network 
specific settings 




Prf 


Set by the SS 


Depends on 
access network 
specific settings 




P 


Set by the SS 


Depends on 
access network 
specific settings 




Reserved 


'OOOOO'B 






Router Lifetime 


Set by the SS 






Reachable Time 


Set by the SS 






Retrans Timer 


Set by the SS 






type 


'0000001 1'B 


Prefix Information 
Option 




Length 


'000001 OO'B 






Prefix length 


Set by the SS 






L 


'1'B 






A 


Set by the SS 






Valid Lifetime 


Set by the SS 






Preferred Lifetime 


Set by the SS 






Prefix 


IPv6 prefix different from 
the Home Network Prefix 
assigned to the UE 
during the preamble 
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Table 15.6.3.3-2: Binding Update (step 2, Table 15.6.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IP Source Address 


UE IPv6 CoA (IPv6 
address acquired by the 
UE during network 
attachment) 






IP Destination Address 


IPv6 of Home Agent 
discovered during 
preamble 






Destination Header 


IPv6 Home Address 
configured by the UE 
from Home Network 
Prefix assigned to the UE 
during preamble 






Payload Proto 


'00111011'B 






IVIH Type 


'000001 01 'B 


Binding Update 
message 




Sequence Number 


Any allowed value 






Lifetime 


Any allowed non-zero 
value 






A 


'1'B 






H 


'1'B 






L 


Not checked 






K 


'1'B 






M 


'O'B 






R 


'1'B 






P 


'O'B 






F 


'O'B 






IPv4 Home Address option 


Set to the value "0.0.0.0" 
to request allocation for 
the UE. The "P" flag is 
set to 'O'B. 

The Prefix Length is set 
to the requested prefix 
length of '32'. 


Optional 




Alternate Care-of Address Option 


Same IPv6 address as 
that inserted in the IP 
Source Address field 
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Table 15.6.3.3-3: Binding Acl<nowledgement (step 3, Table 15.6.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IP Source Address 


IPv6 Home Agent 
address 






IP Destination Address 


Same value as UE IPv6 
CoA in IP Source 
Address from Binding 
Update at Step 2 






Routing Header 


Same value as UE IPv6 
Home Address in 
Destination Header from 
Binding Update at Step 2 






Payload Proto 


'00111011'B 






MH Type 


'000001 10'B 


Binding 

Acknowledgement 

message 




Status 


'OOOOOGOO'B 


Binding Update 
accepted 




K 


Set by the SS 






R 


'1'B 






P 


'O'B 






Sequence Number 


Same value as that in the 
Binding Update at Step 2 






Lifetime 


'000000001 001 011 O'B 


10 min 




IPv4 Address Acknowledgement option 


IPv4 Home Address 
allocated to the UE 


Present if IPv4 
Home Address 
option was 
included by the 
UE in Binding 
Update at Step 2 




Binding Refresh Advice option 


'000000001 001 01 10'B 


10 min 





15.7 

15.7.1 
(1) 



Registration of a new IPv4 CoA (Binding Update/Acknowledgment 
procedure in IPv4 network) 

Test Purpose (TP) 



with { UE has established a security association with the Home Agent anc3 receivecJ the IPv6 Home 
Address } 
ensure that { 

when { UE is connected to a network supporting IPv4 only} 

then { UE transmits a Binding Update message in order to register its Home Address and Care-of- 
Address at the Home Agent } 



15.7.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.303, clauses 5.1.2.3, 
5.1.2.4, and 5.2.2.3. 

[TS 24.303, clause 5.1.2.3] 

The DSMIPv6 Home Link Detection Function is used by the UE to detect if an access interface is on the home link for 
a PDN from a DSMIPv6 perspective. The Home Link Detection function shall be performed before sending DSMIPv6 
Binding Update via the same access interface. 

To perform the Home Link Detection procedure, the UE shall compare the assigned Home Network Prefix for a PDN 
with the IPv6 prefix or prefixes included in the Prefix Information Option in the Router Advertisements received on the 
local link. The Home Network Prefix can be assigned in a 3GPP access via PCO, as specified in 3GPP TS 24.301 [15], 
or via IKEv2 as specified in subclause 5. 1.2.2. If there is a match between the Home Network Prefix and one of the 
local prefixes, the UE is attached on the home link over the respective access interface and shall not send a Binding 
Update to the HA unless the UE currently has a valid DSMIPv6 Binding Update list entry. If the UE has a valid 
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DSMIPv6 Binding Update list entry, the UE shall proceed to perform the action specified in subclause 5.2.2.4. If there 
is not any match, the UE shall proceed as specified in subclause 5.1.2.4. 

NOTE: The UE does not need to run IKEv2 for home link detection if the Home Network prefix is dynamically 
received in a PCO Information Element. 

[TS 24.303, clause 5. 1.2.4] 

After establishing the security association and obtaining the IPv6 Home Address, the UE shall send a Binding Update 
message as specified in IETF RFC 3775 [6] and IETF RFC 5555 [2] in order to register its Home Address and Care-of 
Address at the HA, if it detects it is in the foreign network. 

If both IPv4 and IPv6 Care-of Address are received at the foreign network, the UE shall first attempt to use the IPv6 
Care-of Address for its binding registration. The UE shall not register both IPv4 and IPv6 Care-of Address to its HA. 

If IPv6 Care-of Address is used for initial binding registration, the UE shall send the Binding Update message to the 
IPv6 address of the HA. In this Binding Update message the H (home registration) and A (acknowledge) bits shall be 
set. If the UE needs an IPv4 Home Address, the UE shall include the 0.0.0.0 address in the IPv4 Home Address option 
to request a dynamic IPv4 Home Address. 

When IPv6 Care-of Address is used for initial binding registration, the Alternate Care-of Address option shall be used 
by the UE to carry the Care-of Address inside a Mobility Header which is protected by ESP. If this option is present, the 
address included in this option is the same address present in the source address of the IPv6 packet. 

If IPv4 Care-of Address is used for initial binding registration, the UE shall send the Binding Update as follows (see 
IETF RFC 5555 [2]): 

The IPv6 packet, with the IPv6 Home Address as the Source Address field of the IPv6 header, shall be 
encapsulated in UDP. 

The UE shall include the IPv4 Care-of Address as the Source Address field of the IPv4 header and the HA IPv4 
address as the Destination Address field of the IPv4 header. 

The UE shall include the IPv4 Care-of Address option containing the IPv4 Care-of Address. 

The UE shall set the H (home registration) and A (acknowledge) flags. 

The UE shall set the F (UDP encapsulation required) flag to 0. 

- The UE shall set the R (Mobile Router Flag) flag to 1 . 

If the UE needs an IPv4 Home Address, the UE shall include an IPv4 Home Address option with the 0.0.0.0 
address in the Binding Update message, as defined in IETF RFC 5555 [2]. 

When the UE receives the Binding Acknowledgement from the HA, it shall validate it based on the rules described in 
IETF RFC 3775 [6] and IETF RFC 5555 [2]. If the Binding Acknowledgement contains the successful status code 
("Binding Update Accepted"), the UE shall create an entry for the registered Home Address in its Binding Update List 
and may start sending packets containing its IPv6 Home Address or other IPv6 addresses auto-configured from the 
assigned home network prefix. 

If the Binding Acknowledgement contains a value of 128, the UE may re-send the BU as specified in 

IETF RFC 3775 [6]. If the Binding Acknowledgement contains a value from 129 to 133 as specified in 

IETF RFC 3775 [6] or a value from 140 to 143 as specified in IETF RFC 3963 [29], the UE shall not send the BU to the 

HA and should discover another HA. 

If the Binding Acknowledgment contains an IPv4 Address Acknowledgement option with status code value from to 
127 (indicating success), the UE shall create two entries in its Binding Update List, one for the IPv6 Home Address and 
another for the IPv4 Home Address. If the Binding Acknowledgement contains an IPv4 Address Acknowledgment 
option with status code indicating error (i.e. 128 or higher), the UE shall create an entry only for the IPv6 Ho A in its 
binding update list. Moreover, if the status code is 129 ("Administratively prohibited") or 132 ("Dynamic IPv4 home 
address assignment not available"), the UE shall not re-send the Binding Update and it shall use only the IPv6 HoA. If 
the Binding Acknowledgement contains an IPv4 Address Acknowledgement option with status 128 ("Failure, reason 
unspecified"), 130 ("Incorrect IPv4 home address"), 131 ("Invalid IPv4 address") or 133 ("Prefix allocation 
unauthorized") it shall re-send the Binding Update including the 0.0.0.0 address in the IPv4 Home Address option. If 
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the Binding Acknowledgement does not contain an IPv4 Address Acknowledgment option, the UE shall create an entry 
only for the IPv6 HoA in its binding update list. 

NOTE: The value to be used to identify the IPv4 address acknowledgement option in the mobility header is 30; 

The UE may then send data traffic either with the IPv6 Home Address or with the IPv4 Home Address. If the UE is 
located on an IP6-enabled link, it shall send IPv6 packets as described in IETF RFC 3775 [6]; IPv4 traffic shall be 
encapsulated in IPv6 packets as described in IETF RFC 5555 [2]. If the UE is located on an IPv4-only link and the 
Binding Acknowledgement contains the NAT detection option with the F flag set, the UE shall send IPv6 and IPv4 
packets following the vanilla UDP encapsulation rules specified in IETF RFC 5555 [2]. Otherwise the UE shall send 
IPv6 and IPv4 packets encapsulated in IPv4 as specified in IETF RFC 5555 [2]. 

Once the DSMIPv6 tunnel is established, the UE may build a DHCPv4 or DHCPv6 message as described in 
IETF RFC 4039 [26] or IETF RFC 3736 [13] respectively and send it via the DSMIPv6 tunnel as described in 
IETF RFC 3775 [6] in order to retrieve additional parameters, e.g. Vendor-specific options. 

[TS 24.303, clause 5.2.2.3] 

If the access network supports IPv6, as soon as the UE has received via a Router Advertisement at least an IPv6 prefix 
which is not present in its Prefix List, the UE shall perform the Home Link detection as specified in subclause 5.L2.3. 

If the UE detects it is not attached to the home link, the UE shall send a Binding Update to the HA including the newly 
configured IP address as the Care-of Address in the Source IP address of the packet and optionally in the Alternate 
Care-of Address Option [6]. The UE build the Binding Update message as specified in IETF RFC 3775 [6]. 

If the UE has been assigned also an IPv4 Home Address and wants to update also the binding for it, the UE shall 
include the IPv4 Home Address option including the assigned IPv4 Home Address in the same Binding Update 

message. 

If the UE has been assigned also an IPv4 Home Address and wants to release it, the UE shall not include any IPv4 
Home Address option in the same Binding Update. 

If the UE does not have an IPv4 Home Address but wants to configure one, the UE shall include the IPv4 Home 
Address option with the 0.0.0.0 address as specified in subclause 5.L2.4. 

If the access network supports only IPv4, as soon as the UE has configured an IPv4 Care-of Address which is different 
from the previous Care-of Address, the UE shall send a Binding Update tunnelled in UDP as specified in draft-ietf- 
mext-nemo-v4traversal [2]. The UE shall set the F flag to "0". The UE shall set the R flag to "1". 

Independent of an IPv6 or IPv4 access network the UE shall set the Key Management Capability (K) bit in the Binding 
Update message. 

15.7.3 Test description 

15.7.3.1 Pre-test conditions 

System Simulator: 

- Cell L 

Preamble: 

The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

The UE has acquired an IPv4 address. 

The UE has established a security association with the Home Agent and obtained an IPv6 Home Address, by 
executing the steps in test case 15.5. 
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15.7.3.2 



Test procedure sequence 

Table 15.7.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


Check: Does the UE transmit a Binding Update 
with its IPv4 CoA in the IP Source Address 
field of the IP Header and the Binding Update 
encapsulated in an UDP header? 


-> 


Binding Update 


1 


P 


2 


The SS transmits a Binding Acknowledgement 
accepting the Binding Update. 


<- 


Binding Acknowledgement 


- 


- 



15.7.3.3 



Specific message contents 
Table 15.7.3.3-1: Binding Update (step 1, Table 15.7.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IPv4 Source Address 


UE IPv4 CoA {IPv4 
address acquired by UE 
during network 
attachment) 






IPv4 Destination Address 


IPv4 of Home Agent 
discovered during 
preamble 






UDP header 








Source Port 


Set by UE 






Destination port 


'0001 000001 Oil 11 1'B 






IPv6 Source Address 


IPv6 Home Address 
configured by UE from 
Home Network Prefix 
assigned to UE during 
preamble 






IPv6 Destination Address 


IPv6 of Home Agent 
discovered during 
preamble 






Payload Proto 


'00111011'B 






MH Type 


'000001 01 'B 


Binding Update 
message 




Sequence Number 


Any allowed value 






Lifetime 


Any allowed non-zero 
value 






A 


'1'B 






H 


'1'B 






L 


Not checked 






K 


'1'B 






M 


'O'B 






R 


'1'B 






P 


'O'B 






F 


'O'B 






IPv4 Home Address option 


Set to the value "0.0.0.0" 
to request allocation for 
the UE. The "P" flag is 
set to '0'. 

The Prefix Length is set 
to the requested prefix 
length of '32'. 


Optional 
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Table 15.7.3.3-2: Binding Acl<nowledgement (step 2, Table 15.7.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IP Source Address 


IPv4 Home Agent 
address 






IP Destination Address 


Same value as UE IPv4 
CoA in IP Source 
Address from Binding 
Update at Step 1 






UDP header 








Source Port 


'0001000001011111'B 






Destination port 


Same as Source port in 
step 1 






IPv6 Source Address 


IPv6 Home Agent 
address 






IPv6 Destination Address 


Same value as UE IPv6 
Address in Source 
Address from Binding 
Update at Step 1 






Payload Proto 


'00111011'B 






MH Type 


'000001 10'B 


Binding 

Acknowledgement 

message 




Status 


'OOOOOOOO'B 


Binding Update 
accepted 




K 


Set by SS 






R 


'1'B 






P 


'O'B 






Sequence Number 


Same value as that in the 
Binding Update at Step 2 






Lifetime 


'000000001 001 011 O'B 


10 min 




IPv4 Address Acknowledgement option 


IPv4 Home Address 
allocated to the UE 


Present if IPv4 
Home Address 
option was 
included by the 
UE in Binding 
Update at Step 1 




Binding Refresh Advice option 


'000000001 001 01 10'B 


10 min 





15.8 



15.8.1 



Re-registration of IPv6 CoA 

Test Purpose (TP) 



(1) 



with { UE has established a security association with the Home Agent and received the IPv6 Home 
Address and registered its IPv6 Home Address and IPv6 Care-of -Address at the Home Agent } 
ensure that { 

when { registration of its Care-of -Address is about the expire } 

then { UE initiates the re-registration procedure to extend lifetime of the registration of its 
Care-of -Address } 



15.8.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.303, clause 5.3.2. 

[TS 24.303, clause 5.3.2] 

As specified in IETF RFC 3775 [6], if the UE wants to extend the validity of an existing binding at the HA, the UE 
shall send a new Binding Update to the HA before the expiration of the lifetime indicated in the received Binding 
Acknowledgement, even if it is not changing its primary Care-of Address. This Binding Update is usually referred as 
periodic Binding Update. 

The UE shall follow the rules described in IETF RC 3775 [6], IETF RFC 5555 [2] and in subclause 5.1.2.4 to send a 
periodic Binding Update and handle the associated Binding Acknowledgement. As the UE has not performed any 
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handover, the UE shall confirm the already registered Care of Address and shall indicate the desired lifetime value. In a 
periodic Binding Update the UE may request an IPv4 Home Address. 



15.8.3 

15.8.3.1 

System Simulator: 

- Cell 1. 
UE: 



Test description 
Pre-test conditions 



The UE's Prefix List has been cleared. 



Preamble: 



The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

The UE has acquired an IPv6 address. 

The UE has established a security association with the Home Agent and obtained an IPv6 Home Address, by 
executing the steps in test case 15.5 with the following exception: the IPv6 home prefix assigned to the UE by 
the SS shall be the same as the prefix used during IP address acquisition by the UE. 



15.8.3.2 



Test procedure sequence 

Table 15.8.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1-3 


Steps 1 to 3 of test case 1 5.6 are performed 
on Cell 1. 

NOTE: Tfie UE transmits an initial Binding 
Update to register its IPv6 Home Address and 
IPv6 Care-of-Address at the Home Agent. The 
SS accepts the Binding Update by transmitting 
a Binding Acknowledgement with a Lifetime 
set to 10 min. 










4 


Check: Does the UE transmit a Binding Update 
with its IPv6 CoA in the IP Source Address 
field of the IP Header and the IPv6 Home 
Agent address in the IP Destination Address 
field of the IP header within 1 min of Step 3? 


-> 


Binding Update 


1 


P 


5 


The SS transmits a Binding Acknowledgement 
accepting the Binding Update. 


<- 


Binding Acknowledgement 


- 


- 
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15.8.3.3 



Specific message contents 
Table 15.8.3.3-1 : Binding Update (step 4, Table 15.8.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IP Source Address 


UE IPv6 CoA (IPv6 
address acquired by the 
UE during network 
attachment) 






IP Destination Address 


IPv6 of Home Agent 
discovered during 
preamble 






Destination Header 


IPv6 Home Address 
configured by the UE 
from Home Network 
Prefix assigned to UE 
during preamble 






Payload Proto 


'00111011'B 






MH Type 


'000001 01 'B 


Binding Update 
message 




Sequence Number 


Any allowed value 






Lifetime 


Any allowed non-zero 
value 






A 


'1'B 






H 


'1'B 






L 


Not checked 






K 


'1'B 






M 


'O'B 






R 


'1'B 






P 


'O'B 






F 


'O'B 






IPv4 Home Address option 


If an IPv4 Home Address 
was included in the 
Binding 

Acknowledgement sent 
by the SS at Step 3, field 
should be set to this IPv4 
Home Address. 
Else, set to the value 
"0.0.0.0" to request 
allocation for the UE. The 
"P" flag is set to 'O'B. 
The Prefix Length is set 
to the requested prefix 
length of '32'. 


Optional 




Alternate Care-of Address Option 


Same IPv6 address as 
that in the IP Source 
Address field 
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Table 15.8.3.3-2: Binding Acl<nowledgement (step 5, Table 15.8.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IP Source Address 


IPv6 Home Agent 
address 






IP Destination Address 


Same value as UE IPv6 
CoA in IP Source 
Address from Binding 
Update at Step 2 






Routing Header 


Same value as UE IPv6 
Home Address in 
Destination Header from 
Binding Update at Step 2 






Payload Proto 


'00111011'B 






MH Type 


'000001 10'B 


Binding 

Acknowledgement 

message 




Status 


'OOOOOGOO'B 


Binding Update 
accepted 




K 


Set by the SS 






R 


'1'B 






Sequence Number 


Same value as that in the 
Binding Update at Step 2 






Lifetime 


'000000001 001 01 10'B 


10 min 




IPv4 Address Acknowledgement option 


IPv4 Home Address 
allocated to the UE 


Present if IPv4 
Home Address 
option was 
included by the 
UE in Binding 
Update at Step 2 




Binding Refresh Advice option 


'000000001 001 01 10'B 


10 min 





15.9 



15.9.1 



Re-registration of IPv4 CoA 

Test Purpose (TP) 



(1) 



with { UE has established a security association with the Home Agent and received the IPv6 Home 
Address and registered its IPv6 Home Address and IPv4 Care-of -Address at the Home Agent } 
ensure that { 

when { registration of its Care-of -Address is about the expire } 

then { UE initiates the re-registration procedure to extend lifetime of the registration of its 
Care-of -Address } 



15. .2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.303, clause 5.3.2. 

[TS 24.303, clause 5.3.2] 

As specified in IETF RFC 3775 [6], if the UE wants to extend the validity of an existing binding at the HA, the UE 
shall send a new Binding Update to the HA before the expiration of the lifetime indicated in the received Binding 
Acknowledgement, even if it is not changing its primary Care-of Address. This Binding Update is usually referred as 
periodic Binding Update. 

The UE shall follow the rules described in IETF RC 3775 [6], IETF RFC 5555 [2] and in subclause 5.1.2.4 to send a 
periodic Binding Update and handle the associated Binding Acknowledgement. As the UE has not performed any 
handover, the UE shall confirm the already registered Care of Address and shall indicate the desired lifetime value. In a 
periodic Binding Update the UE may request an IPv4 Home Address. 
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Test description 
Pre-test conditions 



15.9.3 

15.9.3.1 

System Simulator: 

- Cell 1. 
Preamble: 

The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

The UE has acquired an IPv4 address. 

The UE has established a security association with the Home Agent and obtained an IPv6 Home Address, by 
executing the steps in test case 15.5. 



15.9.3.2 



Test procedure sequence 

Table 15.9.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1-2 


Steps 1 to 2 of test case 1 5.7 are performed 
on Cell 1. 

NOTE: The UE transmits an initial Binding 
Update to register its IPv6 Home Address and 
IPv4 Care-of-Address at the Home Agent. The 
SS accepts the Binding Update by transmitting 
a Binding Acknowledgement with a Lifetime 
set to 10 min. 










3 


Check: Does the UE transmit a Binding Update 
with its IPv4 CoA in the IP Source Address 
field of the IP Header and the IPv4 Home 
Agent address in the IP destination Address 
field of the IP header within 1 min of Step 2? 


-> 


Binding Update 


1 


P 


4 


The SS transmits a Binding Acknowledgement 
accepting the Binding Update. 


<- 


Binding Acknowledgement 


- 


- 
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15.9.3.3 Specific message contents 



Table 15.9.3.3-1 : Binding Update (step 3, Table 15.9.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IPv4 Source Address 


UE IPv4 CoA {IPv4 
address acquired by UE 
during network 
attachment) 






IPv4 Destination Address 


IPv4 of Home Agent 
discovered during 
preamble 






UDP header 








Source Port 


Set by UE 






Destination port 


'000100000101 111 1'B 






IPv6 Source Address 


IPv6 Home Address 
configured by UE from 
Home Network Prefix 
assigned to UE during 
preamble 






IPv6 Destination Address 


IPv6 of Home Agent 
discovered during 
preamble 






Payload Proto 


'001 11 01 1'B 






MH Type 


'000001 01 'B 


Binding Update 
message 




Sequence Number 


Any allowed value 






Lifetime 


Any allowed non-zero 
value 






A 


'1'B 






H 


'1'B 






L 


Not checked 






K 


'1'B 






M 


'O'B 






R 


'1'B 






P 


'O'B 






F 


'O'B 






IPv4 Home Address option 


If an IPv4 Home Address 
was included in the 
Binding 

Acknowledgement sent 
by the SS at Step 2, field 
should be set to this IPv4 
Home Address. 
Else, set to the value 
"0.0.0.0" to request 
allocation for the UE. The 
"P" flag is set to '0'. 
The Prefix Length is set 
to the requested prefix 
length of '32'. 


Optional 
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Table 15.9.3.3-2: Binding Acl<nowledgement (step 4, Table 15.9.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IP Source Address 


IPv4 Home Agent 
address 






IP Destination Address 


Same value as UE IPv4 
CoA in IP Source 
Address from Binding 
Update at Step 3 






UDP header 








Source Port 


'0001000001011111'B 






Destination port 


Same as Source port in 
step 1 






IPv6 Source Address 


IPv6 Home Agent 
address 






IPv6 Destination Address 


Same value as IPv6 
Source Address 
contained in Binding 
Update at Step 3 






Payload Proto 


'00111011'B 






MH Type 


'000001 10'B 


Binding 

Acknowledgement 

message 




Status 


'OOOOOOOO'B 


Binding Update 
accepted 




K 


Set by SS 






R 


'1'B 






P 


'O'B 






Sequence Number 


Same value as that in the 
Binding Update at Step 3 






Lifetime 


'000000001 001 011 O'B 


10 min 




IPv4 Address Acknowledgement option 


IPv4 Home Address 
allocated to the UE 


Present if IPv4 
Home Address 
option was 
included by the 
UE in Binding 
Update at Step 3 




Binding Refresh Advice option 


'000000001 001 01 10'B 


10 min 





15.10 



15.10.1 



Return to home link 

Test Purpose (TP) 



(1) 



with { UE has established a security association with the Home Agent and received the IPv6 Home 
Address and registered its IPv6 Home Address and IPv6 Care-of -Address at the Home Agent } 
ensure that { 

when { UE detects it is attached to the home link } 

then { UE transmits a Binding Update message with the lifetime field set to "0" } 



15.10.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.303, clause 5.2.2.4. 

[TS 24.303, clause 5.2.2.4] 

If the access network supports IPv6, as soon as the UE has received via a Router Advertisement message at least an 
IPv6 prefix which is not present in its Prefix List, the UE shall perform the Home Link detection as specified in 
subclause 5.L2.3 to detect if the UE is attaching to the home link. If the UE detects it is attached to the home link and 
there is a valid DSMIPv6 Binding Update list entry at the UE, the UE shall send a Binding Update with the Lifetime 
field set to "0" in order to remove the binding at the HA, as specified in IETF RFC 3775 [6]. If an IPv4 home address 
was assigned to the UE, as an optimization the UE may not include the IPv4 home address option as the binding for the 
IPv4 home address will be removed by the HA. Independent of an IPv6 or IPv4 access network the UE shall set the Key 
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Management Capability (K) bit in the de-registration Binding Update message. The UE may preserve the IKEv2 session 
in order to avoid re-establishing the session when the next handover occurs. If there is not a safe assumption that the UE 
will remain in the home link (e.g. switching off the non-3GPP radio interface in case of a dual radio terminal), the UE 
should preserve the IKEv2 session. 



15.10.3 


Test description 


15.10.3.1 


Pre-test conditions 


System Simulator: 




- Cell 1. 




UE: 




None. 




Preamble: 





The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

The UE has acquired an IPv6 address. 

The UE has established a security association with the Home Agent and obtained an IPv6 Home Address, by 
executing the steps in test case 15.5 with the following exception: the IPv6 home prefix assigned to the UE by 
the SS shall be the same as the prefix used during IP address acquisition by the UE. 

The UE has registered its IPv6 Home Address and its Care-of- Address (acquired IPv6 address) at the Home 
Agent, by executing the steps in test case 15.6. 



15.10.3.2 



Test procedure sequence 

Table 15.10.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


lUlessage 


1 


The SS broadcasts a Router Advertisement 
with a Prefix Information Option containing an 
IPv6 prefix matching the Home Network Prefix 
assigned to the UE during the preamble. 










2 


Check; Does the UE transmit a Binding Update 
message with the lifetime field set to "0"? 


-> 


Binding Update 


1 


P 


3 


The SS transmits a Binding Acknowledgement 
accepting the Binding Update with the lifetime 
field set to "0". 


<- 


Binding Acknowledgement 
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15.10.3.3 Specific message contents 

Table 15.10.3.3-1: Router Advertisement (step 1, Table 15.10.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


Type 


'100001 10'B 






Code 


'OOOOOOOO'B 






Checksum 


Set by SS 


ICMP checksum 




Cur Hop Limit 


'OOOOOOOO'B 


Unspecified 




M 


'O'B 









'1'B 






H 


'1'B 






Prf 


Set by the SS 


Depends on 
access network 
specific settings 




Prf 


Set by the SS 


Depends on 
access network 
specific settings 




P 


Set by the SS 


Depends on 
access network 
specific settings 




Reserved 


'OOOOO'B 






Router Lifetime 


Set by the SS 






Reacliable Time 


Set by the SS 






Retrans Timer 


Set by the SS 






Type 


'0000001 1'B 


Prefix Information 
Option 




Length 


'000001 OO'B 






Prefix length 


Any allowed value 






L 


'1'B 






A 


'1'B 






Valid Lifetime 


Set by the SS 






Preferred Lifetime 


Set by the SS 






Prefix 


IPv6 prefix equal to 
Home Network Prefix 
assigned to the UE 
during preamble 







Table 15.10.3.3-2: Binding Update (step 2, Table 15.10.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IP Source Address 


IPv6 Home Address 
configured by the UE 
from Home Network 
Prefix assigned to UE 
during preamble 






IP Destination Address 


IPv6 of Home Agent 
discovered during 
preamble 






Payload Proto 


'001 11 01 1'B 






MH Type 


'000001 01 'B 


Binding Update 
message 




Sequence Number 


Any allowed value 






Lifetime 


'OOOOOOOOOOOOOOOO'B 






A 


'1'B 






H 


'1'B 






L 


Not checked 






K 


'1'B 






M 


'O'B 






R 


'1'B 






P 


'O'B 






F 


'O'B 
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Table 15.10.3.3-3: Binding Acl<nowledgement (step 3, Table 15.10.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IP Source Address 


IPv6 Home Agent 
address 






IP Destination Address 


UE IPv6 Home Address 






Payload Proto 


'00111011'B 






IVIH Type 


'000001 10'B 


Binding 

Acknowledgement 

message 




Status 


'OOOOOOOO'B 


Binding Update 
accepted 




K 


Set by the SS 






R 


'1'B 






P 


'O'B 






Sequence Number 


Same value as that in the 
Binding Update at Step 2 






Lifetime 


'OOOOOOOOOOOOOOOO'B 







15.11 



Dual-Stack Mobile IPv6 detach in IPv6 network 



15.11.1 



Test Purpose (TP) 



(1) 

with { UE has established a security association with the Home Agent and received the IPv6 Home 
Address and registered its IPv6 Home Address and IPv6 Care-of -Address at the Home Agent } 
ensure that { 

when { UE receives a Binding Revocation Indication message from the HA } 

then { UE transmits a Binding Revocation Acknowledgement message with the status field set to 
'Success' } 

} 

(2) 

with { UE has received a Binding Revocation Indication message from the HA } 
ensure that { 

when { UE has transmitted a Binding Revocation Acknowledgement message with the status field set 
to 'Success' } 

then { UE transmits an IKEv2 INFORMATIONAL message containing a DELETE payload to remove the 
Ipsec security association associated with the DSMIPv6 registration } 



15.11.2 



Conformance requirements 



References: The conformance requirements covered in the present TC are specified in: TS 24.303, clauses 5.4.2.1 and 
5.4.2.2. 

[TS 24.303, clauses 5.4.2.1] 

Upon receiving a Binding Revocation Indication (BRI) message according to draft-ietf-mext-binding-revocation [19] 
from the HA, the UE first shall perform the required validity checks on the BRI according to draft-ietf-mext-binding- 
re vocation [19]. 

The UE shall send a Binding Revocation Acknowledgement (BRA) as specified in draft-ietf-mext-binding- 
revocation [19]. In this message the UE shall set the status field to 'Success' to reflect that it has received the BRI 
message. The BRA message may be tunnelled in UDP or IPv4 as specified in subclause 5.1.2.4 for Binding Update 

messages. 

The UE then shall remove the entry identified in the BRI as deregistered from its binding update list and shall use the 
procedures defined in IETF RFC 4306 [14] to remove the IPsec security associations associated with the DSMIPv6 
registration as described in subclause 5.4.2.2. 

[TS 24.303, clause 5.4.2.2] 

To detach from a specific PDN to which it is connected through a DSMIPv6 session, the UE shall send a Binding 
Update with the Lifetime field set to as specified in IETF RFC 3775 [6]. 
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The UE shall use the procedures defined in the IKEv2 protocol in IETF RFC 4306 [14] to remove the IPsec security 
associations associated with the DSMIPv6 registration. The UE shall close the security associations associated with the 
DSMIPv6 registration and instruct the HA to do the same by sending the INFORMATIONAL request message 
including a DELETE payload. The Protocol ID in the DELETE payload shall be set to " 1 " (IKE) to indicate that all 
IPsec ESP security associations that were negotiated within the IKEv2 exchange shall be deleted. 



15.11.3 


Test description 


15.11.3.1 


Pre-test conditions 


System Simulator: 




- Cell L 




UE: 




None. 





Preamble: 

The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

The UE has acquired an IPv6 address. 

The UE has established a security association with the Home Agent and obtained an IPv6 Home Address, by 
executing the steps in test case 15.5 with the following exception: the IPv6 home prefix assigned to the UE by 
the SS shall be the same as the prefix used during IP address acquisition by the UE. 

The UE has registered its IPv6 Home Address and its Care-of- Address (acquired IPv6 address) at the Home 
Agent, by executing the steps in test case 15.6. 



15.11.3.2 



Test procedure sequence 

Table 15.11.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits a Binding Revocation 
Indication message to the UE. 


<~ 


Binding Revocation Indication 


- 


- 


2 


Check: Does the UE transmit a Binding 
Revocation Acknowledgement message with 
the status field set to 'Success'? 


-> 


Binding Revocation 
Acknowledgement 


1 


P 


3 


Check: does the UE transmit an IKEv2 
INFORMATIONAL message containing a 
DELETE payload? 


-> 


IKEv2 INFORMATIONAL 


2 


P 


4 


The SS transmits an IKEv2 INFORMATIONAL 
message containing a DELETE payload back 
totheUE. 


<— 


IKEv2 INFORMATIONAL 
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15.11.3.3 Specific message contents 

Table 15.11.3.3-1: Binding Revocation Indication (step 1, Table 15.11.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


IPv6 Header 








IP Source Address 


UE IPv6 Home Agent 
address 






IP Destination Header 


IPv6 CoA 






Routing Header 


IPv6 Home Address 
configured by the UE 
from Home Network 
Prefix assigned to tlie UE 
during preamble 






B.R. Type 


'00000001 'B 


B.R.I 




Sequence Number 


Set by the SS 






Revocation Trigger 


'00000001 'B 






P 


'O'B 






G 


'O'B 






V 


'O'B 







Table 15.11.3.3-2: Binding Revocation Acknowledgement (step 2, Table 15.11.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IPv6 Header 








IP Source Address 


IPv6 CoA 






IP Destination Header 


UE IPv6 Home Address 






Destination Header 


IPv6 Home Address 
configured by the UE 
from Home Network 
Prefix assigned to the UE 
during preamble 






B.R. Type 


'0000001 O'B 


B.R.A 




Sequence Number 


Same value as 
Sequence Number 
received in Binding 
Revocation Indication at 
Step1 






Status 


'OOOOOOOO'B 


Success 




P 


'O'B 






G 


'O'B 






V 


'O'B 
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Table 15.11.3.3-3: IKEv2 INFORMATIONAL (step 3, Table 15.11.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


The one identifying the 
UE in the SA set up 
during the preamble 






Responder's IKE_SA SPI 


The one identifying the 
HA in the SA set up 
during the preamble 






Next Payload 


'00101110'B 


E 




Exchange Type 


'00100101 'B 


INFORMATIONAL 




Encrypted Payload 








Next Payload 


'00101010'B 


DELETE 




Delete Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Protocol ID 


'00000001 'B 


IKESA 




Padding 


Set by the UE 


Fields from 
Encryption 
payload 




Pad Length 


Set by the UE 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the UE 


Fields from 
Encryption 
payload 




Table 15.11.3.3-4: IKEv2 INFORMATIONAL (step 4, Table 15.11.3.2-1) 


Field 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 3 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 3 






Next Payload 


'00101110'B 


E 




Exchange Type 


'00100101'B 


INFORMATIONAL 




Encrypted Payload 








Next Payload 


'00101010'B 


DELETE 




Delete Payload 








Next Payload 


'OOOOOOOO'B 


No Next Payload 




Protocol ID 


'00000001 'B 


IKESA 




Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 





15.12 



Dual-Stack Mobile IPv6 detach in IPv4 network 



15.12.1 



Test Purpose (TP) 



(1) 

with { UE has established a security association with the Home Agent and received the IPv6 Home 
Address and registered its IPv6 Home Address and IPv4 Care-of -Address at the Home Agent } 
ensure that { 

when { UE receives a Binding Revocation Indication message from the HA with the A flag set } 
then { UE transmits a Binding Revocation Acknowledgement message with the status field set to 
'Success' } 
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(2) 

with { UE has received a Binding Revocation Indication message from the HA with the A flag set } 
ensure that { 

when { UE has transmitted a Binding Revocation Acknowledgement message with the status field set 
to 'Success' } 

then { UE transmits an IKEv2 INFORMATIONAL message containing a DELETE payload to remove the 
Ipsec security association associated with the DSMIPv6 registration } 
} 

15.12.2 Conformance requirements 

References: The conformance requirements covered in the present TC are specified in: TS 24.303, clauses 5.4.2.1 and 
5.4.2.2. 

[TS 24.303, clauses 5.4.2.1] 

Upon receiving a Binding Revocation Indication (BRI) message according to draft-ietf-mext-binding-revocation [19] 
from the HA, the UE first shall perform the required validity checks on the BRI according to draft-ietf-mext-binding- 
re vocation [19]. 

If the A (Acknowledge) flag is set in the BRI message, the UE shall send a Binding Revocation Acknowledgement 
(BRA) as specified in draft-ietf- me xt-binding-re vocation [19]. In this message the UE shall set the status field to 
'Success' to reflect that it has received the BRI message. The BRA message may be tunnelled in UDP or IPv4 as 
specified in subclause 5.1.2.4 for Binding Update messages. 

The UE then shall remove the entry identified in the BRI as deregistered from its binding update list and shall use the 
procedures defined in IETF RFC 4306 [14] to remove the IPsec security associations associated with the DSMIPv6 
registration as described in subclause 5.4.2.2. 

[TS 24.303, clause 5.4.2.2] 

The UE shall use the procedures defined in the IKEv2 protocol in IETF RFC 4306 [14] to remove the IPsec security 
associations associated with the DSMIPv6 registration. The UE shall close the security associations associated with the 
DSMIPv6 registration and instruct the HA to do the same by sending the INFORMATIONAL request message 
including a DELETE payload. The Protocol ID in the DELETE payload shall be set to " 1 " (IKE) to indicate that all 
IPsec ESP security associations that were negotiated within the IKEv2 exchange shall be deleted. 

15.12.3 Test description 
15.12.3.1 Pre-test conditions 
System Simulator: 

- Cell 1. 
UE: 
None. 
Preamble: 

The UE is in state Registered, Idle Mode (state 2) on Cell 1 according to [18]. 

The UE has acquired an IPv4 address. 

The UE has established a security association with the Home Agent and obtained an IPv6 Home Address, by 
executing the steps in test case 15.5. 

The UE has registered its IPv6 Home Address and its Care-of- Address (acquired IPv4 address) at the Home 
Agent, by executing the steps in test case 15.7. 
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15.12.3.2 



Test procedure sequence 

Table 15.12.3.2-1: Main behaviour 



St 


Procedure 


Message Sequence 


TP 


Verdict 


U-S 


Message 


1 


The SS transmits a Binding Revocation 
Indication message witli tlie A flag set to the 
UE. 


<- 


Binding Revocation Indication 






2 


Check: Does the UE transmit a Binding 
Revocation Acknowledgement message with 
the status field set to 'Success'? 


-> 


Binding Revocation 
Acknowledgement 


1 


P 


3 


Check: does the UE transmit an IKEv2 
INFORMATIONAL message containing a 
DELETE payload? 


-> 


IKEv2 INFORMATIONAL 


2 


P 


4 


The SS transmits an IKEv2 INFORMATIONAL 
message containing a DELETE payload back 
totheUE. 


<- 


IKEv2 INFORMATIONAL 







15.12.3.3 Specific message contents 

Table 15.12.3.3-1: Binding Revocation Indication (step 1, Table 15.12.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


IPv4 Header 








IP Source Address 


UE IPv4 Home Agent 
address 






IP Destination Header 


IPv4 CoA 






UDP header 








Source Port 


Set by SS 






Destination port 


'0001 000001 01 11 11 'B 






IPv6 Source Address 


IPv6 Home Agent 
address 






IPv6 Destination Address 


IPv6 Home Address 
configured by UE from 
Home Network Prefix 
assigned to UE during 
preamble 






B.R. Type 


'00000001 'B 


B.R.I 




Sequence Number 


Set by SS 






Revocation Trigger 


'00000001 'B 






P 


'O'B 






G 


'O'B 






V 


'O'B 
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Table 15.12.3.3-2: Binding Revocation Acl<nowledgement (step 2, Table 15.12.3.2-1) 



Information Element 


Value/remark 


Comment 


Condition 


IPv6 Header 








IP Source Address 


IPv6 CoA 






IP Destination Header 


UE IPv6 Home Address 






UDP header 




UDP header 




Source Port 


'000100000101 1111'B 


Source Port 


Set by UE 


Destination port 


Same as Source port set 


Destination port 


'00010000 




by SS in step 1 




01011111' 
B 


IPv6 Source Address 


IPv6 Home Address 


IPv6 Source 


IPv6 Home 




configured by UE from 


Address 


Address 




Home Network Prefix 




configured 




assigned to UE during 




by UE from 




preamble 




Home 

Network 

Prefix 

assigned 

toUE 

during 

preamble 


IPv6 Destination Address 


IPv6 of Home Agent 


IPv6 Destination 


IPv6 of 




discovered during 


Address 


Home 




preamble 




Agent 
discovered 
during 
preamble 


B.R. Type 


'0000001 0'B 


B.R.A 




Sequence Number 


Same value as 
Sequence Number 
received in Binding 
Revocation Indication at 
Step 1 






Status 


'OOOOOOOO'B 


Success 




P 









G 









V 
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Table 15.12.3.3-3: IKEJNFORMATIONAL (step 3, Table 15.12.3.2-1) 



Field 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


The one identifying UE in 
the SA set up during the 
preamble 






Responder's IKE_SA SPI 


The one identifying the 
HA in the SA set up 
during the preamble 






Next Payload 


'00101110'B 


E 




Exchange Type 


'00100101 'B 


INFORMATIONAL 




Encrypted Payload 








Next Payload 


'00101010'B 


DELETE 




Delete Payload 








Next Payload 


'OOOOOOOO'B 


No next payload 




Protocol ID 


'00000001 'B 


IKESA 




Padding 


Set by UE 


Fields from 
Encryption 
payload 




Pad Length 


Set by UE 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by UE 


Fields from 
Encryption 
payload 




Table 15.12.3.3-4: IKEJNFORMATIONAL (step 4, Table 15.12.3.2-1) 


Field 


Value/remark 


Comment 


Condition 


IKE Header 








Initiator's IKE_SA SPI 


Same as that set by the 
UE at Step 3 






Responder's IKE_SA SPI 


Same as that set by the 
SS at Step 3 






Next Payload 


'00101110'B 


E 




Exchange Type 


'00100101'B 


INFORMATIONAL 




Encrypted Payload 








Next Payload 


'00101010'B 


DELETE 




Delete Payload 








Next Payload 


'OOOOOOOO'B 


No next payload 




Protocol ID 


'00000001 'B 


IKESA 




Padding 


Set by the SS 


Fields from 
Encryption 
payload 




Pad Length 


Set by the SS 


Fields from 
Encryption 
payload 




Integrity checksum data 


Set by the SS 


Fields from 
Encryption 
payload 
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Correction to E-UTRA RLC test case 
7.2.3.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090103 


0061 


- 


Correction to E-UTRA RLC test case 
7.2.3.2 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090124 


0062 


- 


Batch 2 -Update to test case 7.2.2.8 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090125 


0063 


- 


Batch 1 B -Update to test case 7.2.2.9 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090128 


0064 


- 


Batch 1 A -Update to test case 8.1 .1 .1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090132 


0065 


- 


Batch 1A - Update to test case 8.2.4.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090133 


0066 


- 


Batch 2 - Update to test case 8.2.4.2 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090136 


0067 


- 


Batch 2 - Update to test case 8.2.4.6 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090137 


0068 


- 


Batch 2 - Update to test case 8.2.4.7 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090138 


0069 


- 


Batch 2 - Update to test case 8.2.4.9 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090144 


0070 


- 


Batch 2 - Addition of new test case 8.4.1 .8 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090145 


0071 


- 


Batch 2 - Correction to Idle mode test 
method 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090146 


0072 


- 


Batch 1A - Update to test case 8.5.4.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090151 


0073 


- 


Batch 2 - Addition of new test case 
9.2.3.2.10 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090153 


0074 


- 


Batch 2 - Addition of new test case 
9.2.3.2.15 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090199 


0075 


- 


Removal of EMM test cases 9.2.2.2.4, 
9.2.2.2.6, 9.2.2.2.7 and 9.2.2.2.8. 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090201 


0076 


- 


Batch 1 :Corrections to MAC test case 
7.1.2.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090203 


0077 


- 


Batch 1 :Corrections to MAC test case 
7.1.2.4 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090230 


0078 


- 


Batch 1 :Corrections to MAC test case 
7.1.2.5 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090235 


0079 


- 


Batch 1 :Corrections to MAC test case 
7.1.3.6 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090236 


0080 


- 


Batch 1 :Corrections to MAC test case 
7.1.4.11 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090347 


0081 


- 


Batch 2 - Update to MAC test case 7.1 .4.3 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090453 


0082 


- 


Batch 1A - Update of E-UTRA RLC (AM) 
test case 7.2.3.5 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090455 


0083 


- 


Batch 2 - Update of E-UTRA RLC (AM) 
test case 7.2.3.16 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090498 


0084 


- 


Batch IB: Correction to E-UTRA RLC test 
case 7.2.2.7 


8.0.1 


8.1.0 
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2009-03 


RAN#43 


R5-09051 1 


0085 




Addition of a new LTE test case" 7.3.3.2 
Correct functionality of EPS UP encription 
algoritlims (SNOW 3G)" 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090512 


0086 




Addition of a new LTE test case "7.3.3.1 
Correct functionality of EPS AS encription 
algorithms (SNOW 3G)" 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090513 


0087 




Addition of a new LTE test case "7.3.3.3 
Correct functionality of EPS AS encription 
algorithms (AES)" 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090514 


0088 




Addition of a new LTE test case "7.3.3.4 
Correct functionality of EPS UP encription 
algorithms (AES)" 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090552 


0089 


- 


Batch 1 :Corrections to MAC test case 
7.1.2.7 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090553 


0090 


- 


Batch 1 :Corrections to MAC test case 
7.1.2.8 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090554 


0091 


- 


.Bacth 1 :Corrections to MAC test case 
7.1.3.4 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090555 


0092 


- 


Batch 1 :Corrections to MAC test case 
7.1.3.5 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090556 


0093 


- 


Batch 1 :Corrections to MAC test case 
7.1.4.15 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090557 


0094 


- 


Batch 1 :Corrections to MAC test case 
7.1.4.16 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090570 


0095 


- 


Update of 36.523-1 Reference list 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090605 


0096 




Batch 2: Update of LTE TC 8.1 .2.3 RRC - 
RRC Connection Establishment in RRC 
Idle state: return to idle state after T300 
timeout 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090607 


0097 




Batch 2: Addition of EMM TC 9.2.1 .2.4 for 
Successful combined attach procedure, 
EPS service only / CS domain not 
available. 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090611 


0098 


- 


Batch 1 :Corrections to EMM test case 
9.1.3.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090631 


0099 


- 


Batch IB: Correction to E-UTRA RLC test 
case 7.2.2.3 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090645 


0100 


- 


Batch 1 B: Update of E-UTRAN test case 
6.1.1.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090649 


0101 




Batch- 1 B: Introduction of a new EMM test 
case, 9.2.3.1.4 Normal tracking area 
update / list of equivalent PLMNs in the 
TRACKING AREA UPDATE ACCEPT 
message 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090651 


0102 


- 


Batch 1 :Corrections to MAC test case 
7.1.2.2 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090653 


0103 


- 


Batch 1 : Addition of new MAC test case 
7.1.3.9 : MAC reset 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090654 


0104 


- 


Batch 1 : Addition of new MAC test case 
7.1.4.12 : MAC reset 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090655 


0105 


- 


Batch 1A - Update of E-UTRA MAC test 
case: 7.1.3.3 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090656 


0106 


- 


Batch 2 - Update of E-UTRA MAC test 
case: 7.1.2.9 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090665 


0107 




Batch 1 B - New E-UTRA PDCP test case 
- 7.3.1.2 Maintenance of PDCP sequence 
numbers (user plane, RLC UM) 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090666 


0108 


- 


Batch IB - Correction to E-UTRA PDCP 
test case 7.3.1.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090667 


0109 




Batch 1 B - New E-UTRA PDCP test case 
- 7.3.1.3 Maintenance of PDCP sequence 
numbers (user plane, RLC UM, long 
PDCP SN (12 bits)) 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090669 


0110 


- 


Batch 1 B -Update to test case 7.2.2.4 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090670 


0111 


- 


Batch 1A -Update to test case 7.2.3.3 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090671 


0112 


- 


Batch 1A -Update to test case 7.2.3.4 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090672 


0113 


- 


Removal of TC 7.3.5.1 


8.0.1 


8.1.0 
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2009-03 


RAN#43 


R5-090674 


0114 


- 


Batch 1A - Update of E-UTRA RLC (AM) 
test case 7.2.3.17 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090675 


0115 


- 


Batch 1A - Update of E-UTRA RLC (AM) 
test case 7.2.3.15 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090676 


0116 


- 


Batch 1 B - Update of test case 8.2.2.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090677 


0117 




Update of RRC batch 1 B test case 8.2.2.2 
RRC Connection Reconfiguration / 
SRB/DRB Reconfiguration: Success 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090678 


0118 


- 


Batch-1 : Update to RRC part 3 test case 
8.3.3.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090679 


0119 




Batch 1 A - TC 9.1 .2.1 Authentication 
accepted - Update of conformance 
requirements 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090680 


0120 


- 


Batch 1A - TC 9.3.2.1 Paging procedure 
revisited 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090685 


0121 


- 


Batch 1 A -Update to test case 6.1 .2.5 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090688 


0122 


- 


Update of TC 7.3.6.1 PDCP Discard 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090689 


0123 


- 


Addition of new TC 7.3.5.4 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090690 


0124 




Batch 2 - Update of LTE TC 8.5.1 .3 RRC - 
RRC Connection Re-establishment: 
Failure: T311 Expiry 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090691 


0125 


- 


Batch 2 -Update to test case 8.1 .2.5 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090692 


0126 


- 


Batch 1 A -Update to test case 8.1 .2.7 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090693 


0127 


- 


Batch 1 A -Update to test case 8.1 .3.5 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090694 


0128 


- 


Batch 2 - Update to test case 8.2.4.3 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090695 


0129 


- 


Batch 1 B - Update to test case 8.2.4.5 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090707 


0130 


- 


Batch 1A - Update of test case 8.2.4.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090709 


0131 




Batch 2: Update of RRC parti TC 8.1 .3.6 
RRC Connection Release: redirection 
from E-UTRAN to UTRAN 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090710 


0132 




Batch 2: Update of RRC part3 TC 8.3.1 .7 
Measurement configuration control and 
reporting / intra E-UTRAN measurements: 
blacklisting 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090711 


0133 


- 


Corrections to LTE idle mode test cases 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090712 


0134 


- 


Batch 1 B: Update of test case 6.1 .2.6 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090713 


0135 


- 


Batch 2: Update of LTE TC 8.1 .2.2 RRC, 
Reject with wait time 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090714 


0136 


- 


Update to test case 8.1 .3.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090715 


0137 


- 


Batch IB: update of E-UTRA PDCP test 
case 7.3.6.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090716 


0138 


- 


Batch IB: update of E-UTRA PDCP test 
case 7.3.6.1 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090717 


0139 


- 


Batch 2 - Update to test case 8.3.1 .8 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090720 


0140 


- 


Batch-2: Update to RRC part 3 test case 
8.3.1.3 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090721 


0141 


- 


Batch-2: Update to RRC part 3 test case 
8.3.1.5 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090722 


0142 




Batch 2: Addition of new EMM TC 
9.2.1.2.3: Successful combined attach 
procedure, EPS service only / MSC 
temporarily not reachable 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090730 


0143 


- 


Bacth 1 :Corrections to MAC test case 
7.1.2.3 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090732 


0144 


- 


Batch 2 - Addition of new test case 
9.2.1.2.6 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090733 


0145 


- 


Batch 2 - Addition of new test case 
9.2.3.2.6 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090734 


0146 


- 


Batch 1 :Corrections to MAC test case 
7.1.4.2 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090735 


0147 


- 


Batch 1 :Corrections to MAC test case 
7.1.3.2 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090736 


0148 




Batch 2: Update of RRC parti TC 8.1 .3.4 
RRC Connection Release: redirection to 
another E-UTRAN frequency 


8.0.1 


8.1.0 


2009-03 


RAN#43 


R5-090740 


0149 


4 


Batch 1A - Update of E-UTRA RLC (AM) 
test case 7.2.3.18 


8.0.1 


8.1.0 
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2009-05 


RAN#44 


R5-092052 


0150 


- 


GCF Priority 1 - Update of 9.1 .2.1 test 
procedure sequence and editorials 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092053 


0151 




GCF Priority 2 - Update of TC 9.1 .2.3 
Authentication not accepted by the 
networl<, GUTI used, authentication reject 
and re-authentication 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092054 


0152 




GCF Priority 2 - Update TC 9.1 .2.4 
Authentication not accepted by the UE 
IVIAC code failure 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092055 


0153 




GCF Priority 2 - New TC 9.1 .2.5 
Authentication not accepted by the UE, 
SQN failure 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092061 


0154 


- 


GCF Priority 1 - Update of RRC test case 
9.3.1.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092076 


0155 




GCF Priority 2: First lu mode to SI mode 
intersystem change after attach: go to E- 
UTRAN RRC idle: RAU to UTRAN 
(9.2.3.3.1) 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092077 


0156 


- 


Batch 2: Addition of 8.1 .3.9 RRC 
Redirection from E-UTRAN to HRPD 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092078 


0157 




Batch 2: Addition of 8.1.3.10 RRC 
Redirection from E-UTRAN to 
CDMA2000-1XRTT 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092107 


0158 


- 


GCF Priority 1 - Update of E-UTRA MAC 
test case 7.1.3.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092108 


0159 


- 


GCF Priority 1 - Update of E-UTRA MAC 
test case 7.1.4.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092109 


0160 


- 


GCF Priority 1 - Update of E-UTRA MAC 
test case 7.1.4.4 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092110 


0161 


- 


GCF Priority 1 - Update of E-UTRA MAC 
test case 7.1.4.5 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092112 


0162 


- 


GCF Priority 1 - Update of E-UTRA MAC 
test case 7.1.4.8 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092113 


0163 


- 


GCF Priority 1 - Update of E-UTRA MAC 
test case 7.1.4.10 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092114 


0164 


- 


GCF Priority 1 - Update of E-UTRA MAC 
test case 7.1.4.13 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092115 


0165 


- 


GCF Priority 1 - Proposal to remove E- 
UTRA RLC test case 7.2.3.19 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092181 


0166 


- 


GCF Priority 2 - Update of test case 
8.5.1.5 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092185 


0167 


- 


GCF Priority 1 - Update of test case 
8.2.3.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092190 


0168 


- 


GCF Priority 1 - Update of E-UTRA RLC 
(AM) test case 7.2.3.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092191 


0169 


- 


GCF Priority 1 - Update of E-UTRA RLC 
(AM) test case 7.2.3.2 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092192 


0170 


- 


GCF Priority 1 - Update of E-UTRA RLC 
(AM) test case 7.2.3.18 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092200 


0171 


- 


GCF Priority 1 - Update of E-UTRA RLC 
(AM) test case 7.2.3.18 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092213 


0172 


- 


Addition of new RRC test case 8.3.2.9 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-09???8 


0173 


- 


GCF Priority 2 - Update to test case 
6.1.2.15 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-09???9 


0174 


- 


GCF Priority 1 - Update to test case 
6.1.2.4 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092230 


0175 


- 


GCF Priority 2 - Update to test case 
6.1.2.5 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092234 


0176 


- 


GCF Priority 1 - Update to test case 
8.1.1.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092242 


0177 


- 


GCF Priority 2 - Update to test case 
8.1.3.5 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092245 


0178 




GCF Priority-2: A new EMM test case, 
9.2.3.1.8 UE receives an indication that 
the RRC connection was released with 
cause 'load balancing TAU required" 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092247 


0179 


- 


Introduction of new EMM test cases. 


8.1.0 


8.2.0 
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9.2.3.1 .10 and 9.2.3.1 .1 1 Normal tracking 
area update / Rejected 






2009-05 


RAN#44 


R5-092248 


0180 




Introduction of 9.2.3.1.12 ' Normal tracking 
area update / rejected / EPS service not 
allowed' 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092249 


0181 




Introduction of 9.2.3.1.13 'Normal tracking 
area update / rejected / UE identity cannot 
be derived by the network' 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092250 


0182 




GCF Priority 2 - Addition of a new test 
case 6.1 .2.1 1 Inter-frequency cell 
reselection 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092251 


0183 




Introduction of 9.2.3.1.14 ' Normal tracking 
area update / rejected / UE implicitly 
detached' 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092252 


0184 




Introduction of 9.2.3.1.15 ' Normal tracking 
area update / rejected / PLIVIN not 
allowed' 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092253 


0185 




Introduction of 9.2.3.1.16 'Normal 
tracking area update / rejected / Tracking 
area not allowed' 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092258 


0186 




GCF Priority 2 - Update of RRC parti TO 
8.1.3.4 RRC Connection Release: 
redirection to another E-UTRAN frequency 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092260 


0187 




GCF Priority 2 - Update of RRC parti TC 
8.1.3.6 RRC Connection Release: 
redirection from E-UTRAN to UTRAN 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092262 


0188 


- 


GCF Priority 2 - Correction to idle mode 
test cases 6.1 .2.3 and 6.1 .2.6 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092272 


0189 


- 


LTE-SIG:TDD related updates in RRC 
sections 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092276 


0190 




"GCF priority 1 - Update of the LTE test 
caseo 7.3.3.1 Correct functionality of EPS 
AS encription algorithms (SNOW 3G)6" 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092278 


0191 




GCF priority 1 - Update of test caseo 
7.3.3.2 Correct functionality of EPS UP 
encription algorithms (SNOW 3G)6 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092280 


0192 


- 


GCF Priority 2 - Update to test case 
8.2.4.2 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092281 


0193 


- 


GCF Priority 2 - Update to test case 
8.2.4.3 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092283 


0194 


- 


GCF Priority 2 - Update to test case 
8.2.4.5 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092284 


0195 


- 


GCF Priority 2 - Update to test case 
8.2.4.6 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092285 


0196 


- 


GCF Priority 2 - Update to test case 
8.2.4.7 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092288 


0197 


- 


GCF Priority 2 - Update to test case 
8.3.1.8 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092295 


0198 


- 


Addition of new test case 9.2.1 .2.8 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092296 


0199 


- 


Addition of new test case 9.2.1 .2.9 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092297 


0200 


- 


Addition of new test case 9.2.1 .2.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092299 


0201 


- 


Addition of new test case 9.2.3.2.12 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092300 


0202 


- 


Addition of new test case 9.3.1 .4 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092301 


0203 


- 


Addition of new test case to test case 
10.X.X 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092327 


0204 


- 


GCF Priority 1 : Update E-UTRA PDCP TC 
7.3.4.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092328 


0205 


- 


GCF Priority 1 : Update E-UTRA PDCP TC 
7.3.4.2 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092329 


0206 


- 


GCF Priority 2: Update E-UTRA PDCP TC 
7.3.5.2 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092330 


0207 


- 


GCF Priority 2: Update E-UTRA PDCP TC 
7.3.5.3 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092331 


0208 


- 


GCF Priority 2: Update E-UTRA PDCP TC 
7.3.5.5 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092367 


0209 


- 


GCF Priority 1 - Update of E-UTRA MAC 
test case 7.1.4.6 


8.1.0 


8.2.0 
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2009-05 


RAN#44 


R5-092396 


0210 


- 


GCF Priority 2 - Addition of new test case 
6.2.2.3 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092397 


0211 


- 


GCF Priority 2 - Addition of new test case 
6.2.3.7 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092398 


0212 


- 


GCF Priority 2 - Addition of new test case 
6.2.3.8 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092406 


0213 




"GCF Priority 2 - Addition of new LTE test 
case 7.2.2.1 1 UM RLC / RLC re- 
establisliment procedure" 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092417 


0214 


- 


GCF Priority 2:Corrections to ElVIIVI test 
case 9.1.3.2 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092418 


0215 


- 


GCF Priority 1 :Corrections to IVIAC test 
case 7.1.3.4 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092419 


0216 


- 


GCF Priority 1 :Corrections to IVIAC test 
case 7.1.3.5 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092420 


0217 


- 


GCF Priority 1 :Corrections to IVIAC test 
case 7.1.4.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092421 


0218 




GCF Priority 2: Attach / Abnormal case / 
Access barred because of access class 
barring or NAS signalling connection 
establishment rejected by the network 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092422 


0219 


- 


GCF Priority 2: Corrections to EIVIM test 
case 9.4.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092423 


0220 


- 


GCF Priority 2:Corrections to EIVIM test 
case 9.4.3 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092430 


0221 


- 


GCF Priority 1 :Corrections to IVIAC test 
case 7.1.1.2 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092451 


0222 




Update of RSRP / RSRQ measurement 
result checking to the RRC part 3 test 
cases 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092471 


0223 


- 


GCF Priority 2-Correction of the EMM test 
case 9.2.3.1.4 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092480 


0224 


- 


GCF Priority 1 :Corrections to MAC test 
case 7.1.2.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092481 


0225 


- 


GCF Priority 1 :Corrections to MAC test 
case 7.1.2.2 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092484 


0226 


- 


GCF Priority 1 :Corrections to MAC test 
case 7.1.2.5 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092485 


0227 


- 


GCF Priority 1 :Corrections to MAC test 
case 7.1.2.7 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092486 


0228 


- 


GCF Priority 1 :Corrections to MAC test 
case 7.1.2.8 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092500 


0229 




GCF priority 2: Update of 10.2.1 for 
Dedicated EPS bearer context activation / 
Success 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092501 


0230 




GCF priority 2: Addition of TC 10.4.1 for 
EPS bearer context deactivation / 
Success 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092502 


0231 




GCF priority 2: Addition of TC 10.5.1 for 
UE requested PDN connectivity accepted 
by the network 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092504 


0232 




GCF priority TBC: Addition of TC 1 0.5.2 
for UE requested PDN connectivity 
accepted by the network / no PDN 
address allocated 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092505 


0233 




GCF priority 3: Addition of TC 10.5.3 for 
UE requested PDN connectivity not 
accepted 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092506 


0234 




GCF priority 2: Addition of ESM TC 10.6.1 
for UE requested PDN disconnect 
procedure accepted by the network 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092507 


0235 




GCF Priority 3: Addition of ESM TC 10.6.2 
for UE requested PDN disconnect 
procedure not accepted by the network 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092510 


0236 




GCF priority 2 - Update of 9.2.1 .1.17 
Attach / rejected / no suitable cells in 
tracking area 


8.1.0 


8.2.0 
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2009-05 


RAN#44 


R5-092512 


0237 




GCF priority 1 : Update of EMM TC 9.3.1 .2 
Service Request initiated by UE for uplinl< 
signalling 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092513 


0238 




GCF priority 2: Update of 9.2.1.1.17 
Attach / rejected / no suitable cells in 
tracking area 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092514 


0239 


- 


GCF priority 1 : Update of 9.2.1 .1.1 Attach 
Procedure / Success (valid GUTI) 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092515 


0240 




GCF priority 2: Update of 9.2.1 .1 .5 Attach 
Procedure/ Success / ATTACH ACCEPT 
includes the PDN address assigned to the 
UE 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092516 


0241 


- 


GCF priority 2: Update of 9.2.1 .1 .9 Attach 
/ rejected / IMSI invalid 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092517 


0242 


- 


GCF priority 2: Update of 9.2.1 .1.10 
Attach / rejected / illegal ME 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092518 


0243 




GCF priority TBC: Update of 9.2.1 .1 .12 
Attach / rejected /GPRS services not 
allowed 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092539 


0244 


- 


GCF Priority 1 - Update of RLC section 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092567 


0245 




GCF Priority 2 - Addition of a new test 
case 6.2.3.5 Inter-RAT Cell Reselection / 
from E-UTRA RRC IDLEtoUTRA Idle 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092569 


0246 




GCF Priority 2: Inter-RAT cell Selection / 
from E-UTRA RRCJDLE to UTRAJdIe, 
serving cell becomes non-suitable 
(SServingCell<0,barred) 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092570 


0247 




GCF Priority 2: Inter-RAT cell Selection / 
from E-UTRA RRC IDLE to 
GSMJdIe/GPRS Packetjdie, serving cell 
becomes non-suitable 
(SServJngCeIkO, barred) 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092571 


0248 




GCF Priority 1 - New E-UTRA MAC test 
case - 7.1 .7.1 .1 DL-SCH Transport Block 
Size support / DCI format 1 / RA type 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092575 


0249 




GCF Priority 1 - New E-UTRA MAC test 
case 7.1.7.1.2 - DL-SCH Transport Block 
Size selection / DCI format 1 / RA type 1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092577 


0250 




GCF Priority 1 - New E-UTRA MAC test 
case 7.1.7.2.1 - UL-SCH Transport Block 
Size selection / DCI format 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092578 


0251 




GCF priority 2: New MAC test case: 
7.1 .6.1 DRX Operation / (short cycle not 
configured) /Parameters configured by 
RRC (radio resource configuration) 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092579 


0252 




GCF Priority 2 - New RRC parti TC 
8.1.3.8 RRC Connection Release: 
redirection from E-UTRAN to GERAN 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092580 


0253 


- 


GCF Priority 2 - Update of test case 
8.2.1.3 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092583 


0254 




GCF Priority 2: Attach Procedure / 
Success (last visited TAI, TAI list and 
equivalent PLMN list handling) 9.2.1.1.1a 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092584 


0255 


- 


GCF Priority 1 - Update of test case 
8.2.1.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092589 


0256 


- 


GCF Priority 2 - Addition of new EMM test 
case 9.3.1.7a 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092593 


0257 




GCF priority 2 - Update of 9.2.1 .1.15 
Attach / rejected / roaming not allowed in 
this tracking area 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092595 


0258 


- 


GCF Priority 1 :Corrections to MAC test 
case 7.1.1.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092596 


0259 


- 


GCF Priority 1 :Corrections to MAC test 
case 7.1.4.12 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092597 


0260 


- 


GCF Priority 1 - Update to test case 
8.2.4.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092700 


0261 


- 


GCF Priority 2 - Addition of new test case 


8.1.0 


8.2.0 
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8.3.2.1 






2009-05 


RAN#44 


R5-092701 


0262 


- 


GCF Priority-1 : Correction to 9.2.3.1 .1 
'Normal tracking area update / accepted' 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092702 


0263 




GCF Priority-1 : Correction to 

9.2.3.1 .5'Periodic tracking area update / 

accepted' 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092703 


0264 




GCF Priority 2 - Addition of E-UTRAN test 
case 6.1.2.7 for Cell reselection: 
Equivalent PLIVIN 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092706 


0265 


- 


GCF Priority 1 - Update to RRC test cases 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092712 


0266 


- 


GCF Priority 2: New MAC test case 
7.1.4.14 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092713 


0267 


- 


GCF Priority 2 - Update to test case 
8.1.2.5 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092714 


0268 


- 


GCF Priority 2 - Update to test case 
8.1.2.7 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092715 


0269 


- 


GCF Priority 2 - Addition of RRC test case 
8.3.2.6 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092716 


0270 


- 


GCF Priority 1 - Update of E-UTRA MAC 
test case 7.1.4.7 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092717 


0271 




GCF Priority 1 - New E-UTRA MAC test 
case 7.1 .7.1 .4 - DL-SCH Transport Block 
Size selection / DCI format 1A/ RA type 2 
/ Distributed VRB 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092718 


0272 




GCF Priority 1 - New E-UTRA MAC test 
case 7.1.7.1.3 - DL-SCH Transport Block 
Size selection / DCI format 1A/ RA type 2 
/ Localised VRB 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092730 


0273 




GCF priority 2: New MAC test case: 
7.1 .6.2 DRX Operation / Parameters 
(short cycle not configured) / DRX 
command MAC control element reception 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092731 


0274 


- 


GCF Priority 2 - Updates to E-UTRAN Idle 
Mode test case 6.1.2.9 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092732 


0275 


- 


GCF Priority 2 - Updates to E-UTRAN Idle 
Mode test case 6.1.2.8 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092741 


0276 


- 


GCF Priority 1 - Update to idle mode test 
cases 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092751 


0277 




Addition of new idle mode test case for 
ignoring CSG cells in cell selection when 
Allowed CSG list is empty or not 
supported 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092752 


0278 


- 


GCF Priority 2: New idle mode test case 
6.2.3.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092755 


0279 


- 


GCF Priority 2 - Update to test case 
8.3.1.10 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092756 


0280 


- 


GCF Priority 2 - Update to test case 
8.3.2.3 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092758 


0281 


- 


GCF Priority 2 - Updates to E-UTRAN test 
case 6.1.1.1 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092760 


0282 


- 


GCF Priority 2: New idle mode test case 
6.2.3.2 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092761 


0283 


- 


Move common test procedure from 
sections 6.0.1 , 6.0.2, 6.0.3 to TS 36.508 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092762 


0284 


- 


Batch 2 - Addition of new RRC test case 
8.3.2.7 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092763 


0285 


- 


Batch 2 - Addition of new RRC test case 
8.3.2.8 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092764 


0286 


- 


LTE-SIG:TDD related updates in MAC 
sections 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092768 


0287 


- 


GCF Priority-1 : Correction to 9.2.2.2.1 
'NW initiated detach / re-attach required' 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092784 


0288 


- 


GCF Priority 2 - Update to test case 
8.3.1.9 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092483 


0289 


- 


GCF Priority 1 :Corrections to MAC test 
case 7.1.2.4 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092528 


0290 


4 


GCF Priority 1 - Update of E-UTRA MAC 


8.1.0 


8.2.0 
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test case 7.1.2.3 






2009-05 


RAN#44 


R5-092785 


0291 




GCF priority 2: A/Gb mode READY state 
to SI mode cell reselection and E-UTRAN 
- GERAN RAU (9.2.3.4.1, 9.2.3.4.2) 


8.1.0 


8.2.0 


2009-05 


RAN#44 


R5-092786 


0292 




GCF Priority 2 - Update of TC 9.2.1 .1 .14 
Attach / rejected / tracking area not 
allowed 


8.1.0 


8.2.0 


- 


- 


- 


- 


- 


Editorial corrections and split into sections 


8.2.0 


8.2.1 


2009-09 


RAN#45 


R5-094075 


0293 


- 


GCF Priority 1 - Update of IVIAC test case 
7.1.2.6 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094076 


0294 


- 


GCF Priority 1 - Update of MAC test case 
7.1.3.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094078 


0295 


- 


GCF Priority 1 - Update of IVIAC test case 
7.1.3.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094079 


0296 


- 


GCF Priority 1 - Update of MAC test case 
7.1.3.4 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094080 


0297 


- 


GCF Priority 1 - Update of MAC test case 
7.1.3.5 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094081 


0298 


- 


GCF Priority 1 - Update of MAC test case 
7.1.3.6 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094082 


0299 


- 


GCF Priority 1 - Update of MAC test case 
7.1.3.7 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094083 


0300 


- 


GCF Priority 1 - Update of MAC test case 
7.1.4.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094085 


0301 


- 


GCF Priority 1 - Update of MAC test case 
7.1.4.6 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094086 


0302 


- 


GCF Priority 1 - Update of MAC test case 
7.1.4.7 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094087 


0303 


- 


GCF Priority 1 - Update of MAC test case 
7.1.4.8 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094088 


0304 


- 


GCF Priority 1 - Update of MAC test case 
7.1.4.11 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094089 


0305 


- 


GCF Priority 1 - Update of MAC test case 
7.1.4.13 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094090 


0306 


- 


GCF Priority 1 - Update of MAC test case 
7.1.4.15 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094091 


0307 


- 


GCF Priority 1 - Update of PDCP test 
case 7.3.1.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094092 


0308 


- 


GCF Priority 1 - Update of RRC test case 
8.2.1.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094093 


0309 


- 


GCF Priority 2 - Update of MAC test case 
7.1.4.16 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094094 


0310 


- 


GCF Priority 2 - Update of Idle Mode test 
case 6.1.2.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094095 


0311 


- 


GCF Priority 2 - Update of RRC test case 
8.1.3.4 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094096 


0312 


- 


GCF Priority 2 - Update of RRC test case 
8.1.3.6 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094101 


0313 


- 


GCF Priority 2 - Addition of new test case 
10.7.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094102 


0314 


- 


GCF Priority 2 - Addition of new test case 
10.7.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094114 


0315 


- 


Addition of new test case 6.2.2.5 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094121 


0316 


- 


GCF Priority 2 - Update to test case 
8.3.1.9 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094122 


0317 


- 


Remove TC 8.4.1 .8 from TS 36.523-1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094124 


0318 


- 


GCF Priority 2 - Addition of new test case 
8.4.2.4 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094187 


0319 


- 


GCF Priority 2 - New EMM TC 9.1 .4.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094189 


0320 


- 


GCF Priority 2 - Removal of EMM TC 
9.1.2.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094195 


0321 


- 


GCF Priority 1 - Update of MAC test case 
7.1.4.10 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094196 


0322 


- 


GCF Priority 2 - Update of RLC test case 
7.2.3.21 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094201 


0323 


- 


GCF Priority 2 - Update of RRC test case 
8.3.2.6 


8.2.1 


8.3.0 
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2009-09 


RAN#45 


R5-094202 


0324 


- 


GCF Priority 2 - Add new RRC test case 
8.4.1.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094203 


0325 


- 


GCF Priority 2 - Add new RRC test case 
8.4.1.4 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094205 


0326 


- 


GCF Priority 3 - Remove RRC test case 
8.1.3.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094284 


0327 


- 


Removal of the GUTI reallocation 
procedures test cases 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094289 


0328 




GCF Priority 2 - TDD formulation update 
in 7.1 .6.1 DRX Operation / (short cycle not 
configured) /Parameters configured by 
RRC (radio resource configuration) 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094290 


0329 




GCF Priority 2 - TDD formulation update 
in 7.1 .6.2 DRX Operation / Parameters 
(short cycle not configured) / DRX 
command MAC control element reception 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094366 


0330 


- 


GCF Priority 2 - Corrections to E-UTRAN 
test case 6.1.1.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094369 


0331 


- 


GCF Priority 2 - Updates to E-UTRAN test 
case 6.1.2.7 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094372 


0332 


- 


GCF Priority 2 - Corrections to E-UTRAN 
test cases 6.1.2.8 and 6.1.2.9 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094387 


0333 


- 


GCF Priority 2 - Update to test case 
9.2.2.1.6 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094392 


0334 




GCF Priority 2 - Correction of discard 
timer value to be consistent with test 
tolerances 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094399 


0335 


- 


GCF Priority 2 - Addition new test case 
6.2.3.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094426 


0336 


- 


GCF Priority 1 - Corrections to MAC test 
case 7.1.4.6 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094428 


0337 


- 


GCF Priority 1 - Corrections to MAC test 
case 7.1.4.10 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094432 


0338 


- 


GCF Priority 2 - Corrections to MAC test 
case 7.1.4.16 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094520 


0339 


- 


GCF Priority 2 - Update of RRC test case 
8.3.1.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094521 


0340 


- 


GCF Priority 2 - Update of RRC test case 
8.3.1.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094523 


0341 


- 


GCF Priority 2 - Update of RRC test case 
8.3.1.5 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094525 


0342 


- 


GCF Priority 1 - Update of RRC test case 
8.3.3.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094577 


0343 




GCF Priority 1 - Update of EMM part TC 
9.1 .3.1 NAS security mode command 
accepted by the UE 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094627 


0344 


- 


GCF Priority 2 - Update of MAC TC 
7.1.3.2 DLSPS 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094628 


0345 


- 


GCF Priority 2 - Update of MAC TC 
7.1.4.2 ULSPS 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094629 


0346 


- 


GCF Priority 1 - Corrections to MAC test 
case 7.1.3.9 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094635 


0347 


- 


GCF Priority 1 - Correction to E-UTRAN 
RLC test case 7.2.3.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094636 


0348 




GCF Priority 1 - Adding Test Coverage for 
Verification of UE setting of the RRC 
Establishment Cause in EMM test case 
9.2.1.1.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094660 


0349 


- 


GCF Priority 2 - Update of MAC test case 
7.1.4.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094662 


0350 


- 


GCF Priority 1 - Corrections to RLC 
section 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094664 


0351 


- 


GCF Priority 1 - Update of RLC test case 
7.2.3.9 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094666 


0352 


- 


GCF Priority 2 - Addition of new EMM test 
case 9.2.3.3.5 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094674 


0353 


- 


GCF Priority 2 - Update of RRC test case 


8.2.1 


8.3.0 
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8.3.2.8 






2009-09 


RAN#45 


R5-094676 


0354 


- 


GCF Priority 3 - Update of RRC test case 
8.3.2.9 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094707 


0355 


- 


GCF Priority 1 - Correction to E-UTRAN 
IVIAC test case 7.1.2.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094762 


0356 


- 


GCF Priority 2 - Update of RRC test case 
6.2.2.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094776 


0357 


- 


GCF Priority 2 - Update of RRC test case 
6.2.3.7 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094788 


0358 


- 


GCF Priority 2 - Update of RRC test case 
6.2.3.8 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094798 


0359 


- 


GCF Priority 2 - Update of RRC test case 
8.1.3.9 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094814 


0360 


- 


GCF Priority 2 - Update of RRC test case 
8.1.3.10 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094817 


0361 


- 


GCF Priority 2 - Update of RRC test case 
8.3.2.7 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094823 


0362 


- 


GCF Priority 2 - Update of RRC test case 
8.3.2.8 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094833 


0363 


- 


GCF Priority 2 - Correction of EMM TC 
9.2.1 .1 .9 Attach / rejected / IMSI invalid 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094866 


0364 


2 


GCF Priority 1 : Corrections to E-UTRA 
MAC test case 7.1.7.1.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094867 


0365 


2 


GCF Priority 1 : Corrections to E-UTRA 
MAC test case 7.1.7.1.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094868 


0366 


2 


GCF Priority 1 : Corrections to E-UTRA 
MAC test case 7.1.7.1.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094869 


0367 


2 


GCF Priority 1 : Corrections to E-UTRA 
MAC test case 7.1.7.1.4 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-094876 


0368 


- 


GCF Priority 1 - Correction to E-UTRAN 
RLC test case 7.2.3.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095004 


0369 


- 


GCF Priority 2 - Update of 9.1 .2.4 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095005 


0370 


- 


GCF Priority 2 - Update of 9.1 .2.5 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095008 


0371 


- 


GCF Priority 2 - Update of MAC TC 
7.1.4.14 1 II Bundling 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095028 


0372 


- 


GCF Priority 1 - Various corrections to 
RLC section of 36.523-1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095032 


0373 


- 


GCF Priority 2 - Addition of new SMS over 
SGs test case 11.1.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095036 


0374 


- 


GCF Priority 2 - Correction to 9.2.2.2.2 
NW initiated detach / IMSI detach 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095037 


0375 


- 


GCF Priority 2 - Correction of PDCP 
status report 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095038 


0376 


- 


GCF Priority 2 - Correction of PDCP 
handover test procedure 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095041 


0377 


- 


GCF Priority 2 - Update of 9.1 .2.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095065 


0378 




GCF Priority 2 - Adding Test Coverage for 
Verification of UE setting of the RRC 
Establishment Cause in EMM test case 
9.2.2.1.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095066 


0379 




GCF Priority 1 - Adding Test Coverage for 
Verification of UE setting of the RRC 
Establishment Cause in EMM test case 
9.3.1.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095067 


0380 




GCF Priority 1 - Adding Test Coverage for 
Verification of UE setting of the RRC 
Establishment Cause in EMM test case 
9.3.1.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095069 


0381 




GCF Priority 2 - Adding Test Coverage for 
Verification of UE setting of the RRC 
Establishment Cause in EMM test case 
9.3.1.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095070 


0382 




GCF Priority 2 - Adding Test Coverage for 
Verification of UE setting of the RRC 
Establishment Cause in EMM test case 
9.3.2.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095073 


0383 


- 


GCF Priority 2 - Update of EMM test case 


8.2.1 


8.3.0 
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9.3.1.7a 






2009-09 


RAN#45 


R5-095075 


0384 


- 


GCF Priority 1 - Corrections to IVIAC test 
case 7.1.4.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095076 


0385 


- 


GCF Priority 1 - Corrections to IVIAC test 
case 7.1.4.8 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095077 


0386 


- 


GCF Priority 1 - Corrections to MAC test 
case 7.1.4.13 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095078 


0387 


- 


GCF Priority 1 - Corrections to IVIAC test 
case 7.1.4.5 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095086 


0388 


- 


GCF Priority 1 - Various corrections to 
RLC section of 36.523-1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095087 


0389 


- 


GCF Priority 2 - New EMM TC 9.3.1 .7 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095088 


0390 


- 


GCF Priority 1 - Update to test case 
9.2.1.1.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095089 


0391 


- 


Update to GCF Priority 2 test case 
9.2.1.1.7 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095090 


0392 


- 


GCF Priority 2 - Update to test case 
9.2.2.1.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095094 


0393 


- 


Update to preamble in L2 UM test cases 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095097 


0394 


- 


Add reference to test procedure for Idle 
Mode section 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095103 


0395 


- 


GCF Priority 1 - Update of MAC part TC 
7.1.2.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095104 


0396 


- 


GCF Priority 1 - Corrections to MAC test 
case 7.1.4.11 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095105 


0397 


- 


Addition new test case 6.2.3.13 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095109 


0398 


- 


GCF Priority 1 - Update of 9.1 .2.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095110 


0399 


- 


GCF Priority 1 - Correction to E-UTRAN 
MAC test case 7.1.3.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095112 


0400 




GCF Priority 2 - Correction of EMM TC 
9.2.1 .1 .12 Attach / rejected / EPS services 
not allowed 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095113 


0401 




GCF Priority 2 - Corrections to test case 
9.2.1 .1 .13 Attach / rejected / PLMN not 
allowed 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095116 


0402 




GCF Priority 2 - Correction of EMM 
9.2.1 .1 .17 TC Attach / rejected / no 
suitable cells in tracking area 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095118 


0403 




GCF Priority 3 - Correction to EMM TC 
9.2.1 .2.3 Combined attach procedure / 
Success / EPS services only / MSC 
temporarily not reachable 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095120 


0404 


- 


GCF Priority 1 - Various corrections to 
other section of 36.523-1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095121 


0405 


- 


GCF Priority 1 - Various corrections to 
RRC Parti section of 36.523-1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095125 


0406 


- 


GCF Priority 1 - Update of MAC TC 
7.1.4.4 SR 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095126 


0407 


- 


GCF Priority 1 - Update of 9.3.2.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095127 


0408 


- 


Priority 2 - Update of test case 6.2.2.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095131 


0409 


2 


GCF Priority 1 - Addition of new Multi- 
layer Procedures test case 13.1 .1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095132 


0410 


2 


GCF Priority 1 - Addition of new Multi- 
layer Procedures test case 13.2.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095133 


0411 


- 


GCF Priority 1 - Correction to E-UTRAN 
RLC test case 7.2.3.5 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095135 


0412 


- 


GCF Priority 2 - Update of cell reselection 
test case 6.1.2.15 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095136 


0413 




GCF Priority 2 - Update of PDCP test 
case handover / In-order delivery and 
duplicate elimination in the downlink 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095139 


0414 


- 


GCF Priority 2 - Addition of test case 
1 1 .1 .3 MO-SMS over SGs in idle mode 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095140 


0415 




GCF Priority 2 - Correction to 9.2.3.1 .2 
Normal tracking area update / accepted / 
'Active' flag set 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095141 


0416 


- 


GCF Priority 2 - Correction of TC 


8.2.1 


8.3.0 
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9.2.1 .1 .14 Attach / rejected / tracking area 
not allowed 






2009-09 


RAN#45 


R5-095148 


0417 




GCF Priority 2 - Correction of EMM TC 
9.2.1.1.15 Attach / rejected / roaming not 
allowed in this tracking area 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095149 


0418 




GCF Priority 2 - Addition of new test case 
9.2.3.3.6 for E-UTRAN RRC connection 
failure / reselection of UTRAN cell / NAS 
signaling to release old SI interface 
connection 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095150 


0419 


- 


GCF Priority 2 - Update to test case 
10.8.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095151 


0420 


- 


GCF Priority 2 - Addition of new SMS over 
SGs test case 11.1.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095161 


0421 


- 


GCF Priority 1 - Various corrections to Idle 
Mode section of 36.523-1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095164 


0422 


- 


GCF Priority 1 - Update of E-UTRA MAC 
test case 7.1.2.4 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095172 


0423 




GCF Priority 4 - New TC 8.1 .3.7 RRC 
Connection Release: redirection from 
UTRAN to E-UTRAN 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095173 


0424 


1 


GCF Priority 3 - Update to test case 
9.2.2.1.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095175 


0425 


1 


GCF Priority 3 - Correction to 9.2.1 .2.1 
"Combined attach procedure / Success / 
EPS and non-EPS services" 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095177 


0426 




GCF Priority 3 - CR to EMM TC 9.2.1 .1 .19 
Attach / Abnormal case / Failure due to 
non integrity protection 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095178 


0427 




GCF Priority 3 - New EMM TC 9.2.3.2.1a 
Combined tracking area update / 
successful / check of last visited TAI and 
handling of TAI list, LAI and TMSI 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095179 


0428 


- 


GCF Priority 3 - Addition of new test case 
6.2.2.4 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095188 


0429 


3 


GCF Priority 1 : Corrections to E-UTRA 
MAC test case 7.1.7.2.1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095207 


0430 


- 


GCF Priority 2 - Addition of new test case 
8.4.2.2 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095208 


0431 


- 


GCF Priority 1 - Corrections to RLC test 
case 7.2.3.7 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095217 


0432 


- 


GCF Priority 1 - Corrections to PDCP test 
cases 7.5.3.2 and 7.5.3.3 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095219 


0433 


- 


GCF Priority 1 - Various corrections to 
RRC Part2 section of 36.523-1 


8.2.1 


8.3.0 


2009-09 


RAN#45 


R5-095220 


0434 


- 


GCF Priority 1 - Various corrections to 
RRC Part 3 section of 36.523-1 


8.2.1 


8.3.0 


2009-10 


- 


- 


- 


- 


Minor CR 414 implementation corrections 


8.3.0 


8.3.1 


2009-10 


- 


- 


- 


- 


Minor CR 354 implementation corrections 


8.3.1 


8.3.2 


2009-1 1 


GERAN 
#44 


GP-092405 


0435 


- 


Addition of new Test Case 6.2.3.21 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095444 


0436 


- 


Removal of TC 8.1 .2.10 from TS 36.523-1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095446 


0437 




GCF Priority 1 - Various corrections to 
RRC Part 2 section of 36.523-1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095447 


0438 


- 


Removal of TC 8.2.1 .2 from TS 36.523-1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095448 


0439 


- 


Removal of TC 8.2.1 .4 from TS 36.523-1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095450 


0440 




GCF Priority 2 - Update to test case 
8.2.4.5 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095451 


0441 




GCF Priority 3 - Update to test case 
8.2.4.9 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095462 


0442 


- 


GCF Priority 3 - Addition of test case 


8.3.2 


8.4.0 
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9.2.3.1.9a 
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2009-12 


RAN#46 


R5-095467 


0443 




GCF Priority 3 - Addition of test case 
9.3.1.16 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095505 


0444 


- 


GCF Priority 2 - Update test case 6.1 .2.1 1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095507 


0445 




GCF Priority 2 - Correction for 
IVIeasurement test cases 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095521 


0446 




GCF Priority 1 - Update of RLC test case 
7.2.3.14 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095524 


0447 




GCF Priority 2 - Update of ElVIIVI test case 
9.2.3.3.5 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095525 


0448 




GCF Priority 2 - Update of ElVIIVI test case 
9.3.1.7a 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095597 


0449 




GCF Priority 3 - Addition of E-UTRAN test 
case 8.3.1.11 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095609 


0450 




GCF Priority 1 - Update of EMM test case 
9.2.3.1.5 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095621 


0451 


- 


GCF Priority 2 - Removal of TC 8.4.2.6 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095774 


0452 




GCF Priority 2 - Correction to test case 
6.1.1.1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095783 


0453 




GCF Priority 3 - Update to test case 
9.2.1.1.25 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095784 


0454 




GCF Priority 2 - Update to test case 
9.2.2.1.1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095785 


0455 




GCF Priority 3 - Update to test case 
9.2.2.1.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095786 


0456 




GCF Priority 2 - Update to test case 
9.2.2.1.6 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095795 


0457 




Addition of new DSMIPv6 test case for 
Discovery of the Home Agent via DNS 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095796 


0458 




Addition of new DSMIPv6 test case for 
Security association establishment without 
Home Agent reallocation procedure 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095802 


0459 




GCF Priority 3 - Addition of new RRC test 
case 8.4.5.4 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095803 


0460 




GCF Priority 3 - Addition of new RRC test 
case 8.4.7.3 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095804 


0461 




GCF Priority 3 - Addition of new RRC test 
case 8.4.7.4 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095884 


0462 




GCF Priority 1 - Correction of TC 9.2.1 .1 .1 
Attach Procedure / Success (valid GUTI) 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095885 


0463 




GCF Priority x - Proposed removal of TC 
9.3.1.2 Service Request initiated by UE 
for uplink signalling 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095886 


0464 




GCF Priority 2 - Proposed removal of TC 
9.2.1 .1 .5 Attach Procedure / Success / 
ATTACH ACCEPT message includes the 
PDN address assigned to the UE 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095901 


0465 


- 


GCF Priority 2 - Correction of TC 9.2.3.3.6 
E-UTRAN RRC connection failure / 


8.3.2 


8.4.0 
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reselection of UTRAN cell / NAS signaling 
to release old S1 interface connection 
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2009-12 


RAN#46 


R5-095937 


0466 




GCF Priority 1 - Correction to E-UTRAN 
IVIAC test case 7.1.4.6 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095963 


0467 




GCF Priority 2 - Update of TC 9-1 -2-5 for 
IP liandling over U-plane 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095972 


0468 




GCF Priority 1 - Update of TC 9-1-2-1 for 
IP liandling over U-plane 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095976 


0469 




GCF Priority 2 - Update of TC 9-3-1-7 for 
IP handling over U-plane 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095979 


0470 




GCF Priority 2 - Update of TC 9-1 -2-4 for 
IP handling over U-plane 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095980 


0471 




GCF Priority 2 - Test Case 9.1 .4.2 Clause 
title formatting error 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-095997 


0472 




GCF Priority 2 - Correction to RRC test 
case 8.5.1.1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096009 


0473 




GCF Priority 1 - Correction to E-UTRAN 
IVIAC test case 7.2.3.5 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096024 


0474 




GCF Priority 1 : Cell number allignment in 
Test case 9.1.3.1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096027 


0475 




GCF Priority 2 - Cell number allignment in 
Test case 9.1.3.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096029 


0476 




GCF Priority 2 - Cell number allignment in 
Test case 9.4.1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096031 


0477 




GCF Priority 2: Cell number allignment in 
Test case 9.4.3 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096034 


0478 




GCF Priority 2: Correction to Test case 
7.1.4.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096036 


0479 




GCF Priority 2: Correction to Test case 
7.1.4.14 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096149 


0480 


- 


GCF Priority 2 - update test case 8.5.1 .3 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096156 


0481 




GCF Priority 2 - Update of RLC test case 
7.2.3.13 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096160 


0482 




GCF Priority 2 - Update of TC 9-1 -2-3 for 
IP handling over U-plane 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096161 


0483 




GCF Priority 1 and Priority 2- EIVIM 
Successful Attach consistent description 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096178 


0484 




GCF Priority 2 - Correction test cases 
8.3.2.1,8.3.2.7 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096192 


0485 




GCF Priority 1 - Various editorial 
corrections to RLC section 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096193 


0486 




GCF Priority 1 - Update to Idle Mode test 
case 6.1.2.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096194 


0487 




GCF Priority 2 - Updated to test case 
6.1.2.6 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096196 


0488 




GCF Priority 2 - Correction to test case 
6.3.6 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096197 


0489 


- 


GCF Priority 2 - Correction to test case 


8.3.2 


8.4.0 
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2009-12 


RAN#46 


R5-096401 


0490 




GCF Priority 1 - Correction to E-UTRAN 
IVIAC test case 7.1.2.9 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096414 


0491 




GCF Priority 2 & 3 - Correction to test 
cases 9.2.1 .1 .9 and 9.2.1 .1 .12 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096421 


0492 




GCF Priority 1 : Update of IVIAC TC 
7.1.7.1.1 DL-SCH TBS selection/DCI 
format 1/RAtypeO 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096422 


0493 




GCF Priority 1 : Update of MAC TC 
7.1 .7.1 .2 DL-SCH TBS selection/DCI 
format 1/RAtype1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096423 


0494 




GCF Priority 1 : Update of IVIAC TC 
7.1 .7.1 .3 DL-SCH TBS selection/DCI 
format 1 A/RA type2/Localized VRB 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096424 


0495 




GCF Priority 1 : Update of MAC TC 
7.1 .7.1 .4 DL-SCH TBS selection/DCI 
format 1 A/RA type2/Distributed VRB 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096425 


0496 




GCF Priority 1 : Update of MAC TC 
7.1.7.2.1 UL-SCH TBS selection/DCI 
format 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096426 


0497 


1 


GCF Priority 1 : Update of E-UTRA MAC 
test case 7.1.4.7 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096428 


0498 




GCF Priority 1 : Update of E-UTRA MAC 
test case 7.1.3.7 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096429 


0499 




GCF Priority 2 - Update to test case 
9.2.1.1.7 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096435 


0500 




GCF Priority 3: Introduction of a new EMM 
test case 9.2.3.1 .6' Normal tracking area 
update / UE wWh ISR active moves to E- 
UTRAN ' 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096436 


0501 




GCF Priority 3: Introduction of 9.2.3.1 .17 
Normal tracking area update / rejected / 
Roaming not allowed in this tracking area 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096437 


0502 




GCF Priority 3: Introduction of 9.2.3.1 .18 
Normal tracking area update / rejected / 
EPS services not allowed in this PLMN 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096443 


0503 




GCF Priority 3: Addition of new test case 
9.2.1.1.24: Attach / Abnormal case / 
Change of cell into a new tracking area 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096444 


0504 




GCF Priority 3: Addition of new test case 
9.2.1.1.26: Attach / Abnormal case / 
Detach procedure collision 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096445 


0505 




GCF Priority 2: Correction to Test case 
7.1.3.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096446 


0506 




GCF Priority 1 : Correction to EMM test 
case 9.3.1.1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096451 


0507 




GCF Priority 2 - Correction of test cases 
9.2.1.1.9,9.2.1.1.10, 9.2.1.1.11 Attach/ 
rejected / IMSI invalid / Illegal UE / EPS 
and non-EPS services not allowed 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096452 


0508 


- 


GCF Priority 2 - Correction of TC 9.2.3.2.1 
Combined tracking area update / 


8.3.2 


8.4.0 
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2009-12 


RAN#46 


R5-096454 


0509 




GCF Priority 2 - Correction of TC 9.2.3.3.1 
First lu mode to S1 mode intersystem 
change after attach: go to E-UTRAN RRC 
idle: RAU to UTRAN 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096459 


0510 




Disabling PHR and periodic BSR for L2 
test cases in 36.523-1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096466 


0511 


- 


Correction of test case 6.1.2.13 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096467 


0512 




GCF Priority 1 - Correction to E-UTRAN 
MAC test case 7.1.4.13 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096468 


0513 




GCF Priority 1 - Correction to E-UTRAN 
MAC test case 7.1.4.10 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096470 


0514 




GCF Priority 3 - Addition of E-UTRAN test 
case 8.3.3.3 for Measurement 
configuration control and reporting / SON / 
ANR: CGI reporting of GERAN cell 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096471 


0515 




GCF Priority 3 - Addition of E-UTRAN test 
case 8.3.3.2 :Measurement configuration 
control and reporting / SON / ANR: CGI 
reporting of UTRAN cell 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096472 


0516 




GCF Priority 1 - Update of Multi-layer 
Procedures part TC 13.1.1 Activation and 
deactivation of additional data radio 
bearer in E-UTRA 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096476 


0517 




GCF Priority 3 - Update of RRC part TC 
8.5.1.2 RRC Connection Re- 
establishment: Success (after Radio Link 
Failure) 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096479 


0518 




GCF Priority 3 - Update of RRC test case 
8.2.1.7 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096481 


0519 




GCF Priority 1 - Update to test case 
7.2.3.4 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096482 


0520 




GCF Priority 1 - Correction of TC 8.5.4.1 
UE capability transfer / Success 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096483 


0521 




GCF Priority 1 - Update of PDCP test 
case 7.3.3.1 : Ciphering and Deciphering: 
Correct functionality of EPS AS encription 
algorithms (SNOW 3G) 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096484 


0522 




GCF Priority 1 : Correction to RRC test 
case 8.2.1.1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096485 


0523 




GCF Priority 1 - Update of EMM test case 
9.2.3.1.1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096487 


0524 




GCF Priority 1 - Various corrections to Idle 
Mode section of 36.523-1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096488 


0525 




GCF Priority 2 - Update to test case 
8.1.2.5 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096489 


0526 




GCF Priority 2 - Update to test case 
8.1.2.7 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096491 


0527 




GCF Priority 2 - Various corrections to 
RRC Part 3 section of 36.523-1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096492 


0528 


- 


GCF Priority 1 - Correction to E-UTRA 


8.3.2 


8.4.0 
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2009-12 


RAN#46 


R5-096493 


0529 


3 


GCF Priority 1 - Update of Multi-layer 
Procedures partTC 13.2.1 RRC 
Connection Reconfiguration: E-UTRAto 
E-UTRA 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096494 


0530 




GCF Priority 1 - Update of applicabilty 
entry for DRB test case 12.3 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096495 


0531 




GCF Priority 2 - Update of the test case 
6.2.3.3 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096496 


0532 




GCF Priority 2 - Update of Idle Mode 
Operations test case 6.1 .2.5 Cell 
reselection for inter-band operation 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096497 


0533 




GCF Priority 2 - Update of Idle Mode 
Operations test case 6.6.2.3.7 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096502 


0534 




GCF Priority 2: Correction to the MAC 
DRX test cases preamble 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096505 


0535 




GCF Priority 2 - Correction of TC 
9.2.1 .1 .13 Attach / rejected / PLMN not 
allowed 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096506 


0536 




GCF Priority 2 - Correction of TC 

9.2.1 .1 .14 Attach / rejected / tracking area 

not allowed 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096507 


0537 




GCF Priority 2 - Correction of TC 
9.2.1.1.15 Attach / rejected / roaming not 
allowed in this tracking area 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096508 


0538 




GCF Priority 3 - New TC 9.2.1 .1 .16 Attach 
/ rejected / EPS services not allowed in 
this PLMN 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096509 


0539 




GCF Priority 2 - Correction of TC 
9.2.1.1.17 Attach/ rejected / no suitable 
cells in tracking area 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096510 


0540 




GCF Priority 2 - Correction of TC 9.2.1 .2.4 
Combined attach procedure / Success / 
EPS services only / MSC temporarily not 
reachable 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-09651 1 


0541 




GCF Priority 2 - Correction of TC 10.2.1 
Dedicated EPS bearer context activation / 
Success 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096512 


0542 




GCF Priority 2 - Correction of TC 1 0.3.1 
EPS bearer context modification / 
Success 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096514 


0543 




GCF Priority 2 - Correction of TC 10.6.1 
UE requested PDN disconnect procedure 
accepted by the network 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096605 


0544 




GCF Priority 2 - Update of RRC test case 
8.3.2.7 : Measurement configuration 
control and reporting / inter-RAT 
measurements: event B2 (measurement 
HRPD cells) 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096606 


0545 




GCF Priority 2 - Update of RRC test case 
8.3.2.6 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096610 


0546 




GCF Priority 2 - Update of RRC test case 
8.4.1.4 


8.3.2 


8.4.0 
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2009-12 


RAN#46 


R5-09661 1 


0547 




GCF Priority 2 - Update of RRC test case 
8.4.1.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096612 


0548 




GCF Priority 2 - Update to test case 
8.4.2.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096613 


0549 




GCF Priority 2 - Update to test case 
8.4.2.4 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096615 


0550 




GCF Priority 3 - Addition of test case 
6.2.3.6 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096616 


0551 




GCF Priority 3 - Update to test case 
8.1.1.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096617 


0552 




GCF Priority 3 - Addition of test case 
8.2.4.4 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096618 


0553 




GCF Priority 2 - Update to test case 
8.1.3.5 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096619 


0554 




GCF Priority 2: Updates to TAU/RAU 
procedure for inter-system cell re- 
selection between A/Gb and S1 modes 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096620 


0555 




GCF Priority 2: Updates to Attach 
Procedure / Success (last visited TAI, TAI 
list and equivalent PLMN list handling) 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096621 


0556 


- 


GCF Priority 2 - Correction to TC 8.1 .3.8 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096622 


0557 


- 


GCF Priority 3 - Update test case 8.3.1 .4 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096627 


0558 




GCF Priority 1 - Update of RRC test case 
8.2.2.1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096628 


0559 




GCF Priority 1 - Update of RRC test case 
8.2.2.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096629 


0560 




GCF Priority 3 - Various corrections to 
EIVIM section of 36.523-1 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096630 


0561 




GCF Priority 3 - Addition of new test case 
9.2.1.2.5 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096631 


0562 




GCF Priority 3 - Update to test case 
9.2.1.2.6 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096632 


0563 




GCF Priority 3 - Addition of test case 
9.2.1.2.7 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096633 


0564 




GCF Priority 3 - Addition of test case 
9.2.1.2.11 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096634 


0565 


1 


GCF Priority 3 - Addition of test case 
9.2.1.2.13 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096635 


0566 




GCF Priority 3 - Addition of new test case 
9.2.1.2.15 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096636 


0567 




GCF Priority 3 - Addition of test cases 
9.2.3.1.23 and 9.2.3.1.24 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096637 


0568 




GCF Priority 3 - Addition of new test case 
9.2.3.1.25 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096638 


0569 




GCF Priority 3 - Addition of new test case 
9.2.3.2.9 


8.3.2 


8.4.0 
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2009-12 


RAN#46 


R5-096639 


0570 




GCF Priority 3 - Update to test case 
9.3.1.4 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096643 


0571 




GCF Priority 1 - Update of RLC test case 
7.2.3.9 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096645 


0572 




GCF Priority 3 - Addition of new test case 
8.3.3.4 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096646 


0573 




GCF Priority 3 - Addition of new test case 
8.3.3.5 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096647 


0574 




GCF Priority 3 - Addition of new test case 
10.7.3 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096648 


0575 




GCF Priority 3 - Addition of new test case 
10.7.4 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096649 


0576 




GCF Priority TBC - Addition of new test 
case 10.7.5 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096650 


0577 




GCF Priority 3 - Addition of new test case 
10.8.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096651 


0578 




GCF Priority 3 - Addition of new test case 
10.8.3 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096652 


0579 




GCF Priority TBC - Addition of new test 
case 10.8.4 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096653 


0580 




GCF Priority 3 - Addition of new test case 
10.8.5 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096654 


0581 




GCF Priority 3 - Addition of new test case 
10.8.6 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096655 


0582 




GCF Priority 3 - Addition of new test case 
10.8.7 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096656 


0583 




GCF Priority 2 - Correction of TC 10.5.1 
UE requested PDN connectivity procedure 
accepted by tlie networl< 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096657 


0584 




GCF Priority 2 - Addition of test case 
1 1 .1 .4 IVI0-SI\/1S over SGs in active mode 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096658 


0585 




GCF Priority 2 - Correction of TC 10.4.1 
EPS bearer context deactivation / 
Success 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096660 


0586 




GCF Priority 3 - Addition of ElVIIVI test case 
9.1.2.6 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096661 


0587 




GCF Priority 3 - Addition of new EMM test 
case 9.1.5.2 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096662 


0588 




GCF Priority 3 - Addition of new EMM test 
case 9.2.1.1.18 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096663 


0589 




GCF Priority 3 - Addition of EMM test case 
9.2.1.2.12 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096665 


0590 




GCF Priority 3 - Addition of EMM test case 
9.2.2.2.14 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096666 


0591 




GCF Priority 3 - Addition of EMM test case 
9.2.3.1.26 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096667 


0592 


- 


GCF Priority 3 - Addition of EMM test case 


8.3.2 


8.4.0 
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9.2.3.1.27 
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2009-12 


RAN#46 


R5-096668 


0593 




GCF Priority 3 - Addition of ElVIIVI test case 
9.2.3.1.28 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096669 


0594 




GCF Priority 3 - Addition of ElVIIVI test case 
9.3.1.15 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096670 


0595 




GCF Priority 3 - Addition of new test case 
9.3.1.17 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096671 


0596 




GCF Priority 3 - Correction of TC 9.2.1 .2.2 
Combined attach procedure / Success / 
EPS services only / IMS! unknown in 
HSS 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096672 


0597 




GCF Priority 3 - Correction of TC 9.2.1 .2.3 
Combined attach procedure / Success / 
EPS services only / MSC temporarily not 
reachable 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096673 


0598 




GCF Priority 3: Introduction of 9.2.3.1 .19 
Normal tracking area update / rejected / 
No Suitable Cells in tracking Area 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096692 


0599 




GCF Priority 3 - Update of E-UTRAN test 
case 9.2.1.1.20 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096693 


0600 




GCF Priority 3 - Correction of TC 
9.2.1 .1 .19 Attach / Abnormal case / 
Failure due to non integrity protection 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096694 


0601 




GCF Priority 3: Addition of new test case 
9.2.1.1.21: Attach / Abnormal case / 
success after several attempts due to no 
network response 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096695 


0602 




GCF Priority 3: Addition of new test case 
9.2.1 .1 .22: : Attach / Abnormal case / 
unssuccesful attach after 5 attempts 


8.3.2 


8.4.0 


2009-12 


RAN#46 


R5-096697 


0603 


1 


GCF Priority 3 - Addition of test case 
13.3.1.1 


8.3.2 


8.4.0 


2010-03 


RAN#47 


R5-1 00058 


0604 




Addition of new DSIVIIPv6 test case for 
Registration of a new IPv6 CoA (Binding 
Update/Acknowledgment procedure in 
IPv6 network) 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00059 


0605 




Addition of new DSIVIIPv6 test case for 
Re-registration of IPv6 CoA 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00060 


0606 




Addition of new DSMIPv6 test case for 
Return to home link 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00061 


0607 




Addition of new DSIVIIPv6 test case for 
Dual-Stack Mobile IPv6 detach in IPv6 
network 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00089 


0608 




GCF priority 2 - Correction of test case 
10.5.1 for UE requested PDN connectivity 
accepted by the network 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00096 


0609 




GCF priority 3 - Correction of test case 
9.2.1 .2.2 for Combined attach procedure / 
Success / EPS services only / IIVISI 
unknown in HSS 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-100100 


0610 




GCF priority 2: correction of test case 
9.2.3.3.1 First lu mode to SI mode 
intersystem change after attach: go to E- 


8.4.0 


8.5.0 
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UTRAN RRC idle: RAU to UTRAN 







ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1655 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



2010-03 


RAN#47 


R5-100173 


0611 


- 


Update of test case 9.2.3.1 .28 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-100175 


0612 


- 


Update of test case 9.1 .5.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-100176 


0613 


- 


Update of test case 9.1 .2.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-100182 


0614 


- 


Priority 2-Update of the case 6.2.2.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00242 


0615 


- 


GCF Priority 1 : Update of MAC TC 7.1 .2.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00263 


0616 




Correcction to IVIAC TBS selection TCs 
not to use RS power boosting 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00270 


0617 




GCF Priority 1 - Update to test case 
7.2.2.9 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00271 


0618 




GCF Priority 3 - Update to test case 
8.1.1.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00274 


0619 




GCF Priority 2 - Update to test case 
8.2.4.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00275 


0620 




GCF Priority 3 - Update to test case 
8.2.4.4 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00276 


0621 




GCF Priority 2 - Update to test case 
8.2.4.5 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00277 


0622 




GCF Priority 2 - Update to test case 
8.2.4.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00278 


0623 




GCF Priority 2 - Update to test case 
8.2.4.7 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00279 


0624 




GCF Priority 3 - Update to test case 
8.2.4.9 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00281 


0625 




GCF Priority 2 - Update to test case 
8.3.1.9 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00283 


0626 




GCF Priority 2 - Update to test case 
8.3.2.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00284 


0627 




GCF Priority 2 - Update to test case 
8.4.2.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00285 


0628 




GCF Priority 2 - Update to test case 
8.4.2.4 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00287 


0629 




GCF Priority 3 - Update to test case 
9.2.1.2.5 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00288 


0630 




GCF Priority 3 - Update to test case 
9.2.1.2.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00289 


0631 




GCF Priority 3 - Update to test case 
9.2.1.2.7 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00290 


0632 




GCF Priority 3 - Update to test case 
9.2.1.2.8 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00293 


0633 




GCF Priority 3 - Update to test case 
9.2.3.2.9 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00294 


0634 




GCF Priority 3 - Update to test case 
9.3.1.4 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00383 


0635 




GCF Priority 1 - Update of IVIAC test cases 
7.1.4.6,7.1.4.7,7.1.4.8 


8.4.0 


8.5.0 
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2010-03 


RAN#47 


R5-100415 


0636 




GCF Priority 2 - Correction to remarl< in 
6.2.2.1, 6.2.2.2 and 6.2.3.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-100416 


0637 




GCF Priority 2 - Correction to test case 
6.1.2.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5- 100443 


0638 




GCF Priority 2: Update to test case 
9.2.3.1.4 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5- 100462 


0639 


- 


Correction of test case 8.3.1 .3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5- 100467 


0640 




Addition of new DSIVIIPv6 test case for 
Registration of a new IPv4 CoA (Binding 
Update/Acl<nowledgment procedure in 
IPv4 networl<) 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5- 100468 


0641 




Addition of new DSIVIIPv6 test case for 
Re-registration of IPv4 CoA 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5- 100469 


0642 




Addition of new DSIVIIPv6 test case for 
Dual-Stack IVIobile IPv6 detach in IPv4 
network 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00470 


0643 




GCF Priority 2 - Update to P2 ElVIIVI test 
case 9.2.2.1.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5- 100471 


0644 


- 


Update to P3 ElVIIVI test case 9.2.2.1 .2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5- 100472 


0645 




GCF Priority 2 - Update to P2 EMM test 
case 9.2.2.1.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5- 100475 


0646 


- 


Removal of TC 10.5.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5- 100488 


0647 




GCF priority 1 - Update of RRC test case 
8.2.2.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00489 


0648 




GCF priority 1 - Update of RRC test case 
8.2.2.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5- 100492 


0649 




GCF priority 1 - Update of RRC test case 
8.2.3.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00500 


0650 




GCF Priority 1 : Clarification to UE initial 
state for test case 7.1 .2.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00501 


0651 




GCF Priority 2 - Clarification to UE initial 
state 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00537 


0652 




GCF Priority 1 - Correction to E-UTRA 
RLC test case 7.2.3.21 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00577 


0653 




GCF Priority 1 - Correction to E-UTRAN 
MAC test case 7.1.2.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00582 


0654 




GCF Priority 1 - Correction to E-UTRAN 
MAC test case 7.1.4.7 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00592 


0655 




GCF Priority 3 - Correction to P3 EMM 
test case 9.2.1.2.12 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00825 


0656 




GCF Priority 1 : Corrections to E-UTRA 
MAC test case 7.1.7.1.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00638 


0657 




GCF Priority 1 - Update of RLC test case 
7.2.2.5.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00639 


0658 




GCF Priority 1 - Update of RLC test case 
7.2.2.6 


8.4.0 


8.5.0 
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2010-03 


RAN#47 


R5-1 00642 


0659 




GCF Priority 1 - Update of RLC test case 
7.2.2.7 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00651 


0660 




GCF Priority 1 - Update of RLC test case 
7.2.3.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00652 


0661 




GCF Priority 1 - Update of RLC test case 
7.2.3.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00657 


0662 




GCF Priority 1 - Update of RLC test case 
7.2.3.5 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00659 


0663 




GCF Priority 1 - Update of RLC test case 
7.2.3.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00671 


0664 




GCF Priority 1 : Corrections to E-UTRA 
MAC test case 7.1.7.1.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00676 


0665 




GCF Priority 1 : Corrections to E-UTRA 
MAC test case 7.1.7.1.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00738 


0666 




Priority 2 - Incorrect ATTACH procedure 
to UTRAN and GERAN cells 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00741 


0667 




GCF Priority x - Clarification to E-UTRA 
Radio Bearer Tests section 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00742 


0668 




Priority 3 - TC 9.2.3.1 .15 Normal tracking 
area update / rejected / PLMN not allowed 
- problems with Test procedure sequence 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00745 


0669 




GCF Priority 3 - Adding new TC 9.1 .5.1 
EMM Information Procedure 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-1 00777 


0670 




GCF Priority 2 - Update of MAC test case 
7.1.4.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101011 


0671 




Priority ALL - Update of section 6 Idle 
Mode Operations to comply with RAN5 
PRD13 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101012 


0672 




Priority ALL - Update of section 9.1 .x and 
9.2.1 .X to indicate on which cell events are 
to be observed in mult! cell environment 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101013 


0673 




GCF Priority 2 - Removal of test case 
9.2.3.2.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101014 


0674 




GCF Priority 2 - Update to test case 
9.2.3.2.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101032 


0675 


2 


GCF Priority 2 - Correction of RRC test 
cases 8.3.1.3 and 8.3.1.5 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101033 


0676 


1 


GCF Priority 3 - Correction of RRC test 
cases 8.3.1.7 and 8.3.1.11 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101038 


0677 


- 


Correction of test case 6.2.3.13 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101039 


0678 




Correction for Measurement related test 
cases 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101053 


0679 




GCF priority 2 - Update of RRC test case 
8.2.1.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101056 


0680 




Priority ALL - Update of section 7 Layer 2 
to comply with RAN5 PRD1 3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101057 


0681 


- 


GCF Priority 1 - Various corrections to Idle 


8.4.0 


8.5.0 
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2010-03 


RAN#47 


R5-101062 


0682 




GCF Priority 1 - Correction to E-UTRAN 
PDPC test case 7.1.4.4 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101063 


0683 


- 


GCF Priority 1 :Update of MAC TC 7.1 .2.5 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101064 


0684 


- 


GCF Priority 1 : Update of MAC TC 7.1 .2.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101065 


0685 


- 


GCF Priority 1 : Update of MAC TC 7.1 .2.9 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101066 


0686 


- 


GCF Priority 1 : Update of MAC TC 7.1 .3.9 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101067 


0687 


- 


GCF Priority 1 : Update of MAC TC 7.1 .4.8 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101068 


0688 




GCF Priority 1 : Update of MAC TC 
7.1.4.11 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101069 


0689 




GCF Priority 3 - Corrections to TC 8.5.1 .2 
RRC Connection Re-establishment: 
Success (after Radio Link Failure) 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101070 


0690 




GCF Priority 1 - Correction to E-UTRAN 
MAC test case 7.1.4.13 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101074 


0691 




New priority 3 test case: Periodic Location 
Updating Procedure (PLU Timer handling, 
non-cell reselection to GERAN) 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101075 


0692 




GCF Priority 3 - Addition of new test case 
9.2.3.3.4 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101076 


0693 




GCF Priority 1 - Correction to E-UTRAN 
MAC test case 7.1.3.4 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101077 


0694 




GCF Priority 1 : Update of MAC TC 
7.1.4.15 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101078 


0695 




GCF Priority 1 - Update of MAC 
Procedures part TC 7.1 .2.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101079 


0696 




GCF Priority 1 - Correction to MAC test 
case 7.1.4.10 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101081 


0697 




GCF Priority 1 - Update to test case 
8.2.4.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101082 


0698 




GCF Priority 2 - Update to test case 
8.3.1.8 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101083 


0699 




GCF Priority 2 - Update to test case 
8.3.1.10 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101084 


0700 




GCF Priority 1 : Corrections to E-UTRA 
MAC test case 7.1.7.1.4 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101085 


0701 




GCF Priority 1 - Update of Acknowledged 
Mode Procedures part TC 7.2.3.15 AM 
RLC / Re-ordering of RLC PDU 
segments" 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101086 


0702 




GCF Priority 1 - Update of RLC test case 
7.2.3.14 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101087 


0703 




GCF Priority 1 - Update of RLC test case 
7.2.3.4 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101088 


0704 




GCF Priority 1 - Update of RLC test case 
7.2.3.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101089 


0705 


1 


GCF Priority 1 - Update of RLC test case 


8.4.0 


8.5.0 
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2010-03 


RAN#47 


R5-101090 


0706 


2 


GCF Priority 1 - Update of RLC test case 
7.2.3.18 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101092 


0707 




GCF priority 2 - EPS bearer context ID 
values and RRC messages carrying ESIVI 
messages for EPS bearer context 
(de)activation and modification 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101093 


0708 




GCF priority 3 - Small correction to TC 
9.2.1 .1.11 Attach / rejected / EPS services 
and non-EPS services not allowed 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101094 


0709 




GCF priority 2 - Correction of test case 
9.2.1 .1 .15 for Attach / rejected / roaming 
not allowed in this tracking area 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101098 


0710 


- 


GCF Priority 2 - Update test case 8.5.1 .3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101105 


0711 




GCF priority 1 - Update of RRC test case 
8.2.1.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101108 


0712 




GCF Priority 2 - Correction to EUTRAN 
RLC test case 7.2.2.10 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101110 


0713 




GCF priority 2 - Correction of test case 
9.2.1 .2.4 for Successful combined attach 
procedure, EPS service only / CS domain 
not available 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101113 


0714 




GCF Priority 1 - Correction to E-UTRA 
PDCP test case 7.3.4.1 and 7.3.4.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101114 


0715 




GCF Priority 1 - Enhancement test case 
8.1.2.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101117 


0716 




GCF Priority 1 - Correction to EMM test 
cases to bring the UE to stable state at the 
end of expected sequence 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101118 


0717 




GCF Priority 1 - Update of Multi-layer 
Procedures part TC 13.1.1 Activation and 
deactivation of additional data radio 
bearer in E-UTRA 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101119 


0718 




GCF Priority 1 - Update of Multi-layer 
Procedures part TC 13.2.1 RRC 
Connection Reconfiguration: E-UTRA to 
E-UTRA 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101120 


0719 


- 


GCF Priority 2: Update of MAC TC 7.1 .3.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101121 


0720 




GCF Priority 1 - Correction to EPC test 
case 9.2.1.1.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101122 


0721 




Priority 2 - section 9 alignment IP handling 
at wrong place - Missing security 
activation - Editorial changes 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101125 


0722 




GCF Priority 1 - Correction to E-UTRAN 
RLC test case 7.2.3.1 5 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101126 


0723 




GCF Priority 1 - Correction to E-UTRAN 
RLC test case 7.2.3.9 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101130 


0724 




GCF Priority 1 - Correction of RRC test 
case 8.3.3.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101131 


0725 


1 


GCF Priority 1 - Correction to MAC test 
cases to bring the UE to stable state at the 


8.4.0 


8.5.0 
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2010-03 


RAN#47 


R5-101132 


0726 




GCF Priority 1 - Correction to RRC test 
cases to bring the UE to stable state at the 
end of expected sequence 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101133 


0727 




GCF Priority 2 - Update to test case 
10.7.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101134 


0728 




GCF Priority 2 - Update to test case 
10.7.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101135 


0729 




GCF Priority 2 - Update to test case 
10.8.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101141 


0730 




GCF Priority 4 - Addition of new RRC test 
case 8.4.7.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101142 


0731 




GCF Priority 4 - Addition of new RRC test 
case 8.3.2.10 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101145 


0732 




General note for test cases with statistical 
behaviour 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101148 


0733 




GCF Priority 3 - Update to test case 
10.7.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101149 


0734 




GCF Priority 3 - Update to test case 
10.7.4 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101151 


0735 




GCF Priority 3 - Update to test case 
10.8.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101152 


0736 




GCF Priority 3 - Update to test case 
10.8.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101154 


0737 




GCF Priority 3 - Update to test case 
10.8.5 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101155 


0738 




GCF Priority 3 - Update to test case 
10.8.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101156 


0739 




GCF Priority 3 - Update to test case 
10.8.7 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101158 


0740 




GCF Priority 3: New PUSCH-Hopping test 
case 7.1.5.2:Predefined intra-TTI PUSCH 
hopping {N_sb=1) 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101160 


0741 




GCF Priority 3: New PUSCH-Hopping test 
case 7.1 .5.4: Predefined inter- 1 1 1 PUSCH 
hopping {N_sb=1) 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101162 


0742 


1 


GCF priority 3 - New test case 8.1 .1 .6 
RRC / BCCH modification in connected 
mode 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101163 


0743 




GCF Priority 3 - New TC 8.5.2.1 RRC 
Connection Reject: redirection from 
UTRAN to E-UTRAN 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101164 


0744 




GCF Priority 3 - addition of new ElVIIVI test 
case 9.2.1.2.14 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101165 


0745 


- 


Update of test case 9.3.1 .15 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101166 


0746 


- 


Update of test case 9.2.1 .1 .18 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101167 


0747 




GCF Priority 3: Update to test case 
9.2.3.1.6 


8.4.0 


8.5.0 
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2010-03 


RAN#47 


R5-101168 


0748 




GGF priority 3 - Correction of test case 
10.5.3 for UE requested PDN connectivity 
procedure not accepted 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101169 


0749 




GGF Priority 3 - Addition of new multi- 
layer test case 13.1.3 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101170 


0750 




GGF Priority 3 - Addition of new test case 
13.4.1.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101171 


0751 




GGF Priority 3 - Update of Multi-layer 
Procedures part TO 13.3.1.1 Intra System 
Connection Reestablishment / Radio Link 
Recovery while T310 is running 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101172 


0752 




GCF Priority 3 - update of test case 
13.3.1.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101173 


0753 




GCF Priority 2 : Correction to MAC test 
case 7.1.6.1 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101174 


0754 




GCF Priority 2 : Correction to MAC test 
cases 7.1.6.2 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101175 


0755 


2 


GCF Priority 1 - Correction to E-UTRAN 
RLC test case 7.2.3.10 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101177 


0756 




Update to GCF Priority 1 layer 2 UM test 
cases to increase the drx-lnactivity Timer 
to psf200 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101179 


0757 




GCF Priority 1 - Enhancement and update 
to MAC test case 7.1.4.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101183 


0758 


- 


GCF Priority 1 : Update of MAC TC 7.1 .3.6 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101186 


0759 


- 


Update of test case and section titles 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101189 


0760 




GCF Priority 2 - Update to test case 
8.1.2.7 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101190 


0761 




GCF Priority 2 - Update to test case 
8.1.2.5 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101191 


0762 




Corrections related to UE mode of 
operation and UE capability for CS 
fallback and SMS over SGs 


8.4.0 


8.5.0 


2010-03 


RAN#47 


R5-101192 


0763 




GCF priority 3 - Correction of test case 
10.6.2 for UE requested PDN disconnect 
procedure not accepted by the network 


8.4.0 


8.5.0 


2010-03 


GERAN 
#45 


GP-1 00543 


0605 


- 


Addition of new Test Case 6.2.3.22 


8.4.0 


8.5.0 


2010-03 


RAN#47 


- 


- 


- 


Moved to V9.0.0 with no change 


8.5.0 


9.0.0 


2010-05 


GERAN 
#46 


GP-1 00625 


0764 




New Test case 6.2.3.28- Inter-RAT Cell 
Reselection from GPRS Packet transfer 
to E-UTRA Cell (Network Assisted Cell 
Change) 


9.0.0 


9.1.0 


2010-05 


GERAN 
#46 


GP-1 00626 


0765 




New Test Case 6.2.3.30 - Inter-RAT Cell 
Reselection failure from GPRS Packet 
transfer to E-UTRA (Network Assisted 
Cell Change) 


9.0.0 


9.1.0 


2010-05 


GERAN 
#46 


GP-1 00649 


0766 




New Test Case 6.2.2.6 - Inter-RAT Cell 
selection / From GSM Idle/GPRS 
Packetjdie to E-UTRA_RRC_IDLE / 
Serving cell becomes non-suitable 


9.0.0 


9.1.0 
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2010-05 


GERAN 
#46 


GP-1 00650 


0767 




New Test Case 6.2.2.7 - Inter-RAT Cell 
selection / From GSM Idle/GPRS 
Packetjdie to E-UTRA_RRC_IDLE ,when 
the serving cell is barred. 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03077 


0768 




GCF Priority 2 - Correction of Minimum 
Cell Configuration 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03086 


0769 




GCF Priority 3: New TC 9.3.1 .5 Service 
request / Rejected / Illegal ME 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03087 


0770 




GCF Priority 1 - Correction to E-UTRAN 
MAC test case 7.1.2.3 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03088 


0771 




GCF Priority 1 - Correction to MAC test 
case 7.1.4.10 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03089 


0772 




GCF Priority 3 - Update of TC 9.1 .5.1 
EMM Information Procedure 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03090 


0773 




GCF Priority 2 - Correction to TC 9.1 .2.4 
Authentication not accepted by the UE / 
MAC code failure 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03091 


0774 




GCF Priority 2 - Correction to TC 9.1 .2.5 
Authentication not accepted by the UE / 
SQN failure 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03093 


0775 




GCF Priority 2 - Correction of SIB in RRC 
TCs 8.4.2.2 and 8.4.2.4 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103130 


0776 




GCF Priority 2 - Update to test case 
6.1.2.6 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103131 


0777 




GCF Priority 1 - Correction to PDSCH 
power allocation of MAC TBS selection 
TCs 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103132 


0778 




GCF Priority 3 - Correction of test case 
6.2.3.13 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103135 


0779 




GCF Priority 4 - Addition of new test case 
8.3.2.2 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103136 


0780 


- 


GCF Priority 4 - Update test case 8.3.2.4 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103137 


0781 




GCF Priority 4 - Addition of new test case 
8.3.2.5 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103139 


0782 




GCF Priority 3 - Correction for test case 
13.4.1.2 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103140 


0783 




GCF Priority 3 - Addition of new test case 
13.4.2.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103141 


0784 




GCF Priority 2 - Update test case 6.1 .2.1 1 
& 6.1.2.15 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103144 


0785 




GCF Priority 4 Addition of new test case 
14.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103145 


0786 




GCF Priority 4 Addition of new test case 
14.2 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103157 


0787 




GCF Priority 4: New MAC TBS test case 
7.1 .7.1 .6:DCI format 2A / RA type 1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103158 


0788 




GCF Priority 4: New MAC TBS test case 
7.1 .7.1 .5:DCI format 2A / RA type 


9.0.0 


9.1.0 
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2010-06 


RAN#48 


R5-103159 


0789 




GCF Priority 4: Correction to E-UTRA 
DRB test case 12.3.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103160 


0790 




GCF Priority 4: Correction to E-UTRA 
DRB test case 12.3.2 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103161 


0791 




GCF Priority 4: Correction to E-UTRA 
DRB test case 12.3.3 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103162 


0792 




GCF Priority 4: Correction to E-UTRA 
DRB test case 12.3.4 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103163 


0793 




GCF Priority 4: Correction to generic test 
procedure 12.1 .2 for E-UTRA DRB MIMO 
test cases 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03228 


0794 




GCF Priority 4: New PUSCH-Hopping test 
case 7.1.5.1 : Inter-TTI PUSCH liopping by 
uplinl< grant 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03230 


0795 




GCF Priority 4: New PUSCH-Hopping test 
case 7.1 .5.3: Predefined intra- 1 1 1 PUSCH 
hopping {N_sb=2/3/4) 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03231 


0796 




GCF Priority 4: New PUSCH-Hopping test 
case 7.1 .5.5: Predefined inter- 1 1 1 PUSCH 
hopping {N_sb=2/3/4) 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03240 


0797 




GCF Priority 2 - Update to test case 
8.1.2.7 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03241 


0798 




GCF Priority 3 - Update to test case 
9.2.3.1.23 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03242 


0799 




GCF Priority 1 - Clarification of the cells 
where the messages are observed in 
EIVIM test cases 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03243 


0800 




GCF Priority 4 - Update to test case 
10.7.5 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03244 


0801 




GCF Priority 4 - Update to test case 
10.8.4 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03246 


0802 


- 


Applicability of new TC 13.1.5 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03271 


0803 




GCF Priority 3 - Update of RRC part TC 
8.5.1 .2 Radio link failure / T301 expiry 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03272 


0804 




GCF Priority 3 - Addition of new EPS 
mobility management procedure test case 
9.3.2.2a CS SERVICE NOTIFICATION / 
Connected mode 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03273 


0805 




GCF Priority 3 - Update IVIulti-layer test 
cases 13.3.1.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03276 


0806 




GCF Priority 2 - Correct the Test Purpose 
2 of PDCP part TC 7.3.1 .2 and 7.3.1 .3 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03277 


0807 




GCF Priority 1 - Correct PDCP part TC 
7.3.1.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03278 


0808 




GCF Priority 4 - Addition of new EPS 
mobility management procedure test case 
9.2.3.2.7 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03302 


0809 




GCF Priority 1 : Correction to test case 
7.1.3.9 


9.0.0 


9.1.0 
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2010-06 


RAN#48 


R5-1 03303 


0810 




GCF Priority 1 : Correction to E-UTRA 
IVIAC test case 7.1.2.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03304 


0811 




GCF Priority 1 : Correction to EMM test 
case 9.2.3.1.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03307 


0812 




GCF Priority 1 : Correction to EMM test 
case 9.2.1.1.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03308 


0813 




GCF Priority 1 : Correction to EMM test 
case 9.2.2.2.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103313 


0814 




GCF Priority 1 : Correction to EUTRA 
MAC test cases 7.1 .7.1 test cases 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03321 


0815 




GCF Priority 2: Correction to EUTRA 
PDCP test case 7.3.6.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03323 


0816 




GCF Priority 2: Correction to EUTRA RRC 
test case 8.5.1.5 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03327 


0817 




GCF Priority 2: Correction to EPC test 
case 9.2.2.1.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03341 


0818 




GCF Priority 2: Adding UE pre-conditions 
for UE to be configured for combined 
EPS/IMSI attach in 9.2.3.2.x combined 
TAU test cases 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03364 


0819 




GCF Priority 2 - Correction to generic test 
procedure reference in Idle mode section 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03365 


0820 




GCF Priority 2 - Correction to TC 8.1 .3.7 
RRC connection release / Redirection 
from UTRAN to E-UTRAN 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03367 


0821 




GCF Priority 3 - Correction to TC 8.5.2.1 
RRC Connection Reject / Redirection from 
UTRAN to E-UTRAN 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03394 


0822 




GCF Priority 4- New TC 9.3.1.18 Service 
Reject CSG not authorized 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103413 


0823 




GCF Priority 4 - Addition of new test case 
8.4.3.2 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103414 


0824 




GCF Priority 4 - Addition of new test case 
8.4.3.3 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103416 


0825 


- 


Priority 4 - Addition of test case 9.2.3.2.1 7 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103418 


0826 




Priority 4 - Addition of new test case 
9.2.3.2.4 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103419 


0827 




Priority 4 - Addition of new test case 
9.2.3.2.14 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5- 103420 


0828 




Priority 4 - Addition of new test case 
9.2.3.2.8 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5- 103421 


0829 


- 


Priority 3 - update of test case 9.2.2.2.14 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5- 103456 


0830 




GCF Priority 4 - New TC 9.2.3.3.2 lu 
mode to SI mode intersystem change / 
ISR is active / Expiry of T3312 in E- 
UTRAN or T3412 in UTRAN and further 
intersystem change 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03457 


0831 


- 


GCF Priority 4 - New test case 6.1 .2.1 
Cell reselection in shared network 


9.0.0 


9.1.0 



ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1669 



ETSI TS 136 523-1 V9.1.1 (2010-07) 













environment 







ETSI 



3GPP TS 36.523-1 version 9.1.1 Release 9 



1670 



ETSI TS 136 523-1 V9.1.1 (2010-07) 



2010-06 


RAN#48 


R5- 103458 


0832 




GCF Priority 4 - New Test case 6.1 .2.12 
Cell reselection / Cell-specific reselection 
parameters provided by the network in a 
neighbouring cell list 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5- 103459 


0833 




GCF Priority 4 - addition of new test case 
6.1.1.4: PLMN selection in shared network 
environment / Automatic mode 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03463 


0834 




GCF Priority 3 - Addition of new EMM test 
case 9.2.2.1.7 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5- 103464 


0835 




GCF Priority 3 - Addition of new EMM test 
case 9.2.2.1.8 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03465 


0836 




GCF Priority 3 - Addition of new EMM test 
case 9.2.2.1.9 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5- 103486 


0837 




GCF Priority 2 Correction to test case 
6.1.2.3,6.2.3.1 & 6.2.3.6 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5- 103498 


0838 




GCF Priority 2 to 3 - Correction to RRC 
part 3 test cases 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103513 


0839 




GCF Priority 2 - Update of RRC test case 
8.2.4.5 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103514 


0840 




GCF Priority 3 - New EMM test case 
9.2.2.1.3 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03573 


0841 




Addition of new DSMIPv6 test case for 
Discovery of the Home Agent address via 
DHCPv6 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03579 


0842 




Addition of new DSMIPv6 test case for 
Security association establishment with 
Home Agent reallocation procedure 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03646 


0843 




GCF Priority 2 - Corrections to C2K TCs 
8.3.2.7, 8.3.2.8 and 8.3.2.9 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03649 


0844 




Addition of new DSMIPv6 test case for 
Discovery of the Home Agent address via 
IKEv2 during tunnel setup to ePDG 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03676 


0845 




GCF Priority 4 - Addition of test case 
8.2.4.10 RRC Connection Reconfiguration 
/ Handover (between FDD and TDD) 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03696 


0846 




GCF Priority 1 - Correction to MAC, RRC 
and EMM test cases to bring the UE to 
stable state at the end of test 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03697 


0847 




GCF Priority 1 : Correction to EUTRA MAC 
test case 7.1.4.8 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03698 


0848 




GCF Priority 1 : Correction to test case 
7.1.4.11 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03800 


0880 


1 


GCF Priority 1 : Correction to EUTRA RLC 
test case 7.2.3.6 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03801 


0881 


1 


GCF Priority 1 : Correction to EUTRA RLC 
test case 7.2.3.7 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03802 


0849 




GCF Priority 1 - Update of RRC test cases 
8.2.2.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03803 


0850 


- 


GCF Priority 1 : Correction to EUTRA RLC 


9.0.0 


9.1.0 
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2010-06 


RAN#48 


R5-1 03804 


0851 




GCF priority 2 - Correction to test case 
6.1.1.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03805 


0852 




GCF Priority 2: Correction to EUTRA RLC 
test case 7.2.2.8 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03806 


0853 




GCF Priority 2: Correction to EUTRA RLC 
test case 7.2.2.10 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03807 


0854 




GCF Priority 2: Correction to EUTRA RLC 
test case 7.2.3.13 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03808 


0855 




GCF Priority 2 - Update to test case 
8.1.2.5 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03809 


0856 




GCF Priority 2: Correction to EPC test 
case 9.1.3.2 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03810 


0857 




GCF Priority 2: Adding UE pre-conditions 
for UE to be configured for EPS attacli in 
9.2.1 .1 .X EPS attach test cases 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03811 


0858 




GCF Priority 2: Adding UE pre-conditions 
for UE to be configured for EPS attacli in 
9.2.3.1.x TAU test cases 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103814 


0859 




GCF Priority 2: Adding UE pre-conditions 
for UE to be configured for EPS attacli in 
9.2.2.x detach test cases 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103815 


0860 




GCF Priority 2: Adding UE pre-conditions 
for UE to be configured for combined 
EPS/IMS! attach in 9.2.1 .2.x combined 
attach test cases 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103816 


0200- 
> no, 
0895 




Correction to IVIAC and RLC handover test 
cases to set IE "statusReportRequired" to 
FALSE 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103817 


0882 


1 


GCF Priority 2: Correction to EMM test 
case 9.2.3.1.2 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103818 


0861 




GCF Priority 2 - Correction to EPS test 
case 9.4.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-103819 


0883 




GCF Priority 2 - Update of General tests 
part TC1 1.1.4 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03820 


0862 




GCF Priority 2 - Correction to 'SMS over 
SGs' test case 11.1.1 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03821 


0863 




GCF Priority 2 - Correction to 'SMS over 
SGs' test case 11.1.2 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03822 


0864 




GCF Priority 2 - Correction to 'SMS over 
SGs' test case 11.1.3 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03823 


0894 




GCF priority 3 - New test case 6.2.1 .2 
Inter-RAT PLMN Selection /Selection of 
correct RAT for UPLMN/Automatic mode 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03824 


0884 


1 


GCF priority 3 - Inter-RAT PLMN 
Selection/ Selection of correct PLMN and 
RAT in shared network environment, 
Automatic mode 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03825 


0885 


1 


GCF priority 4 - New test case 6.2.1 .4 
Inter-RAT PLMN Selection/ Selection of 
correct RAT from the OPLMN list/ Manual 


9.0.0 


9.1.0 
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2010-06 


RAN#48 


R5-1 03826 


0886 




GCF priority 3 - New test case 6.2.1 .1 
Inter-RAT PLMN Selection /Selection of 
correct RAT for OPLMN/Automatic mode 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03827 


0887 




GCF Priority 3 - Update test case 8.2.4.8, 
8.5.1.2 and 8.5.1.4 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03828 


0865 


- 


GCF Priority 3 - Update test case 8.3.3.3 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03829 


0888 




GCF Priority 3 - Update RRC test case 
8.3.1.4 


9.0.0 


9.1.0 


2010-06 


RAN#48 


R5-1 03830 


0866 




GCF Priority 3: New EMM test case, 
9.2.1 .1 .23: Attach / Abnormal case / 
Repeated rejects for network failures 


9.0.0 


9.1.0 


2010-06 


RAN#48 
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